Change log for linux-snapdragon package in Ubuntu
| 1 → 75 of 255 results | First • Previous • Next • Last |
| Published in bionic-security |
| Published in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1152.162) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1152.162 -proposed tracker (LP: #2024232) * Packaging resync (LP: #1786013) - [Packaging] resync update-dkms-versions helper - [Packaging] update update.conf [ Ubuntu: 4.15.0-213.224 ] * bionic/linux: 4.15.0-213.224 -proposed tracker (LP: #2024234) * Kernel warning after upgrade to 4.15.0.211.194 (LP: #2020279) - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). -- Stefan Bader <email address hidden> Thu, 22 Jun 2023 11:43:07 +0200
Available diffs
linux-snapdragon (4.15.0-1151.161) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1151.161 -proposed tracker (LP: #2019706) * Packaging resync (LP: #1786013) - [Packaging] resync git-ubuntu-log - [Packaging] resync getabis [ Ubuntu: 4.15.0-212.223 ] * bionic/linux: 4.15.0-212.223 -proposed tracker (LP: #2019708) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * CVE-2023-32233 - netfilter: nf_tables: add nft_set_is_anonymous() helper - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: use-after-free in failing rule with bound set - netfilter: nf_tables: deactivate anonymous set from preparation phase * CVE-2023-31436 - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg * CVE-2023-1380 - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() * CVE-2023-30456 - KVM: nVMX: add missing consistency checks for CR0 and CR4 -- Roxana Nicolescu <email address hidden> Thu, 25 May 2023 13:34:26 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1150.160) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1150.160 -proposed tracker (LP: #2016621) [ Ubuntu: 4.15.0-211.222 ] * bionic/linux: 4.15.0-211.222 -proposed tracker (LP: #2016623) * Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498) - [Debian] autoreconstruct - fix restoration of execute permissions * kernel: fix __clear_user() inline assembly constraints (LP: #2013088) - s390/uaccess: add missing earlyclobber annotations to __clear_user() * Fix selftests/ftracetests/Meta-selftests (LP: #2006453) - selftests/ftrace: Fix bash specific "==" operator * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() - netrom: Fix use-after-free caused by accept on already connected socket - squashfs: harden sanity check in squashfs_read_xattr_id_table - sctp: do not check hb_timer.expires when resetting hb_timer - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new - scsi: target: core: Fix warning on RT kernels - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - net/x25: Fix to not accept on connected socket - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait - fbcon: Check font dimension limits - watchdog: diag288_wdt: do not use stack buffers for hardware data - watchdog: diag288_wdt: fix __diag288() inline assembly - efi: Accept version 2 of memory attributes table - iio: hid: fix the retval in accel_3d_capture_sample - iio: adc: berlin2-adc: Add missing of_node_put() in error path - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others - parisc: Fix return code of pdc_iodc_print() - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps - mm/swapfile: add cond_resched() in get_swap_pages() - Squashfs: fix handling and sanity checking of xattr_ids count - serial: 8250_dma: Fix DMA Rx completion race - serial: 8250_dma: Fix DMA Rx rearm race - btrfs: limit device extents to the device size - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() - ALSA: pci: lx6464es: fix a debug loop - pinctrl: aspeed: Fix confusing types in return value - pinctrl: single: fix potential NULL dereference - net: USB: Fix wrong-direction WARNING in plusb.c - usb: core: add quirk for Alcor Link AK9563 smartcard reader - migrate: hugetlb: check for hugetlb shared PMD in node migration - tools/virtio: fix the vringh test for virtio ring changes - net/rose: Fix to not accept on connected socket - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association - aio: fix mremap after fork null-deref - mmc: sdio: fix possible resource leaks in some error paths - ALSA: hda/conexant: add a new hda codec SN6180 - hugetlb: check for undefined shift on 32 bit architectures - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" - i40e: add double of VLAN header when computing the max MTU - net: bgmac: fix BCM5358 support by setting correct flags - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path - net: stmmac: Restrict warning on disabling DMA store and fwd mode - ipv6: Fix datagram socket connection with DSCP. - ipv6: Fix tcp socket connection with DSCP. - i40e: Add checking for null for nlmsg_find_attr() - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nilfs2: fix underflow in second superblock position calculations - ata: libata: Fix sata_down_spd_limit() when no link speed is reported - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - thermal: intel: int340x: Protect trip temperature from concurrent updates - iio:adc:twl6030: Enable measurement of VAC - IB/hfi1: Restore allocated resources on failed copyout - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive - wifi: rtl8xxxu: gen2: Turn on the rate control - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G - random: always mix cycle counter in add_latent_entropy() - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 - alarmtimer: Prevent starvation by small intervals and SIG_IGN - uaccess: Add speculation barrier to copy_from_user() - wifi: mwifiex: Add missing compatible string for SD8787 - bpf: add missing header file include - vc_screen: don't clobber return value in vcs_read - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size * CVE-2023-1118 - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() -- Roxana Nicolescu <email address hidden> Wed, 26 Apr 2023 17:12:59 +0200
Available diffs
linux-snapdragon (4.15.0-1149.159) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1149.159 -proposed tracker (LP: #2016736) * CVE-2023-1829 - [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available [ Ubuntu: 4.15.0-210.221 ] * bionic/linux: 4.15.0-210.221 -proposed tracker (LP: #2016738) * CVE-2023-1829 - net/sched: Retire tcindex classifier - [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available -- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 25 Apr 2023 22:48:58 -0300
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1148.158) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1148.158 -proposed tracker (LP: #2011987) [ Ubuntu: 4.15.0-209.220 ] * bionic/linux: 4.15.0-209.220 -proposed tracker (LP: #2011989) * CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename * CVE-2023-1281 - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() - net/sched: tcindex: update imperfect hash filters respecting rcu * CVE-2022-3903 - USB: add usb_control_msg_send() and usb_control_msg_recv() - USB: correct API of usb_control_msg_send/recv - USB: move snd_usb_pipe_sanity_check into the USB core - media: mceusb: Use new usb_control_msg_*() routines * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) - pNFS/filelayout: Fix coalescing test for single DS - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats - RDMA/srp: Move large values to a new enum for gcc13 - f2fs: let's avoid panic if extent_tree is not created - nilfs2: fix general protection fault in nilfs_btree_insert() - xhci-pci: set the dma max_seg_size - usb: xhci: Check endpoint is valid before dereferencing it - prlimit: do_prlimit needs to have a speculation check - USB: serial: option: add Quectel EM05-G (GR) modem - USB: serial: option: add Quectel EM05-G (CS) modem - USB: serial: option: add Quectel EM05-G (RS) modem - USB: serial: option: add Quectel EC200U modem - USB: serial: option: add Quectel EM05CN (SG) modem - USB: serial: option: add Quectel EM05CN modem - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 - usb: core: hub: disable autosuspend for TI TUSB8041 - USB: serial: cp210x: add SCALANCE LPE-9000 device id - usb: host: ehci-fsl: Fix module alias - usb: gadget: g_webcam: Send color matching descriptor per frame - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 - serial: pch_uart: Pass correct sg to dma_unmap_sg() - serial: atmel: fix incorrect baudrate setup - gsmi: fix null-deref in gsmi_get_variable - comedi: adv_pci1760: Fix PWM instruction handling - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - EDAC/highbank: Fix memory leak in highbank_mc_probe() - tomoyo: fix broken dependency on *.conf.default - IB/hfi1: Reject a zero-length user expected buffer - IB/hfi1: Reserve user expected TIDs - affs: initialize fsdata in affs_truncate() - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() - net: nfc: Fix use-after-free in local_cleanup() - net: usb: sr9700: Handle negative len - net: mdio: validate parameter addr in mdiobus_get_phy() - HID: check empty report_list in hid_validate_values() - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request - net: mlx5: eliminate anonymous module_init & module_exit - dmaengine: Fix double increment of client_count in dma_chan_get() - HID: betop: check shape of output reports - w1: fix deadloop in __w1_remove_master_device() - w1: fix WARNING after calling w1_process() - fs: reiserfs: remove useless new_opts in reiserfs_remount - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed - scsi: hpsa: Fix allocation size for scsi_host_alloc() - module: Don't wait for GOING modules - tracing: Make sure trace_printk() can output as soon as it can be used - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment - EDAC/device: Respect any driver-supplied workqueue polling value - netlink: annotate data races around dst_portid and dst_group - netlink: annotate data races around sk_state - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE - netrom: Fix use-after-free of a listening socket. - sctp: fail if no bound addresses can be used for a given scope - net: ravb: Fix possible hang if RIS2_QFF1 happen - net/tg3: resolve deadlock in tg3_reset_task() during EEH - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL - xen: Fix up build warning with xen_init_time_ops() reference - x86/asm: Fix an assembler warning with current binutils - x86/entry/64: Add instruction suffix to SYSRET - sysctl: add a new register_sysctl_init() interface - panic: unset panic_on_warn inside panic() - exit: Add and use make_task_dead. - objtool: Add a missing comma to avoid string concatenation - hexagon: Fix function name in die() - h8300: Fix build errors from do_exit() to make_task_dead() transition - ia64: make IA64_MCA_RECOVERY bool instead of tristate - exit: Put an upper limit on how often we can oops - exit: Expose "oops_count" to sysfs - exit: Allow oops_limit to be disabled - panic: Consolidate open-coded panic_on_warn checks - panic: Introduce warn_limit - panic: Expose "warn_count" to sysfs - exit: Use READ_ONCE() for all oops/warn limit reads - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags - ipv6: ensure sane device mtu in tunnels - usb: host: xhci-plat: add wakeup entry at sysfs - amd-xgbe: Delay AN timeout during KR training - tcp: avoid the lookup process failing to get sk in ehash table - net: fix UaF in netns ops registration error path - netlink: annotate data races around nlk->portid - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() * rtcpie in timers from ubuntu_kernel_selftests randomly failing (LP: #1814234) - SAUCE: selftest: rtctest: Fix force-passing unreliable subtest [ Ubuntu: 4.15.0-208.219 ] * bionic/linux: 4.15.0-208.219 -proposed tracker (LP: #2012097) * NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325) - NFS: Correct timing for assigning access cache timestamp
Available diffs
| Superseded in bionic-proposed |
linux-snapdragon (4.15.0-1147.157) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1147.157 -proposed tracker (LP: #2008417) [ Ubuntu: 4.15.0-207.218 ] * bionic/linux: 4.15.0-207.218 -proposed tracker (LP: #2008419) * rtcpie in timers from ubuntu_kernel_selftests randomly failing (LP: #1814234) - SAUCE: selftest: rtctest: Force passing unreliable subtest * btrfs/154: rename fails with EOVERFLOW when calculating item size during item key collision (LP: #2004132) - btrfs: correctly calculate item size used when item key collision happens * CVE-2021-3669 - ipc: replace costly bailout check in sysvipc_find_ipc() * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) - libtraceevent: Fix build with binutils 2.35 - once: Fix panic when module unload - once: add DO_ONCE_SLOW() for sleepable contexts - mm/khugepaged: fix GUP-fast interaction by sending IPI - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths - block: unhash blkdev part inode when the part is deleted - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() - can: sja1000: fix size of OCR_MODE_MASK define - can: mcba_usb: Fix termination command argument - ASoC: ops: Correct bounds check for second channel on SX controls - perf script python: Remove explicit shebang from tests/attr.c - udf: Discard preallocation before extending file with a hole - udf: Drop unused arguments of udf_delete_aext() - udf: Fix preallocation discarding at indirect extent boundary - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size - udf: Fix extending file within last block - usb: gadget: uvc: Prevent buffer overflow in setup handler - USB: serial: option: add Quectel EM05-G modem - USB: serial: cp210x: add Kamstrup RF sniffer PIDs - igb: Initialize mailbox message for VF reset - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type - usb: musb: remove extra check in musb_gadget_vbus_draw - ARM: dts: qcom: apq8064: fix coresight compatible - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static - arm: dts: spear600: Fix clcd interrupt - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port - ARM: dts: turris-omnia: Add ethernet aliases - ARM: dts: turris-omnia: Add switch port 6 node - pstore/ram: Fix error return code in ramoops_probe() - ARM: mmp: fix timer_read delay - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() - cpuidle: dt: Return the correct numbers of parsed idle states - alpha: fix syscall entry in !AUDUT_SYSCALL case - PM: hibernate: Fix mistake in kerneldoc comment - fs: don't audit the capability check in simple_xattr_list() - perf: Fix possible memleak in pmu_dev_alloc() - timerqueue: Use rb_entry_safe() in timerqueue_getnext() - ocfs2: fix memory leak in ocfs2_stack_glue_init() - MIPS: vpe-mt: fix possible memory leak while module exiting - MIPS: vpe-cmp: fix possible memory leak while module exiting - PNP: fix name memory leak in pnp_alloc_dev() - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value - lib/notifier-error-inject: fix error when writing -errno to debugfs file - rapidio: fix possible name leaks when rio_add_device() fails - rapidio: rio: fix possible name leak in rio_register_mport() - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix - x86/xen: Fix memory leak in xen_init_lock_cpu() - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() - MIPS: BCM63xx: Add check for NULL for clk in clk_enable - fs: sysv: Fix sysv_nblocks() returns wrong value - rapidio: fix possible UAF when kfifo_alloc() fails - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD - hfs: Fix OOB Write in hfs_asc2mac - rapidio: devices: fix missing put_device in mport_cdev_open - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() - media: i2c: ad5820: Fix error path - spi: Update reference to struct spi_controller - media: vivid: fix compose size exceed boundary - mtd: Fix device name leak when register device failed in add_mtd_device() - media: camss: Clean up received buffers on failed start of streaming - drm/radeon: Add the missed acpi_put_table() to fix memory leak - ASoC: pxa: fix null-pointer dereference in filter() - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() - ima: Fix misuse of dereference of pointer in template_desc_init_fields() - wifi: ath10k: Fix return value in ath10k_pci_init() - mtd: lpddr2_nvm: Fix possible null-ptr-deref - Input: elants_i2c - properly handle the reset GPIO when power is off - media: solo6x10: fix possible memory leak in solo_sysfs_init() - media: platform: exynos4-is: Fix error handling in fimc_md_init() - HID: hid-sensor-custom: set fixed size for custom attributes - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() - mtd: maps: pxa2xx-flash: fix memory leak in probe - media: imon: fix a race condition in send_packet() - pinctrl: pinconf-generic: add missing of_node_put() - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC - NFSv4.2: Fix a memory stomp in decode_attr_security_label - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn - ALSA: asihpi: fix missing pci_disable_device() - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe - bonding: uninitialized variable in bond_miimon_inspect() - regulator: core: fix module refcount leak in set_supply() - media: saa7164: fix missing pci_disable_device() - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt - SUNRPC: Fix missing release socket in rpc_sockname() - NFSv4.x: Fail client initialisation if state manager thread can't run - mmc: moxart: fix return value check of mmc_add_host() - mmc: mxcmmc: fix return value check of mmc_add_host() - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() - mmc: toshsd: fix return value check of mmc_add_host() - mmc: vub300: fix return value check of mmc_add_host() - mmc: wmt-sdmmc: fix return value check of mmc_add_host() - mmc: via-sdmmc: fix return value check of mmc_add_host() - mmc: wbsd: fix return value check of mmc_add_host() - mmc: mmci: fix return value check of mmc_add_host() - media: c8sectpfe: Add of_node_put() when breaking out of loop - media: coda: Add check for dcoda_iram_alloc - media: coda: Add check for kmalloc - clk: samsung: Fix memory leak in _samsung_clk_register_pll() - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() - blktrace: Fix output non-blktrace event when blk_classic option enabled - net: vmw_vsock: vmci: Check memcpy_from_msg() - net: defxx: Fix missing err handling in dfx_init() - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() - net: farsync: Fix kmemleak when rmmods farsync - net/tunnel: wait until all sk_user_data reader finish before releasing the sock - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() - net: amd-xgbe: Check only the minimum speed for active/passive cables - net: lan9303: Fix read error execution path - ntb_netdev: Use dev_kfree_skb_any() in interrupt context - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() - stmmac: fix potential division by 0 - apparmor: fix a memleak in multi_transaction_new() - PCI: Check for alloc failure in pci_request_irq() - RDMA/hfi: Decrease PCI device reference count in error path - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed - scsi: hpsa: Fix error handling in hpsa_add_sas_host() - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() - scsi: fcoe: Fix possible name leak when device_register() fails - scsi: ipr: Fix WARNING in ipr_init() - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails - scsi: snic: Fix possible UAF in snic_tgt_create() - RDMA/hfi1: Fix error return code in parse_platform_config() - orangefs: Fix sysfs not cleanup when dev init failed - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' - hwrng: amd - Fix PCI device refcount leak - hwrng: geode - Fix PCI device refcount leak - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces - drivers: dio: fix possible memory leak in dio_init() - class: fix possible memory leak in __class_register() - vfio: platform: Do not pass return buffer to ACPI _RST method - uio: uio_dmem_genirq: Fix missing unlock in irq configuration - uio: uio_dmem_genirq: Fix deadlock between irq config and handling - usb: fotg210-udc: Fix ages old endianness issues - staging: vme_user: Fix possible UAF in tsi148_dma_list_add - serial: amba-pl011: avoid SBSA UART accessing DMACR register - serial: pch: Fix PCI device refcount leak in pch_request_dma() - serial: sunsab: Fix error handling in sunsab_init() - test_firmware: fix memory leak in test_firmware_init() - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() - drivers: mcb: fix resource leak in mcb_probe() - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() - chardev: fix error handling in cdev_device_add() - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe - staging: rtl8192u: Fix use after free in ieee80211_rx() - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() - vme: Fix error not catched in fake_init() - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - usb: storage: Add check for kcalloc - fbdev: ssd1307fb: Drop optional dependency - fbdev: pm2fb: fix missing pci_disable_device() - fbdev: via: Fix error in via_core_init() - fbdev: vermilion: decrease reference count in error path - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() - power: supply: fix residue sysfs file in error handle route of __power_supply_register() - HSI: omap_ssi_core: Fix error handling in ssi_init() - include/uapi/linux/swab: Fix potentially missing __always_inline - rtc: snvs: Allow a time difference on clock register read - iommu/amd: Fix pci device refcount leak in ppr_notifier() - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() - macintosh: fix possible memory leak in macio_add_one_device() - macintosh/macio-adb: check the return value of ioremap() - powerpc/52xx: Fix a resource leak in an error handling path - cxl: Fix refcount leak in cxl_calc_capp_routing - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() - powerpc/perf: callchain validate kernel stack pointer bounds - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() - powerpc/hv-gpci: Fix hv_gpci event list - selftests/powerpc: Fix resource leaks - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() - nfc: pn533: Clear nfc_target before being used - r6040: Fix kmemleak in probe and remove - openvswitch: Fix flow lookup to use unmasked key - skbuff: Account for tail adjustment during pull operations - net_sched: reject TCF_EM_SIMPLE case for complex ematch module - myri10ge: Fix an error handling path in myri10ge_probe() - net: stream: purge sk_error_queue in sk_stream_kill_queues() - binfmt_misc: fix shift-out-of-bounds in check_special_flags - fs: jfs: fix shift-out-of-bounds in dbAllocAG - udf: Avoid double brelse() in udf_rename() - fs: jfs: fix shift-out-of-bounds in dbDiscardAG - ACPICA: Fix error code path in acpi_ds_call_control_method() - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() - acct: fix potential integer overflow in encode_comp_t() - hfs: fix OOB Read in __hfs_brec_find - wifi: ath9k: verify the expected usb_endpoints are present - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform - ipmi: fix memleak when unload ipmi driver - bpf: make sure skb->len != 0 when redirecting to a tunneling device - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() - hamradio: baycom_epp: Fix return type of baycom_send_packet() - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() - igb: Do not free q_vector unless new one was allocated - s390/ctcm: Fix return type of ctc{mp,}m_tx() - s390/netiucv: Fix return type of netiucv_tx() - s390/lcs: Fix return type of lcs_start_xmit() - drm/sti: Use drm_mode_copy() - md/raid1: stop mdx_raid1 thread when raid1 array run failed - mrp: introduce active flags to prevent UAF when applicant uninit - ppp: associate skb with a device at tx - media: dvb-frontends: fix leak of memory fw - media: dvbdev: adopts refcnt to avoid UAF - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() - blk-mq: fix possible memleak when register 'hctx' failed - mmc: f-sdh30: Add quirks for broken timeout clock capability - media: si470x: Fix use-after-free in si470x_int_in_callback() - clk: st: Fix memory leak in st_of_quadfs_setup() - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() - ASoC: wm8994: Fix potential deadlock - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() - ASoC: rt5670: Remove unbalanced pm_runtime_put() - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES - usb: dwc3: core: defer probe on ulpi_read_id timeout - HID: wacom: Ensure bootloader PID is usable in hidraw mode - reiserfs: Add missing calls to reiserfs_security_free() - iio: adc: ad_sigma_delta: do not use internal iio_dev lock - gcov: add support for checksum field - media: dvbdev: fix refcnt bug - powerpc/rtas: avoid device tree lookups in rtas_os_term() - powerpc/rtas: avoid scheduling in rtas_os_term() - HID: plantronics: Additional PIDs for double volume key presses quirk - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount - ALSA: line6: correct midi status byte when receiving data from podxt - ALSA: line6: fix stack overflow in line6_midi_transmit - pnode: terminate at peers of source - md: fix a crash in mempool_free - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak - media: stv0288: use explicitly signed char - ktest.pl minconfig: Unset configs instead of just removing them - ARM: ux500: do not directly dereference __iomem - selftests: Use optional USERCFLAGS and USERLDFLAGS - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort - dm thin: Use last transaction's pmd->root when commit failed - dm thin: Fix UAF in run_timer_softirq() - dm cache: Fix UAF in destroy() - dm cache: set needs_check flag after aborting metadata - x86/microcode/intel: Do not retry microcode reloading on the APs - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod - media: dvb-core: Fix double free in dvb_register_device() - cifs: fix confusing debug message - ima: Fix a potential NULL pointer access in ima_restore_measurement_list - PCI: Fix pci_device_is_present() for VFs by checking PF - PCI/sysfs: Fix double free in error path - crypto: n2 - add missing hash statesize - iommu/amd: Fix ivrs_acpihid cmdline parsing code - parisc: led: Fix potential null-ptr-deref in start_task() - device_cgroup: Roll back to original exceptions after copy failure - drm/connector: send hotplug uevent on connector cleanup - drm/vmwgfx: Validate the box size for the snooped cursor - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop - ext4: fix undefined behavior in bit shift for ext4_check_flag_values - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: init quota for 'old.inode' in 'ext4_rename' - ext4: fix error code return to user-space in ext4_get_branch() - ext4: avoid BUG_ON when creating xattrs - ext4: fix inode leak in ext4_xattr_inode_create() on an error path - ext4: initialize quota before expanding inode in setproject ioctl - ext4: avoid unaccounted block allocation when expanding inode - ext4: allocate extended attribute value in vmalloc area - SUNRPC: ensure the matching upcall is in-flight upon downcall - bpf: pull before calling skb_postpull_rcsum() - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure - nfc: Fix potential resource leaks - net: amd-xgbe: add missed tasklet_kill - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe - net: sched: atm: dont intepret cls results when asked to drop - usb: rndis_host: Secure rndis_query check against int overflow - caif: fix memory leak in cfctrl_linkup_request() - udf: Fix extension of the last extent in the file - nfsd: fix handling of readdir in v4root vs. mount upcall timeout - hfs/hfsplus: use WARN_ON for sanity check - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling - parisc: Align parisc MADV_XXX constants with all other architectures - driver core: Fix bus_type.match() error handling in __driver_attach() - ravb: Fix "failed to switch device to config mode" message during unbind - net: sched: disallow noqueue for qdisc classes - docs: Fix the docs build with Sphinx 6.0 - perf auxtrace: Fix address filter duplicate symbol selection - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm - EDAC/device: Fix period calculation in edac_device_reset_delay_period() - regulator: da9211: Use irq handler when ready - hvc/xen: lock console list traversal - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" - selftests/ftrace: event_triggers: wait longer for test_event_enable - debugfs: fix error when writing negative value to atomic_t debugfs file - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() - relay: fix type mismatch when allocating memory in relay_create_buf() - wifi: rtl8xxxu: Fix reading the vendor of combo chips - media: dvb-core: Fix ignored return value in dvb_register_frontend() - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails - mmc: atmel-mci: fix return value check of mmc_add_host() - mmc: meson-gx: fix return value check of mmc_add_host() - net: amd-xgbe: Fix logic around active and passive cables - apparmor: fix lockdep warning when removing a namespace - scsi: hpsa: Fix possible memory leak in hpsa_init_one() - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. - serial: altera_uart: fix locking in polling mode - usb: gadget: f_hid: fix refcount leak on error path - perf symbol: correction while adjusting symbol - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() - media: dvbdev: fix build warning due to comments - ata: ahci: Fix PCS quirk application for suspend - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails - binfmt: Fix error return code in load_elf_fdpic_binary() - ext4: fix corruption when online resizing a 1K bigalloc fs - media: s5p-mfc: Fix to handle reference queue during finishing - media: s5p-mfc: Clear workbit to handle error condition - media: s5p-mfc: Fix in register read and write for H264 - dm thin: resume even if in FAIL mode - mbcache: don't reclaim used entries - ext4: remove EA inode entry from mbcache on inode eviction - usb: ulpi: defer ulpi_register on ulpi_read_id timeout - net/mlx5: Fix ptp max frequency adjustment range - drm/virtio: Fix GEM handle creation UAF - arm64: cmpxchg_double*: hazard against entire exchange variable * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2023-0266 was assigned for this issue. - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2022-41218 is assigned to those bugs above. - media: dvb-core: Fix UAF due to refcount races at releasing * CVE-2023-23559 - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid * CVE-2023-0045 - x86/bugs: Flush IBP in ib_prctl_set() -- Roxana Nicolescu <email address hidden> Thu, 02 Mar 2023 14:32:32 +0100
Available diffs
linux-snapdragon (4.15.0-1146.156) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1146.156 -proposed tracker (LP: #2004412) * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) - [Config] updateconfigs following Ubuntu-4.15.0-204.215 rebase [ Ubuntu: 4.15.0-206.217 ] * bionic/linux: 4.15.0-206.217 -proposed tracker (LP: #2004655) * CVE-2023-0461 - SAUCE: Fix inet_csk_listen_start after CVE-2023-0461 [ Ubuntu: 4.15.0-205.216 ] * bionic/linux: 4.15.0-205.216 -proposed tracker (LP: #2004414) * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot - nfs4: Fix kmemleak when allocate slot failed - net: dsa: Fix possible memory leaks in dsa_loop_init() - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() - net: fec: fix improper use of NETDEV_TX_BUSY - ata: pata_legacy: fix pdc20230_set_piomode() - net: sched: Fix use after free in red_enqueue() - ipvs: use explicitly signed chars - rose: Fix NULL pointer dereference in rose_send_frame() - mISDN: fix possible memory leak in mISDN_register_device() - isdn: mISDN: netjet: fix wrong check of device registration - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() - btrfs: fix ulist leaks in error paths of qgroup self tests - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - net: mdio: fix undefined behavior in bit shift for __mdiobus_register - net, neigh: Fix null-ptr-deref in neigh_table_clear() - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE - media: dvb-frontends/drxk: initialize err to 0 - i2c: xiic: Add platform module alias - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' - btrfs: fix type of parameter generation in btrfs_get_dentry - tcp/udp: Make early_demux back namespacified. - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices - efi: random: reduce seed size to 32 bytes - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC - parisc: Export iosapic_serial_irq() symbol for serial port driver - ext4: fix warning in 'ext4_da_release_space' - KVM: x86: Mask off reserved bits in CPUID.80000008H - KVM: x86: emulator: em_sysexit should update ctxt->mode - KVM: x86: emulator: introduce emulator_recalc_and_set_mode - KVM: x86: emulator: update the emulation mode after CR0 write - linux/const.h: prefix include guard of uapi/linux/const.h with _UAPI - linux/const.h: move UL() macro to include/linux/const.h - linux/bits.h: make BIT(), GENMASK(), and friends available in assembly - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() - net: tun: fix bugs for oversize packet when napi frags enabled - ipvs: fix WARNING in __ip_vs_cleanup_batch() - ipvs: fix WARNING in ip_vs_app_net_cleanup() - ipv6: fix WARNING in ip6_route_net_exit_late() - parisc: Avoid printing the hardware path twice - HID: hyperv: fix possible memory leak in mousevsc_probe() - net: gso: fix panic on frag_list with mixed head alloc types - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer - net: fman: Unregister ethernet device on removal - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() - hamradio: fix issue of dev reference count leakage in bpq_device_event() - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() - ethernet: s2io: disable napi when start nic failed in s2io_card_up() - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() - net: macvlan: fix memory leaks of macvlan_common_newlink - arm64: efi: Fix handling of misaligned runtime regions and drop warning - ALSA: hda: fix potential memleak in 'add_widget_node' - ALSA: usb-audio: Add quirk entry for M-Audio Micro - nilfs2: fix deadlock in nilfs_count_free_blocks() - drm/i915/dmabuf: fix sg_table handling in map_dma_buf - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() - cert host tools: Stop complaining about deprecated OpenSSL functions - dmaengine: at_hdmac: Fix at_lli struct definition - dmaengine: at_hdmac: Don't start transactions at tx_submit level - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable - dmaengine: at_hdmac: Fix impossible condition - dmaengine: at_hdmac: Check return code of dma_async_device_register - x86/cpu: Restore AMD's DE_CFG MSR after resume - selftests/futex: fix build for clang - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid - ASoC: core: Fix use-after-free in snd_soc_exit() - serial: 8250_omap: remove wait loop from Errata i202 workaround - serial: 8250: omap: Flush PM QOS work on remove - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() - block: sed-opal: kmalloc the cmd/resp buffers - parport_pc: Avoid FIFO port location truncation - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map - net: bgmac: Drop free_netdev() from bgmac_enet_remove() - mISDN: fix possible memory leak in mISDN_dsp_element_register() - mISDN: fix misuse of put_device() in mISDN_register_device() - net: caif: fix double disconnect client in chnl_net_open() - xen/pcpu: fix possible memory leak in register_pcpu() - drbd: use after free in drbd_create_device() - net/x25: Fix skb leak in x25_lapb_receive_frame() - cifs: Fix wrong return value checking when GETFLAGS - ftrace: Fix the possible incorrect kernel message - ftrace: Optimize the allocation for mcount entries - ftrace: Fix null pointer dereference in ftrace_add_mod() - ring_buffer: Do not deactivate non-existant pages - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() - USB: serial: option: add Sierra Wireless EM9191 - USB: serial: option: remove old LARA-R6 PID - USB: serial: option: add u-blox LARA-R6 00B modem - USB: serial: option: add u-blox LARA-L6 modem - USB: serial: option: add Fibocom FM160 0x0111 composition - usb: add NO_LPM quirk for Realforce 87U Keyboard - usb: chipidea: fix deadlock in ci_otg_del_timer - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() - iio: pressure: ms5611: changed hardcoded SPI speed to value limited - dm ioctl: fix misbehavior if list_versions races with module loading - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs - serial: 8250_lpss: Configure DMA also w/o DMA filter - mmc: core: properly select voltage range without power cycle - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() - nilfs2: fix use-after-free bug of ns_writer on remount - serial: 8250: Flush DMA Rx on RLSI - macvlan: enforce a consistent minimal mtu - tcp: cdg: allow tcp_cdg_release() to be called multiple times - kcm: avoid potential race in kcm_tx_work - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - kcm: close race conditions on sk_receive_queue - 9p: trans_fd/p9_conn_cancel: drop client lock earlier - gfs2: Check sb_bsize_shift after reading superblock - gfs2: Switch from strlcpy to strscpy - 9p/trans_fd: always use O_NONBLOCK read/write - mm: fs: initialize fsdata passed to write_begin/write_end interface - ntfs: fix use-after-free in ntfs_attr_find() - ntfs: fix out-of-bounds read in ntfs_attr_find() - ntfs: check overflow when iterating ATTR_RECORDs - wifi: cfg80211: fix memory leak in query_regdb_file() - net: tun: Fix memory leaks of napi_get_frags - riscv: process: fix kernel info leakage - vmlinux.lds.h: Fix placement of '.data..decrypted' section - net: thunderbolt: Fix error handling in tbnet_init() - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() - Input: i8042 - fix leaking of platform device on module removal - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support - audit: fix undefined behavior in bit shift for AUDIT_BIT - wifi: mac80211: Fix ack frame idr leak when mesh has no route - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run - MIPS: pic32: treat port as signed integer - af_key: Fix send_acquire race with pfkey_register - ARM: dts: am335x-pcm-953: Define fixed regulators in root node - bus: sunxi-rsb: Support atomic transfers - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl - nfc/nci: fix race with opening and closing - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() - ARM: mxs: fix memory leak in mxs_machine_init() - net/mlx4: Check retval of mlx4_bitmap_init - net/qla3xxx: fix potential memleak in ql3xxx_send() - xfrm: Fix ignored return value in xfrm6_init() - NFC: nci: fix memory leak in nci_rx_data_packet() - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). - s390/dasd: fix no record found for raw_track_access - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION - nfc: st-nci: fix memory leaks in EVT_TRANSACTION - net: thunderx: Fix the ACPI memory leak - s390/crashdump: fix TOD programmable field size - nios2: add FORCE for vmlinuz.gz - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency - iio: light: apds9960: fix wrong register for gesture gain - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails - kconfig: display recursive dependency resolution hint just once - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() - xen/platform-pci: add missing free_irq() in error path - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) - platform/x86: hp-wmi: Ignore Smart Experience App event - [Config] updateconfigs for INET_TABLE_PERTURB_ORDER - tcp: configurable source port perturb table size - net: usb: qmi_wwan: add Telit 0x103a composition - drm/amdgpu: always register an MMU notifier for userptr - iio: health: afe4403: Fix oob read in afe4403_read_raw - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw - iio: light: rpr0521: add missing Kconfig dependencies - hwmon: (i5500_temp) fix missing pci_disable_device() - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails - of: property: decrement node refcount in of_fwnode_get_reference_args() - net/mlx5: Fix uninitialized variable bug in outlen_write() - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() - can: cc770: cc770_isa_probe(): add missing free_cc770dev() - qlcnic: fix sleep-in-atomic-context bugs caused by msleep - net: phy: fix null-ptr-deref while probe() failed - net: net_netdev: Fix error handling in ntb_netdev_init_module() - net/9p: Fix a potential socket leak in p9_socket_open - dsa: lan9303: Correct stat name - net: hsr: Fix potential use-after-free - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed - hwmon: (coretemp) Check for null before removing sysfs attrs - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() - perf: Add sample_flags to indicate the PMU-filled sample data - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 - efi: random: Properly limit the size of the random seed - ASoC: ops: Fix bounds check for _sx controls - pinctrl: single: Fix potential division by zero - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() - nvme: restrict management ioctls to admin - x86/tsx: Add a feature bit for TSX control MSR support - x86/pm: Add enumeration check before spec MSRs save/restore setup - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() - mmc: sdhci: use FIELD_GET for preset value bit masks - mmc: sdhci: Fix voltage switch delay - proc: avoid integer type confusion in get_proc_long - proc: proc_skip_spaces() shouldn't think it is working on C strings - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails - ipc/sem: Fix dangling sem_array access in semtimedop race - x86/nospec: Fix i386 RSB stuffing - Revert "x86/speculation: Change FILL_RETURN_BUFFER to work with objtool" - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove - net: pch_gbe: fix pci device refcount leak while module exiting - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() - iio: pressure: ms5611: fixed value compensation bug - arm: dts: rockchip: fix node name for hym8563 rtc - ARM: dts: rockchip: fix ir-receiver node names - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event - ASoC: soc-pcm: Add NULL check in BE reparenting - regulator: twl6030: fix get status of twl6032 regulators - net: usb: qmi_wwan: add u-blox 0x1342 composition - xen/netback: do some code cleanup - xen/netback: don't call kfree_skb() with interrupts disabled - rcutorture: Automatically create initrd directory - media: v4l2-dv-timings.c: fix too strict blanking sanity checks - memcg: fix possible use-after-free in memcg_write_event_control() - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field - HID: hid-lg4ff: Add check for empty lbuf - HID: core: fix shift-out-of-bounds in hid_report_raw_event - ieee802154: cc2520: Fix error return code in cc2520_hw_init() - ca8210: Fix crash by zero initializing data - gpio: amd8111: Fix PCI device reference count leak - e1000e: Fix TX dispatch condition - igb: Allocate MSI-X vector when testing - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() - net: encx24j600: Add parentheses to fix precedence - net: encx24j600: Fix invalid logic in reading of MISTAT register - net: mvneta: Prevent out of bounds read in mvneta_config_rss() - NFC: nci: Bounds check struct nfc_target arrays - net: stmmac: fix "snps,axi-config" node property parsing - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() - tipc: Fix potential OOB in tipc_link_proto_rcv() - ethernet: aeroflex: fix potential skb leak in greth_init_rings() - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() - ipv6: avoid use-after-free in ip6_fragment() - net: mvneta: Fix an out of bounds check - net: mvneta: Prevent out of bounds read in mvneta_config_rss() - i40e: Fix not setting default xps_cpus after reset - i40e: Fix for VF MAC address 0 - i40e: Disallow ip4 and ip6 l4_4_bytes - nvme initialize core quirks before calling nvme_init_subsystem - can: esd_usb: Allow REC and TEC to return to zero * CVE-2022-3628 - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() * rdpru in ubuntu_kvm_unit_tests failed on B-4.15 node riccioli with FAIL: RDPRU raises #UD (LP: #1968681) - x86/cpufeatures: Add feature bit RDPRU on AMD - kvm: svm: Intercept RDPRU * NFS: client permission error after adding user to permissible group (LP: #2003053) - cred: add cred_fscmp() for comparing creds. - NFS: Clear the file access cache upon login - NFS: Judge the file access cache's timestamp in rcu path - NFS: Fix up a sparse warning * 5.15.0-58.64 breaks xen bridge networking (pvh domU) (LP: #2002889) - xen/netback: fix build warning * CVE-2023-0461 - net/ulp: prevent ULP without clone op from entering the LISTEN status * CVE-2022-3545 - nfp: fix use-after-free in area_cache_get() [ Ubuntu: 4.15.0-204.215 ] * bionic/linux: 4.15.0-204.215 -proposed tracker (LP: #2003522) * Revoke & rotate to new signing key (LP: #2002812) - [Packaging] Revoke and rotate to new signing key -- Andrei Gherzan <email address hidden> Thu, 09 Feb 2023 15:36:32 +0000
Available diffs
linux-snapdragon (4.15.0-1145.155) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1145.155 -proposed tracker (LP: #2001874) * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) - [Config] snapdragon: Enable ARM64_ERRATUM_1742098 [ Ubuntu: 4.15.0-203.214 ] * bionic/linux: 4.15.0-203.214 -proposed tracker (LP: #2001876) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id" - x86/cpufeature: Add facility to check for min microcode revisions - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header - x86/devicetable: Move x86 specific macro out of generic code - x86/cpu: Add consistent CPU match macros - x86/cpu: Add a steppings field to struct x86_cpu_id - x86/entry: Remove skip_r11rcx - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/bugs: Report AMD retbleed vulnerability - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/entry: Add kernel IBRS implementation - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/bugs: Report Intel retbleed vulnerability - entel_idle: Disable IBRS during long idle - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Remove x86_spec_ctrl_mask - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Fix IBRS handling after vmexit - x86/speculation: Fill RSB on vmexit for IBRS - x86/common: Stamp out the stepping madness - x86/cpu/amd: Enumerate BTC_NO - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/speculation: Disable RRSBA behavior - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - x86/speculation: Add RSB VM Exit protections - ocfs2: clear dinode links count in case of error - ocfs2: fix BUG when iput after ocfs2_mknod fails - x86/microcode/AMD: Apply the patch early on every logical thread - ata: ahci-imx: Fix MODULE_ALIAS - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS - KVM: arm64: vgic: Fix exit condition in scan_its_table() - [Config] updateconfigs for ARM64_ERRATUM_1742098 - arm64: errata: Remove AES hwcap for COMPAT tasks - r8152: add PID for the Lenovo OneLink+ Dock - btrfs: fix processing of delayed data refs during backref walking - ACPI: extlog: Handle multiple records - HID: magicmouse: Do not set BTN_MOUSE on double report - net/atm: fix proc_mpc_write incorrect return value - net: hns: fix possible memory leak in hnae_ae_register() - iommu/vt-d: Clean up si_domain in the init_dmars() error path - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - ACPI: video: Force backlight native for more TongFang devices - ALSA: Use del_timer_sync() before freeing timer - ALSA: au88x0: use explicitly signed char - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM - usb: dwc3: gadget: Don't set IMI for no_interrupt - usb: bdc: change state when port disconnected - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller - xhci: Remove device endpoints from bandwidth list when freeing the device - tools: iio: iio_utils: fix digit calculation - iio: light: tsl2583: Fix module unloading - fbdev: smscufx: Fix several use-after-free bugs - mac802154: Fix LQI recording - drm/msm/hdmi: fix memory corruption with too many bridges - mmc: core: Fix kernel panic when remove non-standard SDIO card - kernfs: fix use-after-free in __kernfs_remove - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() - Xen/gntdev: don't ignore kernel unmapping error - xen/gntdev: Prevent leaking grants - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - net: ieee802154: fix error return code in dgram_bind() - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid - arc: iounmap() arg is volatile - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() - x86/unwind/orc: Fix unreliable stack dump with gcov - amd-xgbe: fix the SFP compliance codes check for DAC cables - amd-xgbe: add the bit rate quirk for Molex cables - kcm: annotate data-races around kcm->rx_psock - kcm: annotate data-races around kcm->rx_wait - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY - tcp: fix indefinite deferral of RTO with SACK reneging - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path - PM: hibernate: Allow hybrid sleep to work with s2idle - media: vivid: s_fbuf: add more sanity checks - media: vivid: dev->bitmap_cap wasn't freed in all cases - media: v4l2-dv-timings: add sanity checks for blanking values - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' - i40e: Fix ethtool rx-flow-hash setting for X722 - i40e: Fix flow-type by setting GL_HASH_INSET registers - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() - PM: domains: Fix handling of unavailable/disabled idle states - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() - ALSA: aoa: Fix I2S device accounting - openvswitch: switch from WARN to pr_warn - net: ehea: fix possible memory leak in ehea_register_port() - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive - media: venus: dec: Handle the case where find_format fails - Makefile.debug: re-enable debug info for .S files - drm/msm/dsi: fix memory corruption with too many bridges - perf auxtrace: Fix address filter symbol name match for modules - net: netsec: fix error handling in netsec_register_mdio() - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed - i40e: Fix VF hang when reset is triggered on another VF * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) - of: fdt: fix off-by-one error in unflatten_dt_nodes() - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx - drm/meson: Correct OSD1 global alpha value - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM - ASoC: nau8824: Fix semaphore unbalance at error paths - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() - ALSA: hda/sigmatel: Keep power up while beep is enabled - net: usb: qmi_wwan: add Quectel RM520N - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() - mksysmap: Fix the mismatch of 'L0' symbols in System.map - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - ALSA: hda/sigmatel: Fix unused variable warning for beep power change - wifi: mac80211: Fix UAF in ieee80211_scan_rx() - USB: core: Fix RST error in hub.c - USB: serial: option: add Quectel BG95 0x0203 composition - USB: serial: option: add Quectel RM520N - ALSA: hda/tegra: set depop delay for tegra - ALSA: hda: add Intel 5 Series / 3400 PCI DID - mm/slub: fix to return errno if kmalloc() fails - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers - netfilter: nf_conntrack_irc: Tighten matching on DCC message - iavf: Fix cached head and tail value for iavf_get_tx_pending - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - net: team: Unsync device addresses on ndo_stop - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko - of: mdio: Add of_node_put() when breaking out of for_each_xx - netfilter: ebtables: fix memory leak when blob is malformed - can: gs_usb: gs_can_open(): fix race dev->can.state condition - perf kcore_copy: Do not check /proc/modules is unchanged - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD - serial: Create uart_xmit_advance() - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region - ext4: make directory inode spreading reflect flexbg size - nvmet: fix a use-after-free - i40e: Fix VF set max MTU size - i40e: Fix set max_tx_rate when it is lower than 1 Mbps - perf jit: Include program header in ELF files - workqueue: don't skip lockdep work dependency in cancel_work_sync() - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width - mm/page_alloc: fix race condition between build_all_zonelists and page allocation - mm: prevent page_frag_alloc() from corrupting the memory - mm/migrate_device.c: flush TLB while holding PTL - soc: sunxi: sram: Actually claim SRAM regions - soc: sunxi: sram: Fix debugfs info for A64 SRAM C - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" - Input: melfas_mip4 - fix return value check in mip4_probe() - usbnet: Fix memory leak in usbnet_disconnect() - selftests: Fix the if conditions of in test_extra_filter() - uas: add no-uas quirk for Hiksemi usb_disk - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS - uas: ignore UAS for Thinkplus chips - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() - nvme: add new line after variable declatation - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices - clk: iproc: Minor tidy up of iproc pll data structures - clk: iproc: Do not rely on node name for correct PLL setup - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 - ARM: fix function graph tracer and unwinder dependencies - [Config] updateconfigs for UNWINDER_ARM - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer - net/ieee802154: fix uninit value bug in dgram_sendmsg - um: Cleanup syscall_handler_t cast in syscalls_32.h - um: Cleanup compiler warning in arch/x86/um/tls_32.c - usb: mon: make mmapped memory read only - USB: serial: ftdi_sio: fix 300 bps rate for SIO - mmc: core: Replace with already defined values for readability - mmc: core: Terminate infinite loop in SD-UHS voltage switch - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure - ceph: don't truncate file in atomic_open - random: clamp credited irq bits to maximum mixed - ALSA: hda: Fix position reporting on Poulsbo - USB: serial: qcserial: add new usb-id for Dell branded EM7455 - random: restore O_NONBLOCK support - random: avoid reading two cache lines on irq randomness - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate - Input: xpad - add supported devices as contributed on github - Input: xpad - fix wireless 360 controller breaking after suspend - random: use expired timer rather than wq for mixing fast pool - ALSA: oss: Fix potential deadlock at unregistration - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() - ALSA: usb-audio: Fix potential memory leaks - ALSA: usb-audio: Fix NULL dererence at error path - iio: dac: ad5593r: Fix i2c read protocol requirements - fs: dlm: fix race between test_bit() and queue_work() - fs: dlm: handle -EBUSY first in lock arg validation - HID: multitouch: Add memory barriers - quota: Check next/prev free block number after reading from quota file - regulator: qcom_rpm: Fix circular deferral regression - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" - parisc: fbdev/stifb: Align graphics memory size to 4MB - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - nilfs2: fix use-after-free bug of struct nilfs_root - ext4: fix null-ptr-deref in ext4_write_info - ext4: make ext4_lazyinit_thread freezable - ext4: place buffer head allocation before handle start - livepatch: fix race between fork and KLP transition - ftrace: Properly unset FTRACE_HASH_FL_MOD - ring-buffer: Allow splice to read previous partially read pages - ring-buffer: Check pending waiters when doing wake ups as well - ring-buffer: Fix race between reset page and reading page - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" - gcov: support GCC 12.1 and newer compilers - selinux: use "grep -E" instead of "egrep" - sh: machvec: Use char[] for section boundaries - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() - wifi: mac80211: allow bw change during channel switch in mesh - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() - wifi: rtl8xxxu: Fix skb misuse in TX queue selection - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration - net: fs_enet: Fix wrong check in do_pd_setup - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe - netfilter: nft_fib: Fix for rpath check with VRF devices - spi: s3c64xx: Fix large transfers with DMA - vhost/vsock: Use kvmalloc/kvfree for larger packets. - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited - net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() - bnx2x: fix potential memory leak in bnx2x_tpa_stop() - drm/mipi-dsi: Detach devices when removing the host - platform/x86: msi-laptop: Fix old-ec check for backlight registering - platform/x86: msi-laptop: Fix resource cleanup - drm/bridge: megachips: Fix a null pointer dereference bug - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API - ALSA: dmaengine: increment buffer pointer atomically - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() - memory: of: Fix refcount leak bug in of_get_ddr_timings() - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() - soc: qcom: smem_state: Add refcounting for the 'state->of_node' - ARM: dts: turris-omnia: Fix mpp26 pin name and comment - ARM: dts: kirkwood: lsxl: fix serial line - ARM: dts: kirkwood: lsxl: remove first ethernet port - ARM: Drop CMDLINE_* dependency on ATAGS - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX - iio: inkern: only release the device node when done with it - iio: ABI: Fix wrong format of differential capacitance channel ABI. - clk: oxnas: Hold reference returned by of_get_parent() - clk: tegra: Fix refcount leak in tegra210_clock_init - clk: tegra: Fix refcount leak in tegra114_clock_init - clk: tegra20: Fix refcount leak in tegra20_clock_init - HSI: omap_ssi: Fix refcount leak in ssi_probe - HSI: omap_ssi_port: Fix dma_map_sg error check - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop - tty: xilinx_uartps: Fix the ignore_status - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init - RDMA/rxe: Fix "kernel NULL pointer dereference" error - RDMA/rxe: Fix the error caused by qp->sk - dyndbg: fix module.dyndbg handling - dyndbg: let query-modname override actual module name - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() - ata: fix ata_id_has_devslp() - ata: fix ata_id_has_ncq_autosense() - ata: fix ata_id_has_dipm() - md/raid5: Ensure stripe_fill happens on non-read IO with journal - xhci: Don't show warning for reinit on known broken suspend - usb: gadget: function: fix dangling pnp_string in f_printer.c - drivers: serial: jsm: fix some leaks in probe - phy: qualcomm: call clk_disable_unprepare in the error handling - firmware: google: Test spinlock on panic path to avoid lockups - serial: 8250: Fix restoring termios speed after suspend - fsi: core: Check error number after calling ida_simple_get - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() - mfd: lp8788: Fix an error handling path in lp8788_probe() - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() - mfd: sm501: Add check for platform_driver_register() - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() - spmi: pmic-arb: correct duplicate APID to PPID mapping logic - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg - powerpc/math_emu/efp: Include module.h - powerpc/sysdev/fsl_msi: Add missing of_node_put() - powerpc/pci_dn: Add missing of_node_put() - powerpc/powernv: add missing of_node_put() in opal_export_attrs() - powerpc: Fix SPE Power ISA properties for e500v1 platforms - iommu/omap: Fix buffer overflow in debugfs - iommu/iova: Fix module config properly - crypto: cavium - prevent integer overflow loading firmware - f2fs: fix race condition on setting FI_NO_EXTENT flag - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk - MIPS: BCM47XX: Cast memcmp() of function to (void *) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data - wifi: brcmfmac: fix invalid address access when enabling SCAN log level - openvswitch: Fix double reporting of drops in dropwatch - openvswitch: Fix overreporting of drops in dropwatch - tcp: annotate data-race around tcp_md5sig_pool_populated - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() - xfrm: Update ipcomp_scratches with NULL when freed - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times - can: bcm: check the result of can_send() in bcm_can_tx() - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 - wifi: rt2x00: set SoC wmac clock register - wifi: rt2x00: correctly set BBP register 86 for MT7620 - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory - Bluetooth: L2CAP: Fix user-after-free - drm: Use size_t type for len variable in drm_copy_field() - drm: Prevent drm_copy_field() to attempt copying a NULL pointer - drm/vc4: vec: Fix timings for VEC modes - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading - drm/amdgpu: fix initial connector audio value - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 - ARM: dts: imx6q: add missing properties for sram - ARM: dts: imx6dl: add missing properties for sram - ARM: dts: imx6qp: add missing properties for sram - ARM: dts: imx6sl: add missing properties for sram - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() - scsi: 3w-9xxx: Avoid disabling device if failing to enable it - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() - HID: roccat: Fix use-after-free in roccat_read() - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() - usb: musb: Fix musb_gadget.c rxstate overflow bug - Revert "usb: storage: Add quirk for Samsung Fit flash" - usb: idmouse: fix an uninit-value in idmouse_open - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc - net: ieee802154: return -EINVAL for unknown addr type - net/ieee802154: don't warn zero-sized raw_sendmsg() - ext4: continue to expand file system when the target size doesn't reach - md: Replace snprintf with scnprintf - efi: libstub: drop pointless get_memory_map() call - inet: fully convert sk->sk_rx_dst to RCU rules - thermal: intel_powerclamp: Use first online CPU as control_cpu - mtd: rawnand: atmel: Unmap streaming DMA mappings - drm: bridge: adv7511: fix CEC power down control register offset - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe - clk: berlin: Add of_node_put() for of_get_parent() - mtd: devices: docg3: check the return value of devm_ioremap() in the probe -- Stefan Bader <email address hidden> Thu, 12 Jan 2023 15:22:36 +0100
Available diffs
linux-snapdragon (4.15.0-1144.154) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1144.154 -proposed tracker (LP: #2002003) [ Ubuntu: 4.15.0-202.213 ] * bionic/linux: 4.15.0-202.213 -proposed tracker (LP: #2002005) * CVE-2022-3643 - xen/netback: Ensure protocol headers don't fall in the non-linear area * CVE-2022-45934 - Bluetooth: L2CAP: Fix u8 overflow * CVE-2022-42896 - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm * CVE-2022-43945 - NFSD: Cap rsize_bop result based on send buffer size -- Thadeu Lima de Souza Cascardo <email address hidden> Wed, 11 Jan 2023 01:03:20 -0300
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1143.153) bionic; urgency=medium [ Ubuntu: 4.15.0-201.212 ] * bionic/linux: 4.15.0-201.212 -proposed tracker (LP: #1997871) * Expose built-in trusted and revoked certificates (LP: #1996892) - [Packaging] Expose built-in trusted and revoked certificates * Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) - s390/archrandom: prevent CPACF trng invocations in interrupt context * BUG: scheduling while atomic: ip/1210/0x00000200 on xenial/hwe rumford (LP: #1995870) - tg3: prevent scheduling while atomic splat * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() - selftests/bpf: Fix test_align verifier log patterns - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler - kcm: fix strp_init() order and cleanup - serial: fsl_lpuart: RS485 RTS polariy is inverse - staging: rtl8712: fix use after free bugs - vt: Clear selection before changing the font - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id - binder: fix UAF of ref->proc caused by race condition - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" - Input: rk805-pwrkey - fix module autoloading - hwmon: (gpio-fan) Fix array out of bounds access - thunderbolt: Use the actual buffer in tb_async_error() - xhci: Add grace period after xHC start to prevent premature runtime suspend. - USB: serial: cp210x: add Decagon UCA device id - USB: serial: option: add support for OPPO R11 diag port - USB: serial: option: add Quectel EM060K modem - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode - usb: dwc2: fix wrong order of phy_power_on and phy_init - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) - usb-storage: Add ignore-residue quirk for NXP PN7462AU - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages - s390: fix nospec table alignments - USB: core: Prevent nested device-reset calls - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected - net: mac802154: Fix a condition in the receive path - ALSA: seq: oss: Fix data-race for max_midi_devs access - ALSA: seq: Fix data-race at module auto-loading - efi: capsule-loader: Fix use-after-free in efi_capsule_write - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() - fs: only do a memory barrier for the first set_buffer_uptodate() - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. - drm/radeon: add a force flush to delay work when radeon - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() - ALSA: aloop: Fix random zeros in capture data when using jiffies timer - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() - kprobes: Prohibit probes in gate area - scsi: mpt3sas: Fix use-after-free warning - driver core: Don't probe devices after bus_type.match() probe deferral - netfilter: br_netfilter: Drop dst references before setting. - sch_sfb: Don't assume the skb is still around after enqueueing to child - tipc: fix shift wrapping bug in map_get() - ipv6: sr: fix out-of-bounds read when setting HMAC data. - tcp: fix early ETIMEDOUT after spurious non-SACK RTO - sch_sfb: Also store skb len before calling child enqueue - usb: dwc3: fix PHY disable sequence - USB: serial: ch341: fix lost character on LCR updates - USB: serial: ch341: fix disabled rx timer on older devices - MIPS: loongson32: ls1c: Fix hang during startup - SUNRPC: use _bh spinlocking on ->transport_lock - net: dp83822: disable false carrier interrupt - tcp: annotate data-race around challenge_timestamp - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops - clk: core: Fix runtime PM sequence in clk_core_unprepare() - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs - i40e: Fix kernel crash during module removal - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() - drm/msm/rd: Fix FIFO-full deadlock - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo - tg3: Disable tg3 device on system reboot to avoid triggering AER - ieee802154: cc2520: add rc code in cc2520_tx() - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes - tracefs: Only clobber mode/uid/gid on remount if asked - net: dp83822: disable rx error interrupt * Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) - audit: fix potential double free on error path from fsnotify_add_inode_mark - parisc: Fix exception handler for fldw and fstw instructions - pinctrl: amd: Don't save/restore interrupt status and wake status bits - xfrm: fix refcount leak in __xfrm_policy_check() - rose: check NULL rose_loopback_neigh->loopback - bonding: 802.3ad: fix no transmission of LACPDUs - net: ipvtap - add __init/__exit annotations to module init/exit funcs - netfilter: ebtables: reject blobs that don't provide all entry points - netfilter: nft_payload: report ERANGE for too long offset and length - netfilter: nft_payload: do not truncate csum_offset and csum_type - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - ratelimit: Fix data-races in ___ratelimit(). - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around sysctl_somaxconn. - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - btrfs: check if root is readonly while setting security xattr - loop: Check for overflow while configuring loop - asm-generic: sections: refactor memory_intersects - mm/hugetlb: fix hugetlb not supporting softdirty tracking - md: call __md_stop_writes in md_stop - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - arm64: map FDT as RW for early_init_dt_scan() - s390/mm: do not trigger write fault when vma does not allow VM_WRITE - x86/bugs: Add "unknown" reporting for MMIO Stale Data - kbuild: Fix include path in scripts/Makefile.modpost - Bluetooth: L2CAP: Fix build errors in some archs - media: pvrusb2: fix memory leak in pvr_probe - HID: hidraw: fix memory leak in hidraw_release() - fbdev: fb_pm2fb: Avoid potential divide by zero error - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead - neigh: fix possible DoS due to net iface start/stop loop - s390/hypfs: avoid error message under KVM - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y - kprobes: don't call disarm_kprobe() for disabled kprobes - net: neigh: don't call kfree_skb() under spin_lock_irqsave() - net: Fix data-races around netdev_tstamp_prequeue. - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - s390: fix double free of GS and RI CBs on fork() failure - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - bpf: Fix the off-by-two error in range markings * CVE-2022-2663 - netfilter: nf_conntrack_irc: Fix forged IP logic * CVE-2022-3061 - video: fbdev: i740fb: Error out if 'pixclock' equals zero -- Kuba Pawlak <email address hidden> Wed, 30 Nov 2022 17:27:16 +0100
Available diffs
linux-snapdragon (4.15.0-1142.152) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1142.152 -proposed tracker (LP: #1997463) [ Ubuntu: 4.15.0-200.211 ] * bionic/linux: 4.15.0-200.211 -proposed tracker (LP: #1997465) * CVE-2022-3239 - media: em28xx: initialize refcount before kref_get * CVE-2022-3524 - tcp/udp: Fix memory leak in ipv6_renew_options(). * CVE-2022-3564 - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu * CVE-2022-3565 - mISDN: fix use-after-free bugs in l1oip timer handlers * CVE-2022-3566 - tcp: Fix data races around icsk->icsk_af_ops. * CVE-2022-3567 - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. * CVE-2022-3594 - r8152: Rate limit overflow messages * CVE-2022-3621 - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() * CVE-2022-42703 - mm/rmap.c: don't reuse anon_vma if we just want a copy - mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas() - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse [ Ubuntu: 4.15.0-197.208 ] * bionic/linux: 4.15.0-197.208 -proposed tracker (LP: #1994998) * Memory leak while using NFQUEUE to delegate the decision on TCP packets to userspace processes (LP: #1991774) - SAUCE: netfilter: nf_queue: Fix memory leak in nf_queue_entry_get_refs * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - ntfs: fix use-after-free in ntfs_ucsncmp() - ARM: crypto: comment out gcc warning that breaks clang builds - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - ACPI: video: Force backlight native for some TongFang devices - macintosh/adb: fix oob read in do_adb_query() function - Makefile: link with -z noexecstack --no-warn-rwx-segments - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - ALSA: bcd2000: Fix a UAF bug on the error path of probing - add barriers to buffer_uptodate and set_buffer_uptodate - HID: wacom: Don't register pad_input for touch switch - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - ALSA: hda/cirrus - support for iMac 12,1 model - vfs: Check the truncate maximum size in inode_newsize_ok() - fs: Add missing umask strip in vfs_tmpfile - usbnet: Fix linkwatch use-after-free on disconnect - parisc: Fix device names in /proc/iomem - drm/nouveau: fix another off-by-one in nvbios_addr - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - iio: light: isl29028: Fix the warning in isl29028_remove() - fuse: limit nsec - md-raid10: fix KASAN warning - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - PCI: Add defines for normal and subtractive PCI bridges - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - powerpc/powernv: Avoid crashing if rng is NULL - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - USB: HCD: Fix URB giveback issue in tasklet function - netfilter: nf_tables: fix null deref due to zeroed list head - arm64: Do not forget syscall when starting a new thread. - arm64: fix oops in concurrently setting insn_emulation sysctls - ext2: Add more validity checks for inode counts - ARM: dts: imx6ul: add missing properties for sram - ARM: dts: imx6ul: fix qspi node compatible - ARM: OMAP2+: display: Fix refcount leak bug - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: LPSS: Fix missing check in register_device_clock() - PM: hibernate: defer device probing when resuming from hibernation - selinux: Add boundary check in put_entry() - ARM: findbit: fix overflowing offset - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - x86/pmem: Fix platform-device leak in error path - ARM: dts: ast2500-evb: fix board compatible - soc: fsl: guts: machine variable might be unset - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - thermal/tools/tmon: Include pthread and time headers in tmon.h - dm: return early from dm_pr_call() if DM device is suspended - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - i2c: Fix a potential use after free - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - media: hdpvr: fix error value returns in hdpvr_read - drm/vc4: dsi: Correct DSI divider calculations - drm/rockchip: vop: Don't crash for invalid duplicate_state() - drm/mediatek: dpi: Remove output format of YUV - drm: bridge: sii8620: fix possible off-by-one - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - tcp: make retransmitted SKB fit into the send window - selftests: timers: valid-adjtimex: build fix for newer toolchains - selftests: timers: clocksource-switch: fix passing errors from child - fs: check FMODE_LSEEK to control internal pipe splicing - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: p54: add missing parentheses in p54_flush() - can: pch_can: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: usb_8dev: do not report txerr and rxerr during bus-off - can: error: specify the values of data[5..7] of CAN error frames - can: pch_can: pch_can_error(): initialize errc before using it - Bluetooth: hci_intel: Add check for platform_driver_register - i2c: cadence: Support PEC for SMBus block read - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - wifi: libertas: Fix possible refcount leak in if_usb_probe() - net: rose: fix netdev reference changes - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - mtd: maps: Fix refcount leak in of_flash_probe_versatile - mtd: maps: Fix refcount leak in ap_flash_init - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - fpga: altera-pr-ip: fix unsigned comparison with less than zero - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - memstick/ms_block: Fix some incorrect memory allocation - memstick/ms_block: Fix a memory leak - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - scsi: smartpqi: Fix DMA direction for RAID requests - usb: gadget: udc: amd5536 depends on HAS_DMA - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - USB: serial: fix tty-port initialized comments - platform/olpc: Fix uninitialized data in debugfs write - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/rxe: Fix error unwind in rxe_create_qp() - ext4: recover csum seed of tmp_inode after migrating to extents - jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - profiling: fix shift too large makes kernel panic - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix race condition in gsmld_write() - remoteproc: qcom: wcnss: Fix handling of IRQs - vfio/ccw: Do not change FSM state in subchannel event - tty: n_gsm: fix wrong T1 retry count handling - tty: n_gsm: fix DM command - iommu/exynos: Handle failed IOMMU device registration properly - kfifo: fix kfifo_to_user() return type - mfd: t7l66xb: Drop platform disable callback - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - s390/zcore: fix race when reading from hardware system area - video: fbdev: amba-clcd: Fix refcount leak bugs - video: fbdev: sis: fix typos in SiS_GetModeID() - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - kprobes: Forbid probing on trampoline and BPF code areas - powerpc/pci: Fix PHB numbering when using opal-phbid - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - x86/numa: Use cpumask_available instead of hardcoded NULL check - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - tools/thermal: Fix possible path truncations - video: fbdev: vt8623fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: s3fb: Check the size of screen before memset_io() - scsi: zfcp: Fix missing auto port scan and thus missing target ports - x86/olpc: fix 'logical not is only applied to the left hand side' - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - ext4: make sure ext4_append() always allocates new block - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix extent status tree race in writeback error recovery path - ext4: correct max_inline_xattr_value_size computing - ext4: correct the misjudgment in ext4_iget_extra_inode - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - dm raid: fix address sanitizer warning in raid_resume - dm raid: fix address sanitizer warning in raid_status - btrfs: reject log replay if there is unsupported RO compat flag - KVM: Add infrastructure and macro to mark VM as bugged - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - tcp: fix over estimation in sk_forced_mem_schedule() - scsi: sg: Allow waiting for commands to complete on removed device - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - net/9p: Initialize the iounit field during fid creation - net_sched: cls_route: disallow handle of 0 - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - ALSA: info: Fix llseek return value when using callback - rds: add missing barrier to release_refill - ata: libata-eh: Add missing command name - btrfs: fix lost error handling when looking up extended ref on log replay - can: ems_usb: fix clang's -Wunaligned-access warning - apparmor: fix quiet_denied for file rules - apparmor: Fix failed mount permission check error message - apparmor: fix aa_label_asxprint return check - apparmor: fix reference count leak in aa_pivotroot() - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - SUNRPC: Reinitialise the backchannel request buffers before reuse - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - geneve: do not use RT_TOS for IPv6 flowlabel - vsock: Fix memory leak in vsock_connect() - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - tools build: Switch to new openssl API for test-libcrypto - xen/xenbus: fix return type in xenbus_file_read() - atm: idt77252: fix use-after-free bugs caused by tst_timer - nios2: page fault et.al. are *not* restartable syscalls... - nios2: don't leave NULLs in sys_call_table[] - nios2: traced syscall does need to check the syscall number - nios2: fix syscall restart checks - nios2: restarts apply only to the first sigframe we build... - nios2: add force_successful_syscall_return() - netfilter: nf_tables: really skip inactive sets when allocating name - powerpc/pci: Fix get_phb_number() locking - i40e: Fix to stop tx_timeout recovery if GLOBR fails - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - igb: Add lock to avoid data race - kbuild: clear LDFLAGS in the top Makefile - btrfs: only write the sectors in the vertical stripe which has data stripes - btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - PCI: Add ACS quirk for Broadcom BCM5750x NICs - irqchip/tegra: Fix overflow implicit truncation warnings - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - gadgetfs: ep_io - wait until IRQ finishes - cxl: Fix a memory leak in an error handling path - drivers:md:fix a potential use-after-free bug - ext4: avoid remove directory when directory is corrupted - ext4: avoid resizing to a partial cluster size - tty: serial: Fix refcount leak bug in ucc_uart.c - vfio: Clear the caps->buf to NULL after free - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - ALSA: core: Add async signal helpers - ALSA: timer: Use deferred fasync helper - smb3: check xattr value length earlier - powerpc/64: Init jump labels before parse_early_param() - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - media: tw686x: Register the irq at the end of probe - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - HID: alps: Declare U1_UNICORN_LEGACY support - tty: n_gsm: fix missing corner cases in gsmld_poll() - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file * Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - ip: Fix a data-race around sysctl_fwmark_reflect. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_probe_interval. - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix dma queue left shift overflow issue - igmp: Fix data-races around sysctl_igmp_llm_reports. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - be2net: Fix buffer overflow in be_get_module_eeprom - Revert "Revert "char/random: silence a lockdep splat with printk()"" - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - bpf: Make sure mac_header was set before using it - drm/tilcdc: Remove obsolete crtc_mode_valid() hack - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - ALSA: memalloc: Align buffer allocations in page size - Bluetooth: Add bt_skb_sendmsg helper - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - tty: drivers/tty/, stop using tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drop tty_schedule_flip() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - PCI: hv: Fix multi-MSI to allow more than one MSI vector - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix interrupt mapping for multi-MSI - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix data-races around sysctl_tcp_max_reordering. - ima: remove the IMA_TEMPLATE Kconfig option - [Config] updateconfigs for IMA_TEMPLATE - tcp: Fix data-races around sysctl_tcp_dsack. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - scsi: ufs: host: Hold reference returned by of_parse_phandle() - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - net: ping6: Fix memleak in ipv6_renew_options(). - igmp: Fix data-races around sysctl_igmp_qrv. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - Documentation: fix sctp_wmem in ip-sysctl.rst - i40e: Fix interface init with MSI interrupts (no MSI-X) - sctp: fix sleep in atomic context bug in timer handlers - perf symbol: Correct address for bss symbols - scsi: core: Fix race between handling STS_RESOURCE and completion - ACPI: video: Shortening quirk list by identifying Clevo by board_name only * unprivileged users may trigger page cache invalidation WARN (LP: #1989144) - iomap: fix WARN_ON_ONCE() from unprivileged users * Users belonging to video group may trigger a deadlock WARN (LP: #1990690) - SAUCE: fbdev: remove redundant lock_fb_info * ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (LP: #1990985) - ACPI: processor_idle: Skip dummy wait if kernel is in guest - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems * CVE-2022-3028 - af_key: Do not call xfrm_probe_algs in parallel * CVE-2022-2978 - fs: fix UAF/GPF bug in nilfs_mdt_destroy * CVE-2022-40768 - scsi: stex: Properly zero out the passthrough command structure [ Ubuntu: 4.15.0-196.207 ] * bionic/linux: 4.15.0-196.207 -proposed tracker (LP: #1994992) * [UBUNTU 18.04] Ubuntu 18.04 kernel 4.15.0-194 crashes on IPL (LP: #1994601) - SAUCE: Revert "s390/archrandom: simplify back to earlier design and initialize earlier" -- Thadeu Lima de Souza Cascardo <email address hidden> Thu, 24 Nov 2022 17:15:35 -0300
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1140.150) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1140.150 -proposed tracker (LP: #1996415) [ Ubuntu: 4.15.0-198.209 ] * bionic/linux: 4.15.0-198.209 -proposed tracker (LP: #1996417) * CVE-2022-42073 - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse * CVE-2022-42703 - mm/rmap.c: don't reuse anon_vma if we just want a copy - mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas() * Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) - s390/archrandom: prevent CPACF trng invocations in interrupt context * BUG: scheduling while atomic: ip/1210/0x00000200 on xenial/hwe rumford (LP: #1995870) - tg3: prevent scheduling while atomic splat * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() - selftests/bpf: Fix test_align verifier log patterns - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler - kcm: fix strp_init() order and cleanup - serial: fsl_lpuart: RS485 RTS polariy is inverse - staging: rtl8712: fix use after free bugs - vt: Clear selection before changing the font - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id - binder: fix UAF of ref->proc caused by race condition - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" - Input: rk805-pwrkey - fix module autoloading - hwmon: (gpio-fan) Fix array out of bounds access - thunderbolt: Use the actual buffer in tb_async_error() - xhci: Add grace period after xHC start to prevent premature runtime suspend. - USB: serial: cp210x: add Decagon UCA device id - USB: serial: option: add support for OPPO R11 diag port - USB: serial: option: add Quectel EM060K modem - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode - usb: dwc2: fix wrong order of phy_power_on and phy_init - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) - usb-storage: Add ignore-residue quirk for NXP PN7462AU - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages - s390: fix nospec table alignments - USB: core: Prevent nested device-reset calls - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected - net: mac802154: Fix a condition in the receive path - ALSA: seq: oss: Fix data-race for max_midi_devs access - ALSA: seq: Fix data-race at module auto-loading - efi: capsule-loader: Fix use-after-free in efi_capsule_write - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() - fs: only do a memory barrier for the first set_buffer_uptodate() - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. - drm/radeon: add a force flush to delay work when radeon - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() - ALSA: aloop: Fix random zeros in capture data when using jiffies timer - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() - kprobes: Prohibit probes in gate area - scsi: mpt3sas: Fix use-after-free warning - driver core: Don't probe devices after bus_type.match() probe deferral - netfilter: br_netfilter: Drop dst references before setting. - sch_sfb: Don't assume the skb is still around after enqueueing to child - tipc: fix shift wrapping bug in map_get() - ipv6: sr: fix out-of-bounds read when setting HMAC data. - tcp: fix early ETIMEDOUT after spurious non-SACK RTO - sch_sfb: Also store skb len before calling child enqueue - usb: dwc3: fix PHY disable sequence - USB: serial: ch341: fix lost character on LCR updates - USB: serial: ch341: fix disabled rx timer on older devices - MIPS: loongson32: ls1c: Fix hang during startup - SUNRPC: use _bh spinlocking on ->transport_lock - net: dp83822: disable false carrier interrupt - tcp: annotate data-race around challenge_timestamp - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops - clk: core: Fix runtime PM sequence in clk_core_unprepare() - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs - i40e: Fix kernel crash during module removal - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() - drm/msm/rd: Fix FIFO-full deadlock - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo - tg3: Disable tg3 device on system reboot to avoid triggering AER - ieee802154: cc2520: add rc code in cc2520_tx() - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes - tracefs: Only clobber mode/uid/gid on remount if asked - net: dp83822: disable rx error interrupt * Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) - audit: fix potential double free on error path from fsnotify_add_inode_mark - parisc: Fix exception handler for fldw and fstw instructions - pinctrl: amd: Don't save/restore interrupt status and wake status bits - xfrm: fix refcount leak in __xfrm_policy_check() - rose: check NULL rose_loopback_neigh->loopback - bonding: 802.3ad: fix no transmission of LACPDUs - net: ipvtap - add __init/__exit annotations to module init/exit funcs - netfilter: ebtables: reject blobs that don't provide all entry points - netfilter: nft_payload: report ERANGE for too long offset and length - netfilter: nft_payload: do not truncate csum_offset and csum_type - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. - ratelimit: Fix data-races in ___ratelimit(). - net: Fix a data-race around sysctl_tstamp_allow_data. - net: Fix a data-race around sysctl_net_busy_poll. - net: Fix a data-race around sysctl_net_busy_read. - net: Fix a data-race around netdev_budget. - net: Fix a data-race around netdev_budget_usecs. - net: Fix a data-race around sysctl_somaxconn. - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter - btrfs: check if root is readonly while setting security xattr - loop: Check for overflow while configuring loop - asm-generic: sections: refactor memory_intersects - mm/hugetlb: fix hugetlb not supporting softdirty tracking - md: call __md_stop_writes in md_stop - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() - arm64: map FDT as RW for early_init_dt_scan() - s390/mm: do not trigger write fault when vma does not allow VM_WRITE - x86/bugs: Add "unknown" reporting for MMIO Stale Data - kbuild: Fix include path in scripts/Makefile.modpost - Bluetooth: L2CAP: Fix build errors in some archs - media: pvrusb2: fix memory leak in pvr_probe - HID: hidraw: fix memory leak in hidraw_release() - fbdev: fb_pm2fb: Avoid potential divide by zero error - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead - neigh: fix possible DoS due to net iface start/stop loop - s390/hypfs: avoid error message under KVM - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y - kprobes: don't call disarm_kprobe() for disabled kprobes - net: neigh: don't call kfree_skb() under spin_lock_irqsave() - net: Fix data-races around netdev_tstamp_prequeue. - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry - s390: fix double free of GS and RI CBs on fork() failure - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq - bpf: Fix the off-by-two error in range markings * CVE-2022-3239 - media: em28xx: initialize refcount before kref_get * CVE-2022-2663 - netfilter: nf_conntrack_irc: Fix forged IP logic * CVE-2022-3061 - video: fbdev: i740fb: Error out if 'pixclock' equals zero -- Kuba Pawlak <email address hidden> Thu, 17 Nov 2022 10:54:58 +0100
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1139.149) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1139.149 -proposed tracker (LP: #1992095) [ Ubuntu: 4.15.0-195.206 ] * bionic/linux: 4.15.0-195.206 -proposed tracker (LP: #1992097) * Memory leak while using NFQUEUE to delegate the decision on TCP packets to userspace processes (LP: #1991774) - SAUCE: netfilter: nf_queue: Fix memory leak in nf_queue_entry_get_refs * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - ntfs: fix use-after-free in ntfs_ucsncmp() - ARM: crypto: comment out gcc warning that breaks clang builds - mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle. - ACPI: video: Force backlight native for some TongFang devices - macintosh/adb: fix oob read in do_adb_query() function - Makefile: link with -z noexecstack --no-warn-rwx-segments - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments - ALSA: bcd2000: Fix a UAF bug on the error path of probing - add barriers to buffer_uptodate and set_buffer_uptodate - HID: wacom: Don't register pad_input for touch switch - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model - ALSA: hda/cirrus - support for iMac 12,1 model - vfs: Check the truncate maximum size in inode_newsize_ok() - fs: Add missing umask strip in vfs_tmpfile - usbnet: Fix linkwatch use-after-free on disconnect - parisc: Fix device names in /proc/iomem - drm/nouveau: fix another off-by-one in nvbios_addr - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains - iio: light: isl29028: Fix the warning in isl29028_remove() - fuse: limit nsec - md-raid10: fix KASAN warning - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() - PCI: Add defines for normal and subtractive PCI bridges - powerpc/fsl-pci: Fix Class Code of PCIe Root Port - powerpc/powernv: Avoid crashing if rng is NULL - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - USB: HCD: Fix URB giveback issue in tasklet function - netfilter: nf_tables: fix null deref due to zeroed list head - arm64: Do not forget syscall when starting a new thread. - arm64: fix oops in concurrently setting insn_emulation sysctls - ext2: Add more validity checks for inode counts - ARM: dts: imx6ul: add missing properties for sram - ARM: dts: imx6ul: fix qspi node compatible - ARM: OMAP2+: display: Fix refcount leak bug - ACPI: PM: save NVS memory for Lenovo G40-45 - ACPI: LPSS: Fix missing check in register_device_clock() - PM: hibernate: defer device probing when resuming from hibernation - selinux: Add boundary check in put_entry() - ARM: findbit: fix overflowing offset - ARM: bcm: Fix refcount leak in bcm_kona_smc_init - x86/pmem: Fix platform-device leak in error path - ARM: dts: ast2500-evb: fix board compatible - soc: fsl: guts: machine variable might be unset - cpufreq: zynq: Fix refcount leak in zynq_get_revision - ARM: dts: qcom: pm8841: add required thermal-sensor-cells - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() - thermal/tools/tmon: Include pthread and time headers in tmon.h - dm: return early from dm_pr_call() if DM device is suspended - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function - i2c: Fix a potential use after free - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() - drm: bridge: adv7511: Add check for mipi_dsi_driver_register - media: hdpvr: fix error value returns in hdpvr_read - drm/vc4: dsi: Correct DSI divider calculations - drm/rockchip: vop: Don't crash for invalid duplicate_state() - drm/mediatek: dpi: Remove output format of YUV - drm: bridge: sii8620: fix possible off-by-one - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment - tcp: make retransmitted SKB fit into the send window - selftests: timers: valid-adjtimex: build fix for newer toolchains - selftests: timers: clocksource-switch: fix passing errors from child - fs: check FMODE_LSEEK to control internal pipe splicing - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() - wifi: p54: Fix an error handling path in p54spi_probe() - wifi: p54: add missing parentheses in p54_flush() - can: pch_can: do not report txerr and rxerr during bus-off - can: rcar_can: do not report txerr and rxerr during bus-off - can: sja1000: do not report txerr and rxerr during bus-off - can: hi311x: do not report txerr and rxerr during bus-off - can: sun4i_can: do not report txerr and rxerr during bus-off - can: usb_8dev: do not report txerr and rxerr during bus-off - can: error: specify the values of data[5..7] of CAN error frames - can: pch_can: pch_can_error(): initialize errc before using it - Bluetooth: hci_intel: Add check for platform_driver_register - i2c: cadence: Support PEC for SMBus block read - i2c: mux-gpmux: Add of_node_put() when breaking out of loop - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` - wifi: libertas: Fix possible refcount leak in if_usb_probe() - net: rose: fix netdev reference changes - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock - mtd: maps: Fix refcount leak in of_flash_probe_versatile - mtd: maps: Fix refcount leak in ap_flash_init - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path - fpga: altera-pr-ip: fix unsigned comparison with less than zero - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe - misc: rtsx: Fix an error handling path in rtsx_pci_probe() - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch - memstick/ms_block: Fix some incorrect memory allocation - memstick/ms_block: Fix a memory leak - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R - scsi: smartpqi: Fix DMA direction for RAID requests - usb: gadget: udc: amd5536 depends on HAS_DMA - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() - mmc: cavium-octeon: Add of_node_put() when breaking out of loop - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop - USB: serial: fix tty-port initialized comments - platform/olpc: Fix uninitialized data in debugfs write - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region - RDMA/rxe: Fix error unwind in rxe_create_qp() - ext4: recover csum seed of tmp_inode after migrating to extents - jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe - ASoC: codecs: da7210: add check for i2c_add_driver - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe - profiling: fix shift too large makes kernel panic - tty: n_gsm: fix non flow control frames during mux flow off - tty: n_gsm: fix packet re-transmission without open control channel - tty: n_gsm: fix race condition in gsmld_write() - remoteproc: qcom: wcnss: Fix handling of IRQs - vfio/ccw: Do not change FSM state in subchannel event - tty: n_gsm: fix wrong T1 retry count handling - tty: n_gsm: fix DM command - iommu/exynos: Handle failed IOMMU device registration properly - kfifo: fix kfifo_to_user() return type - mfd: t7l66xb: Drop platform disable callback - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop - s390/zcore: fix race when reading from hardware system area - video: fbdev: amba-clcd: Fix refcount leak bugs - video: fbdev: sis: fix typos in SiS_GetModeID() - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader - powerpc/xive: Fix refcount leak in xive_get_max_prio - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address - kprobes: Forbid probing on trampoline and BPF code areas - powerpc/pci: Fix PHB numbering when using opal-phbid - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO - x86/numa: Use cpumask_available instead of hardcoded NULL check - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() - tools/thermal: Fix possible path truncations - video: fbdev: vt8623fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: s3fb: Check the size of screen before memset_io() - scsi: zfcp: Fix missing auto port scan and thus missing target ports - x86/olpc: fix 'logical not is only applied to the left hand side' - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h - ext4: make sure ext4_append() always allocates new block - ext4: fix use-after-free in ext4_xattr_set_entry - ext4: update s_overhead_clusters in the superblock during an on-line resize - ext4: fix extent status tree race in writeback error recovery path - ext4: correct max_inline_xattr_value_size computing - ext4: correct the misjudgment in ext4_iget_extra_inode - intel_th: pci: Add Raptor Lake-S CPU support - intel_th: pci: Add Raptor Lake-S PCH support - intel_th: pci: Add Meteor Lake-P support - dm raid: fix address sanitizer warning in raid_resume - dm raid: fix address sanitizer warning in raid_status - btrfs: reject log replay if there is unsupported RO compat flag - KVM: Add infrastructure and macro to mark VM as bugged - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() - tcp: fix over estimation in sk_forced_mem_schedule() - scsi: sg: Allow waiting for commands to complete on removed device - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - net/9p: Initialize the iounit field during fid creation - net_sched: cls_route: disallow handle of 0 - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E - ALSA: info: Fix llseek return value when using callback - rds: add missing barrier to release_refill - ata: libata-eh: Add missing command name - btrfs: fix lost error handling when looking up extended ref on log replay - can: ems_usb: fix clang's -Wunaligned-access warning - apparmor: fix quiet_denied for file rules - apparmor: Fix failed mount permission check error message - apparmor: fix aa_label_asxprint return check - apparmor: fix reference count leak in aa_pivotroot() - NFSv4: Fix races in the legacy idmapper upcall - NFSv4.1: RECLAIM_COMPLETE must handle EACCES - SUNRPC: Reinitialise the backchannel request buffers before reuse - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool - geneve: do not use RT_TOS for IPv6 flowlabel - vsock: Fix memory leak in vsock_connect() - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() - tools build: Switch to new openssl API for test-libcrypto - xen/xenbus: fix return type in xenbus_file_read() - atm: idt77252: fix use-after-free bugs caused by tst_timer - nios2: page fault et.al. are *not* restartable syscalls... - nios2: don't leave NULLs in sys_call_table[] - nios2: traced syscall does need to check the syscall number - nios2: fix syscall restart checks - nios2: restarts apply only to the first sigframe we build... - nios2: add force_successful_syscall_return() - netfilter: nf_tables: really skip inactive sets when allocating name - powerpc/pci: Fix get_phb_number() locking - i40e: Fix to stop tx_timeout recovery if GLOBR fails - fec: Fix timer capture timing in `fec_ptp_enable_pps()` - igb: Add lock to avoid data race - kbuild: clear LDFLAGS in the top Makefile - btrfs: only write the sectors in the vertical stripe which has data stripes - btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() - PCI: Add ACS quirk for Broadcom BCM5750x NICs - irqchip/tegra: Fix overflow implicit truncation warnings - usb: host: ohci-ppc-of: Fix refcount leak bug - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src - gadgetfs: ep_io - wait until IRQ finishes - cxl: Fix a memory leak in an error handling path - drivers:md:fix a potential use-after-free bug - ext4: avoid remove directory when directory is corrupted - ext4: avoid resizing to a partial cluster size - tty: serial: Fix refcount leak bug in ucc_uart.c - vfio: Clear the caps->buf to NULL after free - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start - ALSA: core: Add async signal helpers - ALSA: timer: Use deferred fasync helper - smb3: check xattr value length earlier - powerpc/64: Init jump labels before parse_early_param() - video: fbdev: i740fb: Check the argument of i740_calc_vclk() - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() - media: tw686x: Register the irq at the end of probe - HID: cp2112: prevent a buffer overflow in cp2112_xfer() - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback - HID: alps: Declare U1_UNICORN_LEGACY support - tty: n_gsm: fix missing corner cases in gsmld_poll() - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file * Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - ip: Fix a data-race around sysctl_fwmark_reflect. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_probe_interval. - i2c: cadence: Change large transfer count reset logic to be unconditional - net: stmmac: fix dma queue left shift overflow issue - igmp: Fix data-races around sysctl_igmp_llm_reports. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - be2net: Fix buffer overflow in be_get_module_eeprom - Revert "Revert "char/random: silence a lockdep splat with printk()"" - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - bpf: Make sure mac_header was set before using it - drm/tilcdc: Remove obsolete crtc_mode_valid() hack - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - ALSA: memalloc: Align buffer allocations in page size - Bluetooth: Add bt_skb_sendmsg helper - Bluetooth: Add bt_skb_sendmmsg helper - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg - Bluetooth: Fix passing NULL to PTR_ERR - Bluetooth: SCO: Fix sco_send_frame returning skb->len - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - tty: drivers/tty/, stop using tty_schedule_flip() - tty: the rest, stop using tty_schedule_flip() - tty: drop tty_schedule_flip() - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - PCI: hv: Fix multi-MSI to allow more than one MSI vector - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix interrupt mapping for multi-MSI - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix data-races around sysctl_tcp_max_reordering. - ima: remove the IMA_TEMPLATE Kconfig option - [Config] updateconfigs for IMA_TEMPLATE - s390/archrandom: prevent CPACF trng invocations in interrupt context - tcp: Fix data-races around sysctl_tcp_dsack. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - scsi: ufs: host: Hold reference returned by of_parse_phandle() - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - net: ping6: Fix memleak in ipv6_renew_options(). - igmp: Fix data-races around sysctl_igmp_qrv. - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - Documentation: fix sctp_wmem in ip-sysctl.rst - i40e: Fix interface init with MSI interrupts (no MSI-X) - sctp: fix sleep in atomic context bug in timer handlers - perf symbol: Correct address for bss symbols - scsi: core: Fix race between handling STS_RESOURCE and completion - ACPI: video: Shortening quirk list by identifying Clevo by board_name only * unprivileged users may trigger page cache invalidation WARN (LP: #1989144) - iomap: fix WARN_ON_ONCE() from unprivileged users * Users belonging to video group may trigger a deadlock WARN (LP: #1990690) - SAUCE: fbdev: remove redundant lock_fb_info * ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (LP: #1990985) - ACPI: processor_idle: Skip dummy wait if kernel is in guest - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems * CVE-2022-3028 - af_key: Do not call xfrm_probe_algs in parallel * CVE-2022-2978 - fs: fix UAF/GPF bug in nilfs_mdt_destroy * CVE-2022-40768 - scsi: stex: Properly zero out the passthrough command structure -- Stefan Bader <email address hidden> Tue, 18 Oct 2022 11:40:30 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1138.148) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1138.148 -proposed tracker (LP: #1989933) * Bionic update: upstream stable patchset 2022-09-12 (LP: #1989374) - [Config] snapdragon: Switch RANDOM_TRUST_BOOTLOADER to enabled [ Ubuntu: 4.15.0-194.205 ] * bionic/linux: 4.15.0-194.205 -proposed tracker (LP: #1989935) * Bionic update: upstream stable patchset 2022-09-14 (LP: #1989625) - random: schedule mix_interrupt_randomness() less often - ata: libata: add qc->flags in ata_qc_complete_template tracepoint - dm era: commit metadata in postsuspend after worker stops - random: quiet urandom warning ratelimit suppression message - USB: serial: option: add Telit LE910Cx 0x1250 composition - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Quectel RM500K module support - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - x86/xen: Remove undefined behavior in setup_features() - MIPS: Remove repetitive increase irq_err_count - igb: Make DMA faster when CPU is active on the PCIe link - iio: adc: vf610: fix conversion mode sysfs node name - usb: chipidea: udc: check request status before setting device address - iio:accel:bma180: rearrange iio trigger get and register - iio: accel: mma8452: ignore the return value of reset operation - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: trigger: sysfs: fix use-after-free on remove - iio: adc: axp288: Override TS pin bias current for some models - xtensa: xtfpga: Fix refcount leak bug in setup - xtensa: Fix refcount leak bug in time.c - powerpc: Enable execve syscall exit tracepoint - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address - powerpc/powernv: wire up rng during setup_arch - ARM: dts: imx6qdl: correct PU regulator ramp delay - ARM: exynos: Fix refcount leak in exynos_map_pmu - ARM: Fix refcount leak in axxia_boot_secondary - ARM: cns3xxx: Fix refcount leak in cns3xxx_init - modpost: fix section mismatch check for exported init/exit sections - powerpc/pseries: wire up rng during setup_arch() - drm: remove drm_fb_helper_modinit - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - fdt: Update CRC check for rng-seed - kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] - swiotlb: skip swiotlb_bounce when orig_addr is zero - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - afs: Fix dynamic root getattr - iio:chemical:ccs811: rearrange iio trigger get and register - soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe - nvdimm: Fix badblocks clear off-by-one error - dm raid: fix accesses beyond end of raid member array - dm raid: fix KASAN warning in raid5_add_disks - s390/archrandom: simplify back to earlier design and initialize earlier - SUNRPC: Fix READ_PLUS crasher - net: rose: fix UAF bugs caused by timer handler - net: usb: ax88179_178a: Fix packet receiving - RDMA/qedr: Fix reporting QP timeout attribute - usbnet: fix memory allocation in helpers - net: ipv6: unexport __init-annotated seg6_hmac_net_init() - caif_virtio: fix race between virtio_device_ready() and ndo_open() - netfilter: nft_dynset: restore set element counter when failing to update - net: bonding: fix possible NULL deref in rlb code - net: bonding: fix use-after-free after 802.3ad slave unbind - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value - NFC: nxp-nci: Don't issue a zero length i2c_master_read() - xen/gntdev: Avoid blocking in unmap_grant_pages() - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - sit: use min - ipv6/sit: fix ipip6_tunnel_get_prl return value - net: Rename and export copy_skb_header - xen/blkfront: fix leaking data in shared pages - xen/netfront: fix leaking data in shared pages - xen/netfront: force data bouncing when backend is untrusted - xen/blkfront: force data bouncing when backend is untrusted - xen/arm: Fix race in RB-tree based P2M accounting - net: usb: qmi_wwan: add Telit 0x1060 composition - net: usb: qmi_wwan: add Telit 0x1070 composition - virtio-net: fix race between ndo_open() and virtio_device_ready() - net: tun: unlink NAPI from device on destruction - net: tun: stop NAPI when detaching queues - esp: limit skb_page_frag_refill use to a single page - mm/slub: add missing TID updates on slab deactivation - can: grcan: grcan_probe(): remove extra of_node_get() - can: gs_usb: gs_usb_open/close(): fix memory leak - usbnet: fix memory leak in error case - net: rose: fix UAF bug caused by rose_t0timer_expiry - iommu/vt-d: Fix PCI bus rescan device hot add - video: of_display_timing.h: include errno.h - powerpc/powernv: delay rng platform device creation until later in boot - xfs: remove incorrect ASSERT in xfs_rename - pinctrl: sunxi: a83t: Fix NAND function name for some pins - i2c: cadence: Unregister the clk notifier in error path - ida: don't use BUG_ON() for debugging - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate - ARM: meson: Fix refcount leak in meson_smp_prepare_cpus - dmaengine: pl330: Fix lockdep warning about non-static key - ALSA: hda - Add fixup for Dell Latitidue E5430 - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - ARM: 9213/1: Print message about disabled Spectre workarounds only once - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction - cgroup: Use separate src/dst nodes when preloading css_sets for migration - nilfs2: fix incorrect masking of permission flags for symlinks - net: dsa: bcm_sf2: force pause link settings - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - inetpeer: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - cipso: Fix data-races around sysctl. - icmp: Fix data-races around sysctl. - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - icmp: Fix a data-race around sysctl_icmp_ratelimit. - icmp: Fix a data-race around sysctl_icmp_ratemask. - ipv4: Fix data-races around sysctl_ip_dynaddr. - sfc: fix use after free when disabling sriov - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - sfc: fix kernel panic when creating VF - virtio_mmio: Add missing PM calls to freeze/restore - virtio_mmio: Restore guest page size on resume - netfilter: br_netfilter: do not skip all hooks with 0 priority - cpufreq: pmac32-cpufreq: Fix refcount leak bug - platform/x86: hp-wmi: Ignore Sanitization Mode event - net: tipc: fix possible refcount leak in tipc_sk_create() - NFC: nxp-nci: don't print header length mismatch on i2c error - net: sfp: fix memory leak in sfp_probe() - ASoC: ops: Fix off by one in range control validation - ASoC: wm5110: Fix DRE control - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware - x86: Clear .brk area at early boot - signal handling: don't use BUG_ON() for debugging - USB: serial: ftdi_sio: add Belimo device ids - usb: dwc3: gadget: Fix event pending check - tty: serial: samsung_tty: set dma burst_size to 1 - serial: 8250: fix return error code in serial8250_request_std_resource() - mm: invalidate hwpoison page cache page in fault path - can: m_can: m_can_tx_handler(): fix use after free of skb - ASoC: sgtl5000: Fix noise on shutdown/remove - serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle * Bionic update: upstream stable patchset 2022-09-12 (LP: #1989374) - [Config] dkms-versions -- force wireguard-dkms update - Revert "random: Make getrandom() ready earlier" - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" - crypto: chacha20 - Fix keystream alignment for chacha20_block() - random: always fill buffer in get_random_bytes_wait - random: optimize add_interrupt_randomness - drivers/char/random.c: remove unused dont_count_entropy - random: Fix whitespace pre random-bytes work - random: Return nbytes filled from hw RNG - [Config] updateconfigs for RANDOM_TRUST_CPU, RANDOM_TRUST_BOOTLOADER - random: add a config option to trust the CPU's hwrng - random: remove preempt disabled region - random: Make crng state queryable - random: make CPU trust a boot parameter - drivers/char/random.c: constify poolinfo_table - drivers/char/random.c: remove unused stuct poolinfo::poolbits - drivers/char/random.c: make primary_crng static - random: only read from /dev/random after its pool has received 128 bits - random: move rand_initialize() earlier - random: document get_random_int() family - latent_entropy: avoid build error when plugin cflags are not set - random: fix soft lockup when trying to read from an uninitialized blocking pool - random: Support freezable kthreads in add_hwgenerator_randomness() - fdt: add support for rng-seed - random: Use wait_event_freezable() in add_hwgenerator_randomness() - char/random: Add a newline at the end of the file - Revert "hwrng: core - Freeze khwrng thread during suspend" - crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array() - crypto: blake2s - generic C library implementation and selftest - lib/crypto: blake2s: move hmac construction into wireguard - lib/crypto: sha1: re-roll loops to reduce code size - random: Don't wake crng_init_wait when crng_init == 1 - random: Add a urandom_read_nowait() for random APIs that don't warn - random: add GRND_INSECURE to return best-effort non-cryptographic bytes - random: ignore GRND_RANDOM in getentropy(2) - random: make /dev/random be almost like /dev/urandom - random: fix crash on multiple early calls to add_bootloader_randomness() - random: remove the blocking pool - random: delete code to pull data into pools - random: remove kernel.random.read_wakeup_threshold - random: remove unnecessary unlikely() - random: convert to ENTROPY_BITS for better code readability - random: Add and use pr_fmt() - random: fix typo in add_timer_randomness() - random: remove some dead code of poolinfo - random: split primary/secondary crng init paths - random: avoid warnings for !CONFIG_NUMA builds - x86: Remove arch_has_random, arch_has_random_seed - powerpc: Remove arch_has_random, arch_has_random_seed - s390: Remove arch_has_random, arch_has_random_seed - linux/random.h: Remove arch_has_random, arch_has_random_seed - linux/random.h: Use false with bool - linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check - powerpc: Use bool in archrandom.h - random: add arch_get_random_*long_early() - random: avoid arch_get_random_seed_long() when collecting IRQ randomness - random: remove dead code left over from blocking pool - MAINTAINERS: co-maintain random.c - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> - crypto: blake2s - adjust include guard naming - random: document add_hwgenerator_randomness() with other input functions - random: remove unused irq_flags argument from add_interrupt_randomness() - random: use BLAKE2s instead of SHA1 in extraction - random: do not sign extend bytes for rotation when mixing - random: do not re-init if crng_reseed completes before primary init - random: mix bootloader randomness into pool - random: harmonize "crng init done" messages - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs - random: initialize ChaCha20 constants with correct endianness - random: early initialization of ChaCha constants - random: avoid superfluous call to RDRAND in CRNG extraction - random: don't reset crng_init_cnt on urandom_read() - random: fix typo in comments - random: cleanup poolinfo abstraction - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) - random: cleanup integer types - random: remove incomplete last_data logic - random: remove unused extract_entropy() reserved argument - random: rather than entropy_store abstraction, use global - random: remove unused OUTPUT_POOL constants - random: de-duplicate INPUT_POOL constants - random: prepend remaining pool constants with POOL_ - random: cleanup fractional entropy shift constants - random: access input_pool_data directly rather than through pointer - random: simplify arithmetic function flow in account() - random: continually use hwgenerator randomness - random: access primary_pool directly rather than through pointer - random: only call crng_finalize_init() for primary_crng - random: use computational hash for entropy extraction - random: simplify entropy debiting - random: use linear min-entropy accumulation crediting - random: always wake up entropy writers after extraction - random: make credit_entropy_bits() always safe - random: remove use_input_pool parameter from crng_reseed() - random: remove batched entropy locking - random: fix locking in crng_fast_load() - random: use RDSEED instead of RDRAND in entropy extraction - random: inline leaves of rand_initialize() - random: ensure early RDSEED goes through mixer on init - random: do not xor RDRAND when writing into /dev/random - random: absorb fast pool into input pool after fast load - random: use hash function for crng_slow_load() - random: remove outdated INT_MAX >> 6 check in urandom_read() - random: zero buffer after reading entropy from userspace - random: tie batched entropy generation to base_crng generation - random: remove ifdef'd out interrupt bench - random: remove unused tracepoints - random: add proper SPDX header - random: deobfuscate irq u32/u64 contributions - random: introduce drain_entropy() helper to declutter crng_reseed() - random: remove useless header comment - random: remove whitespace and reorder includes - random: group initialization wait functions - random: group entropy extraction functions - random: group entropy collection functions - random: group userspace read/write functions - random: group sysctl functions - random: rewrite header introductory comment - random: defer fast pool mixing to worker - random: do not take pool spinlock at boot - random: unify early init crng load accounting - random: check for crng_init == 0 in add_device_randomness() - random: pull add_hwgenerator_randomness() declaration into random.h - random: clear fast pool, crng, and batches in cpuhp bring up - random: round-robin registers as ulong, not u32 - random: only wake up writers after zap if threshold was passed - random: cleanup UUID handling - random: unify cycles_t and jiffies usage and types - random: do crng pre-init loading in worker rather than irq - random: give sysctl_random_min_urandom_seed a more sensible value - random: don't let 644 read-only sysctls be written to - random: replace custom notifier chain with standard one - random: use SipHash as interrupt entropy accumulator - random: make consistent usage of crng_ready() - random: reseed more often immediately after booting - random: check for signal and try earlier when generating entropy - random: skip fast_init if hwrng provides large chunk of entropy - random: treat bootloader trust toggle the same way as cpu trust toggle - random: re-add removed comment about get_random_{u32,u64} reseeding - random: mix build-time latent entropy into pool at init - random: do not split fast init input in add_hwgenerator_randomness() - random: do not allow user to keep crng key around on stack - random: check for signal_pending() outside of need_resched() check - random: check for signals every PAGE_SIZE chunk of /dev/[u]random - random: make random_get_entropy() return an unsigned long - random: document crng_fast_key_erasure() destination possibility - random: fix sysctl documentation nits - init: call time_init() before rand_initialize() - ia64: define get_cycles macro for arch-override - s390: define get_cycles macro for arch-override - parisc: define get_cycles macro for arch-override - alpha: define get_cycles macro for arch-override - powerpc: define get_cycles macro for arch-override - timekeeping: Add raw clock fallback for random_get_entropy() - m68k: use fallback for random_get_entropy() instead of zero - mips: use fallback for random_get_entropy() instead of just c0 random - arm: use fallback for random_get_entropy() instead of zero - nios2: use fallback for random_get_entropy() instead of zero - x86/tsc: Use fallback for random_get_entropy() instead of zero - um: use fallback for random_get_entropy() instead of zero - sparc: use fallback for random_get_entropy() instead of zero - xtensa: use fallback for random_get_entropy() instead of zero - random: insist on random_get_entropy() existing in order to simplify - random: do not use batches when !crng_ready() - random: do not pretend to handle premature next security model - random: order timer entropy functions below interrupt functions - random: do not use input pool from hard IRQs - random: help compiler out with fast_mix() by using simpler arguments - siphash: use one source of truth for siphash permutations - random: use symbolic constants for crng_init states - random: avoid initializing twice in credit race - random: remove ratelimiting for in-kernel unseeded randomness - random: use proper jiffies comparison macro - random: handle latent entropy and command line from random_init() - random: credit architectural init the exact amount - random: use static branch for crng_ready() - random: remove extern from functions in header - random: use proper return types on get_random_{int,long}_wait() - random: move initialization functions out of hot pages - random: move randomize_page() into mm where it belongs - random: convert to using fops->write_iter() - random: wire up fops->splice_{read,write}_iter() - random: check for signals after page of pool writes - Revert "random: use static branch for crng_ready()" - crypto: drbg - add FIPS 140-2 CTRNG for noise source - crypto: drbg - always seeded with SP800-90B compliant noise source - crypto: drbg - prepare for more fine-grained tracking of seeding state - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() - crypto: drbg - always try to free Jitter RNG instance - crypto: drbg - make reseeding from get_random_bytes() synchronous - random: avoid checking crng_ready() twice in random_init() - random: mark bootloader randomness code as __init - random: account for arch randomness in bits - ASoC: cs42l52: Fix TLV scales for mixer controls - ASoC: cs53l30: Correct number of volume levels on SX controls - ASoC: cs42l52: Correct TLV for Bypass Volume - ASoC: cs42l56: Correct typo in minimum level for SX volume controls - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - ASoC: wm8962: Fix suspend while playing music - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: pmcraid: Fix missing resource cleanup in error case - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag - random: credit cpu and bootloader seeds by default - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - i40e: Fix call trace in setup_tx_descriptors - tty: goldfish: Fix free_irq() on remove - misc: atmel-ssc: Fix IRQ check in ssc_probe - net: bgmac: Fix an erroneous kfree() in bgmac_remove() - arm64: ftrace: fix branch range checks - certs/blacklist_hashes.c: fix const confusion in certs blacklist - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init - comedi: vmk80xx: fix expression for tx buffer size - USB: serial: option: add support for Cinterion MV31 with new baseline - USB: serial: io_ti: add Agilent E5805A support - usb: dwc2: Fix memory leak in dwc2_hcd_init - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe - serial: 8250: Store to lsr_save_flags after lsr read - ext4: fix bug_on ext4_mb_use_inode_pa - ext4: make variable "count" signed - ext4: add reserved GDT blocks check - virtio-pci: Remove wrong address verification in vp_del_vqs() - s390/mm: use non-quiescing sske for KVM switch to keyed guest - usb: gadget: u_ether: fix regression in setting fixed MAC address - xprtrdma: fix incorrect header size calculations - tcp: add some entropy in __inet_hash_connect() - tcp: use different parts of the port_offset for index and offset - tcp: add small random increments to the source port - tcp: dynamically allocate the perturb table used by source ports - tcp: increase source port perturb table to 2^16 - tcp: drop the hash_32() part from the index calculation - powerpc/kasan: Silence KASAN warnings in __get_wchan() - ASoC: es8328: Fix event generation for deemphasis control - ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - i40e: Fix adding ADQ filter to TC0 - mlxsw: spectrum_cnt: Reorder counter pools - net: openvswitch: fix misuse of the cached connection on tuple changes - RISC-V: fix barrier() use in <vdso/processor.h> - powerpc/mm: Switch obsolete dssall to .long -- Stefan Bader <email address hidden> Wed, 21 Sep 2022 09:48:20 +0200
Available diffs
linux-snapdragon (4.15.0-1137.147) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1137.147 -proposed tracker (LP: #1987903) [ Ubuntu: 4.15.0-193.204 ] * bionic/linux: 4.15.0-193.204 -proposed tracker (LP: #1987905) * CVE-2022-36946 - netfilter: nf_queue: do not allow packet truncation below transport header offset * CVE-2021-33655 - fbcon: Disallow setting font bigger than screen size - fbcon: Prevent that screen size is smaller than font size - fbmem: Check virtual screen sizes in fb_set_var() -- Stefan Bader <email address hidden> Wed, 31 Aug 2022 10:28:34 +0200
Available diffs
linux-snapdragon (4.15.0-1136.146) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1136.146 -proposed tracker (LP: #1983978) [ Ubuntu: 4.15.0-192.203 ] * bionic/linux: 4.15.0-192.203 -proposed tracker (LP: #1983980) * CVE-2021-33656 - vt: drop old FONT ioctls * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) - binfmt_flat: do not stop relocating GOT entries prematurely on riscv - USB: serial: option: add Quectel BG95 modem - USB: new quirk for Dell Gen 2 devices - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - btrfs: add "0x" prefix for unsupported optional features - btrfs: repair super block num_devices automatically - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - b43legacy: Fix assigning negative value to unsigned variable - b43: Fix assigning negative value to unsigned variable - ipw2x00: Fix potential NULL dereference in libipw_xmit() - ACPICA: Avoid cache flush inside virtual machines - ALSA: jack: Access input_dev under mutex - drm/amd/pm: fix double free in si_parse_power_table() - ath9k: fix QCA9561 PA bias level - media: venus: hfi: avoid null dereference in deinit - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: cx25821: Fix the warning when removing the module - scsi: megaraid: Fix error check return value of register_chrdev() - drm/amd/pm: fix the compile warning - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - ASoC: dapm: Don't fold register value changes into notifications - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - ipmi:ssif: Check for NULL msg when handling events and messages - rtlwifi: Use pr_warn instead of WARN_ONCE - openrisc: start CPU timer early in boot - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - ASoC: rt5645: Fix errorenous cleanup order - net: phy: micrel: Allow probing without .driver_data - media: exynos4-is: Fix compile warning - rxrpc: Return an error to sendmsg if call failed - eth: tg3: silence the GCC 12 array-bounds warning - ARM: dts: ox820: align interrupt controller node name with dtschema - fs: jfs: fix possible NULL pointer dereference in dbFree() - ARM: OMAP1: clock: Fix UART rate reporting algorithm - fat: add ratelimit to fat*_ent_bread() - ARM: versatile: Add missing of_node_put in dcscb_init - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - ARM: hisi: Add missing of_node_put after of_find_compatible_node - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - powerpc/xics: fix refcount leak in icp_opal_init() - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - RDMA/hfi1: Prevent panic when SDMA is disabled - drm: fix EDID struct for old ARM OABI format - ath9k: fix ar9003_get_eepmisc - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - x86/delay: Fix the wrong asm constraint in delay_loop() - drm/mediatek: Fix mtk_cec_mask() - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - NFC: NULL out the dev->rfkill to prevent UAF - efi: Add missing prototype for efi_capsule_setup_info - HID: hid-led: fix maximum brightness for Dream Cheeky - spi: img-spfi: Fix pm_runtime_get_sync() error checking - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - inotify: show inotify mask flags in proc fdinfo - fsnotify: fix wrong lockdep annotations - x86/pm: Fix false positive kmemleak report in msr_build_context() - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - x86: Fix return value of __setup handlers - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - media: uvcvideo: Fix missing check to determine if element is found in list - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - m68k: math-emu: Fix dependencies of math emulation support - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - rxrpc: Fix listen() setting the bar too high for the prealloc rings - rxrpc: Don't try to resend the request if we're receiving the reply - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - drivers/base/node.c: fix compaction sysfs file leak - powerpc/8xx: export 'cpm_setbrg' for modules - powerpc/idle: Fix return value of __setup() handler - powerpc/4xx/cpm: Fix return value of __setup() handler - tty: fix deadlock caused by calling printk() under tty_port->lock - Input: sparcspkr - fix refcount leak in bbc_beep_probe - powerpc/perf: Fix the threshold compare group constraint for power9 - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - mailbox: forward the hrtimer if not queued and under a lock - iommu/mediatek: Add list_del in mtk_iommu_remove - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - iommu/amd: Increase timeout waiting for GA log enablement - perf c2c: Use stdio interface if slang is not supported - perf jevents: Fix event syntax error caused by ExtSel - wifi: mac80211: fix use-after-free in chanctx code - iwlwifi: mvm: fix assert 1F04 upon reconfig - fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages - ext4: fix use-after-free in ext4_rename_dir_prepare - ext4: fix bug_on in ext4_writepages - ext4: verify dir block before splitting it - ext4: avoid cycles in directory h-tree - dlm: fix plock invalid read - dlm: fix missing lkb refcount handling - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - scsi: dc395x: Fix a missing check on list iterator - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - md: fix an incorrect NULL check in does_sb_need_changing - md: fix an incorrect NULL check in md_reload_sb - RDMA/hfi1: Fix potential integer multiplication overflow errors - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - irqchip: irq-xtensa-mx: fix initial IRQ affinity - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - um: chan_user: Fix winch_tramp() return value - um: Fix out-of-bounds read in LDT setup - iommu/msm: Fix an incorrect NULL check on list iterator - nodemask.h: fix compilation error with GCC12 - hugetlb: fix huge_pmd_unshare address update - rtl818x: Prevent using not initialized queues - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - carl9170: tx: fix an incorrect use of list iterator - gma500: fix an incorrect NULL check on list iterator - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - phy: qcom-qmp: fix struct clk leak on probe errors - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - dt-bindings: gpio: altera: correct interrupt-cells - phy: qcom-qmp: fix reset-controller leak on probe errors - RDMA/rxe: Generate a completion for unsupported/invalid opcode - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - staging: greybus: codecs: fix type confusion of list iterator variable - tty: goldfish: Use tty_port_destroy() to destroy port - usb: usbip: fix a refcount leak in stub_probe() - usb: usbip: add missing device lock on tweak configuration cmd - USB: storage: karma: fix rio_karma_init return - pwm: lp3943: Fix duty calculation in case period was clamped - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - soc: rockchip: Fix refcount leak in rockchip_grf_init - rtc: mt6397: check return value after calling platform_get_resource() - serial: meson: acquire port->lock in startup() - serial: digicolor-usart: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: sh-sci: Don't allow CS5-6 - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - modpost: fix removing numeric suffixes - jffs2: fix memory leak in jffs2_do_fill_super - ubi: ubi_create_volume: Fix use-after-free when volume creation failed - tcp: tcp_rtx_synack() can be called from process context - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - tracing: Fix sleeping function called from invalid context on RT kernel - tracing: Avoid adding tracer option before update_tracer_options - i2c: cadence: Increase timeout per message if necessary - m68knommu: set ZERO_PAGE() to the allocated zeroed page - m68knommu: fix undefined reference to `_init_sp' - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - xprtrdma: treat all calls not a bcall when bc_serv is NULL - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net: mdio: unexport __init-annotated mdio_bus_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: ipv6: unexport __init-annotated seg6_hmac_init() - net: altera: Fix refcount leak in altera_tse_mdio_create - drm: imx: fix compiler warning with gcc-12 - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - lkdtm/usercopy: Expand size of "out of frame" object - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - tty: Fix a possible resource leak in icom_probe - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - USB: hcd-pci: Fully suspend across freeze/thaw cycle - usb: dwc2: gadget: don't reset gadget's driver->bus - misc: rtsx: set NULL intfdata when probe fails - extcon: Modify extcon device to be created after driver data is set - clocksource/drivers/sp804: Avoid error on multiple instances - staging: rtl8712: fix uninit-value in r871xu_drv_init() - serial: msm_serial: disable interrupts in __msm_console_write() - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - md: protect md_unregister_thread from reentrancy - drm/radeon: fix a possible null pointer dereference - modpost: fix undefined behavior of is_arm_mapping_symbol() - nbd: call genl_unregister_family() first in nbd_cleanup() - nbd: fix race between nbd_alloc_config() and module removal - nbd: fix io hung while disconnecting device - nodemask: Fix return values to be unsigned - vringh: Fix loop descriptors check in the indirect cases - ALSA: hda/conexant - Fix loopback issue with CX20632 - cifs: return errors during session setup during reconnects - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - ixgbe: fix bcast packets Rx on VF after promisc removal - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag - powerpc/32: Fix overread/overwrite of thread_struct via ptrace - md/raid0: Ignore RAID0 layout if the second zone has only one device - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - PCI: qcom: Fix unbalanced PHY init on probe errors - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - drm/edid: fix invalid EDID extension block filtering - drm/bridge: adv7511: clean up CEC adapter when probe fails - nl80211: show SSID for P2P_GO interfaces - of: overlay: do not break notify on NOTIFY_{OK|STOP} - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - media: vsp1: Fix offset calculation for plane cropping - ext4: reject the 'commit' option on ext2 filesystems - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - crypto: marvell/cesa - ECB does not IV - dax: fix cache flush on PMD-mapped pages - f2fs: fix dereference of stale list iterator after loop body - i2c: at91: use dma safe buffers - dmaengine: stm32-mdma: remove GISR1 register - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - usb: musb: Fix missing of_node_put() in omap2430_probe - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: stm32-usart: Correct CSIZE, bits, and parity - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - nfp: only report pause frame configuration for physical device - af_unix: ensure POLLOUT on remote close() for connected dgram socket - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - ip_gre: test csum_start instead of transport header - Upstream stable to v4.14.284, v4.19.248 -- Zachary Tahenakos <email address hidden> Mon, 15 Aug 2022 12:36:06 -0400
Available diffs
linux-snapdragon (4.15.0-1135.145) bionic; urgency=medium
[ Ubuntu: 4.15.0-191.202 ]
* CVE-2022-2586
- SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
- SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
* CVE-2022-2588
- SAUCE: net_sched: cls_route: remove from list when handle is 0
* CVE-2022-34918
- netfilter: nf_tables: stricter validation of element data
* BUG: kernel NULL pointer dereference, address: 0000000000000008
(LP: #1981658)
- tcp: make sure treq->af_specific is initialized
Available diffs
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1134.144) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1134.144 -proposed tracker (LP: #1981319) * Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) - [Config] snapdragon updateconfigs for NVM, NVM_PBLK [ Ubuntu: 4.15.0-190.201 ] * bionic/linux: 4.15.0-190.201 -proposed tracker (LP: #1981321) * CVE-2022-1679 - SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb * Bionic update: upstream stable patchset 2022-07-06 (LP: #1980879) - MIPS: Use address-of operator on section symbols - block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit - can: grcan: grcan_probe(): fix broken system id check for errata workaround needs - can: grcan: only use the NAPI poll budget for RX - Bluetooth: Fix the creation of hdev->name - mmc: rtsx: add 74 Clocks in power on flow - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls - ALSA: pcm: Fix races among concurrent read/write and buffer changes - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls - ALSA: pcm: Fix races among concurrent prealloc proc writes - ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock - VFS: Fix memory leak caused by concurrently mounting fs with subtype - batman-adv: Don't skb_split skbuffs with frag_list - net: Fix features skip in for_each_netdev_feature() - ipv4: drop dst in multicast routing path - netlink: do not reset transport header in netlink_recvmsg() - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - hwmon: (ltq-cputemp) restrict it to SOC_XWAY - s390/ctcm: fix variable dereferenced before check - s390/ctcm: fix potential memory leak - s390/lcs: fix variable dereferenced before check - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - hwmon: (f71882fg) Fix negative temperature - ASoC: max98090: Reject invalid values in custom control put() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - tcp: resalt the secret every 10 seconds - usb: cdc-wdm: fix reading stuck on device close - USB: serial: pl2303: add device id for HP LM930 Display - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: option: add Fibocom L610 modem - USB: serial: option: add Fibocom MA510 modem - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - ping: fix address binding wrt vrf - tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() - net/sched: act_pedit: really ensure the skb is writable - um: Cleanup syscall_handler_t definition/cast, fix warning - Input: add bounds checking to input_set_capability() - Input: stmfts - fix reference leak in stmfts_input_open - MIPS: lantiq: check the return value of kzalloc() - drbd: remove usage of list iterator variable after loop - ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() - ALSA: wavefront: Proper check of get_user() error - perf: Fix sys_perf_event_open() race against self - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC - mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD - mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch() - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - clk: at91: generated: consider range when calculating best rate - net/qla3xxx: Fix a test in ql_reset_work() - NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc - ARM: 9196/1: spectre-bhb: enable for Cortex-A15 - ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - igb: skip phy status check where unavailable - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - gpio: gpio-vf610: do not touch other bits when set the target bit - gpio: mvebu/pwm: Refuse requests with inverted polarity - perf bench numa: Address compiler error on s390 - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - mac80211: fix rx reordering with non explicit / psmp ack policy - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() - net: atlantic: verify hw_head_ lies within TX buffer ring - swiotlb: fix info leak with DMA_FROM_DEVICE - Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE"" - net: macb: Increment rx bd head after allocating skb and buffer - net/sched: act_pedit: sanitize shift argument before usage - afs: Fix afs_getattr() to refetch file status if callback break occurred - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan() - tcp: change source port randomizarion at connect() time - secure_seq: use the 64 bits of the siphash for port offset calculation - ACPI: sysfs: Make sparse happy about address space in use - Revert "UBUNTU: SAUCE: ACPI: sysfs: copy ACPI data using io memory copying" - ACPI: sysfs: Fix BERT error region memory mapping - net: af_key: check encryption module availability consistency - net: ftgmac100: Disable hardware checksum on AST2600 - drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers - assoc_array: Fix BUG_ON during garbage collect - drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern - exec: Force single empty string when argv is empty - netfilter: conntrack: re-fetch conntrack after insertion - zsmalloc: fix races between asynchronous zspage free and page migration - dm integrity: fix error code in dm_integrity_ctr() - dm crypt: make printing of the key constant-time - dm stats: add cond_resched when looping over entries - dm verity: set DM_TARGET_IMMUTABLE feature flag - tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() - docs: submitting-patches: Fix crossref to 'The canonical patch format' - NFSD: Fix possible sleep during nfsd4_release_lockowner() - bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes * Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) - floppy: disable FDRAWCMD by default - [Config] updateconfigs for BLK_DEV_FD_RAWCMD - hamradio: defer 6pack kfree after unregister_netdev - hamradio: remove needs_free_netdev to avoid UAF - lightnvm: disable the subsystem - [Config] updateconfigs for NVM, NVM_PBLK - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - USB: quirks: add a Realtek card reader - USB: quirks: add STRING quirk for VCOM device - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - xhci: stop polling roothubs after shutdown - iio: dac: ad5592r: Fix the missing return value. - iio: dac: ad5446: Fix read_raw not returning set value - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - usb: misc: fix improper handling of refcount in uss720_probe() - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - serial: 8250: Also set sticky MCR bits in console restoration - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - hex2bin: make the function hex_to_bin constant-time - hex2bin: fix access beyond string end - USB: Fix xhci event ring dequeue pointer ERDP update issue - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - ARM: dts: Fix mmc order for omap3-gta04 - ipvs: correctly print the memory size of ip_vs_conn_tab - mtd: rawnand: Fix return value check of wait_for_completion_timeout - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - pinctrl: pistachio: fix use of irq_of_parse_and_map() - ip_gre: Make o_seqno start from 0 in native mode - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - net: bcmgenet: hide status block before TX timestamping - bnx2x: fix napi API usage sequence - ASoC: wm8731: Disable the regulator when probing fails - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - cifs: destage any unwritten data to the server before calling copychunk_write - drivers: net: hippi: Fix deadlock in rr_close() - x86/cpu: Load microcode during restore_processor_state() - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix malformed counter for out of frame data - tty: n_gsm: fix insufficient txframe size - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix incorrect UA handling - MIPS: Fix CP0 counter erratum detection for R4k CPUs - parisc: Merge model and model name into one line in /proc/cpuinfo - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - firewire: fix potential uaf in outbound_phy_packet_callback() - firewire: remove check of list iterator against head past the loop body - firewire: core: extend card->lock in fw_core_handle_bus_reset - ASoC: wm8958: Fix change notifications for DSP controls - can: grcan: grcan_close(): fix deadlock - can: grcan: use ofdev->dev when allocating DMA memory - nfc: replace improper check device_is_registered() in netlink related functions - NFC: netlink: fix sleep in atomic bug when firmware download timeout - hwmon: (adt7470) Fix warning on module removal - ASoC: dmaengine: Restore NULL prepare_slave_config() callback - net: emaclite: Add error handling for of_address_to_resource() - smsc911x: allow using IRQ0 - btrfs: always log symlinks in full mode - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - net: ipv6: ensure we call ipv6_mc_down() at most once - dm: fix mempool NULL pointer race when completing IO - dm: interlock pending dm_io and dm_wait_for_bios_completion - PCI: aardvark: Clear all MSIs at setup - PCI: aardvark: Fix reading MSI interrupt number - tcp: md5: incorrect tcp_header_len for incoming connections - net: hns3: add validity check for message data length - genirq: Synchronize interrupt thread startup - net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - mm: fix unexpected zeroed page mapping with zram swap * unprivileged tests in test_verifier from ubuntu_bpf failed with "Failed to load prog 'Operation not permitted'" on B-4.15 (LP: #1980648) - selftests/bpf: Count tests skipped by unpriv - selftests/bpf: Only run tests if !bpf_disabled * CVE-2022-1734 - nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs * CVE-2022-1652 - floppy: use a statically allocated error counter -- Zachary Tahenakos <email address hidden> Thu, 21 Jul 2022 14:47:02 -0400
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1133.143) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1133.143 -proposed tracker (LP: #1979523) [ Ubuntu: 4.15.0-189.200 ] * bionic/linux: 4.15.0-189.200 -proposed tracker (LP: #1979525) * linux-image-4.15.0-177-generic freezes on the welcome screen (LP: #1973167) - mfd: intel-lpss: Use MODULE_SOFTDEP() instead of implicit request * Bionic update: upstream stable patchset 2022-06-03 (LP: #1977622) - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead - mm: page_alloc: fix building error on -Werror=array-compare - tracing: Dump stacktrace trigger to the corresponding instance - gfs2: assign rgrp glock before compute_bitstructs - ALSA: usb-audio: Clear MIDI port active flag after draining - tcp: fix race condition when creating child sockets from syncookies - tcp: Fix potential use-after-free due to double kfree() - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - net/packet: fix packet_sock xmit return value checking - netlink: reset network and mac headers in netlink_dump() - ARM: vexpress/spc: Avoid negative array index when !SMP - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - vxlan: fix error return code in vxlan_fdb_append - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - drm/msm/mdp5: check the return of kzalloc() - net: macb: Restart tx only if queue pointer is lagging - stat: fix inconsistency between struct stat and struct compat_stat - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - dma: at_xdmac: fix a missing check on list iterator - powerpc/perf: Fix power9 event alternatives - openvswitch: fix OOB access in reserve_sfa_size() - ASoC: soc-dapm: fix two incorrect uses of list iterator - e1000e: Fix possible overflow in LTR decoding - ARC: entry: fix syscall_trace_exit argument - ext4: fix symlink file size not match to file content - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4: force overhead calculation if the s_overhead_cluster makes no sense - staging: ion: Prevent incorrect reference counting behavour - block/compat_ioctl: fix range check in BLKGETSIZE - ax25: add refcount in ax25_dev to avoid UAF bugs - ax25: fix reference count leaks of ax25_dev - ax25: fix UAF bugs of net_device caused by rebinding operation - ax25: Fix refcount leaks caused by ax25_cb_del() - ax25: fix UAF bug in ax25_send_control() - ax25: fix NPD bug in ax25_disconnect - ax25: Fix NULL pointer dereferences in ax25 timers - ax25: Fix UAF bugs in ax25 timers - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - net/sched: cls_u32: fix possible leak in u32_init_knode() - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) - USB: serial: pl2303: add IBM device IDs - USB: serial: simple: add Nokia phone driver - netdevice: add the case if dev is NULL - virtio_console: break out of buf poll on remove - ethernet: sun: Free the coherent when failing in probing - spi: Fix invalid sgs value - spi: Fix erroneous sgs value with min_t() - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register - fuse: fix pipe buffer lifetime for direct_io - tpm: fix reference counting for struct tpm_chip - block: Add a helper to validate the block size - virtio-blk: Use blk_validate_block_size() to validate block size - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c - coresight: Fix TRCCONFIGR.QE sysfs interface - iio: inkern: apply consumer scale on IIO_VAL_INT cases - iio: inkern: apply consumer scale when no channel scale is available - iio: inkern: make a best effort on offset calculation - clk: uniphier: Fix fixed-rate initialization - Documentation: add link to stable release candidate tree - Documentation: update stable tree link - SUNRPC: avoid race between mod_timer() and del_timer_sync() - NFSD: prevent underflow in nfssvc_decode_writeargs() - pinctrl: samsung: drop pin banks references on error paths - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem - jffs2: fix memory leak in jffs2_do_mount_fs - jffs2: fix memory leak in jffs2_scan_medium - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node - mempolicy: mbind_range() set_policy() after vma_merge() - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands - qed: display VF trust config - qed: validate and restrict untrusted VFs vlan promisc mode - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" - ALSA: cs4236: fix an incorrect NULL check on list iterator - drbd: fix potential silent data corruption - ACPI: properties: Consistently return -ENOENT if there are no more references - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() - video: fbdev: sm712fb: Fix crash in smtcfb_read() - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 - carl9170: fix missing bit-wise or operator for tx_params - thermal: int340x: Increase bitmap size - lib/raid6/test: fix multiple definition linking error - DEC: Limit PMAX memory probing to R3k systems - media: davinci: vpif: fix unbalanced runtime PM get - brcmfmac: firmware: Allocate space for default boardrev in nvram - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio - PCI: pciehp: Clear cmd_busy bit in polling mode - crypto: authenc - Fix sleep in atomic context in decrypt_tail - crypto: mxs-dcp - Fix scatterlist processing - spi: tegra114: Add missing IRQ check in tegra_spi_probe - selftests/x86: Add validity check and allow field splitting - spi: pxa2xx-pci: Balance reference count for PCI DMA device - hwmon: (pmbus) Add mutex to regulator ops - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING - PM: hibernate: fix __setup handler error handling - PM: suspend: fix return value of __setup handler - hwrng: atmel - disable trng on failure path - crypto: vmx - add missing dependencies - ACPI: APEI: fix return value of __setup handlers - crypto: ccp - ccp_dmaengine_unregister release dma channels - hwmon: (pmbus) Add Vin unit off handling - clocksource: acpi_pm: fix return value of __setup handler - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa - perf/core: Fix address filter parser for multiple filters - perf/x86/intel/pt: Fix address filter config for 32-bit kernel - media: coda: Fix missing put_device() call in coda_get_vdoa_data - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() - ARM: dts: qcom: ipq4019: fix sleep clock - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe - media: usb: go7007: s2250-board: fix leak in probe() - ASoC: ti: davinci-i2s: Add check for clk_enable() - ALSA: spi: Add check for clk_enable() - arm64: dts: ns2: Fix spi-cpol and spi-cpha property - arm64: dts: broadcom: Fix sata nodename - printk: fix return value of printk.devkmsg __setup handler - ASoC: mxs-saif: Handle errors for clk_enable - ASoC: atmel_ssc_dai: Handle errors for clk_enable - memory: emif: Add check for setup_interrupts - memory: emif: check the pointer temp in get_device_details() - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe - ASoC: wm8350: Handle error for wm8350_register_irq - ASoC: fsi: Add check for clk_enable - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe - mtd: onenand: Check for error irq - drm/edid: Don't clear formats if using deep color - ath9k_htc: fix uninit value bugs - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe - ray_cs: Check ioremap return value - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports - iwlwifi: Fix -EIO error code that is never returned - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() - scsi: pm8001: Fix abort all task initialization - TOMOYO: fix __setup handlers return values - ext2: correct max file size computing - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return - KVM: x86: Fix emulation in writing cr8 - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() - i2c: xiic: Make bus names unique - power: supply: wm8350-power: Handle error for wm8350_register_irq - power: supply: wm8350-power: Add missing free in free_charger_irq - PCI: Reduce warnings on possible RW1C corruption - powerpc/sysdev: fix incorrect use to determine if list is empty - mfd: mc13xxx: Add check for mc13xxx_irq_request - vxcan: enable local echo for sent CAN frames - MIPS: RB532: fix return value of __setup handler - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init - USB: storage: ums-realtek: fix error code in rts51x_read_mem() - af_netlink: Fix shift out of bounds in group mask calculation - i2c: mux: demux-pinctrl: do not deactivate a master that is not active - tcp: ensure PMTU updates are processed during fastopen - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe - mxser: fix xmit_buf leak in activate when LSR == 0xff - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. - serial: 8250_mid: Balance reference count for PCI DMA device - serial: 8250: Fix race condition in RTS-after-send handling - iio: adc: Add check for devm_request_threaded_irq - clk: qcom: clk-rcg2: Update the frac table for pixel clock - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region - clk: loongson1: Terminate clk_div_table with sentinel element - clk: clps711x: Terminate clk_div_table with sentinel element - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver - NFS: remove unneeded check in decode_devicenotify_args() - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe - tty: hvc: fix return value of __setup handler - kgdboc: fix return value of __setup handler - kgdbts: fix return value of __setup handler - jfs: fix divide error in dbNextAG - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options - xen: fix is_xen_pmu() - net: phy: broadcom: Fix brcm_fet_config_init() - qlcnic: dcb: default to returning -EOPNOTSUPP - net/x25: Fix null-ptr-deref caused by x25_disconnect - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head - lib/test: use after free in register_test_dev_kmod() - selinux: use correct type for context length - loop: use sysfs_emit() in the sysfs xxx show() - Fix incorrect type in assignment of ipv6 port for audit - irqchip/nvic: Release nvic_base upon failure - ACPICA: Avoid walking the ACPI Namespace if it is not there - ACPI/APEI: Limit printable size of BERT table data - PM: core: keep irq flags in device_pm_check_callbacks() - spi: tegra20: Use of_device_get_match_data() - ext4: don't BUG if someone dirty pages without asking ext4 first - ntfs: add sanity check on allocation size - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow - video: fbdev: w100fb: Reset global state - video: fbdev: cirrusfb: check pixclock to avoid divide by zero - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 - ARM: dts: bcm2837: Add the missing L1/L2 cache information - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() - ASoC: soc-core: skip zero num_dai component in searching dai name - media: cx88-mpeg: clear interrupt status register before streaming video - ARM: tegra: tamonten: Fix I2C3 pad setting - ARM: mmp: Fix failure to remove sram device - video: fbdev: sm712fb: Fix crash in smtcfb_write() - media: hdpvr: initialize dev->worker at hdpvr_register_videodev - mmc: host: Return an error when ->enable_sdio_irq() ops is missing - powerpc/lib/sstep: Fix 'sthcx' instruction - powerpc/lib/sstep: Fix build errors with newer binutils - scsi: qla2xxx: Fix warning for missing error code - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() - KVM: Prevent module exit until all VMs are freed - ubifs: rename_whiteout: Fix double free for whiteout_ui->data - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned - ubifs: rename_whiteout: correct old_dir size computing - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path - can: mcba_usb: properly check endpoint type - gfs2: Make sure FITRIM minlen is rounded up to fs block size - pinctrl: pinconf-generic: Print arguments for bias-pull-* - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data - mm/mmap: return 1 from stack_guard_gap __setup() handler - mm/memcontrol: return 1 from cgroup.memory __setup() handler - ubi: fastmap: Return error code if memory allocation fails in add_aeb() - ASoC: topology: Allow TLV control to be either read or write - ARM: dts: spear1340: Update serial node properties - ARM: dts: spear13xx: Update SPI dma properties - openvswitch: Fixed nd target mask field in the flow dump. - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated - ubifs: Rectify space amount budget for mkdir/tmpfile operations - rtc: wm8350: Handle error for wm8350_register_irq - ARM: 9187/1: JIVE: fix return value of __setup handler - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 - ptp: replace snprintf with sysfs_emit - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 - scsi: mvsas: Replace snprintf() with sysfs_emit() - scsi: bfa: Replace snprintf() with sysfs_emit() - power: supply: axp20x_battery: properly report current when discharging - powerpc: Set crashkernel offset to mid of RMA region - PCI: aardvark: Fix support for MSI interrupts - iommu/arm-smmu-v3: fix event handling soft lockup - dm ioctl: prevent potential spectre v1 gadget - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() - scsi: aha152x: Fix aha152x_setup() __setup handler return value - net/smc: correct settings of RMB window update limit - macvtap: advertise link netns via netlink - bnxt_en: Eliminate unintended link toggle during FW reset - MIPS: fix fortify panic when copying asm exception handlers - scsi: libfc: Fix use after free in fc_exch_abts_resp() - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm - xtensa: fix DTC warning unit_address_format - Bluetooth: Fix use after free in hci_send_acl - init/main.c: return 1 from handled __setup() functions - w1: w1_therm: fixes w1_seq for ds28ea00 sensors - SUNRPC/call_alloc: async tasks mustn't block waiting for memory - NFS: swap IO handling is slightly different for O_DIRECT IO - NFS: swap-out must always use STABLE writes. - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() - virtio_console: eliminate anonymous module_init & module_exit - jfs: prevent NULL deref in diFree - parisc: Fix CPU affinity for Lasi, WAX and Dino chips - ipv6: add missing tx timestamping on IPPROTO_RAW - net: add missing SOF_TIMESTAMPING_OPT_ID support - mm: fix race between MADV_FREE reclaim and blkdev direct IO read - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms - drm/imx: Fix memory leak in imx_pd_connector_get_modes - drbd: Fix five use after free bugs in get_initial_state - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) - mm/mempolicy: fix mpol_new leak in shared_policy_replace - x86/pm: Save the MSR validity status at context setup - x86/speculation: Restore speculation related MSRs during S3 resume - btrfs: fix qgroup reserve overflow the qgroup limit - arm64: patch_text: Fixup last cpu should be master - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" - mm: don't skip swap entry even if zap_details specified - arm64: module: remove (NOLOAD) from linker script - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning - cgroup: Use open-time credentials for process migraton perm checks - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv - cgroup: Use open-time cgroup namespace for process migration perm checks - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe - veth: Ensure eth header is in skb's linear part - gpiolib: acpi: use correct format characters - mlxsw: i2c: Fix initialization error flow - nfc: nci: add flush_workqueue to prevent uaf - cifs: potential buffer overflow in handling symlinks - drm/amd: Add USBC connector ID - drm/amdkfd: Check for potential null return of kmalloc_array() - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - scsi: target: tcmu: Fix possible page UAF - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - gpu: ipu-v3: Fix dev_dbg frequency output - scsi: mvsas: Add PCI ID of RocketRaid 2640 - drivers: net: slip: fix NPD bug in sl_tx_timeout() - mm, page_alloc: fix build_zonerefs_node() - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() - gcc-plugins: latent_entropy: use /dev/urandom - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - ARM: davinci: da850-evm: Avoid NULL pointer dereference - smp: Fix offline cpu check in flush_smp_call_function_queue() - i2c: pasemi: Wait for write xfers to finish - xhci: make xhci_handshake timeout for xhci_reset() adjustable - drm/edid: check basic audio support on CEA extension block - ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() - mmc: davinci_mmc: Handle error for clk_enable - drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev - Bluetooth: hci_serdev: call init_rwsem() before p->open() - drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() - hv_balloon: rate-limit "Unhandled message" warning - scsi: qla2xxx: Fix incorrect reporting of task management failure - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback - sctp: Initialize daddr on peeled off socket - testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set [ Ubuntu: 4.15.0-188.199 ] * bionic/linux: 4.15.0-188.199 -proposed tracker (LP: #1978697) * CVE-2022-28388 - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path [ Ubuntu: 4.15.0-187.198 ] * CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166 - x86/cpu: Add Elkhart Lake to Intel family - cpu/speculation: Add prototype for cpu_show_srbds() - x86/cpu: Add Jasper Lake to Intel family - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family - x86/cpu: Add another Alder Lake CPU to the Intel family - Documentation: Add documentation for Processor MMIO Stale Data - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Print SMT warning -- Zachary Tahenakos <email address hidden> Thu, 23 Jun 2022 12:20:56 -0400
Available diffs
linux-snapdragon (4.15.0-1132.142) bionic; urgency=medium
[ Ubuntu: 4.15.0-184.194 ]
* CVE-2022-1966
- netfilter: nf_tables: disallow non-stateful expression in sets earlier
-- Thadeu Lima de Souza Cascardo <email address hidden> Fri, 03 Jun 2022 15:06:28 -0300
Available diffs
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1130.139) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1130.139 -proposed tracker (LP: #1974424) * Bionic update: upstream stable patchset 2022-05-06 (LP: #1972006) - [Config] snapdragon: enable config for ARM64_ERRATUM_1188873 - [Config] snapdragon: enable config for MITIGATE_SPECTRE_BRANCH_HISTORY [ Ubuntu: 4.15.0-182.191 ] * CVE-2022-21499 - SAUCE: debug: Lock down kgdb [ Ubuntu: 4.15.0-181.190 ] * bionic/linux: 4.15.0-181.190 -proposed tracker (LP: #1974426) * Bionic update: upstream stable patchset 2022-05-06 (LP: #1972006) - [Config] updateconfigs for ARM64_ERRATUM_1188873 - arm64: arch_timer: Add workaround for ARM erratum 1188873 - arm64: arch_timer: avoid unused function warning - arm64: Add silicon-errata.txt entry for ARM erratum 1188873 - arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT - arm64: Add part number for Neoverse N1 - arm64: Add part number for Arm Cortex-A77 - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: entry.S: Add ventry overflow sanity checks - arm64: entry: Make the trampoline cleanup optional - arm64: entry: Free up another register on kpti's tramp_exit path - arm64: entry: Move the trampoline data page before the text page - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary - arm64: entry: Don't assume tramp_vectors is the start of the vectors - arm64: entry: Move trampoline macros out of ifdef'd section - arm64: entry: Make the kpti trampoline's kpti sequence optional - Revert "arm64: mmu: add the entry trampolines start/end section markers into sections.h" - arm64: entry: Allow the trampoline text to occupy multiple pages - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations - [Config] updateconfigs for MITIGATE_SPECTRE_BRANCH_HISTORY - arm64: entry: Add vectors that have the bhb mitigation sequences - arm64: entry: Add macro for reading symbol addresses from the trampoline - arm64: Add percpu vectors for EL1 - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - KVM: arm64: Add templates for BHB mitigation sequences - arm64: Mitigate spectre style branch history side channels - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - arm64: add ID_AA64ISAR2_EL1 sys register - arm64: Use the clearbhb instruction in mitigations * issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480) - vsock: remove ratelimit unknown ioctl message * ubuntu_ltp_controllers:cpuset_sched_domains: tests 3,9,11,17,19,25 report incorrect sched domain for cpu#32 (LP: #1951289) - sched/topology: Make sched_init_numa() use a set for the deduplicating sort - sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() - ia64: ensure proper NUMA distance and possible map initialization * CVE-2022-1419 - drm/vgem: Reclassify buffer creation debug message - drm/vgem: Close use-after-free race in vgem_gem_create * CVE-2022-28390 - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - qed: return status of qed_iov_get_link - ethernet: Fix error handling in xemaclite_of_probe - net: ethernet: ti: cpts: Handle error for clk_enable - net: ethernet: lpc_eth: Handle error for clk_enable - ax25: Fix NULL pointer dereference in ax25_kill_by_device - net/mlx5: Fix size field in bufferx_reg struct - NFC: port100: fix use-after-free in port100_send_complete - gpio: ts4900: Do not set DAT and OE together - sctp: fix kernel-infoleak for SCTP sockets - net-sysfs: add check for netdevice being present to speed_show - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - Revert "xen-netback: Check for hotplug-status existence before watching" - tracing: Ensure trace buffer is at least 4096 bytes large - selftests/memfd: clean up mapping in mfd_fail_write - ARM: Spectre-BHB: provide empty stub for non-config - staging: gdm724x: fix use after free in gdm_lte_rx() - virtio: unexport virtio_finalize_features - virtio: acknowledge all features before access - ARM: fix Thumb2 regression with Spectre BHB - ext4: add check to prevent attempting to resize an fs with sparse_super2 - btrfs: unlock newly allocated extent buffer after error - net: phy: DP83822: clear MISR2 register to disable interrupts - sctp: fix the processing for INIT chunk - sctp: fix the processing for INIT_ACK chunk - xfrm: Fix xfrm migrate issues when address family changes - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller - MIPS: smp: fill in sibling and core maps earlier - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready - atm: firestream: check the return value of ioremap() in fs_init() - nl80211: Update bss channel on channel switch for P2P_CLIENT - tcp: make tcp_read_sock() more robust - sfc: extend the locking on mcdi->seqno - kselftest/vm: fix tests build with old libc - fs: sysfs_emit: Remove PAGE_SIZE alignment check - efi: fix return value of __setup handlers - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - atm: eni: Add check for dma_map_single - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - Input: aiptek - properly check endpoint type - perf symbols: Fix symbol size calculation condition - net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: ipv6: fix skb_over_panic in __ip6_append_data - staging: fbtft: fb_st7789v: reset display before initialization - thermal: int340x: fix memory leak in int3400_notify() - llc: fix netdevice reference leaks in llc_ui_bind() - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - drivers: net: xgene: Fix regression in CRC stripping - netfilter: nf_tables: initialize registers in nft_do_chain() - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - crypto: qat - disable registration of algorithms - mac80211: fix potential double free on mesh join - llc: only change llc->dev when bind() succeeds -- Zachary Tahenakos <email address hidden> Fri, 27 May 2022 14:38:04 -0400
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1129.138) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1129.138 -proposed tracker (LP: #1974011) [ Ubuntu: 4.15.0-180.189 ] * bionic/linux: 4.15.0-180.189 -proposed tracker (LP: #1974013) * CVE-2022-29581 - net/sched: cls_u32: fix netns refcount changes in u32_change() * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (LP: #1972740) - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE * ext4: limit length to bitmap_maxbytes (LP: #1972281) - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole -- Zachary Tahenakos <email address hidden> Thu, 19 May 2022 12:31:13 -0400
Available diffs
linux-snapdragon (4.15.0-1127.136) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1127.136 -proposed tracker (LP: #1969081) [ Ubuntu: 4.15.0-177.186 ] * bionic/linux: 4.15.0-177.186 -proposed tracker (LP: #1969083) * Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932) - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel - parisc/unaligned: Fix ldw() and stw() unalignment handlers - sr9700: sanity check for packet length - USB: zaurus: support another broken Zaurus - ping: remove pr_err from ping_lookup - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends - gso: do not skip outer ip header in case of ipip and net_failover - openvswitch: Fix setting ipv6 fields causing hw csum failure - drm/edid: Always set RGB444 - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure - configfs: fix a race in configfs_{,un}register_subsystem() - RDMA/ib_srp: Fix a deadlock - iio: adc: men_z188_adc: Fix a resource leak in an error handling path - ata: pata_hpt37x: disable primary channel on HPT371 - Revert "USB: serial: ch341: add new Product ID for CH341A" - usb: gadget: rndis: add spinlock for rndis response list - tracefs: Set the group ownership in apply_options() not parse_options() - USB: serial: option: add support for DW5829e - USB: serial: option: add Telit LE910R1 compositions - usb: dwc3: gadget: Let the interrupt handler disable bottom halves. - xhci: re-initialize the HC during resume if HCE was set - xhci: Prevent futile URB re-submissions due to incorrect return value. - tty: n_gsm: fix encoding of control signal octet bit DV - tty: n_gsm: fix proper link termination after failed open - Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR" - memblock: use kfree() to release kmalloced memblock regions - fget: clarify and improve __fget_files() implementation - gpio: tegra186: Fix chip_data type confusion - tracing: Have traceon and traceoff trigger honor the instance - mac80211_hwsim: report NOACK frames in tx_status - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work - i2c: bcm2835: Avoid clock stretching timeouts - Input: clear BTN_RIGHT/MIDDLE on buttonpads - cifs: fix double free race when mount fails in cifs_get_root() - dmaengine: shdma: Fix runtime PM imbalance on error - i2c: cadence: allow COMPILE_TEST - i2c: qup: allow COMPILE_TEST - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 - usb: gadget: don't release an existing dev->buf - usb: gadget: clear related members when goto fail - ata: pata_hpt37x: fix PCI clock detection - ALSA: intel_hdmi: Fix reference to PCM buffer address - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min - xfrm: fix MTU regression - netfilter: fix use-after-free in __nf_register_net_hook() - xfrm: enforce validity of offload input flags - netfilter: nf_queue: don't assume sk is full socket - netfilter: nf_queue: fix possible use-after-free - batman-adv: Request iflink once in batadv-on-batadv check - batman-adv: Request iflink once in batadv_get_real_netdevice - batman-adv: Don't expect inter-netns unique iflink indices - net: dcb: flush lingering app table entries for unregistered devices - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server - mac80211: fix forwarded mesh frames AC & queue selection - net: stmmac: fix return value of __setup handler - net: sxgbe: fix return value of __setup handler - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() - efivars: Respect "block" flag in efivar_entry_set_safe() - can: gs_usb: change active_channels's type from atomic_t to u8 - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions - soc: fsl: qe: Check of ioremap return value - net: chelsio: cxgb3: check the return value of pci_find_capability() - nl80211: Handle nla_memdup failures in handle_nan_filter - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume - HID: add mapping for KEY_ALL_APPLICATIONS - memfd: fix F_SEAL_WRITE after shmem huge page allocated - net: dcb: disable softirqs in dcbnl_flush_dev() - hamradio: fix macro redefine warning - arm/arm64: Provide a wrapper for SMCCC 1.1 calls - arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() - ARM: report Spectre v2 status through sysfs - ARM: early traps initialisation - ARM: use LOADADDR() to get load address of sections - [Config] updateconfigs for HARDEN_BRANCH_HISTORY - ARM: Spectre-BHB workaround - ARM: include unprivileged BPF status in Spectre V2 reporting - ARM: fix build error when BPF_SYSCALL is disabled - ARM: fix co-processor register typo - ARM: Do not use NOCROSSREFS directive with ld.lld - ARM: fix build warning in proc-v7-bugs.c - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case - xen/grant-table: add gnttab_try_end_foreign_access() - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status - xen/netfront: don't use gnttab_query_foreign_access() for mapped status - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status - xen/gntalloc: don't use gnttab_query_foreign_access() - xen: remove gnttab_query_foreign_access() - xen/9p: use alloc/free_pages_exact() - xen/gnttab: fix gnttab_end_foreign_access() without page specified - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() * ip6gre driver does not hold device reference (LP: #1968340) - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods * LRMv6: add multi-architecture support (LP: #1968774) - [Packaging] resync dkms-build{,--nvidia-N} * Use kernel-testing repo from launchpad for ADT tests (LP: #1968016) - [Debian] Use kernel-testing repo from launchpad * vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR selector (got 50)) (LP: #1956315) - KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit * Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) - moxart: fix potential use-after-free on remove path - x86/mm, mm/hwpoison: Fix the unmap kernel 1:1 pages check condition - integrity: check the return value of audit_log_start() - ima: Remove ima_policy file before directory - ima: Allow template selection with ima_template[_fmt]= after ima_hash= - mmc: sdhci-of-esdhc: Check for error num after setting mask - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs - NFS: Fix initialisation of nfs_client cl_flags field - NFSD: Clamp WRITE offsets - NFSv4 only print the label when its queried - nfs: nfs4clinet: check the return value of kstrdup() - NFSv4.1: Fix uninitialised variable in devicenotify - NFSv4 remove zero number of fs_locations entries error check - NFSv4 expose nfs_parse_server_name function - scsi: target: iscsi: Make sure the np under each tpg is unique - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() - Revert "net: axienet: Wait for PhyRstCmplt after core reset" - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group - ARM: dts: meson: Fix the UART compatible strings - staging: fbtft: Fix error path in fbtft_driver_module_init() - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect - usb: f_fs: Fix use-after-free for epfile - bonding: pair enable_port with slave_arr_updates - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path - net: do not keep the dst cache when uncloning an skb dst and its metadata - net: fix a memleak when uncloning an skb dst and its metadata - tipc: rate limit warning for received illegal binding update - net: amd-xgbe: disable interrupts during pci removal - vt_ioctl: fix array_index_nospec in vt_setactivate - vt_ioctl: add array_index_nospec to VT_ACTIVATE - n_tty: wake up poll(POLLRDNORM) on receiving data - usb: ulpi: Move of_node_put to ulpi_dev_release - usb: ulpi: Call of_node_put correctly - usb: dwc3: gadget: Prevent core from processing stale TRBs - USB: gadget: validate interface OS descriptor requests - usb: gadget: rndis: check size of RNDIS_MSG_SET command - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 - USB: serial: option: add ZTE MF286D modem - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices - USB: serial: cp210x: add NCR Retail IO box id - USB: serial: cp210x: add CPI Bulk Coin Recycler id - seccomp: Invalidate seccomp mode to catch death failures - hwmon: (dell-smm) Speed up setting of fan speed - perf: Fix list corruption in perf_cgroup_switch() - net: bridge: fix stale eth hdr pointer in br_dev_xmit - Makefile.extrawarn: Move -Wunaligned-access to W=1 - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup - serial: parisc: GSC: fix build when IOSAPIC is not set - parisc: Fix data TLB miss in sba_unmap_sg - parisc: Fix sglist access in ccio-dma.c - btrfs: send: in case of IO error log it - net: ieee802154: at86rf230: Stop leaking skb's - selftests/zram: Skip max_comp_streams interface on newer kernel - selftests/zram01.sh: Fix compression ratio calculation - selftests/zram: Adapt the situation that /dev/zram0 is being used - ax25: improve the incomplete fix to avoid UAF and NPD bugs - vfs: make freeze_super abort when sync_filesystem returns error - quota: make dquot_quota_sync return errors from ->sync_fs - Revert "module, async: async_synchronize_full() on module init iff async is used" - iwlwifi: fix use-after-free - drm/radeon: Fix backlight control on iMac 12,1 - xfrm: Don't accidentally set RTO_ONLINK in decode_session4() - taskstats: Cleanup the use of task->exit_code - vsock: remove vsock from connected table when connect is interrupted by a signal - iwlwifi: pcie: fix locking when "HW not ready" - iwlwifi: pcie: gen2: fix locking when "HW not ready" - net: ieee802154: ca8210: Fix lifs/sifs periods - ping: fix the dif and sdif check in ping_lookup - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit - bonding: fix data-races around agg_select_timer - libsubcmd: Fix use-after-free for realloc(..., 0) - ALSA: hda: Fix regression on forced probe mask option - ALSA: hda: Fix missing codec probe on Shenker Dock 15 - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() - powerpc/lib/sstep: fix 'ptesync' build error - NFS: LOOKUP_DIRECTORY is also ok with symlinks - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() - net: sched: limit TC_ACT_REPEAT loops - dmaengine: sh: rcar-dmac: Check for error num after setting mask - i2c: brcmstb: fix support for DSL and CM variants - mtd: rawnand: brcmnand: Refactored code to introduce helper functions - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW - NFS: Do not report writeback errors in nfs_getattr() - ARM: OMAP2+: hwmod: Add of_node_put() before break - ata: libata-core: Disable TRIM on M88V29 - tracing: Fix tp_printk option related with tp_printk_stop_on_boot - net: usb: qmi_wwan: Add support for Dell DW5829e - net: macb: Align the dma and coherent dma masks - net: dsa: lan9303: fix reset on probe * CVE-2022-27223 - USB: gadget: validate endpoint index for xilinx udc * CVE-2022-26490 - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION * CVE-2021-26401 - x86/speculation: Use generic retpoline by default on AMD - x86/speculation: Update link to AMD speculation whitepaper - x86/speculation: Warn about Spectre v2 LFENCE mitigation - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT * CVE-2022-0001 - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting -- Zachary Tahenakos <email address hidden> Mon, 25 Apr 2022 10:28:51 -0400
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1126.135) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1126.135 -proposed tracker (LP: #1967422) [ Ubuntu: 4.15.0-176.185 ] * bionic/linux: 4.15.0-176.185 -proposed tracker (LP: #1966771) * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) - can: bcm: fix UAF of bcm op - net: bridge: clear bridge's private skb space on xmit - s390/hypfs: include z/VM guests with access control group set - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices - udf: Restore i_lenAlloc when inode expansion fails - udf: Fix NULL ptr deref when converting from inline format - PM: wakeup: simplify the output logic of pm_show_wakelocks() - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments - serial: stm32: fix software flow control transfer - tty: n_gsm: fix SW flow control encoding/handling - tty: Add support for Brainboxes UC cards. - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge - usb: common: ulpi: Fix crash in ulpi_match() - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS - USB: core: Fix hang in usb_kill_urb by adding memory barriers - usb: typec: tcpm: Do not disconnect while receiving VBUS off - net: sfp: ignore disabled SFP node - powerpc/32: Fix boot failure with GCC latent entropy plugin - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() - i40e: Increase delay to 1 s after global EMP reset - i40e: fix unsigned stat widths - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - ipv6_tunnel: Rate limit warning messages - net: fix information leakage in /proc/net/ptype - ping: fix the sk_bound_dev_if match in ping_lookup - ipv4: avoid using shared IP generator for connected sockets - hwmon: (lm90) Reduce maximum conversion rate for G781 - NFSv4: Handle case where the lookup of a directory fails - NFSv4: nfs_atomic_open() can race when looking up a non-regular file - net-procfs: show net devices bound packet types - drm/msm: Fix wrong size calculation - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - ibmvnic: don't spin in tasklet - yam: fix a memory leak in yam_siocdevprivate() - ipv4: raw: lock the socket in raw_bind() - ipv4: tcp: send zero IPID in SYNACK messages - netfilter: nat: remove l4 protocol port rovers - netfilter: nat: limit port clash resolution attempts - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback - net: amd-xgbe: ensure to reset the tx_timer_active flag - net: amd-xgbe: Fix skb data length underflow - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() - af_packet: fix data-race in packet_setsockopt / packet_setsockopt - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - drm/nouveau: fix off by one in BIOS boundary checking - block: bio-integrity: Advance seed correctly for larger interval sizes - RDMA/mlx4: Don't continue event handler after memory allocation failure - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() - spi: bcm-qspi: check for valid cs before applying chip select - spi: mediatek: Avoid NULL pointer crash in interrupt - spi: meson-spicc: add IRQ check in meson_spicc_probe - net: ieee802154: ca8210: Stop leaking skb's - net: ieee802154: Return meaningful error codes from the netlink helpers - net: macsec: Verify that send_sci is on when setting Tx sci explicitly - drm/i915/overlay: Prevent divide by zero bugs in scaling - ASoC: fsl: Add missing error handling in pcm030_fabric_probe - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. - selftests: futex: Use variable MAKE instead of make - rtc: cmos: Evaluate century appropriate - EDAC/altera: Fix deferred probing - EDAC/xgene: Fix deferred probing - ext4: fix error handling in ext4_restore_inline_data() - serial: 8250: of: Fix mapped region size when using reg-offset property - i40e: Fix issue when maximum queues is exceeded - i40e: Fix queues reservation for XDP - ipv6: annotate accesses to fn->fn_sernum - ibmvnic: init ->running_cap_crqs early * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // audit: improve audit queue handling when "audit=1" on cmdline (LP: #1965723) - audit: improve audit queue handling when "audit=1" on cmdline * CVE-2021-43975 - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait * Packaging resync (LP: #1786013) - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5 -- Stefan Bader <email address hidden> Mon, 04 Apr 2022 11:50:41 +0200
Available diffs
linux-snapdragon (4.15.0-1125.134) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1125.134 -proposed tracker (LP: #1966302) [ Ubuntu: 4.15.0-175.184 ] * bionic/linux: 4.15.0-175.184 -proposed tracker (LP: #1966304) * CVE-2022-27666 - esp: Fix possible buffer overflow in ESP transformation [ Ubuntu: 4.15.0-173.182 ] * bionic/linux: 4.15.0-173.182 -proposed tracker (LP: #1965552) * Pick fixup from upstream stable patchset 2022-03-04 to address cert failure with clock jitter test on NUC7i3DNHE (LP: #1964213) - Bluetooth: refactor malicious adv data check -- Stefan Bader <email address hidden> Fri, 25 Mar 2022 10:22:17 +0100
Available diffs
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1124.133) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1124.133 -proposed tracker (LP: #1965411) [ Ubuntu: 4.15.0-174.183 ] * bionic/linux: 4.15.0-174.183 -proposed tracker (LP: #1965413) * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) - can: bcm: fix UAF of bcm op - net: bridge: clear bridge's private skb space on xmit - Bluetooth: refactor malicious adv data check - s390/hypfs: include z/VM guests with access control group set - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices - udf: Restore i_lenAlloc when inode expansion fails - udf: Fix NULL ptr deref when converting from inline format - PM: wakeup: simplify the output logic of pm_show_wakelocks() - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments - serial: stm32: fix software flow control transfer - tty: n_gsm: fix SW flow control encoding/handling - tty: Add support for Brainboxes UC cards. - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge - usb: common: ulpi: Fix crash in ulpi_match() - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS - USB: core: Fix hang in usb_kill_urb by adding memory barriers - usb: typec: tcpm: Do not disconnect while receiving VBUS off - net: sfp: ignore disabled SFP node - powerpc/32: Fix boot failure with GCC latent entropy plugin - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() - i40e: Increase delay to 1 s after global EMP reset - i40e: fix unsigned stat widths - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - ipv6_tunnel: Rate limit warning messages - net: fix information leakage in /proc/net/ptype - ping: fix the sk_bound_dev_if match in ping_lookup - ipv4: avoid using shared IP generator for connected sockets - hwmon: (lm90) Reduce maximum conversion rate for G781 - NFSv4: Handle case where the lookup of a directory fails - NFSv4: nfs_atomic_open() can race when looking up a non-regular file - net-procfs: show net devices bound packet types - drm/msm: Fix wrong size calculation - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - ibmvnic: don't spin in tasklet - yam: fix a memory leak in yam_siocdevprivate() - ipv4: raw: lock the socket in raw_bind() - ipv4: tcp: send zero IPID in SYNACK messages - netfilter: nat: remove l4 protocol port rovers - netfilter: nat: limit port clash resolution attempts - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback - net: amd-xgbe: ensure to reset the tx_timer_active flag - net: amd-xgbe: Fix skb data length underflow - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() - af_packet: fix data-race in packet_setsockopt / packet_setsockopt - audit: improve audit queue handling when "audit=1" on cmdline - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - drm/nouveau: fix off by one in BIOS boundary checking - block: bio-integrity: Advance seed correctly for larger interval sizes - RDMA/mlx4: Don't continue event handler after memory allocation failure - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() - spi: bcm-qspi: check for valid cs before applying chip select - spi: mediatek: Avoid NULL pointer crash in interrupt - spi: meson-spicc: add IRQ check in meson_spicc_probe - net: ieee802154: ca8210: Stop leaking skb's - net: ieee802154: Return meaningful error codes from the netlink helpers - net: macsec: Verify that send_sci is on when setting Tx sci explicitly - drm/i915/overlay: Prevent divide by zero bugs in scaling - ASoC: fsl: Add missing error handling in pcm030_fabric_probe - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. - selftests: futex: Use variable MAKE instead of make - rtc: cmos: Evaluate century appropriate - EDAC/altera: Fix deferred probing - EDAC/xgene: Fix deferred probing - ext4: fix error handling in ext4_restore_inline_data() - serial: 8250: of: Fix mapped region size when using reg-offset property - i40e: Fix issue when maximum queues is exceeded - i40e: Fix queues reservation for XDP - ipv6: annotate accesses to fn->fn_sernum - ibmvnic: init ->running_cap_crqs early * CVE-2021-43975 - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait * Packaging resync (LP: #1786013) - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5 -- Stefan Bader <email address hidden> Wed, 23 Mar 2022 10:01:05 +0100
Available diffs
linux-snapdragon (4.15.0-1123.132) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1123.132 -proposed tracker (LP: #1964238) [ Ubuntu: 4.15.0-172.181 ] * CVE-2022-0847 - lib/iov_iter: initialize "flags" in new pipe_buffer * Bionic update: upstream stable patchset 2022-02-11 (LP: #1960681) - Bluetooth: bfusb: fix division by zero in send path - USB: core: Fix bug in resuming hub's handling of wakeup requests - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} - random: fix data race on crng_node_pool - random: fix data race on crng init time - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() - media: uvcvideo: fix division by zero at stream start - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled - Bluetooth: schedule SCO timeouts with delayed_work - Bluetooth: fix init and cleanup of sco_conn.timeout_work - HID: uhid: Fix worker destroying device without any protection - HID: wacom: Ignore the confidence flag when a touch is removed - HID: wacom: Avoid using stale array indicies to read contact count - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() - rtc: cmos: take rtc_lock while reading from CMOS - media: flexcop-usb: fix control-message timeouts - media: mceusb: fix control-message timeouts - media: em28xx: fix control-message timeouts - media: cpia2: fix control-message timeouts - media: s2255: fix control-message timeouts - media: dib0700: fix undefined behavior in tuner shutdown - media: redrat3: fix control-message timeouts - media: pvrusb2: fix control-message timeouts - media: stk1160: fix control-message timeouts - can: softing_cs: softingcs_probe(): fix memleak on registration failure - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails - clk: bcm-2835: Pick the closest clock rate - clk: bcm-2835: Remove rounding up the dividers - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND - media: em28xx: fix memory leak in em28xx_init_dev - Bluetooth: stop proccessing malicious adv data - media: dmxdev: fix UAF when dvb_register_device() fails - crypto: qce - fix uaf on qce_ahash_register_one - tty: serial: atmel: Check return code of dmaengine_submit() - tty: serial: atmel: Call dma_async_issue_pending() - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released - netfilter: bridge: add support for pppoe filtering - arm64: dts: qcom: msm8916: fix MMC controller aliases - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() - serial: amba-pl011: do not request memory region twice - floppy: Fix hang in watchdog when disk is ejected - media: dib8000: Fix a memleak in dib8000_init() - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() - media: si2157: Fix "warm" tuner state detection - sched/rt: Try to restart rt period timer when rt runtime exceeded - media: dw2102: Fix use after free - media: msi001: fix possible null-ptr-deref in msi001_probe() - usb: ftdi-elan: fix memory leak on device disconnect - x86/mce/inject: Avoid out-of-bounds write when setting flags - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() - ppp: ensure minimum packet size in ppp_write() - fsl/fman: Check for null pointer after calling devm_ioremap - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe - tpm: add request_locality before write TPM_INT_ENABLE - can: softing: softing_startstop(): fix set but not used variable warning - can: xilinx_can: xcan_probe(): check for error irq - pcmcia: fix setting of kthread task states - net: mcs7830: handle usb read errors properly - ext4: avoid trim error on fs with small groups - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls - RDMA/hns: Validate the pkey index - powerpc/prom_init: Fix improper check of prom_getprop() - ALSA: oss: fix compile error when OSS_DEBUG is enabled - char/mwave: Adjust io port register size - scsi: ufs: Fix race conditions related to driver data - RDMA/core: Let ib_find_gid() continue search even after empty entry - dmaengine: pxa/mmp: stop referencing config->slave_id - iommu/iova: Fix race between FQ timeout and teardown - ASoC: samsung: idma: Check of ioremap return value - misc: lattice-ecp3-config: Fix task hung when firmware load failed - mips: lantiq: add support for clk_set_parent() - mips: bcm63xx: add support for clk_set_parent() - RDMA/cxgb4: Set queue pair state when being queried - Bluetooth: Fix debugfs entry leak in hci_register_dev() - fs: dlm: filter user dlm messages for kernel locks - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR - usb: gadget: f_fs: Use stream_open() for endpoint files - HID: apple: Do not reset quirks when the Fn key is not found - media: b2c2: Add missing check in flexcop_pci_isr: - mlxsw: pci: Add shutdown method in PCI driver - drm/bridge: megachips: Ensure both bridges are probed before registration - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use - HSI: core: Fix return freed object in hsi_new_client - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() - usb: uhci: add aspeed ast2600 uhci support - floppy: Add max size check for user space request - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. - media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() - media: m920x: don't use stack on USB reads - iwlwifi: mvm: synchronize with FW after multicast commands - ath10k: Fix tx hanging - net: bonding: debug: avoid printing debug logs when bond is not notifying peers - bpf: Do not WARN in bpf_warn_invalid_xdp_action() - media: igorplugusb: receiver overflow should be reported - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO - arm64: tegra: Adjust length of CCPLEX cluster MMIO region - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream - iwlwifi: fix leaks/bad data after failed firmware load - iwlwifi: remove module loading failure message - um: registers: Rename function names to avoid conflicts and build problems - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions - ACPICA: Utilities: Avoid deleting the same object twice in a row - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 - btrfs: remove BUG_ON() in find_parent_nodes() - btrfs: remove BUG_ON(!eie) in find_parent_nodes - net: mdio: Demote probed message to debug print - mac80211: allow non-standard VHT MCS-10/11 - dm btree: add a defensive bounds check to insert_at() - dm space map common: add bounds check to sm_ll_lookup_bitmap() - net: phy: marvell: configure RGMII delays for 88E1118 - serial: pl010: Drop CR register reset on set_termios - serial: core: Keep mctrl register state and cached copy in sync - parisc: Avoid calling faulthandler_disabled() twice - powerpc/6xx: add missing of_node_put - powerpc/powernv: add missing of_node_put - powerpc/cell: add missing of_node_put - powerpc/btext: add missing of_node_put - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race - i2c: i801: Don't silently correct invalid transfer size - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING - i2c: mpc: Correct I2C reset procedure - w1: Misuse of get_user()/put_user() reported by sparse - ALSA: seq: Set upper limit of processed events - MIPS: OCTEON: add put_device() after of_find_device_by_node() - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters - MIPS: Octeon: Fix build errors using clang - scsi: sr: Don't use GFP_DMA - ASoC: mediatek: mt8173: fix device_node leak - power: bq25890: Enable continuous conversion for ADC at charging - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers - serial: Fix incorrect rs485 polarity on uart open - cputime, cpuacct: Include guest time in user time in cpuacct.stat - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds - ext4: make sure quota gets properly shutdown on error - ext4: set csum seed in tmp inode while migrating to extents - ext4: Fix BUG_ON in ext4_bread when write quota data - ext4: don't use the orphan list when migrating an inode - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() - drm/radeon: fix error handling in radeon_driver_open_kms - firmware: Update Kconfig help text for Google firmware - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization - RDMA/hns: Modify the mapping attribute of doorbell to device - RDMA/rxe: Fix a typo in opcode name - powerpc/cell: Fix clang -Wimplicit-fallthrough warning - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress - net: axienet: Wait for PhyRstCmplt after core reset - net: axienet: fix number of TX ring slots for available check - netns: add schedule point in ops_exit_list() - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() - dmaengine: at_xdmac: Don't start transactions at tx_submit level - dmaengine: at_xdmac: Print debug message after realeasing the lock - dmaengine: at_xdmac: Fix lld view setting - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition - net_sched: restore "mpu xxx" handling - bcmgenet: add WOL IRQ check - scripts/dtc: dtx_diff: remove broken example from help text - lib82596: Fix IRQ check in sni_82596_probe - mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue - gianfar: simplify FCS handling and fix memory leak - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries - firmware: qemu_fw_cfg: fix kobject leak in probe error path - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows - wcn36xx: Release DMA channel descriptor allocations - tty: serial: uartlite: allow 64 bit address - xfrm: fix a small bug in xfrm_sa_len() - mmc: meson-mx-sdio: add IRQ check - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() - staging: greybus: audio: Check null pointer - Bluetooth: hci_bcm: Check for error irq - ASoC: rt5663: Handle device_property_read_u32_array error codes - rpmsg: Only invoke announce_create for rpdev with endpoints - rpmsg: core: Clean up resources on announce_create failure. - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK - rtc: pxa: fix null pointer dereference * CVE-2022-0435 - tipc: improve size validations for received domain records * CVE-2022-0492 - cgroup-v1: Require capabilities to set release_agent * CVE-2021-3506 - f2fs: fix to avoid out-of-bounds memory access * Bionic update: upstream stable patchset 2022-02-01 (LP: #1959709) - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() - tracing: Tag trace_percpu_buffer as a percpu pointer - virtio_pci: Support surprise removal of virtio pci device - ieee802154: atusb: fix uninit value in atusb_set_extended_addr - RDMA/core: Don't infoleak GRH fields - mac80211: initialize variable have_higher_than_11mbit - i40e: fix use-after-free in i40e_sync_filters_subtask() - i40e: Fix incorrect netdev's real number of RX/TX queues - ipv6: Check attribute length for RTA_GATEWAY in multipath route - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc - power: reset: ltc2952: Fix use of floating point literals - rndis_host: support Hytera digital radios - phonet: refcount leak in pep_sock_accep - ipv6: Continue processing multipath route even if gateway attribute is invalid - ipv6: Do cleanup if attribute validation fails in multipath route - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate - net: udp: fix alignment problem in udp4_seq_show() - mISDN: change function names to avoid conflicts - usb: mtu3: fix interval value for intr and isoc * Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) - tee: handle lookup of shm with reference count 0 - platform/x86: apple-gmux: use resource_size() with res - selinux: initialize proto variable in selinux_ip_postroute_compat() - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() - net: usb: pegasus: Do not drop long Ethernet frames - NFC: st21nfca: Fix memory leak in device probe and remove - fsl/fman: Fix missing put_device() call in fman_port_probe - nfc: uapi: use kernel size_t to fix user-space builds - uapi: fix linux/nfc.h userspace compilation errors - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - binder: fix async_free_space accounting for empty parcels - scsi: vmw_pvscsi: Set residual data length conditionally - Input: appletouch - initialize work before device registration - Input: spaceball - fix parsing of movement data packets - net: fix use-after-free in tw_timer_handler - sctp: use call_rcu to free endpoint - Input: i8042 - add deferred probe support - Input: i8042 - enable deferred probe quirk for ASUS UM325UA - i2c: validate user data in compat ioctl - usb: mtu3: set interval of FS intr and isoc endpoint * Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) // HID_ASUS should depend on USB_HID in stable v4.15 backports (LP: #1959762) - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option * Packaging resync (LP: #1786013) - [Packaging] resync getabis -- Stefan Bader <email address hidden> Wed, 09 Mar 2022 15:22:14 +0100
Available diffs
linux-snapdragon (4.15.0-1122.131) bionic; urgency=medium * Disable unprivileged BPF by default (LP: #1961338) - [Config] snapdragon: Enable CONFIG_BPF_UNPRIV_DEFAULT_OFF [ Ubuntu: 4.15.0-171.180 ] * CVE-2022-0001 - cpu/SMT: create and export cpu_smt_possible() - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd - SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE - SAUCE: x86/speculation: Add eIBRS + Retpoline options - SAUCE: Documentation/hw-vuln: Update spectre doc * Disable unprivileged BPF by default (LP: #1961338) - bpf: Add kconfig knob for disabling unpriv bpf by default - [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y [ Ubuntu: 4.15.0-169.177 ] * bionic/linux: 4.15.0-169.177 -proposed tracker (LP: #1959877) * ubuntu_kernel_selftests.ftrace:ftracetest fails with bionic:linux 4.15.0-168.176 on s390x (LP: #1959752) - recordmcount.pl: fix typo in s390 mcount regex -- Stefan Bader <email address hidden> Thu, 03 Mar 2022 14:30:01 +0100
Available diffs
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1121.130) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1121.130 -proposed tracker (LP: #1961297) [ Ubuntu: 4.15.0-170.178 ] * bionic/linux: 4.15.0-170.178 -proposed tracker (LP: #1961299) * Packaging resync (LP: #1786013) - [Packaging] resync getabis * Bionic update: upstream stable patchset 2022-02-11 (LP: #1960681) - Bluetooth: bfusb: fix division by zero in send path - USB: core: Fix bug in resuming hub's handling of wakeup requests - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} - random: fix data race on crng_node_pool - random: fix data race on crng init time - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() - media: uvcvideo: fix division by zero at stream start - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled - Bluetooth: schedule SCO timeouts with delayed_work - Bluetooth: fix init and cleanup of sco_conn.timeout_work - HID: uhid: Fix worker destroying device without any protection - HID: wacom: Ignore the confidence flag when a touch is removed - HID: wacom: Avoid using stale array indicies to read contact count - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() - rtc: cmos: take rtc_lock while reading from CMOS - media: flexcop-usb: fix control-message timeouts - media: mceusb: fix control-message timeouts - media: em28xx: fix control-message timeouts - media: cpia2: fix control-message timeouts - media: s2255: fix control-message timeouts - media: dib0700: fix undefined behavior in tuner shutdown - media: redrat3: fix control-message timeouts - media: pvrusb2: fix control-message timeouts - media: stk1160: fix control-message timeouts - can: softing_cs: softingcs_probe(): fix memleak on registration failure - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails - clk: bcm-2835: Pick the closest clock rate - clk: bcm-2835: Remove rounding up the dividers - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND - media: em28xx: fix memory leak in em28xx_init_dev - Bluetooth: stop proccessing malicious adv data - media: dmxdev: fix UAF when dvb_register_device() fails - crypto: qce - fix uaf on qce_ahash_register_one - tty: serial: atmel: Check return code of dmaengine_submit() - tty: serial: atmel: Call dma_async_issue_pending() - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released - netfilter: bridge: add support for pppoe filtering - arm64: dts: qcom: msm8916: fix MMC controller aliases - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() - serial: amba-pl011: do not request memory region twice - floppy: Fix hang in watchdog when disk is ejected - media: dib8000: Fix a memleak in dib8000_init() - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() - media: si2157: Fix "warm" tuner state detection - sched/rt: Try to restart rt period timer when rt runtime exceeded - media: dw2102: Fix use after free - media: msi001: fix possible null-ptr-deref in msi001_probe() - usb: ftdi-elan: fix memory leak on device disconnect - x86/mce/inject: Avoid out-of-bounds write when setting flags - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() - ppp: ensure minimum packet size in ppp_write() - fsl/fman: Check for null pointer after calling devm_ioremap - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe - tpm: add request_locality before write TPM_INT_ENABLE - can: softing: softing_startstop(): fix set but not used variable warning - can: xilinx_can: xcan_probe(): check for error irq - pcmcia: fix setting of kthread task states - net: mcs7830: handle usb read errors properly - ext4: avoid trim error on fs with small groups - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls - RDMA/hns: Validate the pkey index - powerpc/prom_init: Fix improper check of prom_getprop() - ALSA: oss: fix compile error when OSS_DEBUG is enabled - char/mwave: Adjust io port register size - scsi: ufs: Fix race conditions related to driver data - RDMA/core: Let ib_find_gid() continue search even after empty entry - dmaengine: pxa/mmp: stop referencing config->slave_id - iommu/iova: Fix race between FQ timeout and teardown - ASoC: samsung: idma: Check of ioremap return value - misc: lattice-ecp3-config: Fix task hung when firmware load failed - mips: lantiq: add support for clk_set_parent() - mips: bcm63xx: add support for clk_set_parent() - RDMA/cxgb4: Set queue pair state when being queried - Bluetooth: Fix debugfs entry leak in hci_register_dev() - fs: dlm: filter user dlm messages for kernel locks - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR - usb: gadget: f_fs: Use stream_open() for endpoint files - HID: apple: Do not reset quirks when the Fn key is not found - media: b2c2: Add missing check in flexcop_pci_isr: - mlxsw: pci: Add shutdown method in PCI driver - drm/bridge: megachips: Ensure both bridges are probed before registration - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use - HSI: core: Fix return freed object in hsi_new_client - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() - usb: uhci: add aspeed ast2600 uhci support - floppy: Add max size check for user space request - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. - media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() - media: m920x: don't use stack on USB reads - iwlwifi: mvm: synchronize with FW after multicast commands - ath10k: Fix tx hanging - net: bonding: debug: avoid printing debug logs when bond is not notifying peers - bpf: Do not WARN in bpf_warn_invalid_xdp_action() - media: igorplugusb: receiver overflow should be reported - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO - arm64: tegra: Adjust length of CCPLEX cluster MMIO region - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream - iwlwifi: fix leaks/bad data after failed firmware load - iwlwifi: remove module loading failure message - um: registers: Rename function names to avoid conflicts and build problems - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions - ACPICA: Utilities: Avoid deleting the same object twice in a row - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 - btrfs: remove BUG_ON() in find_parent_nodes() - btrfs: remove BUG_ON(!eie) in find_parent_nodes - net: mdio: Demote probed message to debug print - mac80211: allow non-standard VHT MCS-10/11 - dm btree: add a defensive bounds check to insert_at() - dm space map common: add bounds check to sm_ll_lookup_bitmap() - net: phy: marvell: configure RGMII delays for 88E1118 - serial: pl010: Drop CR register reset on set_termios - serial: core: Keep mctrl register state and cached copy in sync - parisc: Avoid calling faulthandler_disabled() twice - powerpc/6xx: add missing of_node_put - powerpc/powernv: add missing of_node_put - powerpc/cell: add missing of_node_put - powerpc/btext: add missing of_node_put - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race - i2c: i801: Don't silently correct invalid transfer size - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING - i2c: mpc: Correct I2C reset procedure - w1: Misuse of get_user()/put_user() reported by sparse - ALSA: seq: Set upper limit of processed events - MIPS: OCTEON: add put_device() after of_find_device_by_node() - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters - MIPS: Octeon: Fix build errors using clang - scsi: sr: Don't use GFP_DMA - ASoC: mediatek: mt8173: fix device_node leak - power: bq25890: Enable continuous conversion for ADC at charging - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers - serial: Fix incorrect rs485 polarity on uart open - cputime, cpuacct: Include guest time in user time in cpuacct.stat - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds - ext4: make sure quota gets properly shutdown on error - ext4: set csum seed in tmp inode while migrating to extents - ext4: Fix BUG_ON in ext4_bread when write quota data - ext4: don't use the orphan list when migrating an inode - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() - drm/radeon: fix error handling in radeon_driver_open_kms - firmware: Update Kconfig help text for Google firmware - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization - RDMA/hns: Modify the mapping attribute of doorbell to device - RDMA/rxe: Fix a typo in opcode name - powerpc/cell: Fix clang -Wimplicit-fallthrough warning - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress - net: axienet: Wait for PhyRstCmplt after core reset - net: axienet: fix number of TX ring slots for available check - netns: add schedule point in ops_exit_list() - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() - dmaengine: at_xdmac: Don't start transactions at tx_submit level - dmaengine: at_xdmac: Print debug message after realeasing the lock - dmaengine: at_xdmac: Fix lld view setting - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition - net_sched: restore "mpu xxx" handling - bcmgenet: add WOL IRQ check - scripts/dtc: dtx_diff: remove broken example from help text - lib82596: Fix IRQ check in sni_82596_probe - mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue - gianfar: simplify FCS handling and fix memory leak - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries - firmware: qemu_fw_cfg: fix kobject leak in probe error path - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after reboot from Windows - wcn36xx: Release DMA channel descriptor allocations - tty: serial: uartlite: allow 64 bit address - xfrm: fix a small bug in xfrm_sa_len() - mmc: meson-mx-sdio: add IRQ check - netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check() - staging: greybus: audio: Check null pointer - Bluetooth: hci_bcm: Check for error irq - ASoC: rt5663: Handle device_property_read_u32_array error codes - rpmsg: Only invoke announce_create for rpdev with endpoints - rpmsg: core: Clean up resources on announce_create failure. - dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK - rtc: pxa: fix null pointer dereference * CVE-2022-0435 - tipc: improve size validations for received domain records * CVE-2022-0492 - cgroup-v1: Require capabilities to set release_agent * CVE-2021-3506 - f2fs: fix to avoid out-of-bounds memory access * Bionic update: upstream stable patchset 2022-02-01 (LP: #1959709) - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() - tracing: Tag trace_percpu_buffer as a percpu pointer - virtio_pci: Support surprise removal of virtio pci device - ieee802154: atusb: fix uninit value in atusb_set_extended_addr - RDMA/core: Don't infoleak GRH fields - mac80211: initialize variable have_higher_than_11mbit - i40e: fix use-after-free in i40e_sync_filters_subtask() - i40e: Fix incorrect netdev's real number of RX/TX queues - ipv6: Check attribute length for RTA_GATEWAY in multipath route - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc - power: reset: ltc2952: Fix use of floating point literals - rndis_host: support Hytera digital radios - phonet: refcount leak in pep_sock_accep - ipv6: Continue processing multipath route even if gateway attribute is invalid - ipv6: Do cleanup if attribute validation fails in multipath route - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate - net: udp: fix alignment problem in udp4_seq_show() - mISDN: change function names to avoid conflicts - usb: mtu3: fix interval value for intr and isoc * Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) - tee: handle lookup of shm with reference count 0 - platform/x86: apple-gmux: use resource_size() with res - selinux: initialize proto variable in selinux_ip_postroute_compat() - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() - net: usb: pegasus: Do not drop long Ethernet frames - NFC: st21nfca: Fix memory leak in device probe and remove - fsl/fman: Fix missing put_device() call in fman_port_probe - nfc: uapi: use kernel size_t to fix user-space builds - uapi: fix linux/nfc.h userspace compilation errors - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - binder: fix async_free_space accounting for empty parcels - scsi: vmw_pvscsi: Set residual data length conditionally - Input: appletouch - initialize work before device registration - Input: spaceball - fix parsing of movement data packets - net: fix use-after-free in tw_timer_handler - sctp: use call_rcu to free endpoint - Input: i8042 - add deferred probe support - Input: i8042 - enable deferred probe quirk for ASUS UM325UA - i2c: validate user data in compat ioctl - usb: mtu3: set interval of FS intr and isoc endpoint * Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) // HID_ASUS should depend on USB_HID in stable v4.15 backports (LP: #1959762) - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option [ Ubuntu: 4.15.0-169.177 ] * bionic/linux: 4.15.0-169.177 -proposed tracker (LP: #1959877) * ubuntu_kernel_selftests.ftrace:ftracetest fails with bionic:linux 4.15.0-168.176 on s390x (LP: #1959752) - recordmcount.pl: fix typo in s390 mcount regex -- Stefan Bader <email address hidden> Wed, 23 Feb 2022 15:28:51 +0100
Available diffs
linux-snapdragon (4.15.0-1120.129) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1120.129 -proposed tracker (LP: #1959306) [ Ubuntu: 4.15.0-168.176 ] * bionic/linux: 4.15.0-168.176 -proposed tracker (LP: #1959308) * CVE-2022-22942 - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy * Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) - IB/qib: Use struct_size() helper - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - net: usb: lan78xx: add Allied Telesis AT29M2-AF - can: kvaser_usb: get CAN clock frequency from device - HID: holtek: fix mouse probing - spi: change clk_disable_unprepare to clk_unprepare - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() - netfilter: fix regression in looped (broad|multi)cast's MAC handling - qlcnic: potential dereference null pointer of rx_queue->page_ring - net: accept UFOv6 packages in virtio_net_hdr_to_skb - net: skip virtio_net_hdr_set_proto if protocol already set - bonding: fix ad_actor_system option setting to default - fjes: Check for error irq - drivers: net: smc911x: Check for error irq - sfc: falcon: Check null pointer of rx_queue->page_ring - hwmon: (lm90) Fix usage of CONFIG2 register in detect function - ALSA: jack: Check the return value of kstrdup() - ALSA: drivers: opl3: Fix incorrect use of vp->state - Input: atmel_mxt_ts - fix double free in mxt_read_info_block - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() - usb: gadget: u_ether: fix race in setting MAC address in setup phase - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state - hwmon: (lm90) Do not report 'busy' status bit as alarm - ax25: NPD bug when detaching AX25 device - hamradio: defer ax25 kfree after unregister_netdev - hamradio: improve the incomplete fix to avoid NPD - phonet/pep: refuse to enable an unbound pipe - parisc: Correct completer in lws start * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) - nfc: fix segfault in nfc_genl_dump_devices_done - drm/msm/dsi: set default num_data_lanes - net/mlx4_en: Update reported link modes for 1/10G - parisc/agp: Annotate parisc agp init functions with __init - i2c: rk3x: Handle a spurious start completion interrupt flag - net: netlink: af_netlink: Prevent empty skb by adding a check on len. - tracing: Fix a kmemleak false positive in tracing_map - bpf: fix panic due to oob in bpf_prog_test_run_skb - hwmon: (dell-smm) Fix warning on /proc/i8k creation error - mac80211: send ADDBA requests using the tid/queue of the aggregation session - recordmcount.pl: look for jgnop instruction as well as bcrl on s390 - dm btree remove: fix use after free in rebalance_children() - audit: improve robustness of the audit queue handling - nfsd: fix use-after-free due to delegation race - x86: Make ARCH_USE_MEMREMAP_PROT a generic Kconfig symbol - x86/sme: Explicitly map new EFI memmap table as encrypted - ARM: socfpga: dts: fix qspi node compatible - dmaengine: st_fdma: fix MODULE_ALIAS - soc/tegra: fuse: Fix bitwise vs. logical OR warning - igbvf: fix double free in `igbvf_probe` - ixgbe: set X550 MDIO speed before talking to PHY - net/packet: rx_owner_map depends on pg_vec - sit: do not call ipip6_dev_free() from sit_init_net() - USB: gadget: bRequestType is a bitfield, not a enum - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error - PCI/MSI: Mask MSI-X vectors only on success - USB: serial: option: add Telit FN990 compositions - timekeeping: Really make sure wall_to_monotonic isn't positive - libata: if T_LENGTH is zero, dma direction should be DMA_NONE - net: systemport: Add global locking for descriptor lifecycle - firmware: arm_scpi: Fix string overflow in SCPI genpd driver - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name - fuse: annotate lock in fuse_reverse_inval_entry() - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() - net: lan78xx: Avoid unnecessary self assignment - ARM: 8805/2: remove unneeded naked function usage - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO - ARM: 8800/1: use choice for kernel unwinders - [Config] updateconfigs for UNWINDER_ARM - Input: touchscreen - avoid bitwise vs logical OR warning - xen/blkfront: harden blkfront against event channel storms - xen/netfront: harden netfront against event channel storms - xen/console: harden hvc_xen against event channel storms - xen/netback: fix rx queue stall detection - xen/netback: don't queue unlimited number of packages - mac80211: track only QoS data frames for admission control * Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113) - HID: add hid_is_usb() function to make it simpler for USB detection - HID: add USB_HID dependancy to hid-prodikeys - HID: add USB_HID dependancy to hid-chicony - HID: add USB_HID dependancy on some USB HID drivers - HID: wacom: fix problems when device is not a valid USB device - HID: check for valid USB device for many HID drivers - can: sja1000: fix use after free in ems_pcmcia_add_card() - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done - bpf: Fix the off-by-two error in range markings - nfp: Fix memory leak in nfp_cpp_area_cache_add() - seg6: fix the iif in the IPv6 socket control block - IB/hfi1: Correct guard on eager buffer deallocation - mm: bdi: initialize bdi_min_ratio when bdi is unregistered - ALSA: ctl: Fix copy of updated id with element read/write - ALSA: pcm: oss: Fix negative period/buffer sizes - ALSA: pcm: oss: Limit the period size to 16MB - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() - tracefs: Have new files inherit the ownership of their parent - can: pch_can: pch_can_rx_normal: fix use after free - can: m_can: Disable and ignore ELO interrupt - libata: add horkage for ASMedia 1092 - wait: add wake_up_pollfree() - binder: use wake_up_pollfree() - signalfd: use wake_up_pollfree() - tracefs: Set all files to the same group ownership as the mount option - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) - qede: validate non LSO skb length - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero - net: altera: set a couple error code in probe() - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() - net, neigh: clear whole pneigh_entry at alloc time - net/qla3xxx: fix an error code in ql_adapter_up() - USB: gadget: detect too-big endpoint 0 requests - USB: gadget: zero allocate endpoint 0 buffers - usb: core: config: fix validation of wMaxPacketValue entries - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending - usb: core: config: using bit mask instead of individual bits - iio: trigger: Fix reference counting - iio: trigger: stm32-timer: fix MODULE_ALIAS - iio: stk3310: Don't return error code in interrupt handler - iio: mma8452: Fix trigger reference couting - iio: ltr501: Don't return error code in trigger handler - iio: kxsd9: Don't return error code in trigger handler - iio: itg3200: Call iio_trigger_notify_done() on error - iio: dln2-adc: Fix lockdep complaint - iio: dln2: Check return value of devm_iio_trigger_register() - iio: adc: axp20x_adc: fix charging current reporting on AXP22x - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL - irqchip: nvic: Fix offset for Interrupt Priority Offsets - bonding: make tx_rebalance_counter an atomic * Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) - USB: serial: option: add Telit LE910S1 0x9200 composition - USB: serial: option: add Fibocom FM101-GL variants - usb: hub: Fix usb enumeration issue due to address0 race - usb: hub: Fix locking issues with address0_mutex - binder: fix test regression due to sender_euid change - ALSA: ctxfi: Fix out-of-range access - media: cec: copy sequence field for the reply - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - fuse: fix page stealing - xen: don't continue xenstore initialization in case of errors - xen: detect uninitialized xenbus in xenbus_init - tracing: Fix pid filtering when triggers are attached - netfilter: ipvs: Fix reuse connection if RS weight is 0 - ARM: dts: BCM5301X: Fix I2C controller interrupt - ARM: dts: BCM5301X: Add interrupt properties to GPIO node - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls - net: ieee802154: handle iftypes as u32 - NFSv42: Don't fail clone() unless the OP_CLONE operation failed - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE - scsi: mpt3sas: Fix kernel panic during drive powercycle test - drm/vc4: fix error code in vc4_create_object() - ipv6: fix typos in __ip6_finish_output() - net/smc: Ensure the active closing peer first closes clcsock - PM: hibernate: use correct mode for swsusp_close() - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 - net/smc: Don't call clcsock shutdown twice when smc shutdown - vhost/vsock: fix incorrect used length reported to the guest - tracing: Check pid filtering when creating events - s390/mm: validate VMA in PGSTE manipulation functions - PCI: aardvark: Fix a leaked reference by adding missing of_node_put() - PCI: aardvark: Wait for endpoint to be ready before training link - PCI: aardvark: Train link immediately after enabling training - PCI: aardvark: Improve link training - PCI: aardvark: Issue PERST via GPIO - PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros - PCI: aardvark: Indicate error in 'val' when config read fails - PCI: aardvark: Introduce an advk_pcie_valid_device() helper - PCI: aardvark: Don't touch PCIe registers if no card connected - PCI: aardvark: Fix compilation on s390 - PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() - PCI: aardvark: Update comment about disabling link training - PCI: aardvark: Remove PCIe outbound window configuration - PCI: aardvark: Configure PCIe resources from 'ranges' DT property - PCI: aardvark: Fix PCIe Max Payload Size setting - PCI: Add PCI_EXP_LNKCTL2_TLS* macros - PCI: aardvark: Fix link training - PCI: aardvark: Fix checking for link up via LTSSM state - pinctrl: armada-37xx: Correct mpp definitions - pinctrl: armada-37xx: add missing pin: PCIe1 Wakeup - pinctrl: armada-37xx: Correct PWM pins definitions - arm64: dts: marvell: armada-37xx: declare PCIe reset pin - arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function - proc/vmcore: fix clearing user buffer by properly using clear_user() - NFC: add NCI_UNREG flag to eliminate the race - fuse: release pipe buf after last use - xen: sync include/xen/interface/io/ring.h with Xen's newest version - xen/blkfront: read response from backend only once - xen/blkfront: don't take local copy of a request from the ring page - xen/blkfront: don't trust the backend response data blindly - xen/netfront: read response from backend only once - xen/netfront: don't read data from request on the ring page - xen/netfront: disentangle tx_skb_freelist - xen/netfront: don't trust the backend response data blindly - tty: hvc: replace BUG_ON() with negative return value - shm: extend forced shm destroy to support objects from several IPC nses - ipc: WARN if trying to remove ipc object which is absent - NFSv42: Fix pagecache invalidation after COPY/CLONE - hugetlb: take PMD sharing into account when flushing tlb/caches - net: return correct error code - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep - s390/setup: avoid using memblock_enforce_memory_limit - btrfs: check-integrity: fix a warning on write caching disabled disk - thermal: core: Reset previous low and high trip during thermal zone init - scsi: iscsi: Unblock session then wake up error handler - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound - net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() - perf hist: Fix memory leak of a perf_hpp_fmt - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit - kprobes: Limit max data_size of the kretprobe instances - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl - natsemi: xtensa: fix section mismatch warnings - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() - net: mpls: Fix notifications when deleting a device - siphash: use _unaligned version by default - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available - net/rds: correct socket tunable error in rds_tcp_tune() - net/smc: Keep smc_close_final rc during active close - parisc: Fix KBUILD_IMAGE for self-extracting kernel - parisc: Fix "make install" on newer debian releases - vgacon: Propagate console boot parameters before calling `vc_resize' - xhci: Fix commad ring abort, write all 64 bits to CRCR register. - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect - x86/64/mm: Map all kernel memory into trampoline_pgd - tty: serial: msm_serial: Deactivate RX DMA for polling support - serial: pl011: Add ACPI SBSA UART match id - serial: core: fix transmit-buffer reset and memleak - parisc: Mark cr16 CPU clocksource unstable on all SMP machines - xtensa: use CONFIG_USE_OF instead of CONFIG_OF - net: hns3: fix VF RSS failed problem after PF enable multi-TCs - i2c: stm32f7: recover the bus on access timeout - net: annotate data-races on txq->xmit_lock_owner * CVE-2022-0330 - drm/i915: Flush TLBs before releasing backing store * CVE-2021-4083 - fs: add fget_many() and fput_many() - fget: check that the fd still exists after getting a ref to it * CVE-2021-4155 - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate -- Stefan Bader <email address hidden> Tue, 01 Feb 2022 16:39:14 +0100
Available diffs
linux-snapdragon (4.15.0-1119.128) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1119.128 -proposed tracker (LP: #1955274) [ Ubuntu: 4.15.0-167.175 ] * bionic/linux: 4.15.0-167.175 -proposed tracker (LP: #1955276) * hisi_sas driver may oops in prep_ssp_v3_hw() (LP: #1953386) - scsi: hisi_sas: Fix to only call scsi_get_prot_op() for non-NULL scsi_cmnd * Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703) - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay - binder: use euid from cred instead of using task - Input: elantench - fix misreporting trackpoint coordinates - Input: i8042 - Add quirk for Fujitsu Lifebook T725 - libata: fix read log timeout value - ocfs2: fix data corruption on truncate - mmc: dw_mmc: Dont wait for DRTO on Write RSP error - parisc: Fix ptrace check on syscall return - tpm: Check for integer overflow in tpm2_map_response_body() - media: ite-cir: IR receiver stop working after receive overflow - ALSA: ua101: fix division by zero at probe - ALSA: 6fire: fix control and bulk message timeouts - ALSA: line6: fix control and interrupt message timeouts - ALSA: synth: missing check for possible NULL after the call to kstrdup - ALSA: timer: Fix use-after-free problem - ALSA: timer: Unconditionally unlink slave instances, too - x86/irq: Ensure PI wakeup handler is unregistered before module unload - cavium: Return negative value when pci_alloc_irq_vectors() fails - scsi: qla2xxx: Fix unmap of already freed sgl - cavium: Fix return values of the probe function - sfc: Don't use netif_info before net_device setup - hyperv/vmbus: include linux/bitops.h - mmc: winbond: don't build on M68K - bpf: Prevent increasing bpf_jit_limit above max - xen/netfront: stop tx queues during live migration - spi: spl022: fix Microwire full duplex mode - watchdog: Fix OMAP watchdog early handling - vmxnet3: do not stop tx queues after netif_device_detach() - btrfs: fix lost error handling when replaying directory deletes - hwmon: (pmbus/lm25066) Add offset coefficients - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default- dvs-idx property - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell - mwifiex: fix division by zero in fw download path - ath6kl: fix division by zero in send path - ath6kl: fix control-message timeout - ath10k: fix control-message timeout - ath10k: fix division by zero in send path - PCI: Mark Atheros QCA6174 to avoid bus reset - rtl8187: fix control-message timeouts - evm: mark evm_fixmode as __ro_after_init - wcn36xx: Fix HT40 capability for 2Ghz band - mwifiex: Read a PCI register after writing the TX ring write pointer - libata: fix checking of DMA state - wcn36xx: handle connection loss indication - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP - signal: Remove the bogus sigkill_pending in ptrace_stop - signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold - power: supply: max17042_battery: use VFSOC for capacity when no rsns - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found - serial: core: Fix initializing and restoring termios speed - ALSA: mixer: oss: Fix racy access to slots - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume - xen/balloon: add late_initcall_sync() for initial ballooning done - PCI: aardvark: Do not clear status bits of masked interrupts - PCI: aardvark: Do not unmask unused interrupts - PCI: aardvark: Fix return value of MSI domain .alloc() method - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG - quota: check block number when reading the block in quota file - quota: correct error number in free_dqentry() - pinctrl: core: fix possible memory leak in pinctrl_enable() - iio: dac: ad5446: Fix ad5622_write() return value - USB: serial: keyspan: fix memleak on probe errors - USB: iowarrior: fix control-message timeouts - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() - Bluetooth: fix use-after-free error in lock_sock_nested() - platform/x86: wmi: do not fail if disabling fails - MIPS: lantiq: dma: add small delay after reset - MIPS: lantiq: dma: reset correct number of channel - locking/lockdep: Avoid RCU-induced noinstr fail - smackfs: Fix use-after-free in netlbl_catmap_walk() - x86: Increase exception stack sizes - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type - mwifiex: Properly initialize private structure on interface type changes - media: mt9p031: Fix corrupted frame after restarting stream - media: netup_unidvb: handle interrupt properly according to the firmware - media: uvcvideo: Set capability in s_param - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() - media: s5p-mfc: Add checking to s5p_mfc_probe(). - media: mceusb: return without resubmitting URB in case of -EPROTO error. - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK - ACPICA: Avoid evaluating methods too early during system resume - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() - tracefs: Have tracefs directories not set OTH permission bits by default - ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() - ACPI: battery: Accept charges over the design capacity as full - leaking_addresses: Always print a trailing newline - memstick: r592: Fix a UAF bug when removing the driver - lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression - lib/xz: Validate the value before assigning it to an enum variable - tracing/cfi: Fix cmp_entries_* functions signature mismatch - mwl8k: Fix use-after-free in mwl8k_fw_state_machine() - PM: hibernate: Get block device exclusively in swsusp_check() - iwlwifi: mvm: disable RX-diversity in powersave - smackfs: use __GFP_NOFAIL for smk_cipso_doi() - ARM: clang: Do not rely on lr register for stacktrace - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() - parisc: fix warning in flush_tlb_all - task_stack: Fix end_of_stack() for architectures with upwards-growing stack - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling - cgroup: Make rebind_subsystems() disable v2 controllers all at once - media: dvb-usb: fix ununit-value in az6027_rc_query - media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' - media: si470x: Avoid card name truncation - media: cx23885: Fix snd_card_free call on null card pointer - cpuidle: Fix kobject memory leaks in error paths - ath9k: Fix potential interrupt storm on queue reset - crypto: qat - detect PFVF collision after ACK - crypto: qat - disregard spurious PFVF interrupts - hwrng: mtk - Force runtime pm ops for sleep ops - b43legacy: fix a lower bounds test - b43: fix a lower bounds test - memstick: avoid out-of-range warning - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() - hwmon: Fix possible memleak in __hwmon_device_register() - ath10k: fix max antenna gain unit - drm/msm: uninitialized variable in msm_gem_import() - net: stream: don't purge sk_error_queue in sk_stream_kill_queues() - mmc: mxs-mmc: disable regulator on error and in the remove function - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning - mwifiex: Send DELBA requests according to spec - phy: micrel: ksz8041nl: do not use power down mode - PM: hibernate: fix sparse warnings - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() - irq: mips: avoid nested irq_enter() - samples/kretprobes: Fix return value if register_kretprobe() failed - libertas_tf: Fix possible memory leak in probe and disconnect - libertas: Fix possible memory leak in probe and disconnect - net: amd-xgbe: Toggle PLL settings during rate change - net: phylink: avoid mvneta warning when setting pause parameters - crypto: pcrypt - Delay write to padata->info - ibmvnic: Process crqs after enabling interrupts - RDMA/rxe: Fix wrong port_cap_flags - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() - ARM: dts: at91: tse850: the emac<->phy interface is rmii - scsi: dc395: Fix error case unwinding - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT - JFS: fix memleak in jfs_mount - ALSA: hda: Reduce udelay() at SKL+ position reporting - arm: dts: omap3-gta04a4: accelerometer irq fix - soc/tegra: Fix an error handling path in tegra_powergate_power_up() - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe - video: fbdev: chipsfb: use memset_io() instead of memset() - serial: 8250_dw: Drop wrong use of ACPI_PTR() - usb: gadget: hid: fix error code in do_config() - power: supply: rt5033_battery: Change voltage values to µV - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() - RDMA/mlx4: Return missed an error if device doesn't support steering - ASoC: cs42l42: Correct some register default values - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER - serial: xilinx_uartps: Fix race condition causing stuck TX - mips: cm: Convert to bitfield API to fix out-of-bounds access - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error - apparmor: fix error check - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds - drm/plane-helper: fix uninitialized variable reference - PCI: aardvark: Don't spam about PIO Response Status - NFS: Fix deadlocks in nfs_scan_commit_list() - fs: orangefs: fix error return code of orangefs_revalidate_lookup() - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string - auxdisplay: ht16k33: Connect backlight to fbdev - auxdisplay: ht16k33: Fix frame buffer device blanking - netfilter: nfnetlink_queue: fix OOB when mac header was cleared - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` - m68k: set a default value for MEMORY_RESERVE - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT - ar7: fix kernel builds for compiler test - scsi: qla2xxx: Turn off target reset during issue_lip - i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' - xen-pciback: Fix return in pm_ctrl_init() - net: davinci_emac: Fix interrupt pacing disable - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() - llc: fix out-of-bound array index in llc_sk_dev_hash() - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails - vsock: prevent unnecessary refcnt inc for nonblocking connect - USB: chipidea: fix interrupt deadlock - ARM: 9155/1: fix early early_iounmap() - ARM: 9156/1: drop cc-option fallbacks for architecture selection - powerpc/lib: Add helper to check if offset is within conditional branch range - powerpc/bpf: Validate branch ranges - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks - mm, oom: do not trigger out_of_memory from the #PF - s390/cio: check the subchannel validity for dev_busid - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros - ext4: fix lazy initialization next schedule time computation in more granular unit - tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT - parisc/entry: fix trace test in syscall exit path - PCI/MSI: Destroy sysfs before freeing entries - arm64: zynqmp: Fix serial compatible string - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() - usb: musb: tusb6010: check return value after calling platform_get_resource() - scsi: advansys: Fix kernel pointer leak - ARM: dts: omap: fix gpmc,mux-add-data type - usb: host: ohci-tmio: check return value after calling platform_get_resource() - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc - MIPS: sni: Fix the build - scsi: target: Fix ordered tag handling - scsi: target: Fix alua_tg_pt_gps_count tracking - powerpc/5200: dts: fix memory node unit name - ALSA: gus: fix null pointer dereference on pointer block - powerpc/dcr: Use cmplwi instead of 3-argument cmpli - sh: check return code of request_irq - maple: fix wrong return value of maple_bus_init(). - sh: fix kconfig unmet dependency warning for FRAME_POINTER - sh: define __BIG_ENDIAN for math-emu - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() - net: bnx2x: fix variable dereferenced before check - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset - MIPS: generic/yamon-dt: fix uninitialized variable error - mips: bcm63xx: add support for clk_get_parent() - mips: lantiq: add support for clk_get_parent() - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' - net: virtio_net_hdr_to_skb: count transport header in UFO - i40e: Fix NULL ptr dereference on VSI filter sync - NFC: reorganize the functions in nci_request - NFC: reorder the logic in nfc_{un,}register_device - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server - tun: fix bonding active backup with arp monitoring - hexagon: export raw I/O routines for modules - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag - btrfs: fix memory ordering between normal and ordered work functions - parisc/sticon: fix reverse colors - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type - drm/udl: fix control-message timeout - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors - perf/core: Avoid put_page() when GUP fails - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN - batman-adv: Consider fragmentation for needed_headroom - batman-adv: Reserve needed_*room for fragments - batman-adv: Don't always reallocate the fragmentation skb head - RDMA/netlink: Add __maybe_unused to static inline in C file - ASoC: DAPM: Cover regression by kctl change notification fix - usb: max-3421: Use driver data instead of maintaining a list of bound devices - soc/tegra: pmc: Fix imbalanced clock disabling in error code path - crypto: s5p-sss - Add error handling in s5p_aes_probe() - ia64: kprobes: Fix to pass correct trampoline address to the handler - rsi: fix key enabled check causing unwanted encryption for vap_id > 0 - rsi: fix rate mask set leading to P2P failure - mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() - wcn36xx: add proper DMA memory barriers in rx path - s390/tape: fix timer initialization in tape_std_assign() - fuse: truncate pagecache on atomic_o_trunc - f2fs: fix up f2fs_lookup tracepoints - iavf: check for null in iavf_fix_features - i40e: Fix correct max_pkt_size on VF RX queue - i40e: Fix changing previously set num_queue_pairs for PFs - i40e: Fix display error code in dmesg * Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) - ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned - ARM: 9134/1: remove duplicate memcpy() definition - ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype - ARM: 8819/1: Remove '-p' from LDFLAGS - usbnet: sanity check for maxpacket - usbnet: fix error return code in usbnet_probe() - ata: sata_mv: Fix the error handling of mv_chip_id() - nfc: port100: fix using -ERRNO as command type mask - ipv4: use siphash instead of Jenkins in fnhe_hashfun() - mmc: vub300: fix control-message timeouts - mmc: dw_mmc: exynos: fix the finding clock sample value - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit - net: lan78xx: fix division by zero in send path - regmap: Fix possible double-free in regcache_rbtree_exit() - net: batman-adv: fix error handling - nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST - net: nxp: lpc_eth.c: avoid hang when bringing interface down - sctp: use init_tag from inithdr for ABORT chunk - sctp: fix the processing for COOKIE_ECHO chunk - sctp: add vtag check in sctp_sf_violation - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa - sctp: add vtag check in sctp_sf_ootb - ARM: 9141/1: only warn about XIP address when not compile testing - arm64: Avoid premature usercopy failure - ipv6: use siphash in rt6_exception_hash() - ipv6: make exception cache less predictible - arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node - scsi: core: Put LLD module refcnt after SCSI device is released - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() - sfc: Fix reading non-legacy supported link modes - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" - mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed - block: introduce multi-page bvec helpers - Revert "x86/kvm: fix vcpu-id indexed array sizes" - usb: gadget: Mark USB_FSL_QE broken on 64-bit - usb: musb: Balance list entry in musb_gadget_queue - usb-storage: Add compatibility quirk flags for iODD 2531/2541 - printk/console: Allow to disable console output by using console="" or console=null - isofs: Fix out of bound access for corrupted isofs image - comedi: dt9812: fix DMA buffers on stack - comedi: ni_usb6501: fix NULL-deref in command paths - comedi: vmk80xx: fix transfer-buffer overflows - comedi: vmk80xx: fix bulk-buffer overflow - comedi: vmk80xx: fix bulk and interrupt message timeouts - staging: r8712u: fix control-message timeout - staging: rtl8192u: fix control-message timeouts - rsi: fix control-message timeout - usb: ehci: handshake CMD_RUN instead of STS_HALT -- Stefan Bader <email address hidden> Mon, 17 Jan 2022 15:29:09 +0100
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1118.127) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1118.127 -proposed tracker (LP: #1953665) [ Ubuntu: 4.15.0-166.174 ] * bionic/linux: 4.15.0-166.174 -proposed tracker (LP: #1953667) * Ubuntu version macros overflow with high ABI numbers (LP: #1953522) - SAUCE: Revert "stable: clamp SUBLEVEL in 4.14" * test_bpf.sh test in net of ubuntu_kernel_selftests failed on B-4.15 and variants (LP: #1953287) - SAUCE: Revert "bpf: add also cbpf long jump test cases with heavy expansion" * test_bpf.sh test in net of ubuntu_kernel_selftests failed on B-4.15 and variants (LP: #1953287) // CVE-2018-25020 - bpf: fix truncated jump targets on heavy expansions
Available diffs
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1117.126) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1117.126 -proposed tracker (LP: #1952346) * Support builtin revoked certificates (LP: #1932029) - [Config] snapdragon: Disable revocation key lists [ Ubuntu: 4.15.0-165.173 ] * bionic/linux: 4.15.0-165.173 -proposed tracker (LP: #1952780) * Support builtin revoked certificates (LP: #1932029) - certs: Add EFI_CERT_X509_GUID support for dbx entries - certs: Move load_system_certificate_list to a common function - integrity: Move import of MokListRT certs to a separate routine - integrity: Load certs from the EFI MOK config table - certs: Add ability to preload revocation certs - certs: add 'x509_revocation_list' to gitignore - SAUCE: Dump stack when X.509 certificates cannot be loaded - [Packaging] build canonical-revoked-certs.pem from branch/arch certs - [Packaging] Revoke 2012 UEFI signing certificate as built-in - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys * Support importing mokx keys into revocation list from the mok table (LP: #1928679) - efi: Support for MOK variable config table - efi: mokvar-table: fix some issues in new code - efi: mokvar: add missing include of asm/early_ioremap.h - efi/mokvar: Reserve the table only if it is in boot services data - SAUCE: integrity: Load mokx certs from the EFI MOK config table - SAUCE: integrity: add informational messages when revoking certs * CVE-2021-4002 - arm64: tlb: Provide forward declaration of tlb_flush() before including tlb.h - mm: mmu_notifier fix for tlb_end_vma - hugetlbfs: flush TLBs correctly after huge_pmd_unshare [ Ubuntu: 4.15.0-164.172 ] * bionic/linux: 4.15.0-164.172 -proposed tracker (LP: #1952348) * Packaging resync (LP: #1786013) - [Packaging] resync update-dkms-versions helper - debian/dkms-versions -- update from kernel-versions (main/2021.11.29) * Bionic update: upstream stable patchset 2021-11-23 (LP: #1951997) - btrfs: always wait on ordered extents at fsync time - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF - xtensa: xtfpga: Try software restart before simulating CPU reset - NFSD: Keep existing listeners on portlist error - netfilter: ipvs: make global sysctl readonly in non-init netns - NIOS2: irqflags: rename a redefined register name - can: rcar_can: fix suspend/resume - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification - can: peak_pci: peak_pci_remove(): fix UAF - ocfs2: fix data corruption after conversion from inline format - ocfs2: mount fails with buffer overflow in strlen - elfcore: correct reference to CONFIG_UML - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset - ASoC: DAPM: Fix missing kctl change notifications - nfc: nci: fix the UAF of rf_conn_info object - isdn: cpai: check ctr->cnr to avoid array index out of bound - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option - btrfs: deal with errors when checking if a dir entry exists during log replay - net: stmmac: add support for dwmac 3.40a - ARM: dts: spear3xx: Fix gmac node - isdn: mISDN: Fix sleeping function called from invalid context - platform/x86: intel_scu_ipc: Update timeout value in comment - ALSA: hda: avoid write to STATESTS if controller is in reset - tracing: Have all levels of checks prevent recursion - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG - dma-debug: fix sg checks in debug_dma_map_sg() - ASoC: wm8960: Fix clock configuration on slave mode - lan78xx: select CRC32 - net: hns3: add limit ets dwrr bandwidth cannot be 0 - net: hns3: disable sriov before unload hclge layer - ALSA: hda/realtek: Add quirk for Clevo PC50HS - mm, slub: fix mismatch between reconstructed freelist depth and cnt - gcc-plugins/structleak: add makefile var for disabling structleak * creat09 from ubuntu_ltp_syscalls and cve-2018-13405 from ubuntu_ltp/cve failed with XFS (LP: #1950239) - xfs: ensure that the inode uid/gid match values match the icdinode ones - xfs: merge the projid fields in struct xfs_icdinode - xfs: remove the icdinode di_uid/di_gid members - xfs: fix up non-directory creation in SGID directories * ubuntu_ltp / finit_module02 fails on v4.15 and other kernels (LP: #1950644) - vfs: check fd has read access in kernel_read_file_from_fd() * reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le (LP: #1867570) - selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes * Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816) - net: mdio: introduce a shutdown method to mdio device drivers - xen-netback: correct success/error reporting for the SKB-with-fraglist case - sparc64: fix pci_iounmap() when CONFIG_PCI is not set - ext2: fix sleeping in atomic bugs on error - scsi: sd: Free scsi_disk device via put_device() - usb: testusb: Fix for showing the connection speed - usb: dwc2: check return value after calling platform_get_resource() - scsi: ses: Retry failed Send/Receive Diagnostic commands - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. - lib/timerqueue: Rely on rbtree semantics for next timer - selftests: be sure to make khdr before other targets - Partially revert "usb: Kconfig: using select for USB_COMMON dependency" - USB: cdc-acm: fix racy tty buffer accesses - USB: cdc-acm: fix break reporting - ovl: fix missing negative dentry check in ovl_rename() - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero - xen/balloon: fix cancelled balloon action - ARM: dts: omap3430-sdp: Fix NAND device node - ARM: dts: qcom: apq8064: use compatible which contains chipid - bpf: add also cbpf long jump test cases with heavy expansion - bpf, mips: Validate conditional branch offsets - xtensa: call irqchip_init only when CONFIG_USE_OF is selected - bpf: Fix integer overflow in prealloc_elems_and_freelist() - phy: mdio: fix memory leak - net_sched: fix NULL deref in fifo_set_limit() - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 - ptp_pch: Load module automatically if ID matches - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() - netlink: annotate data races around nlk->bound - drm/nouveau/debugfs: fix file release memory leak - rtnetlink: fix if_nlmsg_stats_size() under estimation - i40e: fix endless loop under rtnl - i2c: acpi: fix resource leak in reconfiguration device addition - net: phy: bcm7xxx: Fixed indirect MMD operations - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS - netfilter: ip6_tables: zero-initialize fragment offset - mac80211: Drop frames from invalid MAC address in ad-hoc mode - m68k: Handle arrivals of multiple signals correctly - net: sun: SUNVNET_COMMON should depend on INET - scsi: ses: Fix unsigned comparison with less than zero - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" - perf/x86: Reset destroy callback on event init failure - sched: Always inline is_percpu_thread() - bpf, arm: Fix register clobbering in div/mod implementation - i40e: Fix freeing of uninitialized misc IRQ vector - mac80211: check return value of rhashtable_init - stable: clamp SUBLEVEL in 4.14 - ALSA: seq: Fix a potential UAF by wrong private_free call order - s390: fix strrchr() implementation - btrfs: deal with errors when replaying dir entry during log replay - btrfs: deal with errors when adding inode reference during log replay - btrfs: check for error when looking up inode during dir entry replay - xhci: Fix command ring pointer corruption while aborting a command - xhci: Enable trust tx length quirk for Fresco FL11 USB controller - cb710: avoid NULL pointer subtraction - efi/cper: use stack buffer for error record decoding - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() - usb: musb: dsps: Fix the probe error path - Input: xpad - add support for another USB ID of Nacon GC-100 - USB: serial: qcserial: add EM9191 QDL support - USB: serial: option: add Quectel EC200S-CN module support - USB: serial: option: add Telit LE910Cx composition 0x1204 - USB: serial: option: add prod. id for Quectel EG91 - virtio: write back F_VERSION_1 before validate - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically - iio: adc: aspeed: set driver data when adc probe. - iio: adc128s052: Fix the error handling path of 'adc128_probe()' - iio: light: opt3001: Fixed timeout error when 0 lux - iio: ssp_sensors: add more range checking in ssp_parse_dataframe() - iio: ssp_sensors: fix error code in ssp_print_mcu_debug() - sctp: account stream padding length for reconf chunk - net: arc: select CRC32 - net: korina: select CRC32 - net: encx24j600: check error in devm_regmap_init_encx24j600 - ethernet: s2io: fix setting mac address during resume - nfc: fix error handling of nfc_proto_register() - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - pata_legacy: fix a couple uninitialized variable bugs - drm/msm: Fix null pointer dereference on pointer edp - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling - acpi/arm64: fix next_platform_timer() section mismatch error - qed: Fix missing error code in qed_slowpath_start() - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 -- Stefan Bader <email address hidden> Thu, 02 Dec 2021 11:16:44 +0100
Available diffs
linux-snapdragon (4.15.0-1116.125) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1116.125 -proposed tracker (LP: #1949872) [ Ubuntu: 4.15.0-163.171 ] * bionic/linux: 4.15.0-163.171 -proposed tracker (LP: #1949874) * Packaging resync (LP: #1786013) - [Packaging] update Ubuntu.md - debian/dkms-versions -- update from kernel-versions (main/2021.11.08) * Unable to build net/reuseport_bpf and other tests in ubuntu_kernel_selftests on Bionic with make command (LP: #1949889) - selftests: Fix loss of test output in run_kselftests.sh - selftests: Makefile set KSFT_TAP_LEVEL to prevent nested TAP headers - selftests: fix headers_install circular dependency - selftests: fix bpf build/test workflow regression when KBUILD_OUTPUT is set - selftests: vm: Fix test build failure when built by itself * KVM emulation failure when booting into VM crash kernel with multiple CPUs (LP: #1948862) - KVM: x86: Properly reset MMU context at vCPU RESET/INIT * aufs: kernel bug with apparmor and fuseblk (LP: #1948470) - SAUCE: aufs: bugfix, stop omitting path->mnt * ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164) - net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit() * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516) - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc * ACL updates on OCFS2 are not revalidated (LP: #1947161) - ocfs2: fix remounting needed after setfacl command * ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351) - powerpc/bpf: Fix BPF_MOD when imm == 1 * Drop "UBUNTU: SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan is active" (LP: #1947709) - Revert "UBUNTU: SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan is active" - cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active * Some test in ubuntu_bpf test_verifier failed on i386 Bionic kernel (LP: #1788578) - bpf: fix context access in tracing progs on 32 bit archs * test_bpf.sh from ubuntu_kernel_selftests.net from linux ADT test failure with linux/4.15.0-149.153 i386 (Segmentation fault) (LP: #1934414) - selftests/bpf: make test_verifier run most programs - bpf: add couple of test cases for div/mod by zero - bpf: add further test cases around div/mod and others * Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) - usb: gadget: r8a66597: fix a loop in set_feature() - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() - cifs: fix incorrect check for null pointer in header_assemble - xen/x86: fix PV trap handling on secondary processors - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter - staging: greybus: uart: fix tty use after free - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk - USB: serial: mos7840: remove duplicated 0xac24 device ID - USB: serial: option: add Telit LN920 compositions - USB: serial: option: remove duplicate USB device ID - USB: serial: option: add device id for Foxconn T99W265 - mcb: fix error handling in mcb_alloc_bus() - serial: mvebu-uart: fix driver's tx_empty callback - net: hso: fix muxed tty registration - bnxt_en: Fix TX timeout when TX ring size is set to the smallest - net/mlx4_en: Don't allow aRFS for encapsulated packets - scsi: iscsi: Adjust iface sysfs attr detection - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() - irqchip/gic-v3-its: Fix potential VPE leak on error - md: fix a lock order reversal in md_alloc - blktrace: Fix uaf in blk_trace access after removing by sysfs - net: macb: fix use after free on rmmod - net: stmmac: allow CSR clock of 300MHz - m68k: Double cast io functions to unsigned long - xen/balloon: use a kernel thread instead a workqueue - compiler.h: Introduce absolute_pointer macro - net: i825xx: Use absolute_pointer for memcpy from fixed memory location - sparc: avoid stringop-overread errors - qnx4: avoid stringop-overread errors - parisc: Use absolute_pointer() to define PAGE0 - arm64: Mark __stack_chk_guard as __ro_after_init - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile - net: 6pack: Fix tx timeout and slot time - spi: Fix tegra20 build with CONFIG_PM=n - arm64: dts: marvell: armada-37xx: Extend PCIe MEM space - PCI: aardvark: Fix checking for PIO Non-posted Request - PCI: aardvark: Fix checking for PIO status - xen/balloon: fix balloon kthread freezing - qnx4: work around gcc false positive warning bug - tty: Fix out-of-bound vmalloc access in imageblit - cpufreq: schedutil: Use kobject release() method to free sugov_tunables - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory - mac80211: fix use-after-free in CCMP/GCMP RX - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - hwmon: (tmp421) fix rounding for negative values - e100: fix length calculation in e100_get_regs_len - e100: fix buffer overrun in e100_get_regs - scsi: csiostor: Add module softdep on cxgb4 - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses - ipack: ipoctal: fix stack information leak - ipack: ipoctal: fix tty registration race - ipack: ipoctal: fix tty-registration error handling - ipack: ipoctal: fix missing allocation-failure check - ipack: ipoctal: fix module reference leak - ext4: fix potential infinite loop in ext4_dx_readdir() - net: udp: annotate data race around udp_sk(sk)->corkflag - EDAC/synopsys: Fix wrong value type assignment for edac_mode - ARM: 9077/1: PLT: Move struct plt_entries definition to header - ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() - ARM: 9079/1: ftrace: Add MODULE_PLTS support - ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE - arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 - hso: fix bailout in error case of probe - usb: hso: fix error handling code of hso_create_net_device - usb: hso: remove the bailout parameter - crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() - HID: betop: fix slab-out-of-bounds Write in betop_probe - netfilter: ipset: Fix oversized kvmalloc() calls - HID: usbhid: free raw_report buffers in usbhid_stop - cred: allow get_cred() and put_cred() to be given NULL. - gpio: uniphier: Fix void functions to remove return value - tty: synclink_gt, drop unneeded forward declarations - tty: synclink_gt: rename a conflicting function name - drm/amd/display: Pass PCI deviceid into DC - hwmon: (tmp421) Replace S_<PERMS> with octal values - hwmon: (tmp421) report /PVLD condition as fault * ACL updates on OCFS2 are not revalidated (LP: #1947161) // Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) - ocfs2: drop acl cache for directories too -- Stefan Bader <email address hidden> Tue, 09 Nov 2021 15:14:27 +0100
Available diffs
linux-snapdragon (4.15.0-1115.124) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1115.124 -proposed tracker (LP: #1947291) * Packaging resync (LP: #1786013) - [Packaging] update Ubuntu.md [ Ubuntu: 4.15.0-162.170 ] * bionic/linux: 4.15.0-162.170 -proposed tracker (LP: #1947293) * Add final-checks to check certificates (LP: #1947174) - [Packaging] Add system trusted and revocation keys final check * CVE-2020-36385 - RDMA/cma: Add missing locking to rdma_accept() - RDMA/ucma: Fix the locking of ctx->file - RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy * CVE-2021-28950 - fuse: fix live lock in fuse_iget() * CVE-2020-36322 - fuse: fix bad inode * Bionic update: upstream stable patchset 2021-10-13 (LP: #1947011) - rcu: Fix missed wakeup of exp_wq waiters - apparmor: remove duplicate macro list_entry_is_head() - crypto: talitos - fix max key size for sha384 and sha512 - sctp: validate chunk size in __rcv_asconf_lookup - sctp: add param size validation for SCTP_PARAM_SET_PRIMARY - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() - 9p/trans_virtio: Remove sysfs file on probe failure - prctl: allow to setup brk for et_dyn executables - profiling: fix shift-out-of-bounds bugs - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH - parisc: Move pci_dev_is_behind_card_dino to where it is used - dmaengine: ioat: depends on !UML - dmaengine: xilinx_dma: Set DMA mask for coherent APIs - ceph: lockdep annotations for try_nonblocking_invalidate - nilfs2: fix memory leak in nilfs_sysfs_create_device_group - nilfs2: fix NULL pointer in nilfs_##name##_attr_release - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group - pwm: rockchip: Don't modify HW state in .remove() callback - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV - nilfs2: use refcount_dec_and_lock() to fix potential UAF - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() * Invalid backport to v4.15: missing pgtable_l5_enabled (LP: #1946464) - SAUCE: Revert "x86/mm: Don't free P4D table when it is folded at runtime" * CVE-2021-38199 - NFSv4: Initialise connection to the server in nfs4_alloc_client() * CVE-2019-19449 - f2fs: fix wrong total_sections check and fsmeta check - f2fs: fix to do sanity check on segment/section count * vrf: fix refcnt leak with vxlan slaves (LP: #1945180) - ipv4: Fix device used for dst_alloc with local routes * Check for changes relevant for security certifications (LP: #1945989) - [Packaging] Add a new fips-checks script - [Packaging] Add fips-checks as part of finalchecks * CVE-2021-3759 - memcg: enable accounting of ipc resources * Bionic update: upstream stable patchset 2021-09-27 (LP: #1945224) - ARC: Fix CONFIG_STACKDEPOT - can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters - Revert "USB: serial: ch341: fix character loss at high transfer rates" - USB: serial: option: add new VID/PID to support Fibocom FG150 - usb: dwc3: gadget: Fix dwc3_calc_trbs_left() - usb: dwc3: gadget: Stop EP0 transfers during pullup disable - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() - e1000e: Fix the max snoop/no-snoop latency for 10M - ip_gre: add validation for csum_start - xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' - net: marvell: fix MVNETA_TX_IN_PRGRS bit number - usb: gadget: u_audio: fix race condition on endpoint stop - opp: remove WARN when no valid OPPs remain - virtio: Improve vq->broken access to avoid any compiler optimization - vringh: Use wiov->used to check for read/write desc order - drm: Copy drm_wait_vblank to user before returning - drm/nouveau/disp: power down unused DP links during init - net/rds: dma_map_sg is entitled to merge entries - vt_kdsetmode: extend console locking - fbmem: add margin check to fb_check_caps() - KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs - Revert "floppy: reintroduce O_NDELAY fix" - net: qrtr: fix another OOB Read in qrtr_endpoint_post - net: hns3: fix get wrong pfc_en when query PFC configuration - xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG - qed: Fix the VF msix vectors flow - net: macb: Add a NULL check on desc_ptp - qede: Fix memset corruption - perf/x86/intel/pt: Fix mask of num_address_ranges - perf/x86/amd/ibs: Work around erratum #1197 - cryptoloop: add a deprecation warning - ARM: 8918/2: only build return_address() if needed - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl - clk: fix build warning for orphan_list - media: stkwebcam: fix memory leak in stk_camera_probe - igmp: Add ip_mc_list lock in ip_check_mc_rcu - USB: serial: mos7720: improve OOM-handling in read_mos_reg() - f2fs: fix potential overflow - ath10k: fix recent bandwidth conversion bug - ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) - crypto: talitos - reduce max key size for SEC1 - powerpc/module64: Fix comment in R_PPC64_ENTRY handling - powerpc/boot: Delete unneeded .globl _zimage_start - net: ll_temac: Remove left-over debug message - mm/page_alloc: speed up the iteration of max_order - Revert "btrfs: compression: don't try to compress if we don't have enough pages" - usb: host: xhci-rcar: Don't reload firmware after the completion - x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions - PCI: Call Max Payload Size-related fixup quirks early - regmap: fix the offset of register error log - crypto: mxs-dcp - Check for DMA mapping errors - power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors - crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() - udf: Check LVID earlier - isofs: joliet: Fix iocharset=utf8 mount option - nvme-rdma: don't update queue count when failing to set io queues - power: supply: max17042_battery: fix typo in MAx17042_TOFF - s390/cio: add dev_busid sysfs entry for each subchannel - libata: fix ata_host_start() - crypto: qat - do not ignore errors from enable_vf2pf_comms() - crypto: qat - handle both source of interrupt in VF ISR - crypto: qat - fix reuse of completion variable - crypto: qat - fix naming for init/shutdown VF to PF notifications - crypto: qat - do not export adf_iov_putmsg() - udf_get_extendedattr() had no boundary checks. - m68k: emu: Fix invalid free in nfeth_cleanup() - spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config - spi: spi-pic32: Fix issue with uninitialized dma_slave_config - clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel - crypto: qat - use proper type for vf_mask - certs: Trigger creation of RSA module signing key if it's not an RSA key - soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr - media: go7007: remove redundant initialization - Bluetooth: sco: prevent information leak in sco_conn_defer_accept() - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos - net: cipso: fix warnings in netlbl_cipsov4_add_std - i2c: highlander: add IRQ check - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently - PCI: PM: Enable PME if it can be signaled from D3cold - soc: qcom: smsm: Fix missed interrupts if state changes while masked - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow - arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 - Bluetooth: fix repeated calls to sco_sock_kill - drm/msm/dsi: Fix some reference counted resource leaks - usb: gadget: udc: at91: add IRQ check - usb: phy: fsl-usb: add IRQ check - usb: phy: twl6030: add IRQ checks - Bluetooth: Move shutdown callback before flushing tx and rx queue - usb: host: ohci-tmio: add IRQ check - usb: phy: tahvo: add IRQ check - mac80211: Fix insufficient headroom issue for AMSDU - usb: gadget: mv_u3d: request_irq() after initializing UDC - Bluetooth: add timeout sanity check to hci_inquiry - i2c: iop3xx: fix deferred probing - i2c: s3c2410: fix IRQ check - mmc: dw_mmc: Fix issue with uninitialized dma_slave_config - mmc: moxart: Fix issue with uninitialized dma_slave_config - CIFS: Fix a potencially linear read overflow - i2c: mt65xx: fix IRQ check - usb: ehci-orion: Handle errors of clk_prepare_enable() in probe - usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available - tty: serial: fsl_lpuart: fix the wrong mapbase value - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() - bcma: Fix memory leak for internally-handled cores - ipv4: make exception cache less predictible - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed - net: qualcomm: fix QCA7000 checksum handling - netns: protect netns ID lookups with RCU - tty: Fix data race between tiocsti() and flush_to_ldisc() - x86/resctrl: Fix a maybe-uninitialized build warning treated as error - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted - IMA: remove -Wmissing-prototypes warning - backlight: pwm_bl: Improve bootloader/kernel device handover - clk: kirkwood: Fix a clocking boot regression - fbmem: don't allow too huge resolutions - rtc: tps65910: Correct driver module alias - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN - PCI/MSI: Skip masking MSI-X on Xen PV - powerpc/perf/hv-gpci: Fix counter value parsing - xen: fix setting of max_pfn in shared_info - include/linux/list.h: add a macro to test if entry is pointing to the head - 9p/xen: Fix end of loop tests for list_for_each_entry - soc: aspeed: lpc-ctrl: Fix boundary check for mmap - crypto: public_key: fix overflow during implicit conversion - block: bfq: fix bfq_set_next_ioprio_data() - power: supply: max17042: handle fails of reading status register - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() - VMCI: fix NULL pointer dereference when unmapping queue pair - media: uvc: don't do DMA on stack - media: rc-loopback: return number of emitters rather than error - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs - ARM: 9105/1: atags_to_fdt: don't warn about stack size - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure - PCI: xilinx-nwl: Enable the clock through CCF - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts - HID: input: do not report stylus battery state as "full" - RDMA/iwcm: Release resources if iw_cm module initialization fails - docs: Fix infiniband uverbs minor number - pinctrl: samsung: Fix pinctrl bank pin count - vfio: Use config not menuconfig for VFIO_NOIOMMU - openrisc: don't printk() unconditionally - pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() - scsi: qedi: Fix error codes in qedi_alloc_global_queues() - MIPS: Malta: fix alignment of the devicetree buffer - media: dib8000: rewrite the init prbs logic - crypto: mxs-dcp - Use sg_mapping_iter to copy data - PCI: Use pci_update_current_state() in pci_enable_device_flags() - iio: dac: ad5624r: Fix incorrect handling of an optional regulator. - ARM: dts: qcom: apq8064: correct clock names - video: fbdev: kyro: fix a DoS bug by restricting user input - netlink: Deal with ESRCH error in nlmsg_notify() - Smack: Fix wrong semantics in smk_access_entry() - usb: host: fotg210: fix the endpoint's transactional opportunities calculation - usb: host: fotg210: fix the actual_length of an iso packet - usb: gadget: u_ether: fix a potential null pointer dereference - usb: gadget: composite: Allow bMaxPower=0 if self-powered - staging: board: Fix uninitialized spinlock when attaching genpd - tty: serial: jsm: hold port lock when reporting modem line changes - bpf/tests: Fix copy-and-paste error in double word test - bpf/tests: Do not PASS tests without actually testing the result - video: fbdev: asiliantfb: Error out if 'pixclock' equals zero - video: fbdev: kyro: Error out if 'pixclock' equals zero - video: fbdev: riva: Error out if 'pixclock' equals zero - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() - flow_dissector: Fix out-of-bounds warnings - s390/jump_label: print real address in a case of a jump label bug - serial: 8250: Define RX trigger levels for OxSemi 950 devices - xtensa: ISS: don't panic in rs_init - hvsi: don't panic on tty_register_driver failure - serial: 8250_pci: make setup_port() parameters explicitly unsigned - staging: ks7010: Fix the initialization of the 'sleep_status' structure - ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() - Bluetooth: skip invalid hci_sync_conn_complete_evt - ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output - media: v4l2-dv-timings.c: fix wrong condition in two for-loops - arm64: dts: qcom: sdm660: use reg value for memory node - net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() - Bluetooth: avoid circular locks in sco_sock_connect - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() - ARM: tegra: tamonten: Fix UART pad setting - rpc: fix gss_svc_init cleanup on failure - staging: rts5208: Fix get_ms_information() heap buffer size - gfs2: Don't call dlm after protocol is unmounted - mmc: sdhci-of-arasan: Check return value of non-void funtions - mmc: rtsx_pci: Fix long reads when clock is prescaled - selftests/bpf: Enlarge select() timeout for test_maps - cifs: fix wrong release in sess_alloc_buffer() failed path - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" - usb: musb: musb_dsps: request_irq() after initializing musb - usbip: give back URBs for unsent unlink requests during cleanup - usbip:vhci_hcd USB port can get stuck in the disabled state - ASoC: rockchip: i2s: Fix regmap_ops hang - ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B - parport: remove non-zero check on count - ath9k: fix OOB read ar9300_eeprom_restore_internal - ath9k: fix sleeping in atomic context - net: fix NULL pointer reference in cipso_v4_doi_free - net: w5100: check return value after calling platform_get_resource() - parisc: fix crash with signals and alloca - scsi: BusLogic: Fix missing pr_cont() use - scsi: qla2xxx: Sync queue idx with queue_pair_map idx - cpufreq: powernv: Fix init_chip_info initialization in numa=off - mm/hugetlb: initialize hugetlb_usage in mm_init - memcg: enable accounting for pids in nested pid namespaces - platform/chrome: cros_ec_proto: Send command again when timeout occurs - xen: reset legacy rtc flag for PV domU - bnx2x: Fix enabling network interfaces without VFs - PM: base: power: don't try to use non-existing RTC for storing data - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries - net-caif: avoid user-triggerable WARN_ON(1) - ptp: dp83640: don't define PAGE0 - net/l2tp: Fix reference count leak in l2tp_udp_recv_core - r6040: Restore MDIO clock frequency after MAC reset - tipc: increase timeout in tipc_sk_enqueue() - events: Reuse value read using READ_ONCE instead of re-reading it - net/af_unix: fix a data-race in unix_dgram_poll - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation - mfd: Don't use irq_create_mapping() to resolve a mapping - PCI: Add ACS quirks for Cavium multi-function devices - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 - ethtool: Fix an error code in cxgb2.c - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' - ARC: export clear_user_page() for modules - net: dsa: b53: Fix calculating number of switch ports - netfilter: socket: icmp6: fix use-after-scope - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom - net: renesas: sh_eth: Fix freeing wrong tx descriptor - SUNRPC/nfs: Fix return value for nfs4_callback_compound() - usb: mtu3: use @mult for HS isoc or intr - usb: mtu3: fix the wrong HS mult value - lib/mpi: use kcalloc in mpi_resize - media: venus: venc: Fix potential null pointer dereference on pointer fmt - platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call - f2fs: fix to unmap pages from userspace process in punch_hole() - userfaultfd: prevent concurrent API initialization - arm64/sve: Use correct size when reinitialising SVE state - perf machine: Initialize srcline string member in add_location struct - net/mlx5: Fix potential sleeping in atomic context - net: hns3: pad the short tunnel frame before sending to hardware - mfd: axp20x: Update AXP288 volatile ranges - KVM: arm64: Handle PSCI resets before userspace touches vCPU state - ip_gre: validate csum_start only on pull [ Ubuntu: 4.15.0-161.169 ] * bionic/linux: 4.15.0-161.169 -proposed tracker (LP: #1947358) * Bionic/linux-aws Boot failure downgrading from Bionic/linux-aws-5.4 on r5.metal (LP: #1946149) - SAUCE: Revert "PCI/MSI: Enforce MSI[X] entry updates to be visible" - SAUCE: Revert "PCI/MSI: Enforce that MSI-X table entry is masked for update" -- Stefan Bader <email address hidden> Mon, 25 Oct 2021 17:38:36 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1114.123) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1114.123 -proposed tracker (LP: #1944931) [ Ubuntu: 4.15.0-160.168 ] * bionic/linux: 4.15.0-160.168 -proposed tracker (LP: #1944933) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.09.27) * ext4 journal recovery fails w/ data=journal + mmap (LP: #1847340) - jbd2: introduce/export functions jbd2_journal_submit|finish_inode_data_buffers() - jbd2, ext4, ocfs2: introduce/use journal callbacks j_submit|finish_inode_data_buffers() - ext4: data=journal: fixes for ext4_page_mkwrite() - ext4: data=journal: write-protect pages on j_submit_inode_data_buffers() - ext4: fix mmap write protection for data=journal mode * CVE-2021-40490 - ext4: fix race writing to an inline_data file while its xattrs are changing * Bionic update: upstream stable patchset 2021-09-22 (LP: #1944600) - iio: humidity: hdc100x: Add margin to the conversion time - iio: adc: Fix incorrect exit of for-loop - ASoC: intel: atom: Fix reference to PCM buffer address - i2c: dev: zero out array used for i2c reads from userspace - ACPI: NFIT: Fix support for virtual SPA ranges - ASoC: cs42l42: Correct definition of ADC Volume control - ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J - ASoC: cs42l42: Fix inversion of ADC Notch Switch control - ASoC: cs42l42: Remove duplicate control for WNF filter frequency - net: dsa: mt7530: add the missing RxUnicast MIB counter - ppp: Fix generating ifname when empty IFLA_IFNAME is specified - psample: Add a fwd declaration for skbuff - net: Fix memory leak in ieee802154_raw_deliver - net: bridge: fix memleak in br_add_if() - tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets - xen/events: Fix race in set_evtchn_to_irq - vsock/virtio: avoid potential deadlock when vsock device remove - powerpc/kprobes: Fix kprobe Oops happens in booke - x86/tools: Fix objdump version check again - x86/resctrl: Fix default monitoring groups reporting - PCI/MSI: Enable and mask MSI-X early - PCI/MSI: Do not set invalid bits in MSI mask - PCI/MSI: Correct misleading comments - PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() - PCI/MSI: Protect msi_desc::masked for multi-MSI - PCI/MSI: Mask all unused MSI-X entries - PCI/MSI: Enforce that MSI-X table entry is masked for update - PCI/MSI: Enforce MSI[X] entry updates to be visible - vmlinux.lds.h: Handle clang's module.{c,d}tor sections - mac80211: drop data frames without key on encrypted links - x86/fpu: Make init_fpstate correct with optimized XSAVE - ath: Use safer key clearing with key cache entries - ath9k: Clear key cache explicitly on disabling hardware - ath: Export ath_hw_keysetmac() - ath: Modify ath_key_delete() to not need full key entry - ath9k: Postpone key cache entry deletion for TXQ frames reference it - dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() - ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 - dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available - scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() - scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() - scsi: core: Avoid printing an error if target_alloc() returns -ENXIO - ARM: dts: nomadik: Fix up interrupt controller node names - net: usb: lan78xx: don't modify phy_device state concurrently - Bluetooth: hidp: use correct wait queue when removing ctrl_wait - dccp: add do-while-0 stubs for dccp_pr_debug macros - vhost: Fix the calculation in vhost_overflow() - bnxt: don't lock the tx queue from napi poll - net: 6pack: fix slab-out-of-bounds in decode_data - ptp_pch: Restore dependency on PCI - net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 - net: mdio-mux: Don't ignore memory allocation errors - net: mdio-mux: Handle -EPROBE_DEFER correctly - mmc: dw_mmc: Fix hang on data CRC error - ALSA: hda - fix the 'Capture Switch' value change notifications - ipack: tpci200: fix many double free issues in tpci200_pci_probe - btrfs: prevent rename2 from exchanging a subvol with a directory from different parents - ASoC: intel: atom: Fix breakage for PCM buffer address setup - locks: print a warning when mount fails due to lack of "mand" support - fs: warn about impending deprecation of mandatory locks - netfilter: nft_exthdr: fix endianness of tcp option cast - KVM: X86: MMU: Use the correct inherited permissions to get shadow page - ASoC: cs42l42: Fix LRCLK frame start edge - net: igmp: fix data-race in igmp_ifc_timer_expire() - net: dsa: lan9303: fix broken backpressure in .port_fdb_dump - genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP - x86/msi: Force affinity setup before startup - x86/ioapic: Force affinity setup before startup - genirq/msi: Ensure deactivation on teardown [ Ubuntu: 4.15.0-158.166 ] * s390x BPF JIT vulnerabilities (LP: #1943960) - SAUCE: s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant - SAUCE: s390/bpf: Fix optimizing out zero-extensions -- Stefan Bader <email address hidden> Wed, 29 Sep 2021 15:45:29 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1113.122) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1113.122 -proposed tracker (LP: #1942586) * Bionic update: upstream stable patchset 2021-08-17 (LP: #1940315) - [Config] snapdragon: updateconfigs for UNIX_SCM [ Ubuntu: 4.15.0-157.164 ] * bionic/linux: 4.15.0-157.164 -proposed tracker (LP: #1942588) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.09.06) * dell300x: rsi wifi and bluetooth crash after suspend and resume (LP: #1940488) - Revert "rsi: Use resume_noirq for SDIO" * LRMv5: switch primary version handling to kernel-versions data set (LP: #1928921) - [Packaging] switch to kernel-versions * kvm_unit_tests: emulator test fails on 4.4 / 4.15 kernel, timeout (LP: #1932966) - kvm: Add emulation for movups/movupd * memory leaking when removing a profile (LP: #1939915) - security/apparmor/label.c: Clean code by removing redundant instructions - apparmor: Fix memory leak of profile proxy * ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with dump_page() (LP: #1941829) - selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio limit hot-remove error test * Bionic update: upstream stable patchset 2021-08-27 (LP: #1941916) - btrfs: mark compressed range uptodate only if all bio succeed - regulator: rt5033: Fix n_voltages settings for BUCK and LDO - r8152: Fix potential PM refcount imbalance - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() - net: Fix zero-copy head len calculation. - Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" - KVM: do not allow mapping valid but non-reference-counted pages - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" - spi: mediatek: Fix fifo transfer - padata: validate cpumask without removed CPU during offline - Revert "ACPICA: Fix memory leak caused by _CID repair function" - ALSA: seq: Fix racy deletion of subscriber - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs - omap5-board-common: remove not physically existing vdds_1v8_main fixed- regulator - scsi: sr: Return correct event when media event code is 3 - media: videobuf2-core: dequeue if start_streaming fails - net: natsemi: Fix missing pci_disable_device() in probe and remove - nfp: update ethtool reporting of pauseframe control - mips: Fix non-POSIX regexp - bnx2x: fix an error code in bnx2x_nic_load() - net: pegasus: fix uninit-value in get_interrupt_interval - net: fec: fix use-after-free in fec_drv_remove - net: vxge: fix use-after-free in vxge_device_unregister - Bluetooth: defer cleanup of resources in hci_unregister_dev() - USB: usbtmc: Fix RCU stall warning - USB: serial: option: add Telit FD980 composition 0x1056 - USB: serial: ch341: fix character loss at high transfer rates - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers - usb: gadget: f_hid: fixed NULL pointer dereference - usb: gadget: f_hid: idle uses the highest byte for duration - usb: otg-fsm: Fix hrtimer list corruption - scripts/tracing: fix the bug that can't parse raw_trace_func - staging: rtl8723bs: Fix a resource leak in sd_int_dpc - media: rtl28xxu: fix zero-length control request - pipe: increase minimum default pipe size to 2 pages - ext4: fix potential htree corruption when growing large_dir directories - serial: 8250: Mask out floating 16/32-bit bus bits - MIPS: Malta: Do not byte-swap accesses to the CBUS UART - pcmcia: i82092: fix a null pointer dereference bug - spi: meson-spicc: fix memory leak in meson_spicc_remove - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest - qmi_wwan: add network device usage statistics for qmimux devices - libata: fix ata_pio_sector for CONFIG_HIGHMEM - reiserfs: add check for root_inode in reiserfs_fill_super - reiserfs: check directory items on read from disk - alpha: Send stop IPI to send to online CPUs - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset - USB:ehci:fix Kunpeng920 ehci hardware problem - ppp: Fix generating ppp unit id when ifname is not specified - ovl: prevent private clone if bind mount is not allowed - net: xilinx_emaclite: Do not print real IOMEM pointer - KVM: x86: accept userspace interrupt only if no event is injected - KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds * Bionic update: upstream stable patchset 2021-08-17 (LP: #1940315) - selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c - KVM: x86: determine if an exception has an error code only when injecting it. - net: split out functions related to registering inflight socket files - [Config] updateconfigs for UNIX_SCM - af_unix: fix garbage collect vs MSG_PEEK - net/802/mrp: fix memleak in mrp_request_join() - net/802/garp: fix memleak in garp_request_join() - net: annotate data race around sk_ll_usec - sctp: move 198 addresses from unusable to private scope - hfs: add missing clean-up in hfs_fill_super - hfs: fix high memory mapping in hfs_bnode_read - hfs: add lock nesting notation to hfs_find_init - ARM: dts: versatile: Fix up interrupt controller node names - virtio_net: Do not pull payload in skb->head - gro: ensure frag0 meets IP header alignment - x86/kvm: fix vcpu-id indexed array sizes - ocfs2: fix zero out valid data - ocfs2: issue zeroout to EOF blocks - can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF - can: mcba_usb_start(): add missing urb->transfer_dma initialization - can: usb_8dev: fix memory leak - can: ems_usb: fix memory leak - can: esd_usb2: fix memory leak - NIU: fix incorrect error return, missed in previous revert - nfc: nfcsim: fix use after free during module unload - x86/asm: Ensure asm/proto.h can be included stand-alone - cfg80211: Fix possible memory leak in function cfg80211_bss_update - netfilter: conntrack: adjust stop timestamp to real expiry value - netfilter: nft_nat: allow to specify layer 4 protocol NAT only - tipc: fix sleeping in tipc accept routine - mlx4: Fix missing error code in mlx4_load_one() - net: llc: fix skb_over_panic - net/mlx5: Fix flow table chaining - sctp: fix return value check in __sctp_rcv_asconf_lookup - tulip: windbond-840: Fix missing pci_disable_device() in probe and remove - sis900: Fix missing pci_disable_device() in probe and remove - can: hi311x: fix a signedness bug in hi3110_cmd() - i40e: Fix log TC creation failure when max num of queues is exceeded - i40e: Add additional info to PHY type error * Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) - ARM: dts: gemini: add device_type on pci - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi - ARM: dts: rockchip: Fix the timer clocks order - ARM: dts: rockchip: Fix power-controller node names for rk3288 - arm64: dts: rockchip: Fix power-controller node names for rk3328 - reset: ti-syscon: fix to_ti_syscon_reset_data macro - ARM: brcmstb: dts: fix NAND nodes names - ARM: Cygnus: dts: fix NAND nodes names - ARM: NSP: dts: fix NAND nodes names - ARM: dts: BCM63xx: Fix NAND nodes names - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info - ARM: dts: stm32: fix RCC node name on stm32f429 MCU - arm64: dts: juno: Update SCPI nodes as per the YAML schema - arm64: dts: ls208xa: remove bus-num from dspi node - thermal/core: Correct function name thermal_zone_device_unregister() - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set - rtc: max77686: Do not enforce (incorrect) interrupt trigger type - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 - scsi: libfc: Fix array index out of bound exception - sched/fair: Fix CFS bandwidth hrtimer expiry type - net: ipv6: fix return value of ip6_skb_dst_mtu - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo - net: bridge: sync fdb to new unicast-filtering ports - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled - net: moxa: fix UAF in moxart_mac_probe - net: qcom/emac: fix UAF in emac_remove - net: ti: fix UAF in tlan_remove_one - net: send SYNACK packet with accepted fwmark - net: validate lwtstate->data before returning from skb_tunnel_info() - dma-buf/sync_file: Don't leak fences on merge failure - tcp: annotate data races around tp->mtu_info - ipv6: tcp: drop silly ICMPv6 packet too big messages - igb: Fix use-after-free error during reset - ixgbe: Fix an error handling path in 'ixgbe_probe()' - igb: Fix an error handling path in 'igb_probe()' - fm10k: Fix an error handling path in 'fm10k_probe()' - e1000e: Fix an error handling path in 'e1000_probe()' - iavf: Fix an error handling path in 'iavf_probe()' - igb: Check if num of q_vectors is smaller than max before array access - perf probe: Fix dso->nsinfo refcounting - perf lzma: Close lzma stream on exit - perf test bpf: Free obj_buf - perf probe-file: Delete namelist in del_events() on the error path - spi: mediatek: fix fifo rx mode - liquidio: Fix unintentional sign extension issue on left shift of u16 - s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] - net: fix uninit-value in caif_seqpkt_sendmsg - net: decnet: Fix sleeping inside in af_decnet - netrom: Decrease sock refcount when sock timers expire - scsi: iscsi: Fix iface sysfs attr detection - scsi: target: Fix protect handling in WRITE SAME(32) - spi: cadence: Correct initialisation of runtime PM again - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" - proc: Avoid mixing integer types in mem_rw() - s390/ftrace: fix ftrace_update_ftrace_func implementation - ALSA: sb: Fix potential ABBA deadlock in CSP driver - xhci: Fix lost USB 2 remote wake - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS - usb: max-3421: Prevent corruption of freed memory - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() - USB: serial: option: add support for u-blox LARA-R6 family - USB: serial: cp210x: fix comments for GE CS1000 - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() - ixgbe: Fix packet corruption due to missing DMA sync - selftest: use mmap instead of posix_memalign to allocate memory - drm: Return -ENOTTY for non-drm ioctls - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear - iio: accel: bma180: Use explicit member assignment - iio: accel: bma180: Fix BMA25x bandwidth register values - btrfs: compression: don't try to compress if we don't have enough pages - spi: spi-fsl-dspi: Fix a resource leak in an error handling path - xhci: add xhci_get_virt_ep() helper - bpftool: Properly close va_list 'ap' by va_end() on error - net: ip_tunnel: fix mtu calculation for ETHER tunnel devices - nvme-pci: do not call nvme_dev_remove_admin from nvme_remove - perf dso: Fix memory leak in dso__new_map() - net/tcp_fastopen: fix data races around tfo_active_disable_stamp - nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING - drm/panel: raspberrypi-touchscreen: Prevent double-free - KVM: do not assume PTE is writable after follow_pfn - KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() - net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz - workqueue: fix UAF in pwq_unbound_release_workfn() - upstream stable to v4.14.241, v4.19.200 -- Stefan Bader <email address hidden> Mon, 13 Sep 2021 11:56:27 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1112.121) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1112.121 -proposed tracker (LP: #1939831) [ Ubuntu: 4.15.0-156.163 ] * bionic/linux: 4.15.0-156.163 -proposed tracker (LP: #1940162) * linux (LP: #1940564) - SAUCE: Revert "scsi: core: Cap scsi_host cmd_per_lun at can_queue" * fails to launch linux L2 guests on AMD (LP: #1940134) // CVE-2021-3653 - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) * fails to launch linux L2 guests on AMD (LP: #1940134) - SAUCE: Revert "UBUNTU: SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl" [ Ubuntu: 4.15.0-155.162 ] * bionic/linux: 4.15.0-155.162 -proposed tracker (LP: #1939833) * Packaging resync (LP: #1786013) - debian/dkms-versions -- update from kernel-versions (main/2021.08.16) * CVE-2021-3656 - SAUCE: KVM: nSVM: always intercept VMLOAD/VMSAVE when nested * CVE-2021-3653 - SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl * dev_forward_skb: do not scrub skb mark within the same name space (LP: #1935040) - dev_forward_skb: do not scrub skb mark within the same name space * 'ptrace trace' needed to readlink() /proc/*/ns/* files on older kernels (LP: #1890848) - apparmor: fix ptrace read check * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) - ALSA: usb-audio: fix rate on Ozone Z90 USB headset - media: dvb-usb: fix wrong definition - Input: usbtouchscreen - fix control-request directions - net: can: ems_usb: fix use-after-free in ems_usb_disconnect() - usb: gadget: eem: fix echo command packet response issue - USB: cdc-acm: blacklist Heimann USB Appset device - ntfs: fix validity check for file name attribute - iov_iter_fault_in_readable() should do nothing in xarray case - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl - ARM: dts: at91: sama5d4: fix pinctrl muxing - btrfs: send: fix invalid path for unlink operations after parent orphanization - btrfs: clear defrag status of a root if starting transaction fails - ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle - ext4: fix kernel infoleak via ext4_extent_header - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit - ext4: remove check for zero nr_to_scan in ext4_es_scan() - ext4: fix avefreec in find_group_orlov - ext4: use ext4_grp_locked_error in mb_find_extent - can: gw: synchronize rcu operations before removing gw job entry - can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path - SUNRPC: Fix the batch tasks count wraparound. - SUNRPC: Should wake up the privileged task firstly. - s390/cio: dont call css_wait_for_slow_path() inside a lock - rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path - iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too - iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR - iio: ltr501: ltr501_read_ps(): add missing endianness conversion - serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() - serial_cs: Add Option International GSM-Ready 56K/ISDN modem - serial_cs: remove wrong GLOBETROTTER.cis entry - ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() - ssb: sdio: Don't overwrite const buffer if block_write fails - rsi: Assign beacon rate settings to the correct rate_info descriptor field - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 - fuse: check connected before queueing on fpq->io - spi: Make of_register_spi_device also set the fwnode - spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' - spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() - spi: omap-100k: Fix the length judgment problem - crypto: nx - add missing MODULE_DEVICE_TABLE - media: cpia2: fix memory leak in cpia2_usb_probe - media: cobalt: fix race condition in setting HPD - media: pvrusb2: fix warning in pvr2_i2c_core_done - crypto: qat - check return code of qat_hal_rd_rel_reg() - crypto: qat - remove unused macro in FW loader - media: em28xx: Fix possible memory leak of em28xx struct - media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release - media: bt8xx: Fix a missing check bug in bt878_probe - media: st-hva: Fix potential NULL pointer dereferences - media: dvd_usb: memory leak in cinergyt2_fe_attach - mmc: via-sdmmc: add a check against NULL pointer dereference - crypto: shash - avoid comparing pointers to exported functions under CFI - media: dvb_net: avoid speculation from net slot - media: siano: fix device register error path - btrfs: fix error handling in __btrfs_update_delayed_inode - btrfs: abort transaction if we fail to update the delayed inode - btrfs: disable build on platforms having page size 256K - regulator: da9052: Ensure enough delay time for .set_voltage_time_sel - HID: do not use down_interruptible() when unbinding devices - ACPI: processor idle: Fix up C-state latency if not ordered - hv_utils: Fix passing zero to 'PTR_ERR' warning - lib: vsprintf: Fix handling of number field widths in vsscanf - ACPI: EC: Make more Asus laptops use ECDT _GPE - block_dump: remove block_dump feature in mark_inode_dirty() - fs: dlm: cancel work sync othercon - random32: Fix implicit truncation warning in prandom_seed_state() - fs: dlm: fix memory leak when fenced - ACPICA: Fix memory leak caused by _CID repair function - ACPI: bus: Call kobject_put() in acpi_init() error path - platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() - ACPI: tables: Add custom DSDT file as makefile prerequisite - HID: wacom: Correct base usage for capacitive ExpressKey status bits - ia64: mca_drv: fix incorrect array size calculation - media: s5p_cec: decrement usage count if disabled - crypto: ixp4xx - dma_unmap the correct address - crypto: ux500 - Fix error return code in hash_hw_final() - sata_highbank: fix deferred probing - pata_rb532_cf: fix deferred probing - media: I2C: change 'RST' to "RSET" to fix multiple build errors - pata_octeon_cf: avoid WARN_ON() in ata_host_activate() - crypto: ccp - Fix a resource leak in an error handling path - pata_ep93xx: fix deferred probing - media: exynos4-is: Fix a use after free in isp_video_release - media: tc358743: Fix error return code in tc358743_probe_of() - media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() - mmc: usdhi6rol0: fix error return code in usdhi6_probe() - media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx - hwmon: (max31722) Remove non-standard ACPI device IDs - hwmon: (max31790) Fix fan speed reporting for fan7..12 - btrfs: clear log tree recovering status if starting transaction fails - spi: spi-sun6i: Fix chipselect/clock bug - crypto: nx - Fix RCU warning in nx842_OF_upd_status - ACPI: sysfs: Fix a buffer overrun problem with description_show() - ocfs2: fix snprintf() checking - net: pch_gbe: Propagate error from devm_gpio_request_one() - drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() - ehea: fix error return code in ehea_restart_qps() - RDMA/rxe: Fix failure during driver load - drm: qxl: ensure surf.data is ininitialized - wireless: carl9170: fix LEDS build errors & warnings - brcmsmac: mac80211_if: Fix a resource leak in an error handling path - ath10k: Fix an error code in ath10k_add_interface() - netlabel: Fix memory leak in netlbl_mgmt_add_common - netfilter: nft_exthdr: check for IPv6 packet before further processing - samples/bpf: Fix the error return code of xdp_redirect's main() - net: ethernet: aeroflex: fix UAF in greth_of_remove - net: ethernet: ezchip: fix UAF in nps_enet_remove - net: ethernet: ezchip: fix error handling - pkt_sched: sch_qfq: fix qfq_change_class() error path - vxlan: add missing rcu_read_lock() in neigh_reduce() - net: bcmgenet: Fix attaching to PYH failed on RPi 4B - i40e: Fix error handling in i40e_vsi_open - Revert "ibmvnic: remove duplicate napi_schedule call in open function" - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid - writeback: fix obtain a reference to a freeing memcg css - net: sched: fix warning in tcindex_alloc_perfect_hash - tty: nozomi: Fix a resource leak in an error handling function - mwifiex: re-fix for unaligned accesses - iio: adis_buffer: do not return ints in irq handlers - iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() - ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() - Input: hil_kbd - fix error return code in hil_dev_connect() - char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() - tty: nozomi: Fix the error handling path of 'nozomi_card_init()' - scsi: FlashPoint: Rename si_flags field - s390: appldata depends on PROC_SYSCTL - eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() - iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() - staging: gdm724x: check for overflow in gdm_lte_netif_rx() - ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK - of: Fix truncation of memory sizes on 32-bit platforms - scsi: mpt3sas: Fix error return value in _scsih_expander_add() - phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() - extcon: sm5502: Drop invalid register write in sm5502_reg_data - extcon: max8997: Add missing modalias string - configfs: fix memleak in configfs_release_bin_file - leds: as3645a: Fix error return code in as3645a_parse_node() - leds: ktd2692: Fix an error handling path - mm/huge_memory.c: don't discard hugepage if other processes are mapping it - selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random - mmc: vub3000: fix control-request direction - scsi: core: Retry I/O for Notify (Enable Spinup) Required error - drm/mxsfb: Don't select DRM_KMS_FB_HELPER - drm/zte: Don't select DRM_KMS_FB_HELPER - drm/amd/amdgpu/sriov disable all ip hw status by default - net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() - hugetlb: clear huge pte during flush function on mips platform - atm: iphase: fix possible use-after-free in ia_module_exit() - mISDN: fix possible use-after-free in HFC_cleanup() - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT - reiserfs: add check for invalid 1st journal block - drm/virtio: Fix double free on probe failure - udf: Fix NULL pointer dereference in udf_symlink function - e100: handle eeprom as little endian - clk: renesas: r8a77995: Add ZA2 clock - clk: tegra: Ensure that PLLU configuration is applied properly - ipv6: use prandom_u32() for ID generation - RDMA/cxgb4: Fix missing error code in create_qp() - dm space maps: don't reset space map allocation cursor when committing - virtio_net: Remove BUG() to avoid machine dead - net: bcmgenet: check return value after calling platform_get_resource() - net: micrel: check return value after calling platform_get_resource() - fjes: check return value after calling platform_get_resource() - selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC - xfrm: Fix error reporting in xfrm_state_construct. - wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP - wl1251: Fix possible buffer overflow in wl1251_cmd_scan - cw1200: add missing MODULE_DEVICE_TABLE - atm: nicstar: use 'dma_free_coherent' instead of 'kfree' - atm: nicstar: register the interrupt handler in the right place - vsock: notify server to shutdown when client has pending signal - RDMA/rxe: Don't overwrite errno from ib_umem_get() - iwlwifi: mvm: don't change band on bound PHY contexts - sfc: avoid double pci_remove of VFs - sfc: error code if SRIOV cannot be disabled - wireless: wext-spy: Fix out-of-bounds warning - RDMA/cma: Fix rdma_resolve_route() memory leak - Bluetooth: Fix the HCI to MGMT status conversion table - Bluetooth: Shutdown controller after workqueues are flushed or cancelled - Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. - sctp: validate from_addr_param return - sctp: add size validation when walking chunks - fscrypt: don't ignore minor_hash when hash is 0 - bdi: Do not use freezable workqueue - fuse: reject internal errno - powerpc/barrier: Avoid collision with clang's __lwsync macro - usb: gadget: f_fs: Fix setting of device and driver data cross-references - drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() - pinctrl/amd: Add device HID for new AMD GPIO controller - mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode - mmc: core: clear flags before allowing to retune - mmc: core: Allow UHS-I voltage switch for SDSC cards if supported - ata: ahci_sunxi: Disable DIPM - cpu/hotplug: Cure the cpusets trainwreck - ASoC: tegra: Set driver_name=tegra for all machine drivers - qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute - ipmi/watchdog: Stop watchdog timer when the current action is 'none' - power: supply: ab8500: Fix an old bug - seq_buf: Fix overflow in seq_buf_putmem_hex() - tracing: Simplify & fix saved_tgids logic - ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe - dm btree remove: assign new_root only when removal succeeds - media: dtv5100: fix control-request directions - media: zr364xx: fix memory leak in zr364xx_start_readpipe - media: gspca/sq905: fix control-request direction - media: gspca/sunplus: fix zero-length control requests - jfs: fix GPF in diFree - smackfs: restrict bytes count in smk_set_cipso() - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid - tracing: Do not reference char * as a string in histograms - PCI: aardvark: Don't rely on jiffies while holding spinlock - PCI: aardvark: Fix kernel panic during PIO transfer - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero - misc/libmasm/module: Fix two use after free in ibmasm_init_one - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" - w1: ds2438: fixing bug that would always get page0 - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs - scsi: core: Cap scsi_host cmd_per_lun at can_queue - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - fs/jfs: Fix missing error code in lmLogInit() - scsi: iscsi: Add iscsi_cls_conn refcount helpers - scsi: iscsi: Fix shost->max_id use - scsi: qedi: Fix null ref during abort handling - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE - s390/sclp_vt220: fix console name to match device - ALSA: sb: Fix potential double-free of CSP mixer elements - powerpc/ps3: Add dma_mask to ps3_dma_region - gpio: zynq: Check return value of pm_runtime_get_sync - ALSA: ppc: fix error return code in snd_pmac_probe() - selftests/powerpc: Fix "no_handler" EBB selftest - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() - ALSA: bebob: add support for ToneWeal FW66 - usb: gadget: f_hid: fix endianness issue with descriptors - usb: gadget: hid: fix error return code in hid_bind() - powerpc/boot: Fixup device-tree on little endian - backlight: lm3630a: Fix return code of .update_status() callback - ALSA: hda: Add IRQ check for platform_get_irq() - staging: rtl8723bs: fix macro value for 2.4Ghz only device - intel_th: Wait until port is in reset before programming it - i2c: core: Disable client irq on reboot/shutdown - lib/decompress_unlz4.c: correctly handle zero-padding around initrds. - pwm: spear: Don't modify HW state in .remove callback - power: supply: ab8500: Avoid NULL pointers - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 - watchdog: Fix possible use-after-free in wdt_startup() - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() - watchdog: Fix possible use-after-free by calling del_timer_sync() - watchdog: iTCO_wdt: Account for rebooting on second timeout - x86/fpu: Return proper error codes from user access functions - orangefs: fix orangefs df output. - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty - NFS: nfs_find_open_context() may only select open files - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE - power: supply: ab8500: add missing MODULE_DEVICE_TABLE - pwm: tegra: Don't modify HW state in .remove callback - ACPI: AMBA: Fix resource name in /proc/iomem - ACPI: video: Add quirk for the Dell Vostro 3350 - virtio-blk: Fix memory leak among suspend/resume procedure - virtio_net: Fix error handling in virtnet_restore() - virtio_console: Assure used length from device is limited - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun - power: supply: rt5033_battery: Fix device tree enumeration - um: fix error return code in slip_open() - um: fix error return code in winch_tramp() - watchdog: aspeed: fix hardware timeout calculation - nfs: fix acl memory leak of posix_acl_create() - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode - x86/fpu: Limit xstate copy size in xstateregs_set() - ALSA: isa: Fix error return code in snd_cmi8330_probe() - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times - hexagon: use common DISCARDS macro - reset: a10sr: add missing of_match_table reference - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 - memory: atmel-ebi: add missing of_node_put for loop iteration - rtc: fix snprintf() checking in is_rtc_hctosys() - ARM: dts: r8a7779, marzen: Fix DU clock names - ARM: dts: BCM5301X: Fixup SPI binding - reset: bail if try_module_get() fails - memory: fsl_ifc: fix leak of IO mapping on probe failure - memory: fsl_ifc: fix leak of private memory on probe failure - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() - mips: always link byteswap helpers into decompressor - mips: disable branch profiling in boot/decompress.o - MIPS: vdso: Invalid GIC access through VDSO - net: bridge: multicast: fix PIM hello router port marking race - ALSA: usb-audio: Fix OOB access at proc output - iio: light: tcs3472: do not free unallocated IRQ - rsi: fix AP mode with WPA failure due to encrypted EAPOL - evm: Execute evm_inode_init_security() only when an HMAC key is loaded - evm: fix writing <securityfs>/evm overflow - wcn36xx: Move hal_buf allocation to devm_kmalloc in probe - ssb: Fix error return code in ssb_bus_scan() - brcmfmac: fix setting of station info chains bitmask - ipv6: exthdrs: do not blindly use init_net - i40e: Fix autoneg disabling for non-10GBaseT links - ipv6: fix out-of-bound access in ip6_parse_tlv() - iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() - ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() - visorbus: fix error return code in visorchipset_init() - serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates - powerpc: Offline CPU in stop_this_cpu() - serial: mvebu-uart: correctly calculate minimal possible baudrate - arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART - vfio/pci: Handle concurrent vma faults - clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround - coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() - PCI: Leave Apple Thunderbolt controllers on for s2idle or standby - media: subdev: disallow ioctl for saa6588/davinci - PCI: iproc: Fix multi-MSI base vector number allocation - PCI: iproc: Support multi-MSI only on uniprocessor kernel - virtio_net: move tx vq operation under tx queue lock - ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 - ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema * Bionic update: upstream stable patchset 2021-07-20 (LP: #1936960) - include/linux/mmdebug.h: make VM_WARN* non-rvals - mm: add VM_WARN_ON_ONCE_PAGE() macro - mm/rmap: remove unneeded semicolon in page_not_mapped() - mm/rmap: use page_not_mapped in try_to_unmap() - mm/thp: try_to_unmap() use TTU_SYNC for safe splitting - mm/thp: fix vma_address() if virtual address below file offset - mm/thp: fix page_address_in_vma() on file THP tails - mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split - mm: page_vma_mapped_walk(): use page for pvmw->page - mm: page_vma_mapped_walk(): settle PageHuge on entry - mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd - mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block - mm: page_vma_mapped_walk(): crossing page table boundary - mm: page_vma_mapped_walk(): add a level of indentation - mm: page_vma_mapped_walk(): use goto instead of while (1) - mm: page_vma_mapped_walk(): get vma_address_end() earlier - mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes - mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() - mm, futex: fix shared futex pgoff on shmem huge page - scsi: sr: Return appropriate error code when disk is ejected - drm/nouveau: fix dma_address check for CPU/GPU sync - kfifo: DECLARE_KIFO_PTR(fifo, u64) does not work on arm 32 bit - kthread_worker: split code for canceling the delayed work timer - kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() - xen/events: reset active flag for lateeoi events later - ARM: dts: imx6qdl-sabresd: Remove incorrect power supply assignment - ARM: OMAP: replace setup_irq() by request_irq() - clocksource/drivers/timer-ti-dm: Add clockevent and clocksource support - clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) - Revert "UBUNTU: SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against file opener"" - proc: Track /proc/$pid/attr/ opener mm_struct - net/nfc/rawsock.c: fix a permission check bug - ASoC: sti-sas: add missing MODULE_DEVICE_TABLE - isdn: mISDN: netjet: Fix crash in nj_probe: - bonding: init notify_work earlier to avoid uninitialized use - netlink: disable IRQs for netlink_lock_table() - net: mdiobus: get rid of a BUG_ON() - cgroup: disable controllers at parse time - wq: handle VM suspension in stall detection - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock - scsi: vmw_pvscsi: Set correct residual data length - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal - net: macb: ensure the device is available before accessing GEMGXL control registers - net: appletalk: cops: Fix data race in cops_probe1 - MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER - bnx2x: Fix missing error code in bnx2x_iov_init_one() - powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers - powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers - i2c: mpc: Make use of i2c_recover_bus() - i2c: mpc: implement erratum A-004447 workaround - drm: Fix use-after-free read in drm_getunique() - drm: Lock pointer access in drm_master_release() - kvm: avoid speculation-based attacks from out-of-range memslot accesses - staging: rtl8723bs: Fix uninitialized variables - btrfs: return value from btrfs_mark_extent_written() in case of error - cgroup1: don't allow '\n' in renaming - USB: f_ncm: ncm_bitrate (speed) is unsigned - usb: dwc3: ep0: fix NULL pointer exception - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind - USB: serial: ftdi_sio: add NovaTech OrionMX product ID - USB: serial: omninet: add device id for Zyxel Omni 56K Plus - USB: serial: quatech2: fix control-request directions - usb: gadget: eem: fix wrong eem header operation - usb: fix various gadgets null ptr deref on 10gbps cabling. - usb: fix various gadget panics on 10gbps cabling - regulator: core: resolve supply for boot-on/always-on regulators - regulator: max77620: Use device_set_of_node_from_dev() - perf: Fix data race between pin_count increment/decrement - NFS: Fix a potential NULL dereference in nfs_get_client() - perf session: Correct buffer copying when peeking events - kvm: fix previous commit for 32-bit builds - NFS: Fix use-after-free in nfs4_init_client() - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. - scsi: core: Fix error handling of scsi_host_alloc() - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING - scsi: core: Only put parent device if host state differs from SHOST_CREATED - ftrace: Do not blindly read the ip address in ftrace_bug() - tracing: Correct the length check which causes memory corruption - proc: only require mm_struct for writing - scsi: bnx2fc: Return failure if io_req is already in ABTS processing - ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs - usb: f_ncm: only first packet of aggregate needs to start timer - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms - RDMA/mlx4: Do not map the core_clock page to user space unless enabled - vmlinux.lds.h: Avoid orphan section with !SMP - sched/fair: Make sure to update tg contrib for blocked load - net: ieee802154: fix null deref in parse dev addr - HID: hid-sensor-hub: Return error for hid_set_field() failure - HID: Add BUS_VIRTUAL to hid_connect logging - HID: usbhid: fix info leak in hid_submit_ctrl - ARM: OMAP2+: Fix build warning when mmc_omap is not built - HID: gt683r: add missing MODULE_DEVICE_TABLE - gfs2: Fix use-after-free in gfs2_glock_shrink_scan - scsi: target: core: Fix warning on realtime kernels - ethernet: myri10ge: Fix missing error code in myri10ge_probe() - nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() - nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails - nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() - net: ipconfig: Don't override command-line hostnames or domains - rtnetlink: Fix missing error code in rtnl_bridge_notify() - net/x25: Return the correct errno code - net: Return the correct errno code - fib: Return the correct errno code - dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM - dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM - dmaengine: stedma40: add missing iounmap() on error in d40_probe() - mm/memory-failure: make sure wait for page writeback in memory_failure - batman-adv: Avoid WARN_ON timing related checks - net: ipv4: fix memory leak in netlbl_cipsov4_add_std - net: rds: fix memory leak in rds_recvmsg - udp: fix race between close() and udp_abort() - rtnetlink: Fix regression in bridge VLAN configuration - netfilter: synproxy: Fix out of bounds when parsing TCP options - alx: Fix an error handling path in 'alx_probe()' - net: stmmac: dwmac1000: Fix extended MAC address registers definition - qlcnic: Fix an error handling path in 'qlcnic_probe()' - netxen_nic: Fix an error handling path in 'netxen_nic_probe()' - net: cdc_ncm: switch to eth%d interface naming - net: usb: fix possible use-after-free in smsc75xx_bind - net: ipv4: fix memory leak in ip_mc_add1_src - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock - be2net: Fix an error handling path in 'be_probe()' - net: hamradio: fix memory leak in mkiss_close - net: cdc_eem: fix tx fixup skb leak - icmp: don't send out ICMP messages with a source address of 0.0.0.0 - net: ethernet: fix potential use-after-free in ec_bhf_remove - radeon: use memcpy_to/fromio for UVD fw upload - hwmon: (scpi-hwmon) shows the negative temperature properly - can: bcm: fix infoleak in struct bcm_msg_head - can: mcba_usb: fix memory leak in mcba_usb - usb: core: hub: Disable autosuspend for Cypress CY7C65632 - tracing: Do not stop recording cmdlines when tracing is off - tracing: Do not stop recording comms if the trace file is being read - tracing: Do no increment trace_clock_global() by one - PCI: Mark TI C667X to avoid bus reset - PCI: Mark some NVIDIA GPUs to avoid bus reset - PCI: Add ACS quirk for Broadcom BCM57414 NIC - PCI: Work around Huawei Intelligent NIC VF FLR erratum - ARCv2: save ABI registers across signal handling - dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc - net: bridge: fix vlan tunnel dst null pointer dereference - net: bridge: fix vlan tunnel dst refcnt when egressing - mm/slub.c: include swab.h - net: fec_ptp: add clock rate zero check - can: bcm/raw/isotp: use per module netdevice notifier - inet: use bigger hash table for IP ID generation - usb: dwc3: core: fix kernel panic when do reboot - x86/fpu: Reset state for all signal restore failures - drm/nouveau: wait for moving fence after pinning v2 - drm/radeon: wait for moving fence after pinning - ARM: 9081/1: fix gcc-10 thumb2-kernel regression - Makefile: Move -Wno-unused-but-set-variable out of GCC only block - MIPS: generic: Update node names to avoid unit addresses - Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" - mac80211: remove warning in ieee80211_get_sband() - cfg80211: call cfg80211_leave_ocb when switching away from OCB - mac80211: drop multicast fragments - ping: Check return value of function 'ping_queue_rcv_skb' - inet: annotate date races around sk->sk_txhash - net: caif: fix memory leak in ldisc_open - net/packet: annotate accesses to po->bind - net/packet: annotate accesses to po->ifindex - r8152: Avoid memcpy() over-reading of ETH_SS_STATS - sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS - r8169: Avoid memcpy() over-reading of ETH_SS_STATS - net: qed: Fix memcpy() overflow of qed_dcbx_params() - net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY - pinctrl: stm32: fix the reported number of GPIO lines per bank - nilfs2: fix memory leak in nilfs_sysfs_delete_device_group - i2c: robotfuzz-osif: fix control-request directions - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V - net/mlx5e: Remove dependency in IPsec initialization flows - net: add documentation to socket.c - net: make get_net_ns return error if NET_NS is disabled - net: qrtr: fix OOB Read in qrtr_endpoint_post - ptp: ptp_clock: Publish scaled_ppm_to_ppb - ptp: improve max_adj check against unreasonable values - net: fec_ptp: fix issue caused by refactor the fec_devtype - ASoC: rt5659: Fix the lost powers for the HDA header - cfg80211: make certificate generation more robust - mm/slub: clarify verification reporting - net: ethtool: clear heap allocations for ethtool function - PCI: Add AMD RS690 quirk to enable 64-bit DMA - upstream stable to v4.14.238, v4.19.196 -- Stefan Bader <email address hidden> Mon, 23 Aug 2021 14:47:53 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1111.120) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1111.120 -proposed tracker (LP: #1936565) [ Ubuntu: 4.15.0-154.161 ] * bionic/linux: 4.15.0-154.161 -proposed tracker (LP: #1938411) * Potential reverts of 4.19.y stable changes in 18.04 (LP: #1938537) - SAUCE: Revert "locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal" - SAUCE: Revert "drm/amd/amdgpu: fix refcount leak" * Packaging resync (LP: #1786013) - [Packaging] resync getabis - [Packaging] update helper scripts - update dkms package versions * btrfs: Automatic balance returns -EUCLEAN and leads to forced readonly filesystem (LP: #1934709) // CVE-2019-19036 - btrfs: Validate child tree block's level and first key - btrfs: Detect unbalanced tree with empty leaf before crashing btree operations * btrfs: Automatic balance returns -EUCLEAN and leads to forced readonly filesystem (LP: #1934709) - Revert "btrfs: Detect unbalanced tree with empty leaf before crashing btree operations" - Revert "btrfs: Validate child tree block's level and first key" - btrfs: Only check first key for committed tree blocks - btrfs: Fix wrong first_key parameter in replace_path * Enable fib-onlink-tests.sh and msg_zerocopy.sh in kselftests/net on Bionic (LP: #1934759) - selftests: Add fib-onlink-tests.sh to TEST_PROGS - selftests: net: use TEST_PROGS_EXTENDED - selftests/net: enable msg_zerocopy test - SAUCE: selftests: Make fib-onlink-tests.sh executable * Kernel oops due to uninitialized list on kernfs (kernfs_kill_sb) (LP: #1934175) - kernfs: deal with kernfs_fill_super() failures - unfuck sysfs_mount() * large_dir in ext4 broken (LP: #1933074) - SAUCE: ext4: fix directory index node split corruption * btrfs: Attempting to balance a nearly full filesystem with relocated root nodes fails (LP: #1933172) // CVE-2019-19036 - btrfs: reloc: fix reloc root leak and NULL pointer dereference * btrfs: Attempting to balance a nearly full filesystem with relocated root nodes fails (LP: #1933172) - Revert "btrfs: reloc: fix reloc root leak and NULL pointer dereference" * Pixel format change broken for Elgato Cam Link 4K (LP: #1932367) - (upstream) media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K * Bionic update: upstream stable patchset 2021-06-23 (LP: #1933375) - net: usb: cdc_ncm: don't spew notifications - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared - efi: cper: fix snprintf() use in cper_dimm_err_location() - vfio/pci: Fix error return code in vfio_ecap_init() - vfio/pci: zap_vma_ptes() needs MMU - vfio/platform: fix module_put call in error flow - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service - HID: pidff: fix error return code in hid_pidff_init() - HID: i2c-hid: fix format string mismatch - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches - ieee802154: fix error return code in ieee802154_add_iface() - ieee802154: fix error return code in ieee802154_llsec_getparams() - Bluetooth: fix the erroneous flush_work() order - Bluetooth: use correct lock to prevent UAF of hdev object - net: caif: added cfserl_release function - net: caif: add proper error handling - net: caif: fix memory leak in caif_device_notify - net: caif: fix memory leak in cfusbl_device_notify - ALSA: timer: Fix master timer notification - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed - pid: take a reference when initializing `cad_pid` - ocfs2: fix data corruption by fallocate - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect - btrfs: fix error handling in btrfs_del_csums - btrfs: fixup error handling in fixup_inode_link_counts - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY - selftests/bpf: make 'dubious pointer arithmetic' test useful - bnxt_en: Remove the setting of dev_port. - KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode - sched/fair: Optimize select_idle_cpu - xen-pciback: redo VF placement in the virtual topology - ALSA: usb: update old-style static const declaration - nl80211: validate key indexes for cfg80211_registered_device - x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing - btrfs: return errors from btrfs_del_csums in cleanup_ref_head - KVM: arm64: Fix debug register indexing -- Stefan Bader <email address hidden> Mon, 02 Aug 2021 18:30:16 +0200
Available diffs
linux-snapdragon (4.15.0-1110.119) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1110.119 -proposed tracker (LP: #1938317) [ Ubuntu: 4.15.0-153.160 ] * bionic/linux: 4.15.0-153.160 -proposed tracker (LP: #1938319) * 4.15.0-151 is freezing various CPUs (LP: #1938013) - mac80211: fix memory corruption in EAPOL handling -- Stefan Bader <email address hidden> Thu, 29 Jul 2021 09:40:09 +0200
Available diffs
linux-snapdragon (4.15.0-1109.118) bionic; urgency=medium
[ Ubuntu: 4.15.0-151.157 ]
* CVE-2021-33909
- SAUCE: seq_file: Disallow extremely large seq buffer allocations
Available diffs
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1108.117) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1108.117 -proposed tracker (LP: #1934372) [ Ubuntu: 4.15.0-150.155 ] * bionic/linux: 4.15.0-150.155 -proposed tracker (LP: #1934374) * lxd exec fails (LP: #1934187) - SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against file opener"
Available diffs
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1107.116) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1107.116 -proposed tracker (LP: #1932513) * Packaging resync (LP: #1786013) - [Packaging] resync getabis - [Packaging] update helper scripts [ Ubuntu: 4.15.0-149.153 ] * bionic/linux: 4.15.0-149.153 -proposed tracker (LP: #1933434) * selftests: bpf: test_verifier fixes (LP: #1933385) - bpf: Update selftests to reflect new error states - bpf, selftests: Adjust few selftest result_unpriv outcomes * CVE-2021-33200 - bpf: Fix mask direction swap upon off reg sign change [ Ubuntu: 4.15.0-148.152 ] * bionic/linux: 4.15.0-148.152 -proposed tracker (LP: #1932515) * Packaging resync (LP: #1786013) - update dkms package versions * Upstream v5.9 introduced 'module' patches that removed exported symbols (LP: #1932065) - SAUCE: Revert "modules: inherit TAINT_PROPRIETARY_MODULE" - SAUCE: Revert "modules: return licensing information from find_symbol" - SAUCE: Revert "modules: rename the licence field in struct symsearch to license" - SAUCE: Revert "modules: unexport __module_address" - SAUCE: Revert "modules: unexport __module_text_address" - SAUCE: Revert "modules: mark each_symbol_section static" - SAUCE: Revert "modules: mark find_symbol static" - SAUCE: Revert "modules: mark ref_module static" * Disable hv-kvp-daemon.service on certain instance types (LP: #1932081) - [Packaging]: Add kernel command line condition to hv-kvp-daemon service * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) - openrisc: Fix a memory leak - RDMA/rxe: Clear all QP fields if creation failed - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly - cifs: fix memory leak in smb2_copychunk_range - ALSA: line6: Fix racy initialization of LINE6 MIDI - ALSA: usb-audio: Validate MS endpoint descriptors - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro - Revert "ALSA: sb8: add a check for request_region" - Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails" - rapidio: handle create_workqueue() failure - xen-pciback: reconfigure also from backend watch handler - dm snapshot: fix crash with transient storage and zero chunk size - Revert "video: hgafb: fix potential NULL pointer dereference" - Revert "net: stmicro: fix a missing check of clk_prepare" - Revert "leds: lp5523: fix a missing check of return value of lp55xx_read" - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" - Revert "video: imsttfb: fix potential NULL pointer dereferences" - Revert "ecryptfs: replace BUG_ON with error handling code" - Revert "gdrom: fix a memory leak bug" - cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom - cdrom: gdrom: initialize global variable at init time - Revert "media: rcar_drif: fix a memory disclosure" - Revert "rtlwifi: fix a potential NULL pointer dereference" - Revert "qlcnic: Avoid potential NULL pointer dereference" - Revert "niu: fix missing checks of niu_pci_eeprom_read" - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() - net: stmicro: handle clk_prepare() failure during init - net: rtlwifi: properly check for alloc_workqueue() failure - leds: lp5523: check return value of lp5xx_read and jump to cleanup code - qlcnic: Add null check after calling netdev_alloc_skb - video: hgafb: fix potential NULL pointer dereference - vgacon: Record video mode changes with VT_RESIZEX - vt: Fix character height handling with VT_RESIZEX - tty: vt: always invoke vc->vc_sw->con_resize callback - video: hgafb: correctly handle card detect failure during probe - Bluetooth: SMP: Fail if remote and local public keys are identical - firmware: arm_scpi: Prevent the ternary sign expansion bug - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 - Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference" - mm, vmstat: drop zone->lock in /proc/pagetypeinfo - usb: dwc3: gadget: Enable suspend events - NFC: nci: fix memory leak in nci_allocate_device - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() - iommu/vt-d: Fix sysfs leak in alloc_iommu() - perf intel-pt: Fix sample instruction bytes - perf intel-pt: Fix transaction abort handling - proc: Check /proc/$pid/attr/ writes against file opener - net: hso: fix control-request directions - mac80211: assure all fragments are encrypted - mac80211: prevent mixed key and fragment cache attacks - mac80211: properly handle A-MSDUs that start with an RFC 1042 header - cfg80211: mitigate A-MSDU aggregation attacks - mac80211: drop A-MSDUs on old ciphers - mac80211: add fragment cache to sta_info - mac80211: check defrag PN against current frame - mac80211: prevent attacks on TKIP/WEP as well - mac80211: do not accept/forward invalid EAPOL frames - ath10k: Validate first subframe of A-MSDU before processing the list - dm snapshot: properly fix a crash when an origin has no snapshots - kgdb: fix gcc-11 warnings harder - misc/uss720: fix memory leak in uss720_probe - thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue - mei: request autosuspend after sending rx flow control - staging: iio: cdc: ad7746: avoid overwrite of num_channels - iio: adc: ad7793: Add missing error code in ad7793_setup() - USB: trancevibrator: fix control-request direction - serial: sh-sci: Fix off-by-one error in FIFO threshold register setting - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' - USB: serial: ti_usb_3410_5052: add startech.com device id - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 - USB: serial: ftdi_sio: add IDs for IDS GmbH Products - USB: serial: pl2303: add device id for ADLINK ND-6530 GC - usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() - net: usb: fix memory leak in smsc75xx_bind - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails - NFS: fix an incorrect limit in filelayout_decode_layout() - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config - drm/meson: fix shutdown crash when component not probed - net/mlx4: Fix EEPROM dump support - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" - tipc: skb_linearize the head skb when reassembling msgs - i2c: s3c2410: fix possible NULL pointer deref on read message after write - i2c: i801: Don't generate an interrupt on bus reset - perf jevents: Fix getting maximum number of fds - platform/x86: hp_accel: Avoid invoking _INI to speed up resume - serial: max310x: unregister uart driver in case of failure and abort - net: fujitsu: fix potential null-ptr-deref - net: caif: remove BUG_ON(dev == NULL) in caif_xmit - char: hpet: add checks after calling ioremap - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io - dmaengine: qcom_hidma: comment platform_driver_register call - libertas: register sysfs groups properly - media: dvb: Add check on sp8870_readreg return - media: gspca: properly check for errors in po1030_probe() - scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic - openrisc: Define memory barrier mb - btrfs: do not BUG_ON in link_to_fixup_dir - platform/x86: hp-wireless: add AMD's hardware id to the supported list - platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI - SMB3: incorrect file id in requests compounded with open - drm/amdgpu: Fix a use-after-free - net: netcp: Fix an error message - net: mdio: thunder: Fix a double free issue in the .remove function - net: mdio: octeon: Fix some double free issues - net: bnx2: Fix error return code in bnx2_init_board() - mld: fix panic in mld_newpack() - staging: emxx_udc: fix loop in _nbu2ss_nuke() - ASoC: cs35l33: fix an error code in probe() - bpf: Set mac_len in bpf_skb_change_head - ixgbe: fix large MTU request from VF - scsi: libsas: Use _safe() loop in sas_resume_port() - ipv6: record frag_max_size in atomic fragments in input path - sch_dsmark: fix a NULL deref in qdisc_reset() - MIPS: alchemy: xxs1500: add gpio-au1000.h header file - MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c - hugetlbfs: hugetlb_fault_mutex_hash() cleanup - drivers/net/ethernet: clean up unused assignments - usb: core: reduce power-on-good delay time of root hub - USB: usbfs: Don't WARN about excessively large memory allocations - bpf: extend is_branch_taken to registers - bpf: Move off_reg into sanitize_ptr_alu - bpf: Ensure off_reg has no mixed signed bounds for all types - bpf: Rework ptr_limit into alu_limit and add common error path - bpf: Improve verifier error messages for users - bpf: Refactor and streamline bounds check into helper - bpf: Move sanitize_val_alu out of op switch - bpf: Tighten speculative pointer arithmetic mask - bpf: Fix leakage of uninitialized bpf stack under speculation - bpf: Wrap aux data inside bpf_sanitize_info container - bpf: No need to simulate speculative domain for immediates - net: dsa: fix a crash if ->get_sset_count() fails - drm/amd/amdgpu: fix refcount leak - net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count - openvswitch: meter: fix race when getting now_ms. - net: hns3: check the return of skb_checksum_help() * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE-2020-24587 for such cases. - mac80211: extend protection against mixed key and fragment cache attacks * [82A1, Realtek ALC287, Speaker, Internal] Underruns, dropouts or crackling sound (LP: #1925057) // Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) - ALSA: hda/realtek: reset eapd coeff to default value for alc287 * test_map in ubuntu_bpf failed with "Allowed update sockmap '0:3' not in ESTABLISHED" (LP: #1839912) - SAUCE: Revert "bpf: test_maps, only support ESTABLISHED socks" * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) - MIPS: Introduce isa-rev.h to define MIPS_ISA_REV - MIPS: cpu-features.h: Replace __mips_isa_rev with MIPS_ISA_REV - s390/disassembler: increase ebpf disasm buffer size - ACPI: custom_method: fix potential use-after-free issue - ACPI: custom_method: fix a possible memory leak - arm64: dts: mt8173: fix property typo of 'phys' in dsi node - ecryptfs: fix kernel panic with null dev_name - spi: spi-ti-qspi: Free DMA resources - mmc: block: Update ext_csd.cache_ctrl if it was written - mmc: core: Do a power cycle when the CMD11 fails - mmc: core: Set read only for SD cards with permanent write protect bit - cifs: Return correct error code from smb2_get_enc_key - btrfs: fix metadata extent leak after failure to create subvolume - intel_th: pci: Add Rocket Lake CPU support - fbdev: zero-fill colormap in fbcmap.c - staging: wimax/i2400m: fix byte-order issue - crypto: api - check for ERR pointers in crypto_destroy_tfm() - usb: gadget: uvc: add bInterval checking for HS mode - usb: gadget: f_uac1: validate input parameters - usb: dwc3: gadget: Ignore EP queue requests during bus reset - usb: xhci: Fix port minor revision - PCI: PM: Do not read power state in pci_enable_device_flags() - x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS) - tee: optee: do not check memref size on return from Secure World - perf/arm_pmu_platform: Fix error handling - spi: dln2: Fix reference leak to master - spi: omap-100k: Fix reference leak to master - intel_th: Consistency and off-by-one fix - phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe - scsi: lpfc: Fix pt2pt connection does not recover after LOGO - scsi: target: pscsi: Fix warning in pscsi_complete_cmd() - media: ite-cir: check for receive overflow - power: supply: bq27xxx: fix power_avg for newer ICs - extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs - media: gspca/sq905.c: fix uninitialized variable - power: supply: Use IRQF_ONESHOT - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() - scsi: qla2xxx: Fix use after free in bsg - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() - media: em28xx: fix memory leak - media: vivid: update EDID - clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return - power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() - power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() - media: adv7604: fix possible use-after-free in adv76xx_remove() - media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() - media: i2c: adv7842: fix possible use-after-free in adv7842_remove() - media: dvb-usb: fix memory leak in dvb_usb_adapter_init - media: gscpa/stv06xx: fix memory leak - drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal - drm/amdgpu: fix NULL pointer dereference - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic - scsi: libfc: Fix a format specifier - ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer - ALSA: hda/conexant: Re-order CX5066 quirk table entries - ALSA: sb: Fix two use after free in snd_sb_qsound_build - btrfs: fix race when picking most recent mod log operation for an old root - arm64/vdso: Discard .note.gnu.property sections in vDSO - openvswitch: fix stack OOB read while fragmenting IPv4 packets - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure - NFSv4: Don't discard segments marked for return in _pnfs_return_layout() - jffs2: Fix kasan slab-out-of-bounds problem - powerpc/eeh: Fix EEH handling for hugepages in ioremap space. - powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h - intel_th: pci: Add Alder Lake-M support - md/raid1: properly indicate failure when ending a failed write request - security: commoncap: fix -Wstringop-overread warning - Fix misc new gcc warnings - jffs2: check the validity of dstlen in jffs2_zlib_compress() - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") - posix-timers: Preserve return value in clock_adjtime32() - ftrace: Handle commands when closing set_ftrace_filter file - ext4: fix check to prevent false positive report of incorrect used inodes - ext4: fix error code in ext4_commit_super - media: dvbdev: Fix memory leak in dvb_media_device_free() - usb: gadget: dummy_hcd: fix gpf in gadget_setup - usb: gadget: Fix double free of device descriptor pointers - usb: gadget/function/f_fs string table fix for multiple languages - usb: dwc3: gadget: Fix START_TRANSFER link state check - tracing: Map all PIDs to command lines - dm persistent data: packed struct should have an aligned() attribute too - dm space map common: fix division bug in sm_ll_find_free_block() - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails - modules: mark ref_module static - modules: mark find_symbol static - modules: mark each_symbol_section static - modules: unexport __module_text_address - modules: unexport __module_address - modules: rename the licence field in struct symsearch to license - modules: return licensing information from find_symbol - modules: inherit TAINT_PROPRIETARY_MODULE - Bluetooth: verify AMP hci_chan before amp_destroy - hsr: use netdev_err() instead of WARN_ONCE() - bluetooth: eliminate the potential race condition when removing the HCI controller - net/nfc: fix use-after-free llcp_sock_bind/connect - MIPS: pci-rt2880: fix slot 0 configuration - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR - misc: lis3lv02d: Fix false-positive WARN on various HP models - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct - misc: vmw_vmci: explicitly initialize vmci_datagram payload - tracing: Restructure trace_clock_global() to never block - md-cluster: fix use-after-free issue when removing rdev - md: split mddev_find - md: factor out a mddev_find_locked helper from mddev_find - md: md_open returns -EBUSY when entering racing area - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() - cfg80211: scan: drop entry from hidden_list on overflow - drm/radeon: fix copy of uninitialized variable back to userspace - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices - x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported - KVM: s390: split kvm_s390_logical_to_effective - KVM: s390: fix guarded storage control register handling - KVM: s390: split kvm_s390_real_to_abs - usb: gadget: pch_udc: Revert d3cb25a12138 completely - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow - serial: stm32: fix incorrect characters on console - serial: stm32: fix tx_empty condition - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS - x86/microcode: Check for offline CPUs before requesting new microcode - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() - usb: gadget: pch_udc: Check if driver is present before calling ->setup() - usb: gadget: pch_udc: Check for DMA mapping error - crypto: qat - don't release uninitialized resources - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - fotg210-udc: Fix DMA on EP0 for length > max packet size - fotg210-udc: Fix EP0 IN requests bigger than two packets - fotg210-udc: Remove a dubious condition leading to fotg210_done - fotg210-udc: Mask GRP2 interrupts we don't handle - fotg210-udc: Don't DMA more than the buffer can take - fotg210-udc: Complete OUT requests on short packets - mtd: require write permissions for locking and badblock ioctls - bus: qcom: Put child node before return - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally - crypto: qat - fix error path in adf_isr_resource_alloc() - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init - staging: rtl8192u: Fix potential infinite loop - staging: greybus: uart: fix unprivileged TIOCCSERIAL - spi: Fix use-after-free with devm_spi_alloc_* - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz - soc: qcom: mdt_loader: Detect truncated read of segments - ACPI: CPPC: Replace cppc_attr with kobj_attribute - crypto: qat - Fix a double free in adf_create_ring - usb: gadget: r8a66597: Add missing null check on return from platform_get_resource - USB: cdc-acm: fix unprivileged TIOCCSERIAL - tty: fix return value for unsupported ioctls - firmware: qcom-scm: Fix QCOM_SCM configuration - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table - x86/platform/uv: Fix !KEXEC build failure - ttyprintk: Add TTY hangup callback. - media: vivid: fix assignment of dev->fbuf_out_flags - media: omap4iss: return error code when omap4iss_get() failed - media: m88rs6000t: avoid potential out-of-bounds reads on arrays - x86/kprobes: Fix to check non boostable prefixes correctly - pata_arasan_cf: fix IRQ check - pata_ipx4xx_cf: fix IRQ check - sata_mv: add IRQ checks - ata: libahci_platform: fix IRQ check - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer - clk: uniphier: Fix potential infinite loop - scsi: jazz_esp: Add IRQ check - scsi: sun3x_esp: Add IRQ check - scsi: sni_53c710: Add IRQ check - mfd: stm32-timers: Avoid clearing auto reload register - HSI: core: fix resource leaks in hsi_add_client_from_dt() - x86/events/amd/iommu: Fix sysfs type mismatch - HID: plantronics: Workaround for double volume key presses - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars - net: lapbether: Prevent racing when checking whether the netif is running - powerpc/prom: Mark identical_pvr_fixup as __init - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect - bug: Remove redundant condition check in report_bug - nfc: pn533: prevent potential memory corruption - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls - liquidio: Fix unintented sign extension of a left shift of a u16 - powerpc/perf: Fix PMU constraint check for EBB events - powerpc: iommu: fix build when neither PCI or IBMVIO is set - mac80211: bail out if cipher schemes are invalid - mt7601u: fix always true expression - IB/hfi1: Fix error return code in parse_platform_config() - net: thunderx: Fix unintentional sign extension issue - i2c: cadence: add IRQ check - i2c: emev2: add IRQ check - i2c: jz4780: add IRQ check - i2c: sh7760: add IRQ check - MIPS: pci-legacy: stop using of_pci_range_to_resource - powerpc/pseries: extract host bridge from pci_bus prior to bus removal - rtlwifi: 8821ae: upgrade PHY and RF parameters - i2c: sh7760: fix IRQ error path - mwl8k: Fix a double Free in mwl8k_probe_hw - vsock/vmci: log once the failed queue pair allocation - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails - net: davinci_emac: Fix incorrect masking of tx and rx error channel - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req - kfifo: fix ternary sign extension bugs - smp: Fix smp_call_function_single_async prototype - Revert "of/fdt: Make sure no-map does not remove already reserved regions" - Revert "fdt: Properly handle "no-map" field in the memory region" - tpm: fix error return code in tpm2_get_cc_attrs_tbl() - fs: dlm: fix debugfs dump - tipc: convert dest node's address to network order - net: stmmac: Set FIFO sizes for ipq806x - ALSA: hdsp: don't disable if not enabled - ALSA: hdspm: don't disable if not enabled - ALSA: rme9652: don't disable if not enabled - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default - Bluetooth: initialize skb_queue_head at l2cap_chan_create() - Bluetooth: check for zapped sk before connecting - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods - mac80211: clear the beacon's CRC after channel switch - pinctrl: samsung: use 'int' for register masks in Exynos - cuse: prevent clone - selftests: Set CC to clang in lib.mk if LLVM is set - kconfig: nconf: stop endless search loops - sctp: Fix out-of-bounds warning in sctp_process_asconf_param() - powerpc/smp: Set numa node before updating mask - ASoC: rt286: Generalize support for ALC3263 codec - samples/bpf: Fix broken tracex1 due to kprobe argument change - powerpc/pseries: Stop calling printk in rtas_stop_self() - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join - powerpc/iommu: Annotate nested lock for lockdep - net: ethernet: mtk_eth_soc: fix RX VLAN offload - ASoC: rt286: Make RT286_SET_GPIO_* readable and writable - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs - PCI: Release OF node in pci_scan_device()'s error path - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook - rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() - NFSv4.2: Always flush out writes in nfs42_proc_fallocate() - NFS: Deal correctly with attribute generation counter overflow - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() - NFSv4.2 fix handling of sr_eof in SEEK's reply - rtc: ds1307: Fix wday settings for rx8130 - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b - drm/radeon: Fix off-by-one power_state index heap overwrite - khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() - ksm: fix potential missing rmap_item for stable_node - net: fix nla_strcmp to handle more then one trailing null character - kernel: kexec_file: fix error return code of kexec_calculate_store_digests() - netfilter: nftables: avoid overflows in nft_hash_buckets() - ARC: entry: fix off-by-one error in syscall number validation - powerpc/64s: Fix crashes when toggling stf barrier - powerpc/64s: Fix crashes when toggling entry flush barrier - squashfs: fix divide error in calculate_skip() - userfaultfd: release page in error path to avoid BUG_ON - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error - usb: fotg210-hcd: Fix an error message - ACPI: scan: Fix a memory leak in an error handling path - blk-mq: Swap two calls in blk_mq_exit_queue() - usb: dwc3: omap: improve extcon initialization - usb: xhci: Increase timeout for HC halt - usb: dwc2: Fix gadget DMA unmap direction - usb: core: hub: fix race condition about TRSMRCY of resume - iio: gyro: mpu3050: Fix reported temperature value - iio: tsl2583: Fix division by a zero lux_val - KVM: x86: Cancel pvclock_gtod_work on module removal - FDDI: defxx: Make MMIO the configuration default except for EISA - MIPS: Reinstate platform `__div64_32' handler - MIPS: Avoid DIVU in `__div64_32' is result would be zero - MIPS: Avoid handcoded DIVU in `__div64_32' altogether - thermal/core/fair share: Lock the thermal zone while looping over instances - RDMA/i40iw: Avoid panic when reading back the IRQ affinity hint - kobject_uevent: remove warning in init_uevent_argv() - netfilter: conntrack: Make global sysctls readonly in non-init netns - clk: exynos7: Mark aclk_fsys1_200 as critical - x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes - kgdb: fix gcc-11 warning on indentation - usb: sl811-hcd: improve misleading indentation - cxgb4: Fix the -Wmisleading-indentation warning - isdn: capi: fix mismatched prototypes - PCI: thunder: Fix compile testing - ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() - ACPI / hotplug / PCI: Fix reference count leak in enable_slot() - Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices - Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state - um: Mark all kernel symbols as local - ceph: fix fscache invalidation - gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP - block: reexpand iov_iter after read/write - lib: stackdepot: turn depot_lock spinlock to raw_spinlock - sit: proper dev_{hold|put} in ndo_[un]init methods - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods - xhci: Do not use GFP_KERNEL in (potentially) atomic context - ipv6: remove extra dev_hold() for fallback tunnels - ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld - arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node - mtd: rawnand: atmel: Update ecc_stats.corrected counter - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers - genirq/matrix: Prevent allocation counter corruption - usb: xhci-mtk: support quirk to disable usb2 lpm - media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB - media: tc358743: fix possible use-after-free in tc358743_remove() - amdgpu: avoid incorrect %hu format string - s390/archrandom: add parameter check for s390_arch_random_generate - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8 - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx - ubifs: Only check replay with inode type to judge if inode linked - mlxsw: spectrum_mr: Update egress RIF list before route's action - NFS: Don't discard pNFS layout segments that are marked for return - tpm: vtpm_proxy: Avoid reading host log when using a virtual device - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences - arm64: vdso: remove commas between macro name and arguments - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() - tty: fix memory leak in vc_deallocate - rsi: Use resume_noirq for SDIO - MIPS: pci-mt7620: fix PLL lock check - md: Fix missing unused status line of /proc/mdstat - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries - ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family - ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family - ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family - regmap: set debugfs_name to NULL after it is freed - mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe() - mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC - mtd: rawnand: qcom: Return actual error code instead of -ENODEV - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() - clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE - scsi: ibmvfc: Fix invalid state machine BUG_ON() - sched/debug: Fix cgroup_path[] serialization - net: hns3: Limiting the scope of vector_ring_chain variable - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res - net: Only allow init netns to set default tcp cong to a restricted algo - i2c: bail out early when RDWR parameters are wrong - net: bridge: when suppression is enabled exclude RARP packets - i2c: Add I2C_AQ_NO_REP_START adapter quirk - ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user() - PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc() - PCI: endpoint: Fix missing destroy_workqueue() - net: hns3: disable phy loopback setting in hclge_mac_start_phy - sctp: do asoc update earlier in sctp_sf_do_dupcook_a - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - netfilter: xt_SECMARK: add new revision to fix structure layout - drm/radeon: Avoid power table parsing memory leaks - sched/fair: Fix unfairness caused by missing load decay - xhci: Add reset resume quirk for AMD xhci controller. - cdc-wdm: untangle a circular dependency between callback and softint - nvme: do not try to reconfigure APST when the controller is not live - pinctrl: ingenic: Improve unreachable code generation - ARM: 9075/1: kernel: Fix interrupted SMC calls - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found - tweewide: Fix most Shebang lines - scripts: switch explicitly to Python 3 -- Stefan Bader <email address hidden> Fri, 25 Jun 2021 13:05:50 +0200
Available diffs
linux-snapdragon (4.15.0-1106.115) bionic; urgency=medium
[ Ubuntu: 4.15.0-147.151 ]
* CVE-2021-3444
- bpf: Fix truncation handling for mod32 dst reg wrt zero
* CVE-2021-3600
- SAUCE: bpf: Do not use ax register in interpreter on div/mod
- bpf: fix subprog verifier bypass by div/mod by 0 exception
- SAUCE: bpf: Fix 32-bit register truncation on div/mod instruction
Available diffs
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1104.113) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1104.113 -proposed tracker (LP: #1929965) [ Ubuntu: 4.15.0-145.149 ] * bionic/linux: 4.15.0-145.149 -proposed tracker (LP: #1929967) * Packaging resync (LP: #1786013) - update dkms package versions * raid10: Block discard is very slow, causing severe delays for mkfs and fstrim operations (LP: #1896578) - md: add md_submit_discard_bio() for submitting discard bio - md/raid10: extend r10bio devs to raid disks - md/raid10: pull the code that wait for blocked dev into one function - md/raid10: improve raid10 discard request - md/raid10: improve discard request for far layout * CVE-2021-23133 - sctp: delay auto_asconf init until binding the first addr * Bionic update: upstream stable patchset 2021-05-25 (LP: #1929603) - Input: nspire-keypad - enable interrupts only when opened - dmaengine: dw: Make it dependent to HAS_IOMEM - ARM: dts: Fix moving mmc devices with aliases for omap4 & 5 - arc: kernel: Return -EFAULT if copy_to_user() fails - neighbour: Disregard DEAD dst in neigh_update - ARM: keystone: fix integer overflow warning - ASoC: fsl_esai: Fix TDM slot setup for I2S mode - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state - net: ieee802154: stop dump llsec keys for monitors - net: ieee802154: stop dump llsec devs for monitors - net: ieee802154: forbid monitor for add llsec dev - net: ieee802154: stop dump llsec devkeys for monitors - net: ieee802154: forbid monitor for add llsec devkey - net: ieee802154: stop dump llsec seclevels for monitors - net: ieee802154: forbid monitor for add llsec seclevel - pcnet32: Use pci_resource_len to validate PCI resource - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN - Input: i8042 - fix Pegatron C15B ID entry - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices - readdir: make sure to verify directory entry for legacy interfaces too - arm64: fix inline asm in load_unaligned_zeropad() - arm64: alternatives: Move length validation in alternative_{insn, endif} - scsi: libsas: Reset num_scatter if libata marks qc as NODATA - netfilter: conntrack: do not print icmpv6 as unknown via /proc - netfilter: nft_limit: avoid possible divide error in nft_limit_init - net: davicom: Fix regulator not turned off on failed probe - net: sit: Unregister catch-all devices - i40e: fix the panic when running bpf in xdpdrv mode - ibmvnic: avoid calling napi_disable() twice - ibmvnic: remove duplicate napi_schedule call in do_reset function - ibmvnic: remove duplicate napi_schedule call in open function - ARM: footbridge: fix PCI interrupt mapping - ARM: 9071/1: uprobes: Don't hook on thumb instructions - pinctrl: lewisburg: Update number of pins in community - HID: wacom: Assign boolean values to a bool variable - ARM: dts: Fix swapped mmc order for omap3 - net: geneve: check skb is large enough for IPv4/IPv6 header - s390/entry: save the caller of psw_idle - xen-netback: Check for hotplug-status existence before watching - cavium/liquidio: Fix duplicate argument - ia64: fix discontig.c section mismatches - ia64: tools: remove duplicate definition of ia64_mf() on ia64 - x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access - net: hso: fix NULL-deref on disconnect regression - USB: CDC-ACM: fix poison/unpoison imbalance - lockdep: Add a missing initialization hint to the "INFO: Trying to register non-static key" message - drm/msm: Fix a5xx/a6xx timestamps - Input: s6sy761 - fix coordinate read bit shift - net: ip6_tunnel: Unregister catch-all devices - ACPI: tables: x86: Reserve memory occupied by ACPI tables - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() - net: usb: ax88179_178a: initialize local variables before use - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() - mips: Do not include hi and lo in clobber list for R6 - bpf: Fix masking negation logic upon negative dst register - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX - USB: Add reset-resume quirk for WD19's Realtek Hub - platform/x86: thinkpad_acpi: Correct thermal sensor allocation * r8152 tx status -71 (LP: #1922651) // Bionic update: upstream stable patchset 2021-05-25 (LP: #1929603) - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet * seccomp_bpf:syscall_faked from kselftests fail on s390x (LP: #1928522) - selftests/seccomp: s390 shares the syscall and return value register * Fix kdump failures (LP: #1927518) - video: hyperv_fb: Add ratelimit on error message - Drivers: hv: vmbus: Increase wait time for VMbus unload - Drivers: hv: vmbus: Initialize unload_event statically -- Ian May <email address hidden> Tue, 01 Jun 2021 14:33:50 -0500
Available diffs
linux-snapdragon (4.15.0-1103.112) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1103.112 -proposed tracker (LP: #1927646) [ Ubuntu: 4.15.0-144.148 ] * bionic/linux: 4.15.0-144.148 -proposed tracker (LP: #1927648) * Introduce the 465 driver series, fabric-manager, and libnvidia-nscq (LP: #1925522) - debian/dkms-versions -- add NVIDIA 465 and migrate 450 to 460 * xfrm_policy.sh / pmtu.sh / udpgso_bench.sh from net in ubuntu_kernel_selftests will fail if running the whole suite (LP: #1856010) - selftests/net: bump timeout to 5 minutes * locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (LP: #1926184) - locking/barriers: Introduce smp_cond_load_relaxed() and atomic_cond_read_relaxed() - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() * Bionic update: upstream stable patchset 2021-04-30 (LP: #1926808) - net: fec: ptp: avoid register access when ipg clock is disabled - powerpc/4xx: Fix build errors from mfdcr() - atm: eni: dont release is never initialized - atm: lanai: dont run lanai_dev_close if not open - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" - ixgbe: Fix memleak in ixgbe_configure_clsu32 - net: tehuti: fix error return code in bdx_probe() - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count - gpiolib: acpi: Add missing IRQF_ONESHOT - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default - NFS: Correct size calculation for create reply length - net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() - net: wan: fix error return code of uhdlc_init() - atm: uPD98402: fix incorrect allocation - atm: idt77252: fix null-ptr-dereference - sparc64: Fix opcode filtering in handling of no fault loads - u64_stats,lockdep: Fix u64_stats_init() vs lockdep - drm/radeon: fix AGP dependency - nfs: we don't support removing system.nfs4_acl - ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls - ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign - squashfs: fix inode lookup sanity checks - squashfs: fix xattr id and id lookup sanity checks - arm64: dts: ls1046a: mark crypto engine dma coherent - arm64: dts: ls1012a: mark crypto engine dma coherent - arm64: dts: ls1043a: mark crypto engine dma coherent - ARM: dts: at91-sama5d27_som1: fix phy address to 7 - dm ioctl: fix out of bounds array access when no devices - bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD - libbpf: Fix INSTALL flag order - macvlan: macvlan_count_rx() needs to be aware of preemption - net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port - e1000e: add rtnl_lock() to e1000_reset_task - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template - ftgmac100: Restart MAC HW once - can: peak_usb: add forgotten supported devices - can: c_can_pci: c_can_pci_remove(): fix use-after-free - can: c_can: move runtime PM enable/disable to c_can_platform - can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning - mac80211: fix rate mask reset - net: cdc-phonet: fix data-interface release on probe failure - net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes - drm/msm: fix shutdown hook in case GPU components failed to bind - arm64: kdump: update ppos when reading elfcorehdr - net/mlx5e: Fix error path for ethtool set-priv-flag - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server - ACPI: scan: Rearrange memory allocation in acpi_device_add() - ACPI: scan: Use unique number for instance_no - perf auxtrace: Fix auxtrace queue conflict - scsi: qedi: Fix error return code of qedi_alloc_global_queues() - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() - locking/mutex: Fix non debug version of mutex_lock_io_nested() - can: dev: Move device back to init netns on owning netns delete - net: sched: validate stab values - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() - mac80211: fix double free in ibss_leave - ext4: add reclaim checks to xattr code - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" - block: Suppress uevent for hidden device when removed - netsec: restore phy power state after controller reset - can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate - dm verity: add root hash pkcs#7 signature verification - x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc() - selinux: vsock: Set SID for socket returned by accept() - ipv6: weaken the v4mapped source check - ext4: fix bh ref count on error paths - rpc: fix NULL dereference on kmalloc failure - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 - ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 - ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe - ASoC: es8316: Simplify adc_pga_gain_tlv table - ASoC: cs42l42: Fix mixer volume control - ASoC: cs42l42: Always wait at least 3ms after reset - vhost: Fix vhost_vq_reset() - scsi: st: Fix a use after free in st_open() - scsi: qla2xxx: Fix broken #endif placement - staging: comedi: cb_pcidas: fix request_irq() warn - staging: comedi: cb_pcidas64: fix request_irq() warn - ASoC: rt5659: Update MCLK rate in set_sysclk() - ext4: do not iput inode under running transaction in ext4_rename() - brcmfmac: clear EAP/association status bits on linkdown events - net: ethernet: aquantia: Handle error cleanup of start on open - appletalk: Fix skb allocation size in loopback case - net: wan/lmc: unregister device when no matching device is found - bpf: Remove MTU check in __bpf_skb_max_len - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook - tracing: Fix stack trace event size - mm: fix race by making init_zero_pfn() early_initcall - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() - drm/amdgpu: check alignment on CPU page for bo map - reiserfs: update reiserfs_xattrs_initialized() condition - mm: memcontrol: fix NR_WRITEBACK leak in memcg and system stats - mm: memcg: make sure memory.events is uptodate when waking pollers - mem_cgroup: make sure moving_account, move_lock_task and stat_cpu in the same cacheline - mm: fix oom_kill event handling - mm: writeback: use exact memcg dirty counts - pinctrl: rockchip: fix restore error in resume - extcon: Add stubs for extcon_register_notifier_all() functions - extcon: Fix error handling in extcon_dev_register - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem - usb: musb: Fix suspend with devices connected for a64 - usb: xhci-mtk: fix broken streams issue on 0.96 xHCI - cdc-acm: fix BREAK rx code path adding necessary calls - USB: cdc-acm: untangle a circular dependency between callback and softint - USB: cdc-acm: downgrade message to debug - USB: cdc-acm: fix use-after-free after probe failure - usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference - staging: rtl8192e: Fix incorrect source in memcpy() - staging: rtl8192e: Change state information from u16 to u8 - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() - ARM: dts: am33xx: add aliases for mmc interfaces - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove - mISDN: fix crash in fritzpci - mac80211: choose first enabled channel for monitor - drm/msm: Ratelimit invalid-fence message - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state - x86/build: Turn off -fcf-protection for realmode targets - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() - ia64: mca: allocate early mca with GFP_ATOMIC - cifs: revalidate mapping when we open files for SMB1 POSIX - cifs: Silently ignore unknown oplock break handle - init/Kconfig: make COMPILE_TEST depend on !S390 - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM - ia64: fix format strings for err_inject - ALSA: aloop: Fix initialization of controls - ASoC: intel: atom: Stop advertising non working S24LE support - nfc: fix refcount leak in llcp_sock_bind() - nfc: fix refcount leak in llcp_sock_connect() - nfc: fix memory leak in llcp_sock_connect() - nfc: Avoid endless loops caused by repeated llcp_sock_connect() - xen/evtchn: Change irq_info lock to raw_spinlock_t - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh - ia64: fix user_stack_pointer() for ptrace() - ocfs2: fix deadlock between setattr and dio_end_io_write - fs: direct-io: fix missing sdio->boundary - parisc: parisc-agp requires SBA IOMMU driver - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field - net: ensure mac header is set in virtio_net_hdr_to_skb() - net: sched: sch_teql: fix null-pointer dereference - usbip: add sysfs_lock to synchronize sysfs code paths - usbip: stub-dev synchronize sysfs code paths - usbip: synchronize event handler with sysfs code paths - i2c: turn recovery error on init to debug - regulator: bd9571mwv: Fix AVS and DVFS voltage range - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips - amd-xgbe: Update DMA coherency values - sch_red: fix off-by-one checks in red_check_params() - gianfar: Handle error code at MAC address change - net:tipc: Fix a double free in tipc_sk_mcast_rcv - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces - net/ncsi: Avoid channel_monitor hrtimer deadlock - ASoC: sunxi: sun4i-codec: fill ASoC card owner - soc/fsl: qbman: fix conflicting alignment attributes - clk: fix invalid usage of list cursor in register - clk: fix invalid usage of list cursor in unregister - workqueue: Move the position of debug_work_activate() in __queue_work() - s390/cpcmd: fix inline assembly register clobbering - net/mlx5: Fix placement of log_max_flow_counter - RDMA/cxgb4: check for ipv6 address properly while destroying listener - clk: socfpga: fix iomem pointer cast on 64-bit - net/ncsi: Add generic netlink family - net/ncsi: Refactor MAC, VLAN filters - net/ncsi: Avoid GFP_KERNEL in response handler - cfg80211: remove WARN_ON() in cfg80211_sme_connect - net: tun: set tun->dev->addr_len during TUNSETLINK processing - drivers: net: fix memory leak in atusb_probe - drivers: net: fix memory leak in peak_usb_create_dev - net: mac802154: Fix general protection fault - net: ieee802154: nl-mac: fix check on panid - net: ieee802154: fix nl802154 del llsec key - net: ieee802154: fix nl802154 del llsec dev - net: ieee802154: fix nl802154 add llsec key - net: ieee802154: fix nl802154 del llsec devkey - net: ieee802154: forbid monitor for set llsec params - net: ieee802154: forbid monitor for del llsec seclevel - net: ieee802154: stop dump llsec params for monitors - Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath." - KVM: arm64: Hide system instruction access to Trace registers - KVM: arm64: Disable guest access to trace filter controls - drm/imx: imx-ldb: fix out of bounds array access warning - gfs2: report "already frozen/thawed" errors - block: only update parent bi_status when bio fail - net: phy: broadcom: Only advertise EEE for supported modes - netfilter: x_tables: fix compat match/target pad out-of-bound write - perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches - xen/events: fix setting irq affinity - net: hso: fix null-ptr-deref during tty device unregistration - usbip: vudc synchronize sysfs code paths - net: xfrm: Localize sequence counter per network namespace - i40e: Added Asym_Pause to supported link modes - i40e: Fix kernel oops when i40e driver removes VF's - drm/tegra: dc: Don't set PLL clock to 0Hz - riscv,entry: fix misaligned base for excp_vect_table * s390x broken with unknown syscall number on kernels < 5.8 (LP: #1895132) - s390/ptrace: return -ENOSYS when invalid syscall is supplied - s390/ptrace: pass invalid syscall numbers to tracing * Bionic update: upstream stable patchset 2021-04-14 (LP: #1923897) - uapi: nfnetlink_cthelper.h: fix userspace compilation error - ath9k: fix transmitting to stations in dynamic SMPS mode - net: Fix gro aggregation for udp encaps with zero csum - net: Introduce parse_protocol header_ops callback - net: check if protocol extracted by virtio_net_hdr_set_proto is correct - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 - can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership - can: flexcan: assert FRZ bit in flexcan_chip_freeze() - can: flexcan: enable RX FIFO after FRZ/HALT valid - netfilter: x_tables: gpf inside xt_find_revision() - cifs: return proper error code in statfs(2) - scripts/recordmcount.{c,pl}: support -ffunction-sections .text.* section names - Revert "mm, slub: consider rest of partial list if acquire_slab() fails" - sh_eth: fix TRSCER mask for SH771x - net/mlx4_en: update moderation when config reset - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 - net: sched: avoid duplicates in classes dump - net: usb: qmi_wwan: allow qmimux add/del with master up - cipso,calipso: resolve a number of problems with the DOI refcounts - net: lapbether: Remove netif_start_queue / netif_stop_queue - net: davicom: Fix regulator not turned off on failed probe - net: davicom: Fix regulator not turned off on driver removal - net: stmmac: stop each tx channel independently - perf traceevent: Ensure read cmdlines are null terminated. - s390/cio: return -EFAULT if copy_to_user() fails again - drm/compat: Clear bounce structures - drm: meson_drv add shutdown function - s390/cio: return -EFAULT if copy_to_user() fails - media: usbtv: Fix deadlock on suspend - net: phy: fix save wrong speed and duplex problem if autoneg is on - udf: fix silent AED tagLocation corruption - mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()' - mmc: mediatek: fix race condition between msdc_request_timeout and irq - powerpc: improve handling of unrecoverable system reset - powerpc/perf: Record counter overflow always if SAMPLE_IP is unset - PCI: xgene-msi: Fix race in installing chained irq handler - PCI: mediatek: Add missing of_node_put() to fix reference leak - s390/smp: __smp_rescan_cpus() - move cpumask away from stack - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling - ALSA: hda/hdmi: Cancel pending works before suspend - ALSA: hda: Drop the BATCH workaround for AMD controllers - ALSA: hda: Avoid spurious unsol event handling during S3/S4 - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar - Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") - s390/dasd: fix hanging DASD driver unbind - s390/dasd: fix hanging IO request during DASD driver unbind - mmc: core: Fix partition switch time for eMMC - Goodix Fingerprint device is not a modem - USB: gadget: u_ether: Fix a configfs return code - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot - usb: gadget: f_uac1: stop playback on function disable - usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM - xhci: Improve detection of device initiated wake signal. - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing - USB: serial: io_edgeport: fix memory leak in edge_startup - USB: serial: ch341: add new Product ID - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter - USB: serial: cp210x: add some more GE USB IDs - usbip: fix stub_dev to check for stream socket - usbip: fix vhci_hcd to check for stream socket - usbip: fix vudc to check for stream socket - usbip: fix vhci_hcd attach_store() races leading to gpf - staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() - staging: rtl8712: unterminated string leads to read overflow - staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() - staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd - staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan - staging: comedi: addi_apci_1032: Fix endian problem for COS sample - staging: comedi: addi_apci_1500: Fix endian problem for command sample - staging: comedi: adv_pci1710: Fix endian problem for AI command data - staging: comedi: das6402: Fix endian problem for AI command data - staging: comedi: das800: Fix endian problem for AI command data - staging: comedi: dmm32at: Fix endian problem for AI command data - staging: comedi: me4000: Fix endian problem for AI command data - staging: comedi: pcl711: Fix endian problem for AI command data - staging: comedi: pcl818: Fix endian problem for AI command data - sh_eth: fix TRSCER mask for R7S72100 - NFSv4.2: fix return value of _nfs4_get_security_label() - block: rsxx: fix error return code of rsxx_pci_probe() - configfs: fix a use-after-free in __configfs_open_file - stop_machine: mark helpers __always_inline - include/linux/sched/mm.h: use rcu_dereference in in_vfork() - powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() - binfmt_misc: fix possible deadlock in bm_register_write - hwmon: (lm90) Fix max6658 sporadic wrong temperature reading - KVM: arm64: Fix exclusive limit for IPA size - xen/events: reset affinity of 2-level event when tearing it down - xen/events: don't unmask an event channel when an eoi is pending - xen/events: avoid handling the same event on two cpus at the same time - tcp: add sanity tests to TCP_QUEUE_SEQ - net: qrtr: fix error return code of qrtr_sendmsg() - net: stmmac: fix watchdog timeout during suspend/resume stress test - i2c: rcar: optimize cacheline to minimize HW race condition - powerpc/pci: Add ppc_md.discover_phbs() - PCI: Fix pci_register_io_range() memory leak - i40e: Fix memory leak in i40e_probe - ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk - ALSA: usb-audio: Apply the control quirk to Plantronics headsets - mmc: cqhci: Fix random crash when remove mmc module/card - usbip: fix vudc usbip_sockfd_store races leading to gpf - net: dsa: b53: Support setting learning on port - ext4: check journal inode extents more carefully - perf tools: Use %define api.pure full instead of %pure-parser - tools build feature: Check if get_current_dir_name() is available - tools build feature: Check if eventfd() is available - tools build: Check if gettid() is available before providing helper - tools build feature: Check if pthread_barrier_t is available - btrfs: fix race when cloning extent buffer during rewind of an old root - nvmet: don't check iosqes,iocqes for discovery controllers - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. - svcrdma: disable timeouts on rdma backchannel - sunrpc: fix refcount leak for rpc auth modules - net/qrtr: fix __netdev_alloc_skb call - scsi: lpfc: Fix some error codes in debugfs - nvme-rdma: fix possible hang when failing to set io queues - usb-storage: Add quirk to defeat Kindle's automatic unload - USB: replace hardcode maximum usb string length by definition - usb: gadget: configfs: Fix KASAN use-after-free - iio:adc:stm32-adc: Add HAS_IOMEM dependency - iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel - iio: adis16400: Fix an error code in adis16400_initial_setup() - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler - iio: hid-sensor-humidity: Fix alignment issue of timestamp channel - iio: hid-sensor-prox: Fix scale not correct issue - iio: hid-sensor-temperature: Fix issues of timestamp channel - PCI: rpadlpar: Fix potential drc_name corruption in store functions - perf/x86/intel: Fix a crash caused by zero PEBS status - x86/ioapic: Ignore IRQ2 again - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() - x86: Move TS_COMPAT back to asm/thread_info.h - x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() - ext4: find old entry again if failed to rename whiteout - ext4: do not try to set xattr into ea_inode if value is empty - ext4: fix potential error in ext4_do_update_inode - genirq: Disable interrupts for force threaded handlers - btrfs: fix slab cache flags for free space tree bitmap - powerpc: Force inlining of cpu_has_feature() to avoid build failure - usbip: Fix incorrect double assignment to udc->ud.tcp_rx - x86/apic/of: Fix CPU devicetree-node lookups -- Stefan Bader <email address hidden> Fri, 14 May 2021 11:21:29 +0200
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1102.111) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1102.111 -proposed tracker (LP: #1923808) [ Ubuntu: 4.15.0-143.147 ] * bionic/linux: 4.15.0-143.147 -proposed tracker (LP: #1923811) * CVE-2021-29650 - netfilter: x_tables: Use correct memory barriers. * LRMv4: switch to signing nvidia modules via the Ubuntu Modules signing key (LP: #1918134) - [Packaging] dkms-build{,--nvidia-N} sync back from LRMv4 * Security-Fix Xen XSA 371 for Kernel 5.4.0-71 (LP: #1921902) // CVE-2021-28688 - xen-blkback: don't leak persistent grants from xen_blkbk_map() * CVE-2021-20292 - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. * CVE-2021-29264 - gianfar: fix jumbo packets+napi+rx overrun crash * CVE-2021-29265 - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf * Bcache bypasse writeback on caching device with fragmentation (LP: #1900438) - bcache: consider the fragmentation when update the writeback rate * Bionic update: upstream stable patchset 2021-03-31 (LP: #1922124) - net: usb: qmi_wwan: support ZTE P685M modem - scripts: use pkg-config to locate libcrypto - scripts: set proper OpenSSL include dir also for sign-file - hugetlb: fix update_and_free_page contig page struct assumption - drm/virtio: use kvmalloc for large allocations - virtio/s390: implement virtio-ccw revision 2 correctly - arm64 module: set plt* section addresses to 0x0 - arm64: Avoid redundant type conversions in xchg() and cmpxchg() - arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint - arm64: Use correct ll/sc atomic constraints - JFS: more checks for invalid superblock - media: mceusb: sanity check for prescaler value - xfs: Fix assert failure in xfs_setattr_size() - smackfs: restrict bytes count in smackfs write functions - net: fix up truesize of cloned skb in skb_prepare_for_shift() - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing - net: bridge: use switchdev for port flags set through sysfs too - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ - staging: fwserial: Fix error handling in fwserial_create - x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk - vt/consolemap: do font sum unsigned - wlcore: Fix command execute failure 19 for wl12xx - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() - ath10k: fix wmi mgmt tx queue full due to race condition - x86/build: Treat R_386_PLT32 relocation as R_386_PC32 - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data - staging: most: sound: add sanity check for function argument - media: uvcvideo: Allow entities with no pads - f2fs: handle unallocated section and zone on pinned/atgc - parisc: Bump 64-bit IRQ stack size to 64 KB - Xen/gnttab: handle p2m update errors on a per-slot basis - xen-netback: respect gnttab_map_refs()'s return value - zsmalloc: account the number of compacted pages correctly - swap: fix swapfile read/write offset - media: v4l: ioctl: Fix memory leak in video_usercopy - PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse - drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails - f2fs: fix to set/clear I_LINKABLE under i_lock - btrfs: fix error handling in commit_fs_roots - ALSA: hda/realtek: Add quirk for Clevo NH55RZQ - ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board - btrfs: raid56: simplify tracking of Q stripe presence - btrfs: fix raid6 qstripe kmap - usbip: tools: fix build error for multiple definition - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits - rsxx: Return -EFAULT if copy_to_user() fails - dm table: fix iterate_devices based device capability checks - dm table: fix DAX iterate_devices based device capability checks - dm table: fix zoned iterate_devices based device capability checks - iommu/amd: Fix sleeping in atomic in increase_address_space() - mwifiex: pcie: skip cancel_work_sync() on reset failure path - platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines - platform/x86: acer-wmi: Cleanup accelerometer device handling - platform/x86: acer-wmi: Add new force_caps module parameter - platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag - platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices - platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom - drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register - Revert "zram: close udev startup race condition as default groups" - HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter * Bionic update: upstream stable patchset 2021-03-16 (LP: #1919380) - fgraph: Initialize tracing_graph_pause at task creation - tracing: Do not count ftrace events in top level enable output - tracing: Check length before giving out the filter buffer - arm/xen: Don't probe xenbus as part of an early initcall - MIPS: BMIPS: Fix section mismatch warning - arm64: dts: rockchip: Fix PCIe DT properties on rk3399 - platform/x86: hp-wmi: Disable tablet-mode reporting by default - ovl: perform vfs_getxattr() with mounter creds - cap: fix conversions on getxattr - ovl: skip getxattr of security labels - ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL - ARM: ensure the signal page contains defined contents - bpf: Check for integer overflow when using roundup_pow_of_two() - netfilter: xt_recent: Fix attempt to update deleted entry - xen/netback: avoid race in xenvif_rx_ring_slots_available() - netfilter: conntrack: skip identical origin tuple in same zone only - usb: dwc3: ulpi: fix checkpatch warning - usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one - net/vmw_vsock: improve locking in vsock_connect_timeout() - net: watchdog: hold device global xmit lock during tx disable - vsock/virtio: update credit only if socket is not closed - vsock: fix locking in vsock_shutdown() - i2c: stm32f7: fix configuration of the digital filter - h8300: fix PREEMPTION build, TI_PRE_COUNT undefined - x86/build: Disable CET instrumentation in the kernel for 32-bit too - trace: Use -mcount-record for dynamic ftrace - tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord- mcount - tracing: Avoid calling cc-option -mrecord-mcount for every Makefile - Xen/x86: don't bail early from clear_foreign_p2m_mapping() - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() - Xen/gntdev: correct error checking in gntdev_map_grant_pages() - xen/arm: don't ignore return errors from set_phys_to_machine - xen-blkback: don't "handle" error by BUG() - xen-netback: don't "handle" error by BUG() - xen-scsiback: don't "handle" error by BUG() - xen-blkback: fix error handling in xen_blkbk_map() - scsi: qla2xxx: Fix crash during driver load on big endian machines - kvm: check tlbs_dirty directly - drm/amd/display: Free atomic state after drm_atomic_commit - riscv: virt_addr_valid must check the address belongs to linear mapping - ARM: kexec: fix oops after TLB are invalidated - net: hns3: add a check for queue_id in hclge_reset_vf_queue() - firmware_loader: align .builtin_fw to 8 - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS - ovl: expand warning in ovl_d_real() - net: qrtr: Fix port ID for control messages - HID: make arrays usage and value to be the same - usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable - ntfs: check for valid standard information attribute - arm64: tegra: Add power-domain for Tegra210 HDA - NET: usb: qmi_wwan: Adding support for Cinterion MV31 - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. - scripts/recordmcount.pl: support big endian for ARCH sh - vmlinux.lds.h: add DWARF v5 sections - kdb: Make memory allocations more robust - MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section - random: fix the RNDRESEEDCRNG ioctl - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function - Bluetooth: Fix initializing response id after clearing struct - ARM: dts: exynos: correct PMIC interrupt trigger level on Monk - ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato - ARM: dts: exynos: correct PMIC interrupt trigger level on Spring - ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa - arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 - arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso - cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() - usb: gadget: u_audio: Free requests only after callback - Bluetooth: drop HCI device reference before return - Bluetooth: Put HCI device if inquiry procedure interrupts - ARM: dts: Configure missing thermal interrupt for 4430 - usb: dwc2: Do not update data length if it is 0 on inbound transfers - usb: dwc2: Abort transaction after errors with unknown reason - usb: dwc2: Make "trimming xfer length" a debug message - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules - arm64: dts: msm8916: Fix reserved and rfsa nodes unit address - ARM: s3c: fix fiq for clang IAS - bpf_lru_list: Read double-checked variable once without lock - ath9k: fix data bus crash when setting nf_override via debugfs - bnxt_en: reverse order of TX disable and carrier off - xen/netback: fix spurious event detection for common event case - mac80211: fix potential overflow when multiplying to u32 integers - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case - ibmvnic: skip send_request_unmap for timeout reset - net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout - net: amd-xgbe: Reset link when the link never comes back - net: mvneta: Remove per-cpu queue mapping for Armada 3700 - fbdev: aty: SPARC64 requires FB_ATY_CT - drm/gma500: Fix error return code in psb_driver_load() - gma500: clean up error handling in init - crypto: sun4i-ss - fix kmap usage - MIPS: c-r4k: Fix section mismatch for loongson2_sc_init - MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 - media: i2c: ov5670: Fix PIXEL_RATE minimum value - media: vsp1: Fix an error handling path in the probe function - media: media/pci: Fix memleak in empress_init - media: tm6000: Fix memleak in tm6000_start_stream - ASoC: cs42l56: fix up error handling in probe - crypto: bcm - Rename struct device_private to bcm_device_private - media: lmedm04: Fix misuse of comma - media: qm1d1c0042: fix error return code in qm1d1c0042_init() - media: cx25821: Fix a bug when reallocating some dma memory - media: pxa_camera: declare variable when DEBUG is defined - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values - ata: ahci_brcm: Add back regulators management - Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() - btrfs: clarify error returns values in __load_free_space_cache - hwrng: timeriomem - Fix cooldown period calculation - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() - ima: Free IMA measurement buffer on error - ima: Free IMA measurement buffer after kexec syscall - fs/jfs: fix potential integer overflow on shift of a int - jffs2: fix use after free in jffs2_sum_write_data() - capabilities: Don't allow writing ambiguous v3 file capabilities - clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL - quota: Fix memory leak when handling corrupted quota file - spi: cadence-quadspi: Abort read if dummy cycles required are too many - HID: core: detect and skip invalid inputs to snto32() - dmaengine: fsldma: Fix a resource leak in the remove function - dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function - dmaengine: hsu: disable spurious interrupt - mfd: bd9571mwv: Use devm_mfd_add_devices() - fdt: Properly handle "no-map" field in the memory region - of/fdt: Make sure no-map does not remove already reserved regions - power: reset: at91-sama5d2_shdwc: fix wkupdbc mask - rtc: s5m: select REGMAP_I2C - clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined - regulator: axp20x: Fix reference cout leak - certs: Fix blacklist flag type confusion - spi: atmel: Put allocated master before return - isofs: release buffer head before return - auxdisplay: ht16k33: Fix refresh rate handling - IB/umad: Return EIO in case of when device disassociated - powerpc/47x: Disable 256k page size - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe - ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores - amba: Fix resource leak for drivers without .remove - tracepoint: Do not fail unregistering a probe due to memory failure - perf tools: Fix DSO filtering when not finding a map for a sampled address - RDMA/rxe: Fix coding error in rxe_recv.c - spi: stm32: properly handle 0 byte transfer - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() - powerpc/pseries/dlpar: handle ibm, configure-connector delay status - powerpc/8xx: Fix software emulation interrupt - spi: pxa2xx: Fix the controller numbering for Wildcat Point - perf intel-pt: Fix missing CYC processing in PSB - perf test: Fix unaligned access in sample parsing test - Input: elo - fix an error code in elo_connect() - sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set - misc: eeprom_93xx46: Fix module alias to enable module autoprobe - misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users - pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() - VMCI: Use set_page_dirty_lock() when unregistering guest memory - PCI: Align checking of syscall user config accessors - drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) - ext4: fix potential htree index checksum corruption - i40e: Fix flow for IPv6 next header (extension header) - i40e: Fix overwriting flow control settings during driver loading - net/mlx4_core: Add missed mlx4_free_cmd_mailbox() - ocfs2: fix a use after free on error - mm/memory.c: fix potential pte_unmap_unlock pte error - mm/hugetlb: fix potential double free in hugetlb_register_node() error path - arm64: Add missing ISB after invalidating TLB in __primary_switch - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition - mm/rmap: fix potential pte_unmap on an not mapped pte - scsi: bnx2fc: Fix Kconfig warning & CNIC build errors - blk-settings: align max_sectors on "logical_block_size" boundary - ACPI: property: Fix fwnode string properties matching - ACPI: configfs: add missing check after configfs_register_default_group() - HID: wacom: Ignore attempts to overwrite the touch_max value from HID - Input: raydium_ts_i2c - do not send zero length - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S - Input: joydev - prevent potential read overflow in ioctl - Input: i8042 - add ASUS Zenbook Flip to noselftest list - USB: serial: option: update interface mapping for ZTE P685M - usb: musb: Fix runtime PM race in musb_queue_resume_work - USB: serial: mos7840: fix error code in mos7840_write() - USB: serial: mos7720: fix error code in mos7720_write() - usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 - usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt - ALSA: hda/realtek: modify EAPD in the ALC886 - tpm_tis: Fix check_locality for correct locality acquisition - KEYS: trusted: Fix migratable=1 failing - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root - btrfs: fix reloc root leak with 0 ref reloc roots on recovery - btrfs: fix extent buffer leak on failure to copy root - crypto: sun4i-ss - checking sg length is not sufficient - crypto: sun4i-ss - handle BigEndian for cipher - seccomp: Add missing return in non-void function - drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table - x86/reboot: Force all cpus to exit VMX root if VMX is supported - floppy: reintroduce O_NDELAY fix - arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing - watchdog: mei_wdt: request stop on unregister - mtd: spi-nor: hisi-sfc: Put child node np on error path - fs/affs: release old buffer head on error path - hugetlb: fix copy_huge_page_from_user contig page struct assumption - mm: hugetlb: fix a race between freeing and dissolving the page - libnvdimm/dimm: Avoid race between probe and available_slots_show() - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols - mmc: sdhci-esdhc-imx: fix kernel panic when remove module - gpio: pcf857x: Fix missing first interrupt - printk: fix deadlock when kernel panic - f2fs: fix out-of-repair __setattr_copy() - sparc32: fix a user-triggerable oops in clear_user() - gfs2: Don't skip dlm unlock if glock has an lvb - dm era: Recover committed writeset after crash - dm era: Verify the data block size hasn't changed - dm era: Fix bitset memory leaks - dm era: Use correct value size in equality function of writeset tree - dm era: Reinitialize bitset cache before digesting a new writeset - dm era: only resize metadata in preresume - icmp: introduce helper for nat'd source address in network device context - icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n - gtp: use icmp_ndo_send helper - sunvnet: use icmp_ndo_send helper - ipv6: icmp6: avoid indirect call for icmpv6_send() - ipv6: silence compilation warning for non-IPV6 builds - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending - dm era: Update in-core bitset after committing the metadata - USB: quirks: sort quirk entries - jump_label/lockdep: Assert we hold the hotplug lock for _cpuslocked() operations - ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5 - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family - arm64: dts: allwinner: A64: properly connect USB PHY to port 0 - arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card - arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz - memory: ti-aemif: Drop child node when jumping out loop - ibmvnic: add memory barrier to protect long term buffer - net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning - drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition - drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction. - crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) - f2fs: fix to avoid inconsistent quota data - regulator: s5m8767: Drop regulators OF node reference - mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes - RDMA/rxe: Correct skb on loopback path - i40e: Add zero-initialization of AQ command structures - i40e: Fix add TC filter for IPv6 - r8169: fix jumbo packet handling on RTL8168e - USB: serial: ftdi_sio: fix FTX sub-integer prescaler - crypto: arm64/sha - add missing module aliases - misc: rtsx: init of rts522a add OCP power off when no card is present - seq_file: document how per-entry resources are managed. - x86: fix seq_file iteration for pat/memtype.c -- Stefan Bader <email address hidden> Tue, 20 Apr 2021 12:07:02 +0200
Available diffs
| Published in xenial-security |
| Published in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1156.166) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1156.166 -proposed tracker (LP: #1924640) [ Ubuntu: 4.4.0-210.242 ] * xenial/linux: 4.4.0-210.242 -proposed tracker (LP: #1924644) * setting extended attribute may cause memory leak (LP: #1924611) - SAUCE: vfs_setxattr: free converted value if xattr_permission returns error -- Stefan Bader <email address hidden> Fri, 16 Apr 2021 15:34:35 +0200
Available diffs
linux-snapdragon (4.15.0-1101.110) bionic; urgency=medium
[ Ubuntu: 4.15.0-142.146 ]
* overlayfs calls vfs_setxattr without cap_convert_nscap
- vfs: move cap_convert_nscap() call into vfs_setxattr()
* CVE-2021-29154
- SAUCE: bpf, x86: Validate computation of branch displacements for x86-64
-- Stefan Bader <email address hidden> Tue, 13 Apr 2021 14:16:06 +0200
Available diffs
linux-snapdragon (4.4.0-1155.165) xenial; urgency=medium
[ Ubuntu: 4.4.0-209.241 ]
* overlayfs calls vfs_setxattr without cap_convert_nscap
- vfs: move cap_convert_nscap() call into vfs_setxattr()
* CVE-2021-29154
- SAUCE: bpf, x86: Validate computation of branch displacements for x86-64
-- Stefan Bader <email address hidden> Tue, 13 Apr 2021 11:40:57 +0200
Available diffs
| Superseded in xenial-security |
| Superseded in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1154.164) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1154.164 -proposed tracker (LP: #1922066) [ Ubuntu: 4.4.0-208.240 ] * xenial/linux: 4.4.0-208.240 -proposed tracker (LP: #1922069) * linux ADT test failure with linux/4.4.0-207.239 - ubuntu_qrt_kernel_security.test-kernel-security.py (LP: #1922200) // CVE-2018-5953 // CVE-2018-5995 // CVE-2018-7754 - SAUCE: Revert "printk: hash addresses printed with %p" * lxd 2.0.11-0ubuntu1~16.04.4 ADT test failure with linux 4.4.0-207.239 (LP: #1921969) - SAUCE: Fix fuse regression in 4.4.0-207.239
Available diffs
- diff from 4.4.0-1152.162 to 4.4.0-1154.164 (7.3 MiB)
- diff from 4.4.0-1153.163 to 4.4.0-1154.164 (7.1 MiB)
| Superseded in xenial-proposed |
linux-snapdragon (4.4.0-1153.163) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1153.163 -proposed tracker (LP: #1919555) * Xenial update: v4.4.257 upstream stable release (LP: #1916660) - snapdragon: [Config] updateconfigs for ELFCORE * CVE-2017-5967 - snapdragon: [Config] Dropped CONFIG_TIMER_STATS [ Ubuntu: 4.4.0-207.239 ] * xenial/linux: 4.4.0-207.239 -proposed tracker (LP: #1919558) * Xenial update: v4.4.262 upstream stable release (LP: #1920221) - uapi: nfnetlink_cthelper.h: fix userspace compilation error - ath9k: fix transmitting to stations in dynamic SMPS mode - net: Fix gro aggregation for udp encaps with zero csum - can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership - can: flexcan: assert FRZ bit in flexcan_chip_freeze() - can: flexcan: enable RX FIFO after FRZ/HALT valid - netfilter: x_tables: gpf inside xt_find_revision() - cifs: return proper error code in statfs(2) - floppy: fix lock_fdc() signal handling - Revert "mm, slub: consider rest of partial list if acquire_slab() fails" - futex: Change locking rules - futex: Cure exit race - futex: fix dead code in attach_to_pi_owner() - net/mlx4_en: update moderation when config reset - net: lapbether: Remove netif_start_queue / netif_stop_queue - net: davicom: Fix regulator not turned off on failed probe - net: davicom: Fix regulator not turned off on driver removal - media: usbtv: Fix deadlock on suspend - mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()' - mmc: mediatek: fix race condition between msdc_request_timeout and irq - powerpc/perf: Record counter overflow always if SAMPLE_IP is unset - PCI: xgene-msi: Fix race in installing chained irq handler - s390/smp: __smp_rescan_cpus() - move cpumask away from stack - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling - ALSA: hda/hdmi: Cancel pending works before suspend - ALSA: hda: Avoid spurious unsol event handling during S3/S4 - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar - s390/dasd: fix hanging DASD driver unbind - mmc: core: Fix partition switch time for eMMC - scripts/recordmcount.{c,pl}: support -ffunction-sections .text.* section names - Goodix Fingerprint device is not a modem - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot - usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM - xhci: Improve detection of device initiated wake signal. - USB: serial: io_edgeport: fix memory leak in edge_startup - USB: serial: ch341: add new Product ID - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter - USB: serial: cp210x: add some more GE USB IDs - usbip: fix stub_dev to check for stream socket - usbip: fix vhci_hcd to check for stream socket - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf - staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() - staging: rtl8712: unterminated string leads to read overflow - staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd - staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan - staging: comedi: addi_apci_1032: Fix endian problem for COS sample - staging: comedi: addi_apci_1500: Fix endian problem for command sample - staging: comedi: adv_pci1710: Fix endian problem for AI command data - staging: comedi: das6402: Fix endian problem for AI command data - staging: comedi: das800: Fix endian problem for AI command data - staging: comedi: dmm32at: Fix endian problem for AI command data - staging: comedi: me4000: Fix endian problem for AI command data - staging: comedi: pcl711: Fix endian problem for AI command data - staging: comedi: pcl818: Fix endian problem for AI command data - NFSv4.2: fix return value of _nfs4_get_security_label() - block: rsxx: fix error return code of rsxx_pci_probe() - alpha: add $(src)/ rather than $(obj)/ to make source file path - alpha: merge build rules of division routines - alpha: make short build log available for division routines - alpha: Package string routines together - alpha: move exports to actual definitions - alpha: get rid of tail-zeroing in __copy_user() - alpha: switch __copy_user() and __do_clean_user() to normal calling conventions - powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() - media: hdpvr: Fix an error handling path in hdpvr_probe() - KVM: arm64: Fix exclusive limit for IPA size - xen/events: reset affinity of 2-level event when tearing it down - xen/events: don't unmask an event channel when an eoi is pending - xen/events: avoid handling the same event on two cpus at the same time - Linux 4.4.262 * Xenial update: v4.4.261 upstream stable release (LP: #1920218) - futex: fix irq self-deadlock and satisfy assertion - futex: fix spin_lock() / spin_unlock_irq() imbalance - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits - rsxx: Return -EFAULT if copy_to_user() fails - dm table: fix iterate_devices based device capability checks - platform/x86: acer-wmi: Add new force_caps module parameter - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller - Linux 4.4.261 * CVE-2019-19061 - iio: imu: adis16400: fix memory leak * CVE-2018-5953 // CVE-2018-5995 // CVE-2018-7754 - printk: hash addresses printed with %p * CVE-2017-5967 - time: Remove CONFIG_TIMER_STATS - [Config] Dropped CONFIG_TIMER_STATS * CVE-2019-16232 - libertas: fix a potential NULL pointer dereference * CVE-2015-1350 - xfs: Propagate dentry down to inode_change_ok() - fuse: Propagate dentry down to inode_change_ok() - fs: Give dentry to inode_change_ok() instead of inode - fs: Avoid premature clearing of capabilities * CVE-2018-13095 - xfs: More robust inode extent count validation * i40e PF reset due to incorrect MDD event (LP: #1772675) - i40e: change behavior on PF in response to MDD event * Xenial update: v4.4.260 upstream stable release (LP: #1918184) - futex: Ensure the correct return value from futex_lock_pi() - net: usb: qmi_wwan: support ZTE P685M modem - iwlwifi: pcie: fix to correct null check - mmc: sdhci-esdhc-imx: fix kernel panic when remove module - scripts: use pkg-config to locate libcrypto - scripts: set proper OpenSSL include dir also for sign-file - hugetlb: fix update_and_free_page contig page struct assumption - JFS: more checks for invalid superblock - xfs: Fix assert failure in xfs_setattr_size() - net: fix up truesize of cloned skb in skb_prepare_for_shift() - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing - staging: fwserial: Fix error handling in fwserial_create - x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk - vt/consolemap: do font sum unsigned - wlcore: Fix command execute failure 19 for wl12xx - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() - ath10k: fix wmi mgmt tx queue full due to race condition - x86/build: Treat R_386_PLT32 relocation as R_386_PC32 - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data - staging: most: sound: add sanity check for function argument - media: uvcvideo: Allow entities with no pads - Xen/gnttab: handle p2m update errors on a per-slot basis - xen-netback: respect gnttab_map_refs()'s return value - zsmalloc: account the number of compacted pages correctly - swap: fix swapfile read/write offset - media: v4l: ioctl: Fix memory leak in video_usercopy - Linux 4.4.260 * Xenial update: v4.4.259 upstream stable release (LP: #1918182) - HID: make arrays usage and value to be the same - usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable - xen-netback: delete NAPI instance when queue fails to initialize - ntfs: check for valid standard information attribute - igb: Remove incorrect "unexpected SYS WRAP" log message - scripts/recordmcount.pl: support big endian for ARCH sh - kdb: Make memory allocations more robust - MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section - Bluetooth: Fix initializing response id after clearing struct - ARM: dts: exynos: correct PMIC interrupt trigger level on Spring - ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa - Bluetooth: drop HCI device reference before return - Bluetooth: Put HCI device if inquiry procedure interrupts - usb: dwc2: Abort transaction after errors with unknown reason - usb: dwc2: Make "trimming xfer length" a debug message - ARM: s3c: fix fiq for clang IAS - bnxt_en: reverse order of TX disable and carrier off - xen/netback: fix spurious event detection for common event case - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case - fbdev: aty: SPARC64 requires FB_ATY_CT - drm/gma500: Fix error return code in psb_driver_load() - gma500: clean up error handling in init - MIPS: c-r4k: Fix section mismatch for loongson2_sc_init - MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 - media: media/pci: Fix memleak in empress_init - media: tm6000: Fix memleak in tm6000_start_stream - ASoC: cs42l56: fix up error handling in probe - media: lmedm04: Fix misuse of comma - media: cx25821: Fix a bug when reallocating some dma memory - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values - btrfs: clarify error returns values in __load_free_space_cache - fs/jfs: fix potential integer overflow on shift of a int - jffs2: fix use after free in jffs2_sum_write_data() - clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL - HID: core: detect and skip invalid inputs to snto32() - dmaengine: fsldma: Fix a resource leak in the remove function - dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function - clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined - regulator: axp20x: Fix reference cout leak - isofs: release buffer head before return - IB/umad: Return EIO in case of when device disassociated - powerpc/47x: Disable 256k page size - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe - ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores - amba: Fix resource leak for drivers without .remove - tracepoint: Do not fail unregistering a probe due to memory failure - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() - powerpc/pseries/dlpar: handle ibm, configure-connector delay status - perf intel-pt: Fix missing CYC processing in PSB - perf test: Fix unaligned access in sample parsing test - Input: elo - fix an error code in elo_connect() - sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set - misc: eeprom_93xx46: Fix module alias to enable module autoprobe - misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users - VMCI: Use set_page_dirty_lock() when unregistering guest memory - PCI: Align checking of syscall user config accessors - mm/memory.c: fix potential pte_unmap_unlock pte error - mm/hugetlb: fix potential double free in hugetlb_register_node() error path - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition - scsi: bnx2fc: Fix Kconfig warning & CNIC build errors - block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h> - blk-settings: align max_sectors on "logical_block_size" boundary - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S - Input: joydev - prevent potential read overflow in ioctl - Input: i8042 - add ASUS Zenbook Flip to noselftest list - USB: serial: option: update interface mapping for ZTE P685M - USB: serial: mos7840: fix error code in mos7840_write() - USB: serial: mos7720: fix error code in mos7720_write() - usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 - usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt - KEYS: trusted: Fix migratable=1 failing - btrfs: fix reloc root leak with 0 ref reloc roots on recovery - drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table - x86/reboot: Force all cpus to exit VMX root if VMX is supported - floppy: reintroduce O_NDELAY fix - mm: hugetlb: fix a race between freeing and dissolving the page - usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() - libnvdimm/dimm: Avoid race between probe and available_slots_show() - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols - gpio: pcf857x: Fix missing first interrupt - f2fs: fix out-of-repair __setattr_copy() - sparc32: fix a user-triggerable oops in clear_user() - gfs2: Don't skip dlm unlock if glock has an lvb - dm era: Recover committed writeset after crash - dm era: Verify the data block size hasn't changed - dm era: Fix bitset memory leaks - dm era: Use correct value size in equality function of writeset tree - dm era: Reinitialize bitset cache before digesting a new writeset - dm era: only resize metadata in preresume - futex: Fix OWNER_DEAD fixup - dm era: Update in-core bitset after committing the metadata - Linux 4.4.259 * CVE-2019-16231 - fjes: Handle workqueue allocation failure * Xenial update: v4.4.258 upstream stable release (LP: #1916661) - tracing: Do not count ftrace events in top level enable output - fgraph: Initialize tracing_graph_pause at task creation - af_key: relax availability checks for skb size calculation - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap - iwlwifi: mvm: guard against device removal in reprobe - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header - SUNRPC: Handle 0 length opaque XDR object data properly - lib/string: Add strscpy_pad() function - include/trace/events/writeback.h: fix -Wstringop-truncation warnings - memcg: fix a crash in wb_workfn when a device disappears - squashfs: add more sanity checks in id lookup - squashfs: add more sanity checks in inode lookup - squashfs: add more sanity checks in xattr id lookup - memblock: do not start bottom-up allocations with kernel_end - netfilter: xt_recent: Fix attempt to update deleted entry - h8300: fix PREEMPTION build, TI_PRE_COUNT undefined - usb: dwc3: ulpi: fix checkpatch warning - usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one - net: watchdog: hold device global xmit lock during tx disable - vsock: fix locking in vsock_shutdown() - x86/build: Disable CET instrumentation in the kernel for 32-bit too - trace: Use -mcount-record for dynamic ftrace - tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord- mcount - tracing: Avoid calling cc-option -mrecord-mcount for every Makefile - Xen/x86: don't bail early from clear_foreign_p2m_mapping() - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() - Xen/gntdev: correct error checking in gntdev_map_grant_pages() - xen/arm: don't ignore return errors from set_phys_to_machine - xen-blkback: don't "handle" error by BUG() - xen-netback: don't "handle" error by BUG() - xen-scsiback: don't "handle" error by BUG() - xen-blkback: fix error handling in xen_blkbk_map() - scsi: qla2xxx: Fix crash during driver load on big endian machines - kvm: check tlbs_dirty directly - Linux 4.4.258 * Xenial update: v4.4.257 upstream stable release (LP: #1916660) - net_sched: reject silly cell_log in qdisc_get_rtab() - futex,rt_mutex: Provide futex specific rt_mutex API - futex: Remove rt_mutex_deadlock_account_*() - futex: Rework inconsistent rt_mutex/futex_q state - futex: Avoid violating the 10th rule of futex - futex: Replace pointless printk in fixup_owner() - futex: Provide and use pi_state_update_owner() - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() - futex: Use pi_state_update_owner() in put_pi_state() - futex: Simplify fixup_pi_state_owner() - futex: Handle faults correctly for PI futexes - usb: udc: core: Use lock when write to soft_connect - scsi: libfc: Avoid invoking response handler twice if ep is already completed - scsi: ibmvfc: Set default timeout to avoid crash during migration - stable: clamp SUBLEVEL in 4.4 and 4.9 - USB: serial: cp210x: add pid/vid for WSDA-200-USB - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 - USB: serial: option: Adding support for Cinterion MV31 - net: lapb: Copy the skb before sending a packet - [Config] updateconfigs for ELFCORE - ELF/MIPS build fix - elfcore: fix building with clang - USB: gadget: legacy: fix an error code in eth_bind() - USB: usblp: don't call usb_set_interface if there's a single alt - usb: dwc2: Fix endpoint direction check in ep_from_windex - mac80211: fix station rate table updates on assoc - kretprobe: Avoid re-registration of the same kretprobe earlier - cifs: report error instead of invalid when revalidating a dentry fails - mmc: core: Limit retries when analyse of SDIO tuples fails - ARM: footbridge: fix dc21285 PCI configuration accessors - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page - mm: hugetlb: fix a race between isolating and freeing page - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active - x86/build: Disable CET instrumentation in the kernel - x86/apic: Add extra serialization for non-serializing MSRs - Input: xpad - sync supported devices with fork on GitHub - ACPI: thermal: Do not call acpi_thermal_check() directly - ALSA: hda/realtek - Fix typo of pincfg for Dell quirk - Linux 4.4.257 * Xenial update: v4.4.256 upstream stable release (LP: #1916657) - Linux 4.4.256 * Xenial update: v4.4.255 upstream stable release (LP: #1916656) - ACPI: sysfs: Prefer "compatible" modalias - wext: fix NULL-ptr-dereference with cfg80211's lack of commit() - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family - KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] - mt7601u: fix kernel crash unplugging the device - mt7601u: fix rx buffer refcounting - y2038: futex: Move compat implementation into futex.c - futex: Move futex exit handling into futex code - futex: Replace PF_EXITPIDONE with a state - exit/exec: Seperate mm_release() - futex: Split futex_mm_release() for exit/exec - futex: Set task::futex_state to DEAD right after handling futex exit - futex: Mark the begin of futex exit explicitly - futex: Sanitize exit state handling - futex: Provide state handling for exec() as well - futex: Add mutex around futex exit - futex: Provide distinct return value when owner is exiting - futex: Prevent exit livelock - ARM: imx: build suspend-imx6.S with arm instruction set - netfilter: nft_dynset: add timeout extension to template - xfrm: Fix oops in xfrm_replay_advance_bmp - RDMA/cxgb4: Fix the reported max_recv_sge value - mac80211: pause TX while changing interface type - can: dev: prevent potential information leak in can_fill_info() - iommu/vt-d: Gracefully handle DMAR units with no supported address widths - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built - NFC: fix resource leak when target index is invalid - NFC: fix possible resource leak - Linux 4.4.255 -- Kelsey Skunberg <email address hidden> Mon, 29 Mar 2021 19:01:22 -0600
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1100.109) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1100.109 -proposed tracker (LP: #1919533) * Bionic update: upstream stable patchset 2021-02-26 (LP: #1917093) - [Config] snapdragon: Updateconfigs for BDC_PCI [ Ubuntu: 4.15.0-141.145 ] * bionic/linux: 4.15.0-141.145 -proposed tracker (LP: #1919536) * binary assembly failures with CONFIG_MODVERSIONS present (LP: #1919315) - [Packaging] quiet (nomially) benign errors in BUILD script * selftests: bpf verifier fails after sanitize_ptr_alu fixes (LP: #1920995) - bpf: Simplify alu_limit masking for pointer arithmetic - bpf: Add sanity check for upper ptr_limit - bpf, selftests: Fix up some test_verifier cases for unprivileged * Packaging resync (LP: #1786013) - update dkms package versions * CVE-2018-13095 - xfs: More robust inode extent count validation * i40e PF reset due to incorrect MDD event (LP: #1772675) - i40e: change behavior on PF in response to MDD event * Bionic update: upstream stable patchset 2021-03-09 (LP: #1918330) - ACPI: sysfs: Prefer "compatible" modalias - ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming - wext: fix NULL-ptr-dereference with cfg80211's lack of commit() - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family - drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs - drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] - KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] - KVM: x86: get smi pending status correctly - xen: Fix XenStore initialisation for XS_LOCAL - leds: trigger: fix potential deadlock with libata - mt7601u: fix kernel crash unplugging the device - mt7601u: fix rx buffer refcounting - xen-blkfront: allow discard-* nodes to be optional - ARM: imx: build suspend-imx6.S with arm instruction set - netfilter: nft_dynset: add timeout extension to template - xfrm: Fix oops in xfrm_replay_advance_bmp - RDMA/cxgb4: Fix the reported max_recv_sge value - iwlwifi: pcie: use jiffies for memory read spin time limit - iwlwifi: pcie: reschedule in long-running memory reads - mac80211: pause TX while changing interface type - can: dev: prevent potential information leak in can_fill_info() - x86/entry/64/compat: Preserve r8-r11 in int $0x80 - x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int $0x80" - iommu/vt-d: Gracefully handle DMAR units with no supported address widths - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built - NFC: fix resource leak when target index is invalid - NFC: fix possible resource leak - team: protect features update by RCU to avoid deadlock - tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN - kernel: kexec: remove the lock operation of system_transition_mutex - PM: hibernate: flush swap writer after marking - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() - net/mlx5: Fix memory leak on flow table creation error flow - rxrpc: Fix memory leak in rxrpc_lookup_local - net: dsa: bcm_sf2: put device node before return - ibmvnic: Ensure that CRQ entry read are correctly ordered - ACPI: thermal: Do not call acpi_thermal_check() directly - net_sched: gen_estimator: support large ewma log - phy: cpcap-usb: Fix warning for missing regulator_disable - x86: __always_inline __{rd,wr}msr() - scsi: scsi_transport_srp: Don't block target in failfast state - scsi: libfc: Avoid invoking response handler twice if ep is already completed - mac80211: fix fast-rx encryption check - scsi: ibmvfc: Set default timeout to avoid crash during migration - objtool: Don't fail on missing symbol table - kthread: Extract KTHREAD_IS_PER_CPU - workqueue: Restrict affinity change to rescuer - USB: serial: cp210x: add pid/vid for WSDA-200-USB - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 - USB: serial: option: Adding support for Cinterion MV31 - arm64: dts: ls1046a: fix dcfg address range - net: lapb: Copy the skb before sending a packet - elfcore: fix building with clang - USB: gadget: legacy: fix an error code in eth_bind() - USB: usblp: don't call usb_set_interface if there's a single alt - usb: dwc2: Fix endpoint direction check in ep_from_windex - ovl: fix dentry leak in ovl_get_redirect - mac80211: fix station rate table updates on assoc - kretprobe: Avoid re-registration of the same kretprobe earlier - xhci: fix bounce buffer usage for non-sg list case - cifs: report error instead of invalid when revalidating a dentry fails - smb3: Fix out-of-bounds bug in SMB2_negotiate() - mmc: core: Limit retries when analyse of SDIO tuples fails - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs - ARM: footbridge: fix dc21285 PCI configuration accessors - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page - mm: hugetlb: fix a race between isolating and freeing page - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active - mm: thp: fix MADV_REMOVE deadlock on shmem THP - x86/build: Disable CET instrumentation in the kernel - x86/apic: Add extra serialization for non-serializing MSRs - Input: xpad - sync supported devices with fork on GitHub - iommu/vt-d: Do not use flush-queue when caching-mode is on - net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add - net: mvpp2: TCAM entry enable should be written after SRAM data - memblock: do not start bottom-up allocations with kernel_end - usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() - genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set - KVM: SVM: Treat SVM as unsupported when running as an SEV guest - md: Set prev_flush_start and flush_bio in an atomic way - net: ip_tunnel: fix mtu calculation - block: fix NULL pointer dereference in register_disk - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load - af_key: relax availability checks for skb size calculation - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() - iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap - iwlwifi: mvm: guard against device removal in reprobe - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header - SUNRPC: Handle 0 length opaque XDR object data properly - lib/string: Add strscpy_pad() function - include/trace/events/writeback.h: fix -Wstringop-truncation warnings - memcg: fix a crash in wb_workfn when a device disappears - blk-mq: don't hold q->sysfs_lock in blk_mq_map_swqueue - squashfs: add more sanity checks in id lookup - squashfs: add more sanity checks in inode lookup - squashfs: add more sanity checks in xattr id lookup * SRU: Add FUA support for XFS (LP: #1917918) - block: add blk_queue_fua() helper function - xfs: move generic_write_sync calls inwards - iomap: iomap_dio_rw() handles all sync writes - iomap: Use FUA for pure data O_DSYNC DIO writes * CVE-2021-3348 - nbd: freeze the queue while we're adding connections * Bionic kernel 4.15.0-136 causes dosemu2 (with kvm mode) freezes due to lack of KVM patch (LP: #1917138) - KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint * switch LRM to be signed using the Ubuntu Drivers signing key (LP: #1917034) - [Packaging] sync dkms-build to updated API * Bionic update: upstream stable patchset 2021-02-26 (LP: #1917093) - i2c: bpmp-tegra: Ignore unknown I2C_M flags - ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() - ALSA: hda/via: Add minimum mute flag - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error - mmc: sdhci-xenon: fix 1.8v regulator stabilization - dm: avoid filesystem lookup in dm_get_dev_t() - drm/atomic: put state on error path - ASoC: Intel: haswell: Add missing pm_ops - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback - xen: Fix event channel callback via INTX/GSI - drm/nouveau/bios: fix issue shadowing expansion ROMs - drm/nouveau/privring: ack interrupts the same way as RM - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields - i2c: octeon: check correct size of maximum RECV_LEN packet - can: dev: can_restart: fix use after free bug - can: vxcan: vxcan_xmit: fix use after free bug - iio: ad5504: Fix setting power-down state - irqchip/mips-cpu: Set IPI domain parent chip - intel_th: pci: Add Alder Lake-P support - stm class: Fix module init return on allocation failure - ehci: fix EHCI host controller initialization sequence - USB: ehci: fix an interrupt calltrace error - usb: udc: core: Use lock when write to soft_connect - usb: bdc: Make bdc pci driver depend on BROKEN - [Config] updateconfigs for USB_BDC_PCI - xhci: make sure TRB is fully written before giving it to the controller - xhci: tegra: Delay for disabling LFPS detector - compiler.h: Raise minimum version of GCC to 5.1 for arm64 - netfilter: rpfilter: mask ecn bits before fib lookup - sh: dma: fix kconfig dependency for G2_DMA - sh_eth: Fix power down vs. is_opened flag ordering - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too - udp: mask TOS bits in udp_v4_early_demux() - ipv6: create multicast route with RTPROT_KERNEL - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() - net: dsa: b53: fix an off by one in checking "vlan->vid" - gpio: mvebu: fix pwm .get_state period calculation - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" - futex: Ensure the correct return value from futex_lock_pi() - futex: Replace pointless printk in fixup_owner() - futex: Provide and use pi_state_update_owner() - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() - futex: Use pi_state_update_owner() in put_pi_state() - futex: Simplify fixup_pi_state_owner() - futex: Handle faults correctly for PI futexes - tracing: Fix race in trace_open and buffer resize call - fs: move I_DIRTY_INODE to fs.h - writeback: Drop I_DIRTY_TIME_EXPIRE - fs: fix lazytime expiration handling in __writeback_single_inode() - mmc: core: don't initialize block size from ext_csd if not present - scsi: qedi: Correct max length of CHAP secret - riscv: Fix kernel time_init() - HID: Ignore battery for Elan touchscreen on ASUS UX550 - clk: tegra30: Add hda clock default rates to clock driver - drm/nouveau/mmu: fix vram heap sizing - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression - can: peak_usb: fix use after free bugs - serial: mvebu-uart: fix tx lost characters at power off - driver core: Extend device_is_dependent() - net_sched: reject silly cell_log in qdisc_get_rtab() - tools: Factor HOSTCC, HOSTLD, HOSTAR definitions * Enforce CONFIG_DRM_BOCHS=m (LP: #1916290) - [Config] Enforce CONFIG_DRM_BOCHS=m * Please trust Canonical Livepatch Service kmod signing key (LP: #1898716) - [Config] enable CONFIG_MODVERSIONS=y - [Packaging] build canonical-certs.pem from branch/arch certs - [Config] add Canonical Livepatch Service key to SYSTEM_TRUSTED_KEYS - [Config] add ubuntu-drivers key to SYSTEM_TRUSTED_KEYS -- Stefan Bader <email address hidden> Fri, 26 Mar 2021 14:53:00 +0100
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1099.108) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1099.108 -proposed tracker (LP: #1920166) [ Ubuntu: 4.15.0-140.144 ] * bionic/linux: 4.15.0-140.144 -proposed tracker (LP: #1920169) * CVE-2020-27170 - bpf: Fix off-by-one for area size in creating mask to left * CVE-2020-27171 - bpf: Prohibit alu ops for pointer types not defining ptr_limit -- Ian May <email address hidden> Mon, 22 Mar 2021 12:43:12 -0500
Available diffs
| Superseded in xenial-security |
| Superseded in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1152.162) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1152.162 -proposed tracker (LP: #1919239) [ Ubuntu: 4.4.0-206.238 ] * xenial/linux: 4.4.0-206.238 -proposed tracker (LP: #1919242) * CVE-2021-27365 - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE - scsi: iscsi: Verify lengths on passthrough PDUs * CVE-2021-27363 // CVE-2021-27364 - scsi: iscsi: Restrict sessions and handles to admin capabilities -- Khalid Elmously <email address hidden> Tue, 16 Mar 2021 23:55:06 -0400
Available diffs
linux-snapdragon (4.15.0-1098.107) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1098.107 -proposed tracker (LP: #1919215) [ Ubuntu: 4.15.0-139.143 ] * bionic/linux: 4.15.0-139.143 -proposed tracker (LP: #1919218) * CVE-2021-27365 - scsi: iscsi: Verify lengths on passthrough PDUs - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE * CVE-2021-27363 // CVE-2021-27364 - scsi: iscsi: Restrict sessions and handles to admin capabilities -- Khalid Elmously <email address hidden> Tue, 16 Mar 2021 18:59:33 -0400
Available diffs
linux-snapdragon (4.15.0-1097.106) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1097.106 -proposed tracker (LP: #1916196) [ Ubuntu: 4.15.0-137.141 ] * bionic/linux: 4.15.0-137.141 -proposed tracker (LP: #1916199) * Fix oops in skb_segment for Bionic series (LP: #1915552) - net: permit skb_segment on head_frag frag_list skb - net: bpf: add a test for skb_segment in test_bpf module - test_bpf: Fix NULL vs IS_ERR() check in test_skb_segment() * Bionic update: upstream stable patchset 2021-02-10 (LP: #1915328) - net: cdc_ncm: correct overhead in delayed_ndp_size - net: vlan: avoid leaks on register_vlan_dev() failures - net: ip: always refragment ip defragmented packets - net: fix pmtu check in nopmtudisc mode - x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR - x86/resctrl: Don't move a task to the same resource group - vmlinux.lds.h: Add PGO and AutoFDO input sections - drm/i915: Fix mismatch between misplaced vma check and vma insert - spi: pxa2xx: Fix use-after-free on unbind - iio: imu: st_lsm6dsx: flip irq return logic - iio: imu: st_lsm6dsx: fix edge-trigger interrupts - ARM: OMAP2+: omap_device: fix idling of devices during probe - i2c: sprd: use a specific timeout to avoid system hang up issue - cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() - spi: stm32: FIFO threshold level - fix align packet size - dmaengine: xilinx_dma: check dma_async_device_register return value - dmaengine: xilinx_dma: fix mixed_enum_type coverity warning - wil6210: select CONFIG_CRC32 - block: rsxx: select CONFIG_CRC32 - iommu/intel: Fix memleak in intel_irq_remapping_alloc - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups - net/mlx5e: Fix two double free cases - wan: ds26522: select CONFIG_BITREVERSE - KVM: arm64: Don't access PMCR_EL0 when no PMU is available - block: fix use-after-free in disk_part_iter_next - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet - net: hns3: fix the number of queues actually used by ARQ - net: stmmac: dwmac-sun8i: Balance internal PHY resource references - net: stmmac: dwmac-sun8i: Balance internal PHY power - net/sonic: Fix some resource leaks in error handling paths - net: ipv6: fib: flush exceptions when purging route - dmaengine: xilinx_dma: fix incompatible param warning in _child_probe() - lightnvm: select CONFIG_CRC32 - ASoC: dapm: remove widget from dirty list on free - MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB - MIPS: relocatable: fix possible boot hangup with KASLR enabled - ACPI: scan: Harden acpi_device_add() against device ID overflows - mm/hugetlb: fix potential missing huge page size info - dm snapshot: flush merged data before committing metadata - r8152: Add Lenovo Powered USB-C Travel Hub - ext4: fix bug for rename with RENAME_WHITEOUT - ARC: build: remove non-existing bootpImage from KBUILD_IMAGE - ARC: build: add uImage.lzma to the top-level target - ARC: build: add boot_targets to PHONY - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram - arch/arc: add copy_user_page() to <asm/page.h> to fix build error on ARC - misdn: dsp: select CONFIG_BITREVERSE - net: ethernet: fs_enet: Add missing MODULE_LICENSE - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI - ARM: picoxcell: fix missing interrupt-parent properties - dump_common_audit_data(): fix racy accesses to ->d_name - ASoC: Intel: fix error code cnl_set_dsp_D0() - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock - pNFS: Mark layout for return if return-on-close was not sent - NFS: nfs_igrab_and_active must first reference the superblock - ext4: fix superblock checksum failure when setting password salt - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp - mm, slub: consider rest of partial list if acquire_slab() fails - net: sunrpc: interpret the return value of kstrtou32 correctly - dm: eliminate potential source of excessive kernel log noise - ALSA: firewire-tascam: Fix integer overflow in midi_port_work() - ALSA: fireface: Fix integer overflow in transmit_midi_msg() - netfilter: conntrack: fix reading nf_conntrack_buckets - usb: ohci: Make distrust_firmware param default to false - nfsd4: readdirplus shouldn't return parent of export - netxen_nic: fix MSI/MSI-x interrupts - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request - esp: avoid unneeded kmap_atomic call - net: dcb: Validate netlink message in DCB handler - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands - net: stmmac: Fixed mtu channged by cache aligned - net: sit: unregister_netdevice on newlink's error path - net: avoid 32 x truesize under-estimation for tiny skbs - rxrpc: Fix handling of an unsupported token type in rxrpc_read() - tipc: fix NULL deref in tipc_link_xmit() - spi: cadence: cache reference clock rate during probe - x86/hyperv: check cpu mask after interrupt has been disabled - mtd: rawnand: fsl_ifc: check result of SRAM initialization fixup - kbuild: enforce -Werror=return-type - crypto: x86/crc32c - fix building with clang ias - rxrpc: Call state should be read with READ_ONCE() under some circumstances * [ssbs-0118] backport SSBS bug (arm64: cpufeature: Detect SSBS and advertise to userspace) (LP: #1911376) - SAUCE: Move SSBS snippet from arm64_elf_hwcaps to arm64_features * Bionic update: upstream stable patchset 2021-01-25 (LP: #1913214) - x86/entry/64: Add instruction suffix - md/raid10: initialize r10_bio->read_slot before use. - ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk - ALSA: usb-audio: fix sync-ep altsetting sanity check - mm: memcontrol: eliminate raw access to stat and event counters - mm: memcontrol: implement lruvec stat functions on top of each other - mm: memcontrol: fix excessive complexity in memory.stat reporting - vfio/pci: Move dummy_resources_list init in vfio_pci_probe() - powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() - uapi: move constants from <linux/kernel.h> to <linux/const.h> - of: fix linker-section match-table corruption - reiserfs: add check for an invalid ih_entry_count - misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() - media: gp8psk: initialize stats at power control logic - ALSA: seq: Use bool for snd_seq_queue internal flags - rtc: sun6i: Fix memleak in sun6i_rtc_clk_init - module: set MODULE_STATE_GOING state when a module fails to load - quota: Don't overflow quota file offsets - powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() - module: delay kobject uevent until after module init call - ALSA: pcm: Clear the full allocated memory at hw_params - dm verity: skip verity work if I/O error when system is shutting down - kdev_t: always inline major/minor helper functions - iio:imu:bmi160: Fix alignment and data leak issues - iio:magnetometer:mag3110: Fix alignment and data leak issues. - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start - ext4: don't remount read-only with errors=continue on reboot - KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses - KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits - xen/gntdev.c: Mark pages as dirty - ALSA: rawmidi: Access runtime->avail always in spinlock - fcntl: Fix potential deadlock in send_sig{io, urg}() - dmaengine: at_hdmac: Substitute kzalloc with kmalloc - dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate() - dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate() - kbuild: don't hardcode depmod path - workqueue: Kick a worker based on the actual activation of delayed works - scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() - scsi: ide: Do not set the RQF_PREEMPT flag for sense requests - lib/genalloc: fix the overflow when size is too big - depmod: handle the case of /sbin/depmod without /sbin in PATH - ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() - ethernet: ucc_geth: set dev->max_mtu to 1518 - atm: idt77252: call pci_disable_device() on error path - qede: fix offload for IPIP tunnel packets - virtio_net: Fix recursive call to cpus_read_lock() - net/ncsi: Use real net-device for response handler - net: ethernet: Fix memleak in ethoc_probe - net-sysfs: take the rtnl lock when storing xps_cpus - net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() - net: hns: fix return value check in __lb_other_process() - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running - CDC-NCM: remove "connected" log message - net: usb: qmi_wwan: add Quectel EM160R-GL - vhost_net: fix ubuf refcount incorrectly when sendmsg fails - net: sched: prevent invalid Scell_log shift count - net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc - net: mvpp2: Fix GoP port 3 Networking Complex Control configurations - net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE - video: hyperv_fb: Fix the mmap() regression for v5.4.y and older - crypto: ecdh - avoid buffer overflow in ecdh_set_secret() - usb: gadget: enable super speed plus - USB: cdc-acm: blacklist another IR Droid device - usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion - usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set - usb: usbip: vhci_hcd: protect shift size - usb: uas: Add PNY USB Portable SSD to unusual_uas - USB: serial: iuu_phoenix: fix DMA from stack - USB: serial: option: add LongSung M5710 module support - USB: serial: option: add Quectel EM160R-GL - USB: yurex: fix control-URB timeout handling - USB: usblp: fix DMA to stack - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks - usb: gadget: select CONFIG_CRC32 - usb: gadget: f_uac2: reset wMaxPacketSize - usb: gadget: function: printer: Fix a memory leak for interface descriptor - USB: gadget: legacy: fix return error code in acm_ms_bind() - usb: gadget: Fix spinlock lockup on usb_function_deactivate - usb: gadget: configfs: Preserve function ordering after bind failure - usb: gadget: configfs: Fix use-after-free issue with udc_name - USB: serial: keyspan_pda: remove unused variable - x86/mm: Fix leak of pmd ptlock - ALSA: hda/conexant: add a new hda codec CX11970 - ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 - Revert "device property: Keep secondary firmware node secondary by type" - netfilter: ipset: fix shift-out-of-bounds in htable_bits() - netfilter: xt_RATEEST: reject non-null terminated string from userspace - x86/mtrr: Correct the range check before performing MTRR type lookups - KVM: x86: fix shift out of bounds reported by UBSAN - i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS - USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). - USB: Gadget Ethernet: Re-enable Jumbo frames. - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size -- Kleber Sacilotto de Souza <email address hidden> Wed, 24 Feb 2021 12:20:52 -0500
Available diffs
linux-snapdragon (4.4.0-1151.161) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1151.161 -proposed tracker (LP: #1916219) * Xenial update: v4.4.254 upstream stable release (LP: #1914648) - [config] update configs [ Ubuntu: 4.4.0-204.236 ] * xenial/linux: 4.4.0-204.236 -proposed tracker (LP: #1916222) * Xenial update: v4.4.254 upstream stable release (LP: #1914648) - ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() - ALSA: hda/via: Add minimum mute flag - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error - dm: avoid filesystem lookup in dm_get_dev_t() - ASoC: Intel: haswell: Add missing pm_ops - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback - drm/nouveau/bios: fix issue shadowing expansion ROMs - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields - can: dev: can_restart: fix use after free bug - iio: ad5504: Fix setting power-down state - ehci: fix EHCI host controller initialization sequence - usb: bdc: Make bdc pci driver depend on BROKEN - [Config] updateconfigs for USB_BDC_PCI - xhci: make sure TRB is fully written before giving it to the controller - compiler.h: Raise minimum version of GCC to 5.1 for arm64 - netfilter: rpfilter: mask ecn bits before fib lookup - sh: dma: fix kconfig dependency for G2_DMA - sh_eth: Fix power down vs. is_opened flag ordering - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too - ipv6: create multicast route with RTPROT_KERNEL - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" - tracing: Fix race in trace_open and buffer resize call - xen-blkback: set ring->xenblkd to NULL after kthread_stop() - x86/boot/compressed: Disable relocation relaxation - Linux 4.4.254 * Xenial update: v4.4.253 upstream stable release (LP: #1914647) - ASoC: dapm: remove widget from dirty list on free - mm/hugetlb: fix potential missing huge page size info - ext4: fix bug for rename with RENAME_WHITEOUT - ARC: build: add boot_targets to PHONY - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram - arch/arc: add copy_user_page() to <asm/page.h> to fix build error on ARC - misdn: dsp: select CONFIG_BITREVERSE - net: ethernet: fs_enet: Add missing MODULE_LICENSE - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI - ARM: picoxcell: fix missing interrupt-parent properties - Input: uinput - avoid FF flush when destroying device - dump_common_audit_data(): fix racy accesses to ->d_name - NFS: nfs_igrab_and_active must first reference the superblock - ext4: fix superblock checksum failure when setting password salt - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp - mm, slub: consider rest of partial list if acquire_slab() fails - net: sunrpc: interpret the return value of kstrtou32 correctly - usb: ohci: Make distrust_firmware param default to false - iio: buffer: Fix demux update - nfsd4: readdirplus shouldn't return parent of export - net: cdc_ncm: correct overhead in delayed_ndp_size - netxen_nic: fix MSI/MSI-x interrupts - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request - net: dcb: Validate netlink message in DCB handler - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands - net: sit: unregister_netdevice on newlink's error path - rxrpc: Fix handling of an unsupported token type in rxrpc_read() - net: avoid 32 x truesize under-estimation for tiny skbs - spi: cadence: cache reference clock rate during probe - Linux 4.4.253 * Xenial update: v4.4.252 upstream stable release (LP: #1913479) - Revert "UBUNTU: SAUCE: target: fix XCOPY NAA identifier lookup" - target: add XCOPY target/segment desc sense codes - target: bounds check XCOPY segment descriptor list - target: use XCOPY segment descriptor CSCD IDs - xcopy: loop over devices using idr helper - scsi: target: Fix XCOPY NAA identifier lookup - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at - net: ip: always refragment ip defragmented packets - net: fix pmtu check in nopmtudisc mode - vmlinux.lds.h: Add PGO and AutoFDO input sections - ubifs: wbuf: Don't leak kernel memory to flash - spi: pxa2xx: Fix use-after-free on unbind - cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() - wil6210: select CONFIG_CRC32 - block: rsxx: select CONFIG_CRC32 - iommu/intel: Fix memleak in intel_irq_remapping_alloc - block: fix use-after-free in disk_part_iter_next - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet - Linux 4.4.252 * Xenial update: v4.4.251 upstream stable release (LP: #1913478) - kbuild: don't hardcode depmod path - workqueue: Kick a worker based on the actual activation of delayed works - lib/genalloc: fix the overflow when size is too big - depmod: handle the case of /sbin/depmod without /sbin in PATH - atm: idt77252: call pci_disable_device() on error path - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() - net: hns: fix return value check in __lb_other_process() - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running - CDC-NCM: remove "connected" log message - vhost_net: fix ubuf refcount incorrectly when sendmsg fails - net: sched: prevent invalid Scell_log shift count - virtio_net: Fix recursive call to cpus_read_lock() - ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() - video: hyperv_fb: Fix the mmap() regression for v5.4.y and older - usb: gadget: enable super speed plus - USB: cdc-acm: blacklist another IR Droid device - usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set - usb: uas: Add PNY USB Portable SSD to unusual_uas - USB: serial: iuu_phoenix: fix DMA from stack - USB: serial: option: add LongSung M5710 module support - USB: yurex: fix control-URB timeout handling - USB: usblp: fix DMA to stack - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks - usb: gadget: select CONFIG_CRC32 - usb: gadget: f_uac2: reset wMaxPacketSize - usb: gadget: function: printer: Fix a memory leak for interface descriptor - USB: gadget: legacy: fix return error code in acm_ms_bind() - usb: gadget: Fix spinlock lockup on usb_function_deactivate - usb: gadget: configfs: Preserve function ordering after bind failure - USB: serial: keyspan_pda: remove unused variable - x86/mm: Fix leak of pmd ptlock - ALSA: hda/conexant: add a new hda codec CX11970 - Revert "device property: Keep secondary firmware node secondary by type" - netfilter: ipset: fix shift-out-of-bounds in htable_bits() - netfilter: xt_RATEEST: reject non-null terminated string from userspace - x86/mtrr: Correct the range check before performing MTRR type lookups - Linux 4.4.251 * Xenial update: v4.4.250 upstream stable release (LP: #1912679) - ALSA: hda/ca0132 - Fix work handling in delayed HP detection - ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk - ALSA: usb-audio: fix sync-ep altsetting sanity check - ALSA: hda/realtek - Support Dell headset mode for ALC3271 - ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines - ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 - s390/dasd: fix hanging device offline processing - USB: serial: digi_acceleport: fix write-wakeup deadlocks - uapi: move constants from <linux/kernel.h> to <linux/const.h> - of: fix linker-section match-table corruption - reiserfs: add check for an invalid ih_entry_count - misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() - media: gp8psk: initialize stats at power control logic - ALSA: seq: Use bool for snd_seq_queue internal flags - module: set MODULE_STATE_GOING state when a module fails to load - quota: Don't overflow quota file offsets - powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() - module: delay kobject uevent until after module init call - iio:magnetometer:mag3110: Fix alignment and data leak issues. - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start - Linux 4.4.250 -- Khalid Elmously <email address hidden> Thu, 25 Feb 2021 01:21:36 -0500
Available diffs
| Superseded in xenial-security |
| Superseded in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1150.160) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1150.160 -proposed tracker (LP: #1914136) * Xenial update: v4.4.249 upstream stable release (LP: #1910139) - [Config] snapdragon: update config for SPI_DYNAMIC - [Config] snapdragon: update config for USB_SISUSBVGA_CON [ Ubuntu: 4.4.0-203.235 ] * xenial/linux: 4.4.0-203.235 -proposed tracker (LP: #1914140) * Ubuntu 16.04 kernel 4.4.0-202 basic commands hanging (LP: #1913853) - SAUCE: Revert "mm: check that mm is still valid in madvise()" [ Ubuntu: 4.4.0-202.234 ] * xenial/linux: 4.4.0-202.234 -proposed tracker (LP: #1913086) * DMI entry syntax fix for Pegatron / ByteSpeed C15B (LP: #1910639) - Input: i8042 - unbreak Pegatron C15B * CVE-2020-29372 - mm: check that mm is still valid in madvise() * errinjct open fails on IBM POWER LPAR (LP: #1908710) - powerpc/rtas: Fix typo of ibm, open-errinjct in RTAS filter * 4.4 kernel panics in kvm wake_up() handler (LP: #1908428) - kvm: vmx: rename vmx_pre/post_block to pi_pre/post_block - KVM: VMX: extract __pi_post_block - KVM: VMX: avoid double list add with VT-d posted interrupts * restore reverted commit "crypto: arm64/sha - avoid non-standard inline asm tricks" (LP: #1907489) - crypto: arm64/sha - avoid non-standard inline asm tricks * CVE-2020-29374 - gup: document and work around "COW can break either way" issue * Xenial update: v4.4.249 upstream stable release (LP: #1910139) - spi: bcm2835aux: Fix use-after-free on unbind - spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe - ARC: stack unwinding: don't assume non-current task is sleeping - platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE - Input: cm109 - do not stomp on control URB - Input: i8042 - add Acer laptops to the i8042 reset list - [Config] updateconfigs for SPI_DYNAMIC - spi: Prevent adding devices below an unregistering controller - net/mlx4_en: Avoid scheduling restart task if it is already running - tcp: fix cwnd-limited bug for TSO deferral where we send nothing - net: stmmac: delete the eee_ctrl_timer after napi disabled - net: bridge: vlan: fix error return code in __vlan_add() - USB: dummy-hcd: Fix uninitialized array use in init() - USB: add RESET_RESUME quirk for Snapscan 1212 - ALSA: usb-audio: Fix potential out-of-bounds shift - ALSA: usb-audio: Fix control 'access overflow' errors from chmap - xhci: Give USB2 ports time to enter U3 in bus suspend - USB: sisusbvga: Make console support depend on BROKEN - [Config] updateconfigs for USB_SISUSBVGA_CON - ALSA: pcm: oss: Fix potential out-of-bounds shift - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access - USB: serial: cp210x: enable usb generic throttle/unthrottle - scsi: bnx2i: Requires MMU - can: softing: softing_netdev_open(): fix error handling - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait - dm table: Remove BUG_ON(in_interrupt()) - soc/tegra: fuse: Fix index bug in get_process_id - USB: serial: option: add interface-number sanity check to flag handling - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul - media: msi2500: assign SPI bus number dynamically - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() - drm/gma500: fix double free of gma_connector - ARM: p2v: fix handling of LPAE translation in BE mode - crypto: talitos - Fix return type of current_desc_hdr() - spi: img-spfi: fix reference leak in img_spfi_resume - ASoC: pcm: DRAIN support reactivation - Bluetooth: Fix null pointer dereference in hci_event_packet() - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup - spi: tegra20-slink: fix reference leak in slink ops of tegra20 - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume - spi: tegra114: fix reference leak in tegra spi ops - RDMa/mthca: Work around -Wenum-conversion warning - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA - media: solo6x10: fix missing snd_card_free in error handling case - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() - Input: ads7846 - fix integer overflow on Rt calculation - Input: ads7846 - fix unaligned access on 7845 - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 - soc: ti: knav_qmss: fix reference leak in knav_queue_probe - soc: ti: Fix reference imbalance in knav_dma_probe - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe - memstick: fix a double-free bug in memstick_check - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host - orinoco: Move context allocation after processing the skb - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover - NFSv4.2: condition READDIR's mask for security label based on LSM state - lockd: don't use interval-based rebinding over TCP - NFS: switch nfsiod to be an UNBOUND workqueue. - media: saa7146: fix array overflow in vidioc_s_audio() - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() - memstick: r592: Fix error return in r592_probe() - ASoC: jz4740-i2s: add missed checks for clk_get() - dm ioctl: fix error return code in target_message - clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE - cpufreq: loongson1: Add missing MODULE_ALIAS - cpufreq: scpi: Add missing MODULE_ALIAS - scsi: pm80xx: Fix error return in pm8001_pci_probe() - seq_buf: Avoid type mismatch for seq_buf_init - scsi: fnic: Fix error return code in fnic_probe() - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe - usb: oxu210hp-hcd: Fix memory leak in oxu_create - speakup: fix uninitialized flush_lock - nfs_common: need lock during iterate through the list - x86/kprobes: Restore BTF if the single-stepping is cancelled - extcon: max77693: Fix modalias string - ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() - um: chan_xterm: Fix fd leak - nfc: s3fwrn5: Release the nfc firmware - powerpc/ps3: use dma_mapping_error() - checkpatch: fix unescaped left brace - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin - net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function - net: korina: fix return value - clk: ti: Fix memleak in ti_fapll_synth_setup - perf record: Fix memory leak when using '--user-regs=?' to list registers - qlcnic: Fix error code in probe - clk: s2mps11: Fix a resource leak in error handling paths in the probe function - cfg80211: initialize rekey_data - Input: cros_ec_keyb - send 'scancodes' in addition to key events - Input: goodix - add upside-down quirk for Teclast X98 Pro tablet - media: gspca: Fix memory leak in probe - media: sunxi-cir: ensure IR is handled when it is continuous - media: netup_unidvb: Don't leak SPI master in probe error path - Input: cyapa_gen6 - fix out-of-bounds stack access - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" - ACPI: PNP: compare the string length in the matching_id() - ALSA: pcm: oss: Fix a few more UBSAN fixes - s390/dasd: fix list corruption of pavgroup group list - s390/dasd: fix list corruption of lcu list - staging: comedi: mf6x4: Fix AI end-of-conversion detection - powerpc/perf: Exclude kernel samples while counting events in user space. - USB: serial: mos7720: fix parallel-port state restore - USB: serial: keyspan_pda: fix dropped unthrottle interrupts - USB: serial: keyspan_pda: fix write deadlock - USB: serial: keyspan_pda: fix stalled writes - USB: serial: keyspan_pda: fix write-wakeup use-after-free - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free - USB: serial: keyspan_pda: fix write unthrottling - btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf - btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block() - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes - btrfs: fix return value mixup in btrfs_get_extent - ext4: fix a memory leak of ext4_free_data - ceph: fix race in concurrent __ceph_remove_cap invocations - jffs2: Fix GC exit abnormally - jfs: Fix array index bounds check in dbAdjTree - spi: rb4xx: Don't leak SPI master in probe error path - mtd: parser: cmdline: Fix parsing of part-names with colons - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume - iio:pressure:mpl3115: Force alignment of buffer - xen/xenbus: Allow watches discard events before queueing - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() - xen/xenbus/xen_bus_type: Support will_handle watch callback - xen/xenbus: Count pending messages for each watch - xenbus/xenbus_backend: Disallow pending watch messages - PCI: Fix pci_slot_release() NULL pointer dereference - Linux 4.4.249 * MSFT Touchpad not working on Lenovo Legion-5 15ARH05 (LP: #1887190) // Xenial update: v4.4.249 upstream stable release (LP: #1910139) - pinctrl: amd: remove debounce filter setting in IRQ type setting * Xenial update: v4.4.248 upstream stable release (LP: #1910137) - net/af_iucv: set correct sk_protocol for child sockets - rose: Fix Null pointer dereference in rose_send_frame() - usbnet: ipheth: fix connectivity with iOS 14 - bonding: wait for sysfs kobject destruction before freeing struct slave - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal - net/x25: prevent a couple of overflows - cxgb3: fix error return code in t3_sge_alloc_qset() - net: pasemi: fix error return code in pasemi_mac_open() - dt-bindings: net: correct interrupt flags in examples - Input: xpad - support Ardwiino Controllers - powerpc: Stop exporting __clear_user which is now inlined. - btrfs: sysfs: init devices outside of the chunk_mutex - vlan: consolidate VLAN parsing code and limit max parsing depth - usb: gadget: f_fs: Use local copy of descriptors for userspace copy - USB: serial: kl5kusb105: fix memleak on open - USB: serial: ch341: add new Product ID for CH341A - USB: serial: ch341: sort device-id entries - USB: serial: option: add Fibocom NL668 variants - USB: serial: option: add support for Thales Cinterion EXS82 - tty: Fix ->pgrp locking in tiocspgrp() - ALSA: hda/realtek - Add new codec supported for ALC897 - ALSA: hda/generic: Add option to enforce preferred_dacs pairs - tty: Fix ->session locking - cifs: fix potential use-after-free in cifs_echo_request() - i2c: imx: Fix reset of I2SR_IAL flag - i2c: imx: Check for I2SR_IAL after every byte - arm64: assembler: make adr_l work in modules under KASLR - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs - spi: Introduce device-managed SPI controller allocation - spi: bcm2835: Fix use-after-free on unbind - spi: bcm2835: Release the DMA channel if probe fails after dma_init - tracing: Fix userstacktrace option for instances - btrfs: cleanup cow block on error - mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() - gfs2: check for empty rgrp tree in gfs2_ri_update - Input: i8042 - fix error return code in i8042_setup_aux() - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes - Linux 4.4.248 -- William Breathitt Gray <email address hidden> Wed, 03 Feb 2021 08:22:09 -0500
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1096.105) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1096.105 -proposed tracker (LP: #1913094) * Bionic update: upstream stable patchset 2021-01-12 (LP: #1911331) - [Config] snapdragon: updateconfigs for USB_SISUSBVGA_CON [ Ubuntu: 4.15.0-136.140 ] * bionic/linux: 4.15.0-136.140 -proposed tracker (LP: #1913117) * Packaging resync (LP: #1786013) - update dkms package versions - update dkms package versions * Introduce the new NVIDIA 460-server series and update the 460 series (LP: #1913200) - [Config] dkms-versions -- drop NVIDIA 435 455 and 440-server - [Config] dkms-versions -- add the 460-server nvidia driver * switch to an autogenerated nvidia series based core via dkms-versions (LP: #1912803) - [Packaging] nvidia -- use dkms-versions to define versions built - [Packaging] update-version-dkms -- maintain flags fields - [Config] dkms-versions -- add transitional/skip information for nvidia packages * DMI entry syntax fix for Pegatron / ByteSpeed C15B (LP: #1910639) - Input: i8042 - unbreak Pegatron C15B * CVE-2020-29372 - mm: check that mm is still valid in madvise() * update ENA driver, incl. new ethtool stats (LP: #1910291) - net: ena: change num_queues to num_io_queues for clarity and consistency - net: ena: ethtool: get_channels: use combined only - net: ena: ethtool: support set_channels callback - net: ena: ethtool: remove redundant non-zero check on rc - net/amazon: Ensure that driver version is aligned to the linux kernel - net: ena: ethtool: clean up minor indentation issue - net: ena: remove code that does nothing - net: ena: add unmask interrupts statistics to ethtool - net: ena: cosmetic: change ena_com_stats_admin stats to u64 - net: ena: cosmetic: remove unnecessary code - net: ena: ethtool: convert stat_offset to 64 bit resolution - net: ena: ethtool: Add new device statistics - net: ena: Change license into format to SPDX in all files - net: ena: Change RSS related macros and variables names * CVE-2020-29374 - gup: document and work around "COW can break either way" issue * Bionic update: upstream stable patchset 2021-01-12 (LP: #1911331) - spi: bcm2835aux: Fix use-after-free on unbind - spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe - iwlwifi: pcie: limit memory read spin time - arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. - iwlwifi: mvm: fix kernel panic in case of assert during CSA - ARC: stack unwinding: don't assume non-current task is sleeping - scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE - soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) - platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE - Input: cm109 - do not stomp on control URB - Input: i8042 - add Acer laptops to the i8042 reset list - kbuild: avoid static_assert for genksyms - scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" - x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP - PCI: qcom: Add missing reset for ipq806x - net: stmmac: free tx skb buffer in stmmac_resume() - tcp: fix cwnd-limited bug for TSO deferral where we send nothing - net/mlx4_en: Avoid scheduling restart task if it is already running - net/mlx4_en: Handle TX error CQE - net: stmmac: delete the eee_ctrl_timer after napi disabled - net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux - net: bridge: vlan: fix error return code in __vlan_add() - mac80211: mesh: fix mesh_pathtbl_init() error path - USB: dummy-hcd: Fix uninitialized array use in init() - USB: add RESET_RESUME quirk for Snapscan 1212 - ALSA: usb-audio: Fix potential out-of-bounds shift - ALSA: usb-audio: Fix control 'access overflow' errors from chmap - xhci: Give USB2 ports time to enter U3 in bus suspend - USB: UAS: introduce a quirk to set no_write_same - USB: sisusbvga: Make console support depend on BROKEN - [Config] updateconfigs for USB_SISUSBVGA_CON - ALSA: pcm: oss: Fix potential out-of-bounds shift - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi - pinctrl: merrifield: Set default bias in case no particular value given - pinctrl: baytrail: Avoid clearing debounce value when turning it off - ARM: dts: sun8i: v3s: fix GIC node memory range - gpio: mvebu: fix potential user-after-free on probe - scsi: bnx2i: Requires MMU - can: softing: softing_netdev_open(): fix error handling - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait - kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling - drm/tegra: sor: Disable clocks on error in tegra_sor_init() - vxlan: Add needed_headroom for lower device - vxlan: Copy needed_tailroom from lowerdev - scsi: mpt3sas: Increase IOCInit request timeout to 30s - dm table: Remove BUG_ON(in_interrupt()) - soc/tegra: fuse: Fix index bug in get_process_id - USB: serial: option: add interface-number sanity check to flag handling - USB: gadget: f_acm: add support for SuperSpeed Plus - USB: gadget: f_midi: setup SuperSpeed Plus descriptors - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul - ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU - ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 - ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU - HID: i2c-hid: add Vero K147 to descriptor override - serial_core: Check for port state when tty is in error state - quota: Sanity-check quota file headers on load - media: msi2500: assign SPI bus number dynamically - crypto: af_alg - avoid undefined behavior accessing salg_name - md: fix a warning caused by a race between concurrent md_ioctl()s - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() - drm/gma500: fix double free of gma_connector - soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() - soc: mediatek: Check if power domains can be powered on at boot time - RDMA/bnxt_re: Set queue pair state when being queried - selinux: fix error initialization in inode_doinit_with_dentry() - RDMA/rxe: Compute PSN windows correctly - x86/mm/ident_map: Check for errors from ident_pud_init() - ARM: p2v: fix handling of LPAE translation in BE mode - sched/deadline: Fix sched_dl_global_validate() - sched: Reenable interrupts in do_sched_yield() - crypto: talitos - Fix return type of current_desc_hdr() - spi: img-spfi: fix reference leak in img_spfi_resume - ASoC: pcm: DRAIN support reactivation - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling - arm64: dts: exynos: Correct psci compatible used on Exynos7 - Bluetooth: Fix null pointer dereference in hci_event_packet() - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup - spi: tegra20-slink: fix reference leak in slink ops of tegra20 - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume - spi: tegra114: fix reference leak in tegra spi ops - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure - ASoC: wm8998: Fix PM disable depth imbalance on error - ASoC: arizona: Fix a wrong free in wm8997_probe - RDMa/mthca: Work around -Wenum-conversion warning - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA - staging: greybus: codecs: Fix reference counter leak in error handling - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() - scsi: core: Fix VPD LUN ID designator priorities - media: solo6x10: fix missing snd_card_free in error handling case - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() - Input: ads7846 - fix race that causes missing releases - Input: ads7846 - fix integer overflow on Rt calculation - Input: ads7846 - fix unaligned access on 7845 - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe - soc: ti: knav_qmss: fix reference leak in knav_queue_probe - soc: ti: Fix reference imbalance in knav_dma_probe - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe - Input: omap4-keypad - fix runtime PM error handling - RDMA/cxgb4: Validate the number of CQEs - memstick: fix a double-free bug in memstick_check - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host - orinoco: Move context allocation after processing the skb - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common - media: siano: fix memory leak of debugfs members in smsdvb_hotplug - samples: bpf: Fix lwt_len_hist reusing previous BPF map - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover - media: max2175: fix max2175_set_csm_mode() error code - HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() - ARM: dts: Remove non-existent i2c1 from 98dx3236 - power: supply: bq24190_charger: fix reference leak - genirq/irqdomain: Don't try to free an interrupt that has no mapping - PCI: iproc: Fix out-of-bound array accesses - ARM: dts: at91: at91sam9rl: fix ADC triggers - ath10k: Fix an error handling path - ath10k: Release some resources in an error handling path - NFSv4.2: condition READDIR's mask for security label based on LSM state - SUNRPC: xprt_load_transport() needs to support the netid "rdma6" - lockd: don't use interval-based rebinding over TCP - NFS: switch nfsiod to be an UNBOUND workqueue. - vfio-pci: Use io_remap_pfn_range() for PCI IO memory - media: saa7146: fix array overflow in vidioc_s_audio() - clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() - ARM: dts: at91: sama5d2: map securam as device - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() - arm64: dts: rockchip: Fix UART pull-ups on rk3328 - memstick: r592: Fix error return in r592_probe() - net/mlx5: Properly convey driver version to firmware - ASoC: jz4740-i2s: add missed checks for clk_get() - dm ioctl: fix error return code in target_message - clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE - cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE - cpufreq: st: Add missing MODULE_DEVICE_TABLE - cpufreq: loongson1: Add missing MODULE_ALIAS - cpufreq: scpi: Add missing MODULE_ALIAS - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe - scsi: pm80xx: Fix error return in pm8001_pci_probe() - seq_buf: Avoid type mismatch for seq_buf_init - scsi: fnic: Fix error return code in fnic_probe() - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops - powerpc/pseries/hibernation: remove redundant cacheinfo update - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe - usb: oxu210hp-hcd: Fix memory leak in oxu_create - speakup: fix uninitialized flush_lock - nfsd: Fix message level for normal termination - nfs_common: need lock during iterate through the list - x86/kprobes: Restore BTF if the single-stepping is cancelled - clk: tegra: Fix duplicated SE clock entry - extcon: max77693: Fix modalias string - ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() - irqchip/alpine-msi: Fix freeing of interrupts on allocation error path - watchdog: sirfsoc: Add missing dependency on HAS_IOMEM - um: chan_xterm: Fix fd leak - nfc: s3fwrn5: Release the nfc firmware - powerpc/ps3: use dma_mapping_error() - checkpatch: fix unescaped left brace - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin - net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function - net: korina: fix return value - watchdog: qcom: Avoid context switch in restart handler - watchdog: coh901327: add COMMON_CLK dependency - clk: ti: Fix memleak in ti_fapll_synth_setup - pwm: zx: Add missing cleanup in error path - pwm: lp3943: Dynamically allocate PWM chip base - perf record: Fix memory leak when using '--user-regs=?' to list registers - qlcnic: Fix error code in probe - clk: s2mps11: Fix a resource leak in error handling paths in the probe function - clk: sunxi-ng: Make sure divider tables have sentinel - cfg80211: initialize rekey_data - fix namespaced fscaps when !CONFIG_SECURITY - Input: cros_ec_keyb - send 'scancodes' in addition to key events - Input: goodix - add upside-down quirk for Teclast X98 Pro tablet - media: gspca: Fix memory leak in probe - media: sunxi-cir: ensure IR is handled when it is continuous - media: netup_unidvb: Don't leak SPI master in probe error path - Input: cyapa_gen6 - fix out-of-bounds stack access - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" - ACPI: PNP: compare the string length in the matching_id() - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 - ALSA: pcm: oss: Fix a few more UBSAN fixes - ALSA: usb-audio: Disable sample read check if firmware doesn't give back - s390/smp: perform initial CPU reset also for SMT siblings - s390/dasd: prevent inconsistent LCU device data - s390/dasd: fix list corruption of pavgroup group list - s390/dasd: fix list corruption of lcu list - staging: comedi: mf6x4: Fix AI end-of-conversion detection - powerpc/perf: Exclude kernel samples while counting events in user space. - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() - EDAC/amd64: Fix PCI component registration - USB: serial: mos7720: fix parallel-port state restore - USB: serial: keyspan_pda: fix dropped unthrottle interrupts - USB: serial: keyspan_pda: fix write deadlock - USB: serial: keyspan_pda: fix stalled writes - USB: serial: keyspan_pda: fix write-wakeup use-after-free - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free - USB: serial: keyspan_pda: fix write unthrottling - ext4: fix a memory leak of ext4_free_data - ext4: fix deadlock with fs freezing and EA inodes - KVM: arm64: Introduce handling of AArch32 TTBCR2 traps - ARM: dts: at91: sama5d2: fix CAN message ram offset and size - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter - powerpc/xmon: Change printk() to pr_cont() - powerpc/powernv/memtrace: Don't leak kernel memory to user space - ima: Don't modify file descriptor mode on the fly - ceph: fix race in concurrent __ceph_remove_cap invocations - jffs2: Fix GC exit abnormally - jfs: Fix array index bounds check in dbAdjTree - drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() - spi: spi-sh: Fix use-after-free on unbind - spi: davinci: Fix use-after-free on unbind - spi: pic32: Don't leak DMA channels in probe error path - spi: rb4xx: Don't leak SPI master in probe error path - spi: sc18is602: Don't leak SPI master in probe error path - spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path - soc: qcom: smp2p: Safely acquire spinlock without IRQs - mtd: parser: cmdline: Fix parsing of part-names with colons - iio: buffer: Fix demux update - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume - iio:light:rpr0521: Fix timestamp alignment and prevent data leak. - iio:pressure:mpl3115: Force alignment of buffer - iio:imu:bmi160: Fix too large a buffer. - md/cluster: fix deadlock when node is doing resync job - clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 - xen-blkback: set ring->xenblkd to NULL after kthread_stop() - xen/xenbus: Allow watches discard events before queueing - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() - xen/xenbus/xen_bus_type: Support will_handle watch callback - xen/xenbus: Count pending messages for each watch - xenbus/xenbus_backend: Disallow pending watch messages - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels - PCI: Fix pci_slot_release() NULL pointer dereference - Kbuild: do not emit debug info for assembly with LLVM_IAS=1 - x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S - powerpc: Drop -me200 addition to build flags - platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e - x86/apic/vector: Fix ordering in vector assignment - tcp: select sane initial rcvq_space.space for big MSS - arm64: Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S - block: factor out requeue handling from dispatch code - ixgbe: avoid premature Rx buffer reuse - scsi: megaraid_sas: Check user-provided offsets - drm/tve200: Fix handling of platform_get_irq() error - x86/apic: Fix x2apic enablement without interrupt remapping - crypto: talitos - Endianess in current_desc_hdr() - arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7 - media: tm6000: Fix sizeof() mismatches - video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init() - usb/max3421: fix return error code in max3421_probe() - spi: mxs: fix reference leak in mxs_spi_probe - crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd - spi: fix resource leak for drivers without .remove callback - dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() - power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching - PCI: Bounds-check command-line resource alignment requests - PCI: Fix overflow in command-line resource alignment requests - arm64: dts: meson: fix spi-max-frequency on Khadas VIM2 - platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init - bus: fsl-mc: fix error return code in fsl_mc_object_allocate() - mac80211: don't set set TDLS STA bandwidth wider than possible - watchdog: Fix potential dereferencing of null pointer - um: tty: Fix handling of close in tty lines - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update - ARM: sunxi: Add machine match for the Allwinner V3 SoC - lwt: Disable BH too in run_lwt_bpf() - ALSA: hda: Fix regressions on clear and reconfig sysfs - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 - ALSA: hda/realtek: Add quirk for MSI-GP73 - ALSA: hda/realtek: Apply jack fixup for Quanta NL3 - s390/dasd: fix hanging device offline processing - USB: serial: digi_acceleport: fix write-wakeup deadlocks - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at - ubifs: wbuf: Don't leak kernel memory to flash - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free() - pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler * MSFT Touchpad not working on Lenovo Legion-5 15ARH05 (LP: #1887190) // Bionic update: upstream stable patchset 2021-01-12 (LP: #1911331) - pinctrl: amd: remove debounce filter setting in IRQ type setting * Bionic update: upstream stable patchset 2021-01-07 (LP: #1910599) - i2c: imx: use clk notifier for rate changes - i2c: imx: Fix external abort on interrupt in exit paths - gpio: mockup: fix resource leak in error path - powerpc/8xx: Always fault when _PAGE_ACCESSED is not set - Input: sunkbd - avoid use-after-free in teardown paths - mac80211: always wind down STA state - can: proc: can_remove_proc(): silence remove_proc_entry warning - KVM: x86: clflushopt should be treated as a no-op by emulation - ACPI: GED: fix -Wformat - ah6: fix error return code in ah6_input() - atm: nicstar: Unmap DMA on send error - bnxt_en: read EEPROM A2h address using page 0 - devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() - mlxsw: core: Use variable timeout for EMAD retries - net: b44: fix error return code in b44_init_one() - net: bridge: add missing counters to ndo_get_stats64 callback - net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 - net: Have netpoll bring-up DSA management interface - netlabel: fix our progress tracking in netlbl_unlabel_staticlist() - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() - net/mlx4_core: Fix init_hca fields offset - net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request - qlcnic: fix error return code in qlcnic_83xx_restart_hw() - sctp: change to hold/put transport for proto_unreach_timer - net/mlx5: Disable QoS when min_rates on all VFs are zero - net: usb: qmi_wwan: Set DTR quirk for MR400 - tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate - net: ftgmac100: Fix crash when removing driver - pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq - arm64: psci: Avoid printing in cpu_psci_cpu_die() - vfs: remove lockdep bogosity in __sb_start_write - Input: adxl34x - clean up a data type in adxl34x_probe() - MIPS: export has_transparent_hugepage() for modules - arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy - ARM: dts: imx50-evk: Fix the chip select 1 IOMUX - perf lock: Don't free "lock_seq_stat" if read_count isn't zero - can: af_can: prevent potential access of uninitialized member in can_rcv() - can: af_can: prevent potential access of uninitialized member in canfd_rcv() - can: dev: can_restart(): post buffer from the right context - can: ti_hecc: Fix memleak in ti_hecc_probe - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() - can: peak_usb: fix potential integer overflow on shift of a int - can: m_can: m_can_handle_state_change(): fix state change - ASoC: qcom: lpass-platform: Fix memory leak - MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu - regulator: ti-abb: Fix array out of bound read access on the first transition - xfs: revert "xfs: fix rmap key and record comparison functions" - libfs: fix error cast of negative value in simple_attr_write() - powerpc/uaccess-flush: fix missing includes in kup-radix.h - speakup: Do not let the line discipline be used several times - ALSA: ctl: fix error path at adding user-defined element set - ALSA: mixart: Fix mutex deadlock - tty: serial: imx: keep console clocks always on - efivarfs: fix memory leak in efivarfs_create() - staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids - ext4: fix bogus warning in ext4_update_dx_flag() - iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum - iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet- mode - regulator: fix memory leak with repeated set_machine_constraints() - regulator: avoid resolve_supply() infinite recursion - regulator: workaround self-referent regulators - xtensa: disable preemption around cache alias management calls - mac80211: minstrel: remove deferred sampling code - mac80211: minstrel: fix tx status processing corner case - mac80211: free sta in sta_info_insert_finish() on errors - s390/cpum_sf.c: fix file permission for cpum_sfb_size - s390/dasd: fix null pointer dereference for ERP requests - x86/microcode/intel: Check patch signature before saving microcode for early loading - net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup - page_frag: Recover from memory pressure - qed: fix error return code in qed_iwarp_ll2_start() - scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold() - arm64: dts: allwinner: a64: Pine64 Plus: Fix ethernet node - arm64: dts: allwinner: h5: OrangePi PC2: Fix ethernet node - Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to active high" - ARM: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on Ethernet PHY - arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY - arm64: dts: allwinner: h5: OrangePi Prime: Fix ethernet node - ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() - ALSA: usb-audio: Add delay quirk for all Logitech USB devices - ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) - ptrace: Set PF_SUPERPRIV when checking capability - seccomp: Set PF_SUPERPRIV when checking capability - mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() - perf event: Check ref_reloc_sym before using it - btrfs: fix lockdep splat when reading qgroup config on mount - wireless: Use linux/stddef.h instead of stddef.h - btrfs: adjust return values of btrfs_inode_by_name - arm64: pgtable: Fix pte_accessible() - arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() - ALSA: hda/hdmi: Use single mutex unlock in error paths - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close - HID: cypress: Support Varmilo Keyboards' media hotkeys - Input: i8042 - allow insmod to succeed on devices without an i8042 controller - HID: hid-sensor-hub: Fix issue with devices with no report ID - dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant - x86/xen: don't unbind uninitialized lock_kicker_irq - HID: Add Logitech Dinovo Edge battery quirk - proc: don't allow async path resolution of /proc/self components - nvme: free sq/cq dbbuf pointers when dbbuf set fails - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size - scsi: libiscsi: Fix NOP race condition - scsi: target: iscsi: Fix cmd abort fabric stop race - perf/x86: fix sysfs type mismatches - phy: tegra: xusb: Fix dangling pointer on probe failure - batman-adv: set .owner to THIS_MODULE - scsi: ufs: Fix race between shutdown and runtime resume flow - bnxt_en: fix error return code in bnxt_init_one() - bnxt_en: fix error return code in bnxt_init_board() - video: hyperv_fb: Fix the cache type when mapping the VRAM - bnxt_en: Release PCI regions when DMA mask setup fails during probe. - IB/mthca: fix return value of error branch in mthca_init_cq() - nfc: s3fwrn5: use signed integer for parsing GPIO numbers - net: ena: set initial DMA width to avoid intel iommu issue - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq - efivarfs: revert "fix memory leak in efivarfs_create()" - can: gs_usb: fix endianess problem with candleLight firmware - platform/x86: toshiba_acpi: Fix the wrong variable assignment - can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 - perf probe: Fix to die_entrypc() returns error correctly - USB: core: Change %pK for __user pointers to %px - usb: gadget: f_midi: Fix memleak in f_midi_alloc - usb: gadget: Fix memleak in gadgetfs_fill_super - x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb - x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak - x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak - USB: core: Fix regression in Hercules audio card - btrfs: don't access possibly stale fs_info data for printing duplicate device - KVM: x86: Fix split-irqchip vs interrupt injection window request - HID: add support for Sega Saturn - cxgb4: fix the panic caused by non smac rewrite - s390/qeth: fix tear down of async TX buffers - platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time - USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card - net/af_iucv: set correct sk_protocol for child sockets - rose: Fix Null pointer dereference in rose_send_frame() - sock: set sk_err to ee_errno on dequeue from errq - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control - tun: honor IOCB_NOWAIT flag - usbnet: ipheth: fix connectivity with iOS 14 - bonding: wait for sysfs kobject destruction before freeing struct slave - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal - ipv4: Fix tos mask in inet_rtm_getroute() - ibmvnic: Ensure that SCRQ entry reads are correctly ordered - ibmvnic: Fix TX completion error handling - net/x25: prevent a couple of overflows - cxgb3: fix error return code in t3_sge_alloc_qset() - net: pasemi: fix error return code in pasemi_mac_open() - net/mlx5: Fix wrong address reclaim when command interface is down - dt-bindings: net: correct interrupt flags in examples - ALSA: usb-audio: US16x08: fix value count for level meters - Input: xpad - support Ardwiino Controllers - RDMA/i40iw: Address an mmap handler exploit in i40iw - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init - ibmvnic: fix call_netdevice_notifiers in do_reset - i40e: Fix removing driver while bare-metal VFs pass traffic - geneve: pull IP header before ECN decapsulation - pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output - pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) - vlan: consolidate VLAN parsing code and limit max parsing depth - usb: gadget: f_fs: Use local copy of descriptors for userspace copy - USB: serial: kl5kusb105: fix memleak on open - USB: serial: ch341: add new Product ID for CH341A - USB: serial: ch341: sort device-id entries - USB: serial: option: add Fibocom NL668 variants - USB: serial: option: add support for Thales Cinterion EXS82 - USB: serial: option: fix Quectel BG96 matching - tty: Fix ->pgrp locking in tiocspgrp() - tty: Fix ->session locking - ALSA: hda/realtek - Add new codec supported for ALC897 - ALSA: hda/generic: Add option to enforce preferred_dacs pairs - ftrace: Fix updating FTRACE_FL_TRAMP - cifs: fix potential use-after-free in cifs_echo_request() - mm/swapfile: do not sleep with a spin lock held - i2c: imx: Fix reset of I2SR_IAL flag - i2c: imx: Check for I2SR_IAL after every byte - speakup: Reject setting the speakup line discipline outside of speakup - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs - spi: Introduce device-managed SPI controller allocation - spi: bcm-qspi: Fix use-after-free on unbind - spi: bcm2835: Fix use-after-free on unbind - spi: bcm2835: Release the DMA channel if probe fails after dma_init - tracing: Fix userstacktrace option for instances - gfs2: check for empty rgrp tree in gfs2_ri_update - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() - Input: i8042 - fix error return code in i8042_setup_aux() - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model - x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes - Revert "geneve: pull IP header before ECN decapsulation" [ Ubuntu: 4.15.0-135.139 ] * bionic/linux: 4.15.0-135.139 -proposed tracker (LP: #1912223) * [drm:qxl_enc_commit [qxl]] *ERROR* head number too large or missing monitors config: (LP: #1908219) - qxl: remove qxl_io_log() - qxl: move qxl_send_monitors_config() - qxl: hook monitors_config updates into crtc, not encoder. * Touchpad not detected on ByteSpeed C15B laptop (LP: #1906128) - Input: i8042 - add ByteSpeed touchpad to noloop table * vmx_nm_test in ubuntu_kvm_unit_tests interrupted on X-oracle-4.15 / B-oracle-4.15 / X-KVM / B-KVM (LP: #1872401) - KVM: nVMX: Always reflect #NM VM-exits to L1 * stack trace in kernel (LP: #1903596) - net: napi: remove useless stack trace * CVE-2020-27777 - [Config]: Set CONFIG_PPC_RTAS_FILTER * Bionic update: upstream stable patchset 2020-12-04 (LP: #1906875) - regulator: defer probe when trying to get voltage from unresolved supply - ring-buffer: Fix recursion protection transitions between interrupt context - time: Prevent undefined behaviour in timespec64_to_ns() - nbd: don't update block size after device is started - btrfs: sysfs: init devices outside of the chunk_mutex - btrfs: reschedule when cloning lots of extents - genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY - hv_balloon: disable warning when floor reached - net: xfrm: fix a race condition during allocing spi - perf tools: Add missing swap for ino_generation - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() - can: rx-offload: don't call kfree_skb() from IRQ context - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() - can: peak_usb: add range checking in decode operations - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on - xfs: flush new eof page on truncate to avoid post-eof corruption - Btrfs: fix missing error return if writeback for extent buffer never started - ath9k_htc: Use appropriate rs_datalen type - usb: gadget: goku_udc: fix potential crashes in probe - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free - gfs2: Add missing truncate_inode_pages_final for sd_aspace - gfs2: check for live vs. read-only file system in gfs2_fitrim - scsi: hpsa: Fix memory leak in hpsa_init_one() - drm/amdgpu: perform srbm soft reset always on SDMA resume - mac80211: fix use of skb payload instead of header - cfg80211: regulatory: Fix inconsistent format argument - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() - iommu/amd: Increase interrupt remapping table limit to 512 entries - pinctrl: intel: Set default bias in case no particular value given - ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template - pinctrl: aspeed: Fix GPI only function problem. - nbd: fix a block_device refcount leak in nbd_release - xfs: fix flags argument to rmap lookup when converting shared file rmaps - xfs: fix rmap key and record comparison functions - xfs: fix a missing unlock on error in xfs_fs_map_blocks - of/address: Fix of_node memory leak in of_dma_is_coherent - cosa: Add missing kfree in error path of cosa_write - perf: Fix get_recursion_context() - ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA - ext4: unlock xattr_sem properly in ext4_inline_data_truncate() - thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() - uio: Fix use-after-free in uio_unregister_device() - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode - mei: protect mei_cl_mtu from null dereference - futex: Don't enable IRQs unconditionally in put_pi_state() - ocfs2: initialize ip_next_orphan - selinux: Fix error return code in sel_ib_pkey_sid_slow() - don't dump the threads that had been already exiting when zapped. - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] - pinctrl: amd: use higher precision for 512 RtcClk - pinctrl: amd: fix incorrect way to disable debounce filter - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" - IPv6: Set SIT tunnel hard_header_len to zero - net/af_iucv: fix null pointer dereference on shutdown - net/x25: Fix null-ptr-deref in x25_connect - vrf: Fix fast path output packet handling with async Netfilter rules - r8169: fix potential skb double free in an error path - net: Update window_clamp if SOCK_RCVBUF is set - random32: make prandom_u32() output unpredictable - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always- on STIBP - perf/core: Fix bad use of igrab() - perf/core: Fix crash when using HW tracing kernel filters - perf/core: Fix a memory leak in perf_event_parse_addr_filter() - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" - reboot: fix overflow parsing reboot cpu number - Convert trailing spaces and periods in path components - xfs: fix scrub flagging rtinherit even if there is no rt device - drm/amd/pm: perform SMC reset on suspend/hibernation - drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running - s390/smp: move rcu_cpu_starting() earlier - tpm_tis: Disable interrupts on ThinkPad T490s - tick/common: Touch watchdog in tick_unfreeze() on all CPUs - mfd: sprd: Add wakeup capability for PMIC IRQ - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod - thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services() - btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch - mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove [ Ubuntu: 4.15.0-134.138 ] * Packaging resync (LP: #1786013) - update dkms package versions -- Kelsey Skunberg <email address hidden> Tue, 02 Feb 2021 16:42:09 -0700
Available diffs
| Superseded in xenial-security |
| Superseded in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1149.159) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1149.159 -proposed tracker (LP: #1911261) [ Ubuntu: 4.4.0-201.233 ] * xenial/linux: 4.4.0-201.233 -proposed tracker (LP: #1911265) * Touchpad not detected on ByteSpeed C15B laptop (LP: #1906128) - Input: i8042 - add ByteSpeed touchpad to noloop table * stack trace in kernel (LP: #1903596) - net: napi: remove useless stack trace * CVE-2020-27777 - powerpc/rtas: Restrict RTAS requests from userspace - [Config]: Set CONFIG_PPC_RTAS_FILTER * Xenial update: v4.4.247 upstream stable release (LP: #1906703) - btrfs: tree-checker: Enhance chunk checker to validate chunk profile - btrfs: inode: Verify inode mode to avoid NULL pointer dereference - HID: cypress: Support Varmilo Keyboards' media hotkeys - Input: i8042 - allow insmod to succeed on devices without an i8042 controller - HID: hid-sensor-hub: Fix issue with devices with no report ID - x86/xen: don't unbind uninitialized lock_kicker_irq - proc: don't allow async path resolution of /proc/self components - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size - scsi: libiscsi: Fix NOP race condition - scsi: target: iscsi: Fix cmd abort fabric stop race - scsi: ufs: Fix race between shutdown and runtime resume flow - bnxt_en: fix error return code in bnxt_init_board() - video: hyperv_fb: Fix the cache type when mapping the VRAM - bnxt_en: Release PCI regions when DMA mask setup fails during probe. - IB/mthca: fix return value of error branch in mthca_init_cq() - nfc: s3fwrn5: use signed integer for parsing GPIO numbers - efivarfs: revert "fix memory leak in efivarfs_create()" - perf probe: Fix to die_entrypc() returns error correctly - USB: core: Change %pK for __user pointers to %px - x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb - USB: core: add endpoint-blacklist quirk - USB: core: Fix regression in Hercules audio card - btrfs: fix lockdep splat when reading qgroup config on mount - Linux 4.4.247 * Xenial update: v4.4.246 upstream stable release (LP: #1906700) - ah6: fix error return code in ah6_input() - atm: nicstar: Unmap DMA on send error - net: b44: fix error return code in b44_init_one() - net: bridge: add missing counters to ndo_get_stats64 callback - netlabel: fix our progress tracking in netlbl_unlabel_staticlist() - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() - net/mlx4_core: Fix init_hca fields offset - net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request - qlcnic: fix error return code in qlcnic_83xx_restart_hw() - sctp: change to hold/put transport for proto_unreach_timer - net: usb: qmi_wwan: Set DTR quirk for MR400 - net: Have netpoll bring-up DSA management interface - pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq - arm64: psci: Avoid printing in cpu_psci_cpu_die() - MIPS: Fix BUILD_ROLLBACK_PROLOGUE for microMIPS - Input: adxl34x - clean up a data type in adxl34x_probe() - arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy - ARM: dts: imx50-evk: Fix the chip select 1 IOMUX - perf lock: Don't free "lock_seq_stat" if read_count isn't zero - can: dev: can_restart(): post buffer from the right context - can: peak_usb: fix potential integer overflow on shift of a int - can: m_can: m_can_handle_state_change(): fix state change - MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu - regulator: ti-abb: Fix array out of bound read access on the first transition - libfs: fix error cast of negative value in simple_attr_write() - ALSA: ctl: fix error path at adding user-defined element set - ALSA: mixart: Fix mutex deadlock - tty: serial: imx: keep console clocks always on - efivarfs: fix memory leak in efivarfs_create() - ext4: fix bogus warning in ext4_update_dx_flag() - xtensa: disable preemption around cache alias management calls - mac80211: minstrel: remove deferred sampling code - mac80211: minstrel: fix tx status processing corner case - mac80211: allow driver to prevent two stations w/ same address - mac80211: free sta in sta_info_insert_finish() on errors - s390/cpum_sf.c: fix file permission for cpum_sfb_size - x86/microcode/intel: Check patch signature before saving microcode for early loading - Linux 4.4.246 * Xenial update: v4.4.245 upstream stable release (LP: #1906698) - i2c: imx: Fix external abort on interrupt in exit paths - xfs: catch inode allocation state mismatch corruption - xfs: validate cached inodes are free when allocated - powerpc/8xx: Always fault when _PAGE_ACCESSED is not set - Input: sunkbd - avoid use-after-free in teardown paths - mac80211: always wind down STA state - KVM: x86: clflushopt should be treated as a no-op by emulation - Linux 4.4.245 [ Ubuntu: 4.4.0-200.232 ] * xenial/linux: 4.4.0-200.232 -proposed tracker (LP: #1911151) * CVE-2020-28374 - target: simplify XCOPY wwn->se_dev lookup helper - SAUCE: target: fix XCOPY NAA identifier lookup -- Ian May <email address hidden> Tue, 19 Jan 2021 13:36:23 -0600
Available diffs
- diff from 4.4.0-1147.157 to 4.4.0-1149.159 (7.2 MiB)
- diff from 4.4.0-1148.158 to 4.4.0-1149.159 (6.6 MiB)
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1095.104) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1095.104 -proposed tracker (LP: #1911272) [ Ubuntu: 4.15.0-133.137 ] * bionic/linux: 4.15.0-133.137 -proposed tracker (LP: #1911295) * [drm:qxl_enc_commit [qxl]] *ERROR* head number too large or missing monitors config: (LP: #1908219) - qxl: remove qxl_io_log() - qxl: move qxl_send_monitors_config() - qxl: hook monitors_config updates into crtc, not encoder. * Touchpad not detected on ByteSpeed C15B laptop (LP: #1906128) - Input: i8042 - add ByteSpeed touchpad to noloop table * vmx_nm_test in ubuntu_kvm_unit_tests interrupted on X-oracle-4.15 / B-oracle-4.15 / X-KVM / B-KVM (LP: #1872401) - KVM: nVMX: Always reflect #NM VM-exits to L1 * stack trace in kernel (LP: #1903596) - net: napi: remove useless stack trace * CVE-2020-27777 - [Config]: Set CONFIG_PPC_RTAS_FILTER * Bionic update: upstream stable patchset 2020-12-04 (LP: #1906875) - regulator: defer probe when trying to get voltage from unresolved supply - ring-buffer: Fix recursion protection transitions between interrupt context - time: Prevent undefined behaviour in timespec64_to_ns() - nbd: don't update block size after device is started - btrfs: sysfs: init devices outside of the chunk_mutex - btrfs: reschedule when cloning lots of extents - genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY - hv_balloon: disable warning when floor reached - net: xfrm: fix a race condition during allocing spi - perf tools: Add missing swap for ino_generation - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() - can: rx-offload: don't call kfree_skb() from IRQ context - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() - can: peak_usb: add range checking in decode operations - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on - xfs: flush new eof page on truncate to avoid post-eof corruption - Btrfs: fix missing error return if writeback for extent buffer never started - ath9k_htc: Use appropriate rs_datalen type - usb: gadget: goku_udc: fix potential crashes in probe - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free - gfs2: Add missing truncate_inode_pages_final for sd_aspace - gfs2: check for live vs. read-only file system in gfs2_fitrim - scsi: hpsa: Fix memory leak in hpsa_init_one() - drm/amdgpu: perform srbm soft reset always on SDMA resume - mac80211: fix use of skb payload instead of header - cfg80211: regulatory: Fix inconsistent format argument - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() - iommu/amd: Increase interrupt remapping table limit to 512 entries - pinctrl: intel: Set default bias in case no particular value given - ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template - pinctrl: aspeed: Fix GPI only function problem. - nbd: fix a block_device refcount leak in nbd_release - xfs: fix flags argument to rmap lookup when converting shared file rmaps - xfs: fix rmap key and record comparison functions - xfs: fix a missing unlock on error in xfs_fs_map_blocks - of/address: Fix of_node memory leak in of_dma_is_coherent - cosa: Add missing kfree in error path of cosa_write - perf: Fix get_recursion_context() - ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA - ext4: unlock xattr_sem properly in ext4_inline_data_truncate() - thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() - uio: Fix use-after-free in uio_unregister_device() - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode - mei: protect mei_cl_mtu from null dereference - futex: Don't enable IRQs unconditionally in put_pi_state() - ocfs2: initialize ip_next_orphan - selinux: Fix error return code in sel_ib_pkey_sid_slow() - don't dump the threads that had been already exiting when zapped. - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] - pinctrl: amd: use higher precision for 512 RtcClk - pinctrl: amd: fix incorrect way to disable debounce filter - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" - IPv6: Set SIT tunnel hard_header_len to zero - net/af_iucv: fix null pointer dereference on shutdown - net/x25: Fix null-ptr-deref in x25_connect - vrf: Fix fast path output packet handling with async Netfilter rules - r8169: fix potential skb double free in an error path - net: Update window_clamp if SOCK_RCVBUF is set - random32: make prandom_u32() output unpredictable - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always- on STIBP - perf/core: Fix bad use of igrab() - perf/core: Fix crash when using HW tracing kernel filters - perf/core: Fix a memory leak in perf_event_parse_addr_filter() - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" - reboot: fix overflow parsing reboot cpu number - Convert trailing spaces and periods in path components - xfs: fix scrub flagging rtinherit even if there is no rt device - drm/amd/pm: perform SMC reset on suspend/hibernation - drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running - s390/smp: move rcu_cpu_starting() earlier - tpm_tis: Disable interrupts on ThinkPad T490s - tick/common: Touch watchdog in tick_unfreeze() on all CPUs - mfd: sprd: Add wakeup capability for PMIC IRQ - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod - thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services() - btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch - mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove [ Ubuntu: 4.15.0-132.136 ] * bionic/linux: 4.15.0-132.136 -proposed tracker (LP: #1911147) * Packaging resync (LP: #1786013) - update dkms package versions * CVE-2020-28374 - SAUCE: target: fix XCOPY NAA identifier lookup [ Ubuntu: 4.15.0-130.134 ] * Packaging resync (LP: #1786013) - update dkms package versions * CVE-2021-1052 // CVE-2021-1053 - [Packaging] NVIDIA -- Add the NVIDIA 460 driver -- Ian May <email address hidden> Fri, 15 Jan 2021 11:29:43 -0600
Available diffs
| Deleted in xenial-proposed (Reason: NBS) |
linux-snapdragon (4.4.0-1148.158) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1148.158 -proposed tracker (LP: #1910089) [ Ubuntu: 4.4.0-199.231 ] * xenial/linux: 4.4.0-199.231 -proposed tracker (LP: #1910093) * Touchpad not detected on ByteSpeed C15B laptop (LP: #1906128) - Input: i8042 - add ByteSpeed touchpad to noloop table * stack trace in kernel (LP: #1903596) - net: napi: remove useless stack trace * CVE-2020-27777 - powerpc/rtas: Restrict RTAS requests from userspace - [Config]: Set CONFIG_PPC_RTAS_FILTER * Xenial update: v4.4.247 upstream stable release (LP: #1906703) - btrfs: tree-checker: Enhance chunk checker to validate chunk profile - btrfs: inode: Verify inode mode to avoid NULL pointer dereference - HID: cypress: Support Varmilo Keyboards' media hotkeys - Input: i8042 - allow insmod to succeed on devices without an i8042 controller - HID: hid-sensor-hub: Fix issue with devices with no report ID - x86/xen: don't unbind uninitialized lock_kicker_irq - proc: don't allow async path resolution of /proc/self components - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size - scsi: libiscsi: Fix NOP race condition - scsi: target: iscsi: Fix cmd abort fabric stop race - scsi: ufs: Fix race between shutdown and runtime resume flow - bnxt_en: fix error return code in bnxt_init_board() - video: hyperv_fb: Fix the cache type when mapping the VRAM - bnxt_en: Release PCI regions when DMA mask setup fails during probe. - IB/mthca: fix return value of error branch in mthca_init_cq() - nfc: s3fwrn5: use signed integer for parsing GPIO numbers - efivarfs: revert "fix memory leak in efivarfs_create()" - perf probe: Fix to die_entrypc() returns error correctly - USB: core: Change %pK for __user pointers to %px - x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb - USB: core: add endpoint-blacklist quirk - USB: core: Fix regression in Hercules audio card - btrfs: fix lockdep splat when reading qgroup config on mount - Linux 4.4.247 * Xenial update: v4.4.246 upstream stable release (LP: #1906700) - ah6: fix error return code in ah6_input() - atm: nicstar: Unmap DMA on send error - net: b44: fix error return code in b44_init_one() - net: bridge: add missing counters to ndo_get_stats64 callback - netlabel: fix our progress tracking in netlbl_unlabel_staticlist() - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() - net/mlx4_core: Fix init_hca fields offset - net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request - qlcnic: fix error return code in qlcnic_83xx_restart_hw() - sctp: change to hold/put transport for proto_unreach_timer - net: usb: qmi_wwan: Set DTR quirk for MR400 - net: Have netpoll bring-up DSA management interface - pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq - arm64: psci: Avoid printing in cpu_psci_cpu_die() - MIPS: Fix BUILD_ROLLBACK_PROLOGUE for microMIPS - Input: adxl34x - clean up a data type in adxl34x_probe() - arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy - ARM: dts: imx50-evk: Fix the chip select 1 IOMUX - perf lock: Don't free "lock_seq_stat" if read_count isn't zero - can: dev: can_restart(): post buffer from the right context - can: peak_usb: fix potential integer overflow on shift of a int - can: m_can: m_can_handle_state_change(): fix state change - MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu - regulator: ti-abb: Fix array out of bound read access on the first transition - libfs: fix error cast of negative value in simple_attr_write() - ALSA: ctl: fix error path at adding user-defined element set - ALSA: mixart: Fix mutex deadlock - tty: serial: imx: keep console clocks always on - efivarfs: fix memory leak in efivarfs_create() - ext4: fix bogus warning in ext4_update_dx_flag() - xtensa: disable preemption around cache alias management calls - mac80211: minstrel: remove deferred sampling code - mac80211: minstrel: fix tx status processing corner case - mac80211: allow driver to prevent two stations w/ same address - mac80211: free sta in sta_info_insert_finish() on errors - s390/cpum_sf.c: fix file permission for cpum_sfb_size - x86/microcode/intel: Check patch signature before saving microcode for early loading - Linux 4.4.246 * Xenial update: v4.4.245 upstream stable release (LP: #1906698) - i2c: imx: Fix external abort on interrupt in exit paths - xfs: catch inode allocation state mismatch corruption - xfs: validate cached inodes are free when allocated - powerpc/8xx: Always fault when _PAGE_ACCESSED is not set - Input: sunkbd - avoid use-after-free in teardown paths - mac80211: always wind down STA state - KVM: x86: clflushopt should be treated as a no-op by emulation - Linux 4.4.245 -- Kelsey Skunberg <email address hidden> Wed, 06 Jan 2021 12:04:47 -0700
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1094.103) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1094.103 -proposed tracker (LP: #1907613) [ Ubuntu: 4.15.0-129.132 ] * bionic/linux: 4.15.0-129.132 -proposed tracker (LP: #1907635) * Packaging resync (LP: #1786013) - update dkms package versions * Ubuntu 18.04- call trace in kernel buffer when unloading ib_ipoib module (LP: #1904848) - SAUCE: net/mlx5e: IPoIB, initialize update_stat_work for ipoib devices * memory is leaked when tasks are moved to net_prio (LP: #1886859) - netprio_cgroup: Fix unlimited memory leak of v2 cgroups * s390: dbginfo.sh triggers kernel panic, reading from /sys/kernel/mm/page_idle/bitmap (LP: #1904884) - mm/page_idle.c: skip offline pages * Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333) - drm/i915: Break up error capture compression loops with cond_resched() - tipc: fix use-after-free in tipc_bcast_get_mode - gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP - gianfar: Account for Tx PTP timestamp in the skb headroom - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition - sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms - sfp: Fix error handing in sfp_probe() - Blktrace: bail out early if block debugfs is not configured - i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c - Fonts: Replace discarded const qualifier - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 - lib/crc32test: remove extra local_irq_disable/enable - kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled - mm: always have io_remap_pfn_range() set pgprot_decrypted() - gfs2: Wake up when sd_glock_disposal becomes zero - ftrace: Fix recursion check for NMI test - ftrace: Handle tracing when switching between context - tracing: Fix out of bounds write in get_trace_buf - futex: Handle transient "ownerless" rtmutex state correctly - ARM: dts: sun4i-a10: fix cpu_alert temperature - x86/kexec: Use up-to-dated screen_info copy to fill boot params - of: Fix reserved-memory overlap detection - blk-cgroup: Fix memleak on error path - blk-cgroup: Pre-allocate tree node on blkg_conf_prep - scsi: core: Don't start concurrent async scan on same host - vsock: use ns_capable_noaudit() on socket create - drm/vc4: drv: Add error handding for bind - ACPI: NFIT: Fix comparison to '-ENXIO' - vt: Disable KD_FONT_OP_COPY - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent - serial: 8250_mtk: Fix uart_get_baud_rate warning - serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init - USB: serial: cyberjack: fix write-URB completion race - USB: serial: option: add Quectel EC200T module support - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 - USB: serial: option: add Telit FN980 composition 0x1055 - USB: Add NO_LPM quirk for Kingston flash drive - usb: mtu3: fix panic in mtu3_gadget_stop() - ARC: stack unwinding: avoid indefinite looping - Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" - PM: runtime: Resume the device earlier in __device_release_driver() - btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() - Btrfs: fix unwritten extent buffers and hangs on future writeback attempts - btrfs: tree-checker: fix the error message for transid error - mm: mempolicy: fix potential pte_unmap_unlock pte error - tools: perf: Fix build error in v4.19.y - net: dsa: read mac address from DT for slave device - arm64: dts: marvell: espressobin: Add ethernet switch aliases * Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333) // CVE-2019-19770 which shows this issue is not a core debugfs issue, but - blktrace: fix debugfs use after free * Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791) - scripts/setlocalversion: make git describe output more reliable - arm64: link with -z norelro regardless of CONFIG_RELOCATABLE - gtp: fix an use-before-init in gtp_newlink() - ravb: Fix bit fields checking in ravb_hwtstamp_get() - tipc: fix memory leak caused by tipc_buf_append() - arch/x86/amd/ibs: Fix re-arming IBS Fetch - x86/xen: disable Firmware First mode for correctable memory errors - fuse: fix page dereference after free - p54: avoid accessing the data mapped to streaming DMA - mtd: lpddr: Fix bad logic in print_drs_error - ata: sata_rcar: Fix DMA boundary mask - fscrypt: return -EXDEV for incompatible rename or link into encrypted dir - x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels - mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() - futex: Fix incorrect should_fail_futex() handling - powerpc/powernv/smp: Fix spurious DBG() warning - powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM - sparc64: remove mm_cpumask clearing to fix kthread_use_mm race - f2fs: add trace exit in exception path - f2fs: fix to check segment boundary during SIT page readahead - um: change sigio_spinlock to a mutex - ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses - xfs: fix realtime bitmap/summary file truncation when growing rt volume - video: fbdev: pvr2fb: initialize variables - ath10k: start recovery process when payload length exceeds max htc length for sdio - ath10k: fix VHT NSS calculation when STBC is enabled - drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly - media: videodev2.h: RGB BT2020 and HSV are always full range - media: platform: Improve queue set up flow for bug fixing - usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart - media: tw5864: check status of tw5864_frameinterval_get - mmc: via-sdmmc: Fix data race bug - drm/bridge/synopsys: dsi: add support for non-continuous HS clock - printk: reduce LOG_BUF_SHIFT range for H8300 - kgdb: Make "kgdbcon" work properly with "kgdb_earlycon" - cpufreq: sti-cpufreq: add stih418 support - USB: adutux: fix debugging - uio: free uio id after uio file node is freed - arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE - ACPI: Add out of bounds and numa_off protections to pxm_to_node() - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values - bus/fsl_mc: Do not rely on caller to provide non NULL mc_io - power: supply: test_power: add missing newlines when printing parameters by sysfs - md/bitmap: md_bitmap_get_counter returns wrong blocks - bnxt_en: Log unknown link speed appropriately. - clk: ti: clockdomain: fix static checker warning - net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid - drivers: watchdog: rdc321x_wdt: Fix race condition bugs - ext4: Detect already used quota file early - gfs2: add validation checks for size of superblock - arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes - memory: emif: Remove bogus debugfs error handling - ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings - ARM: dts: s5pv210: move PMU node out of clock controller - ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node - nbd: make the config put is called before the notifying the waiter - sgl_alloc_order: fix memory leak - nvme-rdma: fix crash when connect rejected - md/raid5: fix oops during stripe resizing - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count() - perf/x86/amd/ibs: Fix raw sample data accumulation - leds: bcm6328, bcm6358: use devres LED registering function - fs: Don't invalidate page buffers in block_write_full_page() - NFS: fix nfs_path in case of a rename retry - ACPI / extlog: Check for RDMSR failure - ACPI: debug: don't allow debugging when ACPI is disabled - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs - w1: mxc_w1: Fix timeout resolution problem leading to bus error - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() - btrfs: reschedule if necessary when logging directory items - btrfs: send, recompute reference path after orphanization of a directory - btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send() - btrfs: cleanup cow block on error - btrfs: fix use-after-free on readahead extent after failure to create it - usb: dwc3: ep0: Fix ZLP for OUT ep0 requests - usb: dwc3: core: add phy cleanup for probe error handling - usb: dwc3: core: don't trigger runtime pm when remove driver - usb: cdc-acm: fix cooldown mechanism - usb: host: fsl-mph-dr-of: check return of dma_set_mask() - drm/i915: Force VT'd workarounds when running as a guest OS - vt: keyboard, simplify vt_kdgkbsent - vt: keyboard, extend func_buf_lock to readers - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status - iio:light:si1145: Fix timestamp alignment and prevent data leak. - iio:adc:ti-adc0832 Fix alignment issue with timestamp - iio:adc:ti-adc12138 Fix alignment issue with timestamp - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak. - s390/stp: add locking to sysfs functions - [Config] update config for PPC_RTAS_FILTER - powerpc/rtas: Restrict RTAS requests from userspace - powerpc: Warn about use of smt_snooze_delay - powerpc/powernv/elog: Fix race while processing OPAL error log event. - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag - NFSD: Add missing NFSv2 .pc_func methods - ubifs: dent: Fix some potential memory leaks while iterating entries - perf python scripting: Fix printable strings in python3 scripts - ubi: check kthread_should_stop() after the setting of task state - ia64: fix build error with !COREDUMP - drm/amdgpu: don't map BO in reserved region - ceph: promote to unsigned long long before shifting - libceph: clear con->out_msg on Policy::stateful_server faults - 9P: Cast to loff_t before multiplying - ring-buffer: Return 0 on success from ring_buffer_resize() - vringh: fix __vringh_iov() when riov and wiov are different - ext4: fix leaking sysfs kobject after failed mount - ext4: fix error handling code in add_new_gdb - ext4: fix invalid inode checksum - drm/ttm: fix eviction valuable range check. - rtc: rx8010: don't modify the global rtc ops - tty: make FONTX ioctl use the tty pointer they were actually passed - arm64: berlin: Select DW_APB_TIMER_OF - [Config] update annotations for DW_APB_TIMER - cachefiles: Handle readpage error correctly - hil/parisc: Disable HIL driver when it gets stuck - arm: dts: mt7623: add missing pause for switchport - ARM: samsung: fix PM debug build with DEBUG_LL but !MMU - ARM: s3c24xx: fix missing system reset - device property: Keep secondary firmware node secondary by type - device property: Don't clear secondary pointer for shared primary firmware node - KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR - staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice - staging: octeon: repair "fixed-link" support - staging: octeon: Drop on uncorrectable alignment or FCS error - objtool: Support Clang non-section symbols in ORC generation - arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs - x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled - cxgb4: set up filter action after rewrites - cxl: Rework error message for incompatible slots - serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt - fscrypt: only set dentry_operations on ciphertext dentries - xen/events: don't use chip_data for legacy IRQs - xen/events: avoid removing an event channel while handling it - xen/events: add a proper barrier to 2-level uevent unmasking - xen/events: fix race in evtchn_fifo_unmask() - xen/events: add a new "late EOI" evtchn framework - xen/blkback: use lateeoi irq binding - xen/netback: use lateeoi irq binding - xen/scsiback: use lateeoi irq binding - xen/pvcallsback: use lateeoi irq binding - xen/pciback: use lateeoi irq binding - xen/events: switch user event channels to lateeoi model - xen/events: use a common cpu hotplug hook for event channels - xen/events: defer eoi in case of excessive number of events - xen/events: block rogue events for some time - RDMA/qedr: Fix memory leak in iWARP CM - [Config] update config for ARCH_WANT_IRQS_OFF_ACTIVATE_MM - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race - f2fs: fix uninit-value in f2fs_lookup - power: supply: bq27xxx: report "not charging" on all types - media: imx274: fix frame interval handling - arm64: topology: Stop using MPIDR for topology information - ia64: kprobes: Use generic kretprobe trampoline handler - media: uvcvideo: Fix dereference of out-of-bound list iterator - riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO - usb: xhci: omit duplicate actions when suspending a runtime suspended host. - drm/amd/display: HDMI remote sink need mode validation for Linux - btrfs: fix replace of seed device - rpmsg: glink: Use complete_all for open states - cifs: handle -EINTR in cifs_setattr - ACPI: button: fix handling lid state changes when input device closed - scsi: qla2xxx: Fix crash on session cleanup with unload - btrfs: improve device scanning messages - usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC - usb: typec: tcpm: reset hard_reset_count for any disconnect - powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation - drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally * [HP 635] Radeon 6310 brightness control does not work (LP: #1894667) // Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791) - ACPI: video: use ACPI backlight for HP 635 Notebook * Bionic update: upstream stable patchset 2020-11-17 (LP: #1904613) - RDMA/cma: Remove dead code for kernel rdmacm multicast - RDMA/hns: Fix missing sq_sig_type when querying QP - rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge() - pwm: img: Fix null pointer access in probe - watchdog: Fix memleak in watchdog_cdev_register - watchdog: Use put_device on error - SUNRPC: fix copying of multiple pages in gss_read_proxy_verf() - netfilter: conntrack: connection timeout after re-register - netfilter: nf_fwd_netdev: clear timestamp in forwarding path - ARM: dts: imx6sl: fix rng node - ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator - memory: omap-gpmc: Fix build error without CONFIG_OF - arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec - ip_gre: set dev->hard_header_len and dev->needed_headroom properly - usb: dwc3: simple: add support for Hikey 970 * Bionic: btrfs: kernel BUG at /build/linux- eTBZpZ/linux-4.15.0/fs/btrfs/ctree.c:3233! (LP: #1902254) - btrfs: tree-checker: fix incorrect printk format * Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) - Bluetooth: fix kernel oops in store_pending_adv_report - Bluetooth: Consolidate encryption handling in hci_encrypt_cfm - Bluetooth: Fix update of connection state in `hci_encrypt_cfm` - Bluetooth: Disconnect if E0 is used for Level 4 - media: usbtv: Fix refcounting mixup - USB: serial: option: add Cellient MPL200 card - USB: serial: option: Add Telit FT980-KS composition - staging: comedi: check validity of wMaxPacketSize of usb endpoints found - USB: serial: pl2303: add device-id for HP GC device - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters - reiserfs: Initialize inode keys properly - reiserfs: Fix oops during mount - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case - crypto: bcm - Verify GCM/CCM key length in setkey - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA - ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO - ARM: 8939/1: kbuild: use correct nm executable - ARM: 8867/1: vdso: pass --be8 to linker if necessary - ibmveth: Switch order of ibmveth_helper calls. - ibmveth: Identify ingress large send packets. - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route - mlx4: handle non-napi callers to napi_poll - net: usb: qmi_wwan: add Cellient MPL200 card - tipc: fix the skb_unshare() in tipc_buf_append() - net/ipv4: always honour route mtu during forwarding - r8169: fix data corruption issue on RTL8402 - binder: fix UAF when releasing todo list - ALSA: bebob: potential info leak in hwdep_read() - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() - tcp: fix to update snd_wl1 in bulk receiver fast path - icmp: randomize the global rate limiter - cifs: remove bogus debug code - cifs: Return the error from crypt_message when enc/dec key not found. - KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages - KVM: SVM: Initialize prev_ga_tag before use - ima: Don't ignore errors from crypto_shash_update() - crypto: algif_aead - Do not set MAY_BACKLOG on the async path - EDAC/i5100: Fix error handling order in i5100_init_one() - x86/fpu: Allow multiple bits in clearcpuid= parameter - drivers/perf: xgene_pmu: Fix uninitialized resource struct - crypto: algif_skcipher - EBUSY on aio should be an error - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call - media: tuner-simple: fix regression in simple_set_radio_freq - media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" - media: m5mols: Check function pointer in m5mols_sensor_power - media: uvcvideo: Set media controller entity functions - media: omap3isp: Fix memleak in isp_probe - crypto: omap-sham - fix digcnt register handling with export/import - cypto: mediatek - fix leaks in mtk_desc_ring_alloc - media: mx2_emmaprp: Fix memleak in emmaprp_probe - media: tc358743: initialize variable - media: platform: fcp: Fix a reference count leak. - media: s5p-mfc: Fix a reference count leak - media: ti-vpe: Fix a missing check and reference count leak - regulator: resolve supply after creating regulator - ath10k: provide survey info as accumulated data - Bluetooth: hci_uart: Cancel init work before unregistering - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 - ASoC: qcom: lpass-platform: fix memory leak - ASoC: qcom: lpass-cpu: fix concurrency issue - brcmfmac: check ndev pointer - mwifiex: Do not use GFP_KERNEL in atomic context - drm/gma500: fix error check - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() - backlight: sky81452-backlight: Fix refcount imbalance on error - VMCI: check return value of get_user_pages_fast() for errors - tty: serial: earlycon dependency - pty: do tty_flip_buffer_push without port->lock in pty_write - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() - pwm: lpss: Add range limit check for the base_unit register value - drivers/virt/fsl_hypervisor: Fix error handling path - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error - video: fbdev: sis: fix null ptr dereference - HID: roccat: add bounds checking in kone_sysfs_write_settings() - pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser - pinctrl: mcp23s08: Fix mcp23x17 precious range - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() - misc: mic: scif: Fix error handling path - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl - usb: dwc2: Fix parameter type in function pointer prototype - quota: clear padding in v2r1_mem2diskdqb() - HID: hid-input: fix stylus battery reporting - qtnfmac: fix resource leaks on unsupported iftype error return path - net: enic: Cure the enic api locking trainwreck - mfd: sm501: Fix leaks in probe() - iwlwifi: mvm: split a print to avoid a WARNING in ROC - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well - nl80211: fix non-split wiphy information - usb: dwc2: Fix INTR OUT transfers in DDMA mode. - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() - mwifiex: fix double free - net: korina: fix kfree of rx/tx descriptor array - mm/memcg: fix device private memcg accounting - mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary - IB/mlx4: Fix starvation in paravirt mux/demux - IB/mlx4: Adjust delayed work when a dup is observed - powerpc/pseries: Fix missing of_node_put() in rng_init() - powerpc/icp-hv: Fix missing of_node_put() in success path - mtd: lpddr: fix excessive stack usage with clang - mtd: mtdoops: Don't write panic data twice - ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values - arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER - xfs: limit entries returned when counting fsmap records - RDMA/qedr: Fix use of uninitialized field - powerpc/tau: Use appropriate temperature sample interval - powerpc/tau: Remove duplicated set_thresholds() call - powerpc/tau: Disable TAU between measurements - perf intel-pt: Fix "context_switch event has no tid" error - RDMA/hns: Set the unsupported wr opcode - kdb: Fix pager search for multi-line strings - overflow: Include header file with SIZE_MAX declaration - powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints - powerpc/perf/hv-gpci: Fix starting index value - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier - IB/rdmavt: Fix sizeof mismatch - f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info - lib/crc32.c: fix trivial typo in preprocessor condition - ramfs: fix nommu mmap with gaps in the page cache - rapidio: fix error handling path - rapidio: fix the missed put_device() for rio_mport_add_riodev - mailbox: avoid timer start from callback - i2c: rcar: Auto select RESET_CONTROLLER - PCI: iproc: Set affinity mask on MSI interrupts - clk: at91: clk-main: update key before writing AT91_CKGR_MOR - clk: bcm2835: add missing release if devm_clk_hw_register fails - ext4: limit entries returned when counting fsmap records - vfio/pci: Clear token on bypass registration failure - vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() - Input: stmfts - fix a & vs && typo - Input: ep93xx_keypad - fix handling of platform_get_irq() error - Input: omap4-keypad - fix handling of platform_get_irq() error - Input: twl4030_keypad - fix handling of platform_get_irq() error - Input: sun4i-ps2 - fix handling of platform_get_irq() error - KVM: x86: emulating RDPID failure shall return #UD rather than #GP - memory: omap-gpmc: Fix a couple off by ones - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error - arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts - ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers - arm64: dts: zynqmp: Remove additional compatible string for i2c IPs - powerpc/powernv/dump: Fix race while processing OPAL dump - nvmet: fix uninitialized work for zero kato - NTB: hw: amd: fix an issue about leak system resources - perf: correct SNOOPX field offset - i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs - crypto: ccp - fix error handling - media: firewire: fix memory leak - media: ati_remote: sanity check for both endpoints - media: st-delta: Fix reference count leak in delta_run_work - media: sti: Fix reference count leaks - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak - media: vsp1: Fix runtime PM imbalance on error - media: platform: s3c-camif: Fix runtime PM imbalance on error - media: platform: sti: hva: Fix runtime PM imbalance on error - media: bdisp: Fix runtime PM imbalance on error - media: media/pci: prevent memory leak in bttv_probe - media: uvcvideo: Ensure all probed info is returned to v4l2 - mmc: sdio: Check for CISTPL_VERS_1 buffer size - media: saa7134: avoid a shift overflow - fs: dlm: fix configfs memory leak - media: venus: core: Fix runtime PM imbalance in venus_probe - ntfs: add check for mft record size in superblock - mac80211: handle lack of sband->bitrates in rates - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() - scsi: mvumi: Fix error return in mvumi_io_attach() - scsi: target: core: Add CONTROL field for trace events - mic: vop: copy data to kernel space then write to io memory - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic - usb: gadget: function: printer: fix use-after-free in __lock_acquire - udf: Limit sparing table size - udf: Avoid accessing uninitialized data on failed inode read - USB: cdc-acm: handle broken union descriptors - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() - misc: rtsx: Fix memory leak in rtsx_pci_probe - reiserfs: only call unlock_new_inode() if I_NEW - xfs: make sure the rt allocator doesn't run off the end - usb: ohci: Default to per-port over-current protection - Bluetooth: Only mark socket zapped after unlocking - scsi: ibmvfc: Fix error return in ibmvfc_probe() - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy - rtl8xxxu: prevent potential memory leak - Fix use after free in get_capset_info callback. - scsi: qedi: Protect active command list to avoid list corruption - scsi: qedi: Fix list_del corruption while removing active I/O - tty: ipwireless: fix error handling - ipvs: Fix uninit-value in do_ip_vs_set_ctl() - reiserfs: Fix memory leak in reiserfs_parse_options() - mwifiex: don't call del_timer_sync() on uninitialized timer - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach - usb: core: Solve race condition in anchor cleanup functions - scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config() - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() - net: korina: cast KSEG0 address to pointer in kfree - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). - eeprom: at25: set minimum read/write access stride to 1 - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets. - powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler - net: fix pos incrementment in ipv6_route_seq_next - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 - x86/nmi: Fix nmi_handle() duration miscalculation - x86/events/amd/iommu: Fix sizeof mismatch - media: uvcvideo: Silence shift-out-of-bounds warning - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} - media: tc358743: cleanup tc358743_cec_isr - pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB - spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath() - staging: rtl8192u: Do not use GFP_KERNEL in atomic context - net: stmmac: use netif_tx_start|stop_all_queues() function - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized - ipvs: clear skb->tstamp in forwarding path - netfilter: nf_log: missing vlan offload tag and proto - RDMA/ucma: Fix locking for ctx->events_reported - RDMA/ucma: Add missing locking around rdma_leave_multicast() - RDMA/qedr: Fix inline size returned for iWARP -- Ian May <email address hidden> Mon, 14 Dec 2020 13:05:17 -0600
Available diffs
linux-snapdragon (4.15.0-1093.102) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1093.102 -proposed tracker (LP: #1907332) [ Ubuntu: 4.15.0-128.131 ] * bionic/linux: 4.15.0-128.131 -proposed tracker (LP: #1907354) * Packaging resync (LP: #1786013) - update dkms package versions * raid10: discard leads to corrupted file system (LP: #1907262) - Revert "md/raid10: improve discard request for far layout" - Revert "md/raid10: improve raid10 discard request" - Revert "md/raid10: pull codes that wait for blocked dev into one function" - Revert "md/raid10: extend r10bio devs to raid disks" - Revert "md: add md_submit_discard_bio() for submitting discard bio" [ Ubuntu: 4.15.0-126.129 ] * bionic/linux: 4.15.0-126.129 -proposed tracker (LP: #1905305) * CVE-2020-4788 - SAUCE: powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL - SAUCE: powerpc/64s: move some exception handlers out of line - powerpc/64s: flush L1D on kernel entry - SAUCE: powerpc: Add a framework for user access tracking - powerpc: Implement user_access_begin and friends - powerpc: Fix __clear_user() with KUAP enabled - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed - powerpc/64s: flush L1D after user accesses -- Marcelo Henrique Cerri <email address hidden> Wed, 09 Dec 2020 08:49:03 -0300
Available diffs
- diff from 4.15.0-1091.100 to 4.15.0-1093.102 (3.3 MiB)
- diff from 4.15.0-1092.101 to 4.15.0-1093.102 (153.6 KiB)
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1092.101) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1092.101 -proposed tracker (LP: #1906004) [ Ubuntu: 4.15.0-127.130 ] * bionic/linux: 4.15.0-127.130 -proposed tracker (LP: #1906027) * Packaging resync (LP: #1786013) - update dkms package versions * Ubuntu 18.04- call trace in kernel buffer when unloading ib_ipoib module (LP: #1904848) - SAUCE: net/mlx5e: IPoIB, initialize update_stat_work for ipoib devices * memory is leaked when tasks are moved to net_prio (LP: #1886859) - netprio_cgroup: Fix unlimited memory leak of v2 cgroups * s390: dbginfo.sh triggers kernel panic, reading from /sys/kernel/mm/page_idle/bitmap (LP: #1904884) - mm/page_idle.c: skip offline pages * Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333) - drm/i915: Break up error capture compression loops with cond_resched() - tipc: fix use-after-free in tipc_bcast_get_mode - gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP - gianfar: Account for Tx PTP timestamp in the skb headroom - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition - sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms - sfp: Fix error handing in sfp_probe() - Blktrace: bail out early if block debugfs is not configured - i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c - Fonts: Replace discarded const qualifier - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 - lib/crc32test: remove extra local_irq_disable/enable - kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled - mm: always have io_remap_pfn_range() set pgprot_decrypted() - gfs2: Wake up when sd_glock_disposal becomes zero - ftrace: Fix recursion check for NMI test - ftrace: Handle tracing when switching between context - tracing: Fix out of bounds write in get_trace_buf - futex: Handle transient "ownerless" rtmutex state correctly - ARM: dts: sun4i-a10: fix cpu_alert temperature - x86/kexec: Use up-to-dated screen_info copy to fill boot params - of: Fix reserved-memory overlap detection - blk-cgroup: Fix memleak on error path - blk-cgroup: Pre-allocate tree node on blkg_conf_prep - scsi: core: Don't start concurrent async scan on same host - vsock: use ns_capable_noaudit() on socket create - drm/vc4: drv: Add error handding for bind - ACPI: NFIT: Fix comparison to '-ENXIO' - vt: Disable KD_FONT_OP_COPY - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent - serial: 8250_mtk: Fix uart_get_baud_rate warning - serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init - USB: serial: cyberjack: fix write-URB completion race - USB: serial: option: add Quectel EC200T module support - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 - USB: serial: option: add Telit FN980 composition 0x1055 - USB: Add NO_LPM quirk for Kingston flash drive - usb: mtu3: fix panic in mtu3_gadget_stop() - ARC: stack unwinding: avoid indefinite looping - Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" - PM: runtime: Resume the device earlier in __device_release_driver() - btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() - Btrfs: fix unwritten extent buffers and hangs on future writeback attempts - btrfs: tree-checker: fix the error message for transid error - mm: mempolicy: fix potential pte_unmap_unlock pte error - tools: perf: Fix build error in v4.19.y - net: dsa: read mac address from DT for slave device - arm64: dts: marvell: espressobin: Add ethernet switch aliases * Bionic update: upstream stable patchset 2020-11-23 (LP: #1905333) // CVE-2019-19770 which shows this issue is not a core debugfs issue, but - blktrace: fix debugfs use after free * Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791) - scripts/setlocalversion: make git describe output more reliable - arm64: link with -z norelro regardless of CONFIG_RELOCATABLE - gtp: fix an use-before-init in gtp_newlink() - ravb: Fix bit fields checking in ravb_hwtstamp_get() - tipc: fix memory leak caused by tipc_buf_append() - arch/x86/amd/ibs: Fix re-arming IBS Fetch - x86/xen: disable Firmware First mode for correctable memory errors - fuse: fix page dereference after free - p54: avoid accessing the data mapped to streaming DMA - mtd: lpddr: Fix bad logic in print_drs_error - ata: sata_rcar: Fix DMA boundary mask - fscrypt: return -EXDEV for incompatible rename or link into encrypted dir - x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels - mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() - futex: Fix incorrect should_fail_futex() handling - powerpc/powernv/smp: Fix spurious DBG() warning - powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM - sparc64: remove mm_cpumask clearing to fix kthread_use_mm race - f2fs: add trace exit in exception path - f2fs: fix to check segment boundary during SIT page readahead - um: change sigio_spinlock to a mutex - ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses - xfs: fix realtime bitmap/summary file truncation when growing rt volume - video: fbdev: pvr2fb: initialize variables - ath10k: start recovery process when payload length exceeds max htc length for sdio - ath10k: fix VHT NSS calculation when STBC is enabled - drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly - media: videodev2.h: RGB BT2020 and HSV are always full range - media: platform: Improve queue set up flow for bug fixing - usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart - media: tw5864: check status of tw5864_frameinterval_get - mmc: via-sdmmc: Fix data race bug - drm/bridge/synopsys: dsi: add support for non-continuous HS clock - printk: reduce LOG_BUF_SHIFT range for H8300 - kgdb: Make "kgdbcon" work properly with "kgdb_earlycon" - cpufreq: sti-cpufreq: add stih418 support - USB: adutux: fix debugging - uio: free uio id after uio file node is freed - arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE - ACPI: Add out of bounds and numa_off protections to pxm_to_node() - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values - bus/fsl_mc: Do not rely on caller to provide non NULL mc_io - power: supply: test_power: add missing newlines when printing parameters by sysfs - md/bitmap: md_bitmap_get_counter returns wrong blocks - bnxt_en: Log unknown link speed appropriately. - clk: ti: clockdomain: fix static checker warning - net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid - drivers: watchdog: rdc321x_wdt: Fix race condition bugs - ext4: Detect already used quota file early - gfs2: add validation checks for size of superblock - arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes - memory: emif: Remove bogus debugfs error handling - ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings - ARM: dts: s5pv210: move PMU node out of clock controller - ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node - nbd: make the config put is called before the notifying the waiter - sgl_alloc_order: fix memory leak - nvme-rdma: fix crash when connect rejected - md/raid5: fix oops during stripe resizing - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count() - perf/x86/amd/ibs: Fix raw sample data accumulation - leds: bcm6328, bcm6358: use devres LED registering function - fs: Don't invalidate page buffers in block_write_full_page() - NFS: fix nfs_path in case of a rename retry - ACPI / extlog: Check for RDMSR failure - ACPI: debug: don't allow debugging when ACPI is disabled - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs - w1: mxc_w1: Fix timeout resolution problem leading to bus error - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() - btrfs: reschedule if necessary when logging directory items - btrfs: send, recompute reference path after orphanization of a directory - btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send() - btrfs: cleanup cow block on error - btrfs: fix use-after-free on readahead extent after failure to create it - usb: dwc3: ep0: Fix ZLP for OUT ep0 requests - usb: dwc3: core: add phy cleanup for probe error handling - usb: dwc3: core: don't trigger runtime pm when remove driver - usb: cdc-acm: fix cooldown mechanism - usb: host: fsl-mph-dr-of: check return of dma_set_mask() - drm/i915: Force VT'd workarounds when running as a guest OS - vt: keyboard, simplify vt_kdgkbsent - vt: keyboard, extend func_buf_lock to readers - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status - iio:light:si1145: Fix timestamp alignment and prevent data leak. - iio:adc:ti-adc0832 Fix alignment issue with timestamp - iio:adc:ti-adc12138 Fix alignment issue with timestamp - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak. - s390/stp: add locking to sysfs functions - [Config] update config for PPC_RTAS_FILTER - powerpc/rtas: Restrict RTAS requests from userspace - powerpc: Warn about use of smt_snooze_delay - powerpc/powernv/elog: Fix race while processing OPAL error log event. - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag - NFSD: Add missing NFSv2 .pc_func methods - ubifs: dent: Fix some potential memory leaks while iterating entries - perf python scripting: Fix printable strings in python3 scripts - ubi: check kthread_should_stop() after the setting of task state - ia64: fix build error with !COREDUMP - drm/amdgpu: don't map BO in reserved region - ceph: promote to unsigned long long before shifting - libceph: clear con->out_msg on Policy::stateful_server faults - 9P: Cast to loff_t before multiplying - ring-buffer: Return 0 on success from ring_buffer_resize() - vringh: fix __vringh_iov() when riov and wiov are different - ext4: fix leaking sysfs kobject after failed mount - ext4: fix error handling code in add_new_gdb - ext4: fix invalid inode checksum - drm/ttm: fix eviction valuable range check. - rtc: rx8010: don't modify the global rtc ops - tty: make FONTX ioctl use the tty pointer they were actually passed - arm64: berlin: Select DW_APB_TIMER_OF - [Config] update annotations for DW_APB_TIMER - cachefiles: Handle readpage error correctly - hil/parisc: Disable HIL driver when it gets stuck - arm: dts: mt7623: add missing pause for switchport - ARM: samsung: fix PM debug build with DEBUG_LL but !MMU - ARM: s3c24xx: fix missing system reset - device property: Keep secondary firmware node secondary by type - device property: Don't clear secondary pointer for shared primary firmware node - KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR - staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice - staging: octeon: repair "fixed-link" support - staging: octeon: Drop on uncorrectable alignment or FCS error - objtool: Support Clang non-section symbols in ORC generation - arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs - x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled - cxgb4: set up filter action after rewrites - cxl: Rework error message for incompatible slots - serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt - fscrypt: only set dentry_operations on ciphertext dentries - xen/events: don't use chip_data for legacy IRQs - xen/events: avoid removing an event channel while handling it - xen/events: add a proper barrier to 2-level uevent unmasking - xen/events: fix race in evtchn_fifo_unmask() - xen/events: add a new "late EOI" evtchn framework - xen/blkback: use lateeoi irq binding - xen/netback: use lateeoi irq binding - xen/scsiback: use lateeoi irq binding - xen/pvcallsback: use lateeoi irq binding - xen/pciback: use lateeoi irq binding - xen/events: switch user event channels to lateeoi model - xen/events: use a common cpu hotplug hook for event channels - xen/events: defer eoi in case of excessive number of events - xen/events: block rogue events for some time - RDMA/qedr: Fix memory leak in iWARP CM - [Config] update config for ARCH_WANT_IRQS_OFF_ACTIVATE_MM - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race - f2fs: fix uninit-value in f2fs_lookup - power: supply: bq27xxx: report "not charging" on all types - media: imx274: fix frame interval handling - arm64: topology: Stop using MPIDR for topology information - ia64: kprobes: Use generic kretprobe trampoline handler - media: uvcvideo: Fix dereference of out-of-bound list iterator - riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO - usb: xhci: omit duplicate actions when suspending a runtime suspended host. - drm/amd/display: HDMI remote sink need mode validation for Linux - btrfs: fix replace of seed device - rpmsg: glink: Use complete_all for open states - cifs: handle -EINTR in cifs_setattr - ACPI: button: fix handling lid state changes when input device closed - scsi: qla2xxx: Fix crash on session cleanup with unload - btrfs: improve device scanning messages - usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC - usb: typec: tcpm: reset hard_reset_count for any disconnect - powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation - drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally * [HP 635] Radeon 6310 brightness control does not work (LP: #1894667) // Bionic update: upstream stable patchset 2020-11-18 (LP: #1904791) - ACPI: video: use ACPI backlight for HP 635 Notebook * Bionic update: upstream stable patchset 2020-11-17 (LP: #1904613) - RDMA/cma: Remove dead code for kernel rdmacm multicast - RDMA/hns: Fix missing sq_sig_type when querying QP - rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge() - pwm: img: Fix null pointer access in probe - watchdog: Fix memleak in watchdog_cdev_register - watchdog: Use put_device on error - SUNRPC: fix copying of multiple pages in gss_read_proxy_verf() - netfilter: conntrack: connection timeout after re-register - netfilter: nf_fwd_netdev: clear timestamp in forwarding path - ARM: dts: imx6sl: fix rng node - ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator - memory: omap-gpmc: Fix build error without CONFIG_OF - arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec - ip_gre: set dev->hard_header_len and dev->needed_headroom properly - usb: dwc3: simple: add support for Hikey 970 * Bionic: btrfs: kernel BUG at /build/linux- eTBZpZ/linux-4.15.0/fs/btrfs/ctree.c:3233! (LP: #1902254) - btrfs: tree-checker: fix incorrect printk format * Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) - Bluetooth: fix kernel oops in store_pending_adv_report - Bluetooth: Consolidate encryption handling in hci_encrypt_cfm - Bluetooth: Fix update of connection state in `hci_encrypt_cfm` - Bluetooth: Disconnect if E0 is used for Level 4 - media: usbtv: Fix refcounting mixup - USB: serial: option: add Cellient MPL200 card - USB: serial: option: Add Telit FT980-KS composition - staging: comedi: check validity of wMaxPacketSize of usb endpoints found - USB: serial: pl2303: add device-id for HP GC device - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters - reiserfs: Initialize inode keys properly - reiserfs: Fix oops during mount - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case - crypto: bcm - Verify GCM/CCM key length in setkey - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA - ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO - ARM: 8939/1: kbuild: use correct nm executable - ARM: 8867/1: vdso: pass --be8 to linker if necessary - ibmveth: Switch order of ibmveth_helper calls. - ibmveth: Identify ingress large send packets. - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route - mlx4: handle non-napi callers to napi_poll - net: usb: qmi_wwan: add Cellient MPL200 card - tipc: fix the skb_unshare() in tipc_buf_append() - net/ipv4: always honour route mtu during forwarding - r8169: fix data corruption issue on RTL8402 - binder: fix UAF when releasing todo list - ALSA: bebob: potential info leak in hwdep_read() - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() - tcp: fix to update snd_wl1 in bulk receiver fast path - icmp: randomize the global rate limiter - cifs: remove bogus debug code - cifs: Return the error from crypt_message when enc/dec key not found. - KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages - KVM: SVM: Initialize prev_ga_tag before use - ima: Don't ignore errors from crypto_shash_update() - crypto: algif_aead - Do not set MAY_BACKLOG on the async path - EDAC/i5100: Fix error handling order in i5100_init_one() - x86/fpu: Allow multiple bits in clearcpuid= parameter - drivers/perf: xgene_pmu: Fix uninitialized resource struct - crypto: algif_skcipher - EBUSY on aio should be an error - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call - media: tuner-simple: fix regression in simple_set_radio_freq - media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" - media: m5mols: Check function pointer in m5mols_sensor_power - media: uvcvideo: Set media controller entity functions - media: omap3isp: Fix memleak in isp_probe - crypto: omap-sham - fix digcnt register handling with export/import - cypto: mediatek - fix leaks in mtk_desc_ring_alloc - media: mx2_emmaprp: Fix memleak in emmaprp_probe - media: tc358743: initialize variable - media: platform: fcp: Fix a reference count leak. - media: s5p-mfc: Fix a reference count leak - media: ti-vpe: Fix a missing check and reference count leak - regulator: resolve supply after creating regulator - ath10k: provide survey info as accumulated data - Bluetooth: hci_uart: Cancel init work before unregistering - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 - ASoC: qcom: lpass-platform: fix memory leak - ASoC: qcom: lpass-cpu: fix concurrency issue - brcmfmac: check ndev pointer - mwifiex: Do not use GFP_KERNEL in atomic context - drm/gma500: fix error check - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() - backlight: sky81452-backlight: Fix refcount imbalance on error - VMCI: check return value of get_user_pages_fast() for errors - tty: serial: earlycon dependency - pty: do tty_flip_buffer_push without port->lock in pty_write - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() - pwm: lpss: Add range limit check for the base_unit register value - drivers/virt/fsl_hypervisor: Fix error handling path - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error - video: fbdev: sis: fix null ptr dereference - HID: roccat: add bounds checking in kone_sysfs_write_settings() - pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser - pinctrl: mcp23s08: Fix mcp23x17 precious range - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() - misc: mic: scif: Fix error handling path - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl - usb: dwc2: Fix parameter type in function pointer prototype - quota: clear padding in v2r1_mem2diskdqb() - HID: hid-input: fix stylus battery reporting - qtnfmac: fix resource leaks on unsupported iftype error return path - net: enic: Cure the enic api locking trainwreck - mfd: sm501: Fix leaks in probe() - iwlwifi: mvm: split a print to avoid a WARNING in ROC - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well - nl80211: fix non-split wiphy information - usb: dwc2: Fix INTR OUT transfers in DDMA mode. - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() - mwifiex: fix double free - net: korina: fix kfree of rx/tx descriptor array - mm/memcg: fix device private memcg accounting - mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary - IB/mlx4: Fix starvation in paravirt mux/demux - IB/mlx4: Adjust delayed work when a dup is observed - powerpc/pseries: Fix missing of_node_put() in rng_init() - powerpc/icp-hv: Fix missing of_node_put() in success path - mtd: lpddr: fix excessive stack usage with clang - mtd: mtdoops: Don't write panic data twice - ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values - arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER - xfs: limit entries returned when counting fsmap records - RDMA/qedr: Fix use of uninitialized field - powerpc/tau: Use appropriate temperature sample interval - powerpc/tau: Remove duplicated set_thresholds() call - powerpc/tau: Disable TAU between measurements - perf intel-pt: Fix "context_switch event has no tid" error - RDMA/hns: Set the unsupported wr opcode - kdb: Fix pager search for multi-line strings - overflow: Include header file with SIZE_MAX declaration - powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints - powerpc/perf/hv-gpci: Fix starting index value - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier - IB/rdmavt: Fix sizeof mismatch - f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info - lib/crc32.c: fix trivial typo in preprocessor condition - ramfs: fix nommu mmap with gaps in the page cache - rapidio: fix error handling path - rapidio: fix the missed put_device() for rio_mport_add_riodev - mailbox: avoid timer start from callback - i2c: rcar: Auto select RESET_CONTROLLER - PCI: iproc: Set affinity mask on MSI interrupts - clk: at91: clk-main: update key before writing AT91_CKGR_MOR - clk: bcm2835: add missing release if devm_clk_hw_register fails - ext4: limit entries returned when counting fsmap records - vfio/pci: Clear token on bypass registration failure - vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() - Input: stmfts - fix a & vs && typo - Input: ep93xx_keypad - fix handling of platform_get_irq() error - Input: omap4-keypad - fix handling of platform_get_irq() error - Input: twl4030_keypad - fix handling of platform_get_irq() error - Input: sun4i-ps2 - fix handling of platform_get_irq() error - KVM: x86: emulating RDPID failure shall return #UD rather than #GP - memory: omap-gpmc: Fix a couple off by ones - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error - arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts - ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers - arm64: dts: zynqmp: Remove additional compatible string for i2c IPs - powerpc/powernv/dump: Fix race while processing OPAL dump - nvmet: fix uninitialized work for zero kato - NTB: hw: amd: fix an issue about leak system resources - perf: correct SNOOPX field offset - i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs - crypto: ccp - fix error handling - media: firewire: fix memory leak - media: ati_remote: sanity check for both endpoints - media: st-delta: Fix reference count leak in delta_run_work - media: sti: Fix reference count leaks - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak - media: vsp1: Fix runtime PM imbalance on error - media: platform: s3c-camif: Fix runtime PM imbalance on error - media: platform: sti: hva: Fix runtime PM imbalance on error - media: bdisp: Fix runtime PM imbalance on error - media: media/pci: prevent memory leak in bttv_probe - media: uvcvideo: Ensure all probed info is returned to v4l2 - mmc: sdio: Check for CISTPL_VERS_1 buffer size - media: saa7134: avoid a shift overflow - fs: dlm: fix configfs memory leak - media: venus: core: Fix runtime PM imbalance in venus_probe - ntfs: add check for mft record size in superblock - mac80211: handle lack of sband->bitrates in rates - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() - scsi: mvumi: Fix error return in mvumi_io_attach() - scsi: target: core: Add CONTROL field for trace events - mic: vop: copy data to kernel space then write to io memory - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic - usb: gadget: function: printer: fix use-after-free in __lock_acquire - udf: Limit sparing table size - udf: Avoid accessing uninitialized data on failed inode read - USB: cdc-acm: handle broken union descriptors - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() - misc: rtsx: Fix memory leak in rtsx_pci_probe - reiserfs: only call unlock_new_inode() if I_NEW - xfs: make sure the rt allocator doesn't run off the end - usb: ohci: Default to per-port over-current protection - Bluetooth: Only mark socket zapped after unlocking - scsi: ibmvfc: Fix error return in ibmvfc_probe() - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy - rtl8xxxu: prevent potential memory leak - Fix use after free in get_capset_info callback. - scsi: qedi: Protect active command list to avoid list corruption - scsi: qedi: Fix list_del corruption while removing active I/O - tty: ipwireless: fix error handling - ipvs: Fix uninit-value in do_ip_vs_set_ctl() - reiserfs: Fix memory leak in reiserfs_parse_options() - mwifiex: don't call del_timer_sync() on uninitialized timer - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach - usb: core: Solve race condition in anchor cleanup functions - scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config() - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() - net: korina: cast KSEG0 address to pointer in kfree - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). - eeprom: at25: set minimum read/write access stride to 1 - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets. - powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler - net: fix pos incrementment in ipv6_route_seq_next - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 - x86/nmi: Fix nmi_handle() duration miscalculation - x86/events/amd/iommu: Fix sizeof mismatch - media: uvcvideo: Silence shift-out-of-bounds warning - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} - media: tc358743: cleanup tc358743_cec_isr - pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB - spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath() - staging: rtl8192u: Do not use GFP_KERNEL in atomic context - net: stmmac: use netif_tx_start|stop_all_queues() function - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized - ipvs: clear skb->tstamp in forwarding path - netfilter: nf_log: missing vlan offload tag and proto - RDMA/ucma: Fix locking for ctx->events_reported - RDMA/ucma: Add missing locking around rdma_leave_multicast() - RDMA/qedr: Fix inline size returned for iWARP [ Ubuntu: 4.15.0-126.129 ] * bionic/linux: 4.15.0-126.129 -proposed tracker (LP: #1905305) * CVE-2020-4788 - SAUCE: powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL - SAUCE: powerpc/64s: move some exception handlers out of line - powerpc/64s: flush L1D on kernel entry - SAUCE: powerpc: Add a framework for user access tracking - powerpc: Implement user_access_begin and friends - powerpc: Fix __clear_user() with KUAP enabled - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed - powerpc/64s: flush L1D after user accesses -- Ian May <email address hidden> Wed, 02 Dec 2020 14:59:22 -0600
Available diffs
| Superseded in xenial-security |
| Superseded in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1147.157) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1147.157 -proposed tracker (LP: #1906048) * Xenial update: v4.4.242 upstream stable release (LP: #1903750) - snapdragon: [CONFIG] updateconfigs for DW_APB_TIMER_OF [ Ubuntu: 4.4.0-198.230 ] * xenial/linux: 4.4.0-198.230 -proposed tracker (LP: #1906052) * Xenial update: v4.4.244 upstream stable release (LP: #1904914) - ring-buffer: Fix recursion protection transitions between interrupt context - gfs2: Wake up when sd_glock_disposal becomes zero - mm: mempolicy: fix potential pte_unmap_unlock pte error - time: Prevent undefined behaviour in timespec64_to_ns() - btrfs: reschedule when cloning lots of extents - net: xfrm: fix a race condition during allocing spi - perf tools: Add missing swap for ino_generation - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() - can: peak_usb: add range checking in decode operations - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping - Btrfs: fix missing error return if writeback for extent buffer never started - i40e: Wrong truncation from u16 to u8 - i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c - ath9k_htc: Use appropriate rs_datalen type - usb: gadget: goku_udc: fix potential crashes in probe - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free - gfs2: check for live vs. read-only file system in gfs2_fitrim - drm/amdgpu: perform srbm soft reset always on SDMA resume - mac80211: fix use of skb payload instead of header - cfg80211: regulatory: Fix inconsistent format argument - iommu/amd: Increase interrupt remapping table limit to 512 entries - xfs: fix a missing unlock on error in xfs_fs_map_blocks - of/address: Fix of_node memory leak in of_dma_is_coherent - cosa: Add missing kfree in error path of cosa_write - perf: Fix get_recursion_context() - ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA - ext4: unlock xattr_sem properly in ext4_inline_data_truncate() - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode - mei: protect mei_cl_mtu from null dereference - ocfs2: initialize ip_next_orphan - don't dump the threads that had been already exiting when zapped. - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] - pinctrl: amd: use higher precision for 512 RtcClk - pinctrl: amd: fix incorrect way to disable debounce filter - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" - IPv6: Set SIT tunnel hard_header_len to zero - net/af_iucv: fix null pointer dereference on shutdown - net/x25: Fix null-ptr-deref in x25_connect - net: Update window_clamp if SOCK_RCVBUF is set - random32: make prandom_u32() output unpredictable - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always- on STIBP - xen/events: avoid removing an event channel while handling it - xen/events: add a proper barrier to 2-level uevent unmasking - xen/events: fix race in evtchn_fifo_unmask() - xen/events: add a new "late EOI" evtchn framework - xen/blkback: use lateeoi irq binding - xen/netback: use lateeoi irq binding - xen/scsiback: use lateeoi irq binding - xen/pciback: use lateeoi irq binding - xen/events: switch user event channels to lateeoi model - xen/events: use a common cpu hotplug hook for event channels - xen/events: defer eoi in case of excessive number of events - xen/events: block rogue events for some time - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" - reboot: fix overflow parsing reboot cpu number - ext4: fix leaking sysfs kobject after failed mount - Convert trailing spaces and periods in path components - Linux 4.4.244 * Xenial update: v4.4.243 upstream stable release (LP: #1904904) - Linux 4.4.243 * Xenial update: v4.4.242 upstream stable release (LP: #1903750) - SUNRPC: ECONNREFUSED should cause a rebind. - scripts/setlocalversion: make git describe output more reliable - ravb: Fix bit fields checking in ravb_hwtstamp_get() - tipc: fix memory leak caused by tipc_buf_append() - mtd: lpddr: Fix bad logic in print_drs_error - ata: sata_rcar: Fix DMA boundary mask - fscrypt: return -EXDEV for incompatible rename or link into encrypted dir - f2fs crypto: avoid unneeded memory allocation in ->readdir - powerpc/powernv/smp: Fix spurious DBG() warning - sparc64: remove mm_cpumask clearing to fix kthread_use_mm race - f2fs: fix to check segment boundary during SIT page readahead - um: change sigio_spinlock to a mutex - xfs: fix realtime bitmap/summary file truncation when growing rt volume - video: fbdev: pvr2fb: initialize variables - ath10k: fix VHT NSS calculation when STBC is enabled - mmc: via-sdmmc: Fix data race bug - printk: reduce LOG_BUF_SHIFT range for H8300 - kgdb: Make "kgdbcon" work properly with "kgdb_earlycon" - USB: adutux: fix debugging - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values - power: supply: test_power: add missing newlines when printing parameters by sysfs - md/bitmap: md_bitmap_get_counter returns wrong blocks - clk: ti: clockdomain: fix static checker warning - net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid - drivers: watchdog: rdc321x_wdt: Fix race condition bugs - ext4: Detect already used quota file early - gfs2: add validation checks for size of superblock - memory: emif: Remove bogus debugfs error handling - ARM: dts: s5pv210: move PMU node out of clock controller - ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node - md/raid5: fix oops during stripe resizing - leds: bcm6328, bcm6358: use devres LED registering function - NFS: fix nfs_path in case of a rename retry - ACPI / extlog: Check for RDMSR failure - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs - w1: mxc_w1: Fix timeout resolution problem leading to bus error - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() - btrfs: reschedule if necessary when logging directory items - vt: keyboard, simplify vt_kdgkbsent - vt: keyboard, extend func_buf_lock to readers - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak. - powerpc/powernv/elog: Fix race while processing OPAL error log event. - ubifs: dent: Fix some potential memory leaks while iterating entries - ubi: check kthread_should_stop() after the setting of task state - ia64: fix build error with !COREDUMP - ceph: promote to unsigned long long before shifting - libceph: clear con->out_msg on Policy::stateful_server faults - 9P: Cast to loff_t before multiplying - ring-buffer: Return 0 on success from ring_buffer_resize() - vringh: fix __vringh_iov() when riov and wiov are different - tty: make FONTX ioctl use the tty pointer they were actually passed - arm64: berlin: Select DW_APB_TIMER_OF - cachefiles: Handle readpage error correctly - hil/parisc: Disable HIL driver when it gets stuck - ARM: samsung: fix PM debug build with DEBUG_LL but !MMU - ARM: s3c24xx: fix missing system reset - device property: Keep secondary firmware node secondary by type - device property: Don't clear secondary pointer for shared primary firmware node - staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice - Revert "Revert "XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information."" - xen/events: don't use chip_data for legacy IRQs - tipc: fix use-after-free in tipc_bcast_get_mode - gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP - gianfar: Account for Tx PTP timestamp in the skb headroom - Fonts: Replace discarded const qualifier - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 - ftrace: Fix recursion check for NMI test - ftrace: Handle tracing when switching between context - ARM: dts: sun4i-a10: fix cpu_alert temperature - x86/kexec: Use up-to-dated screen_info copy to fill boot params - of: Fix reserved-memory overlap detection - scsi: core: Don't start concurrent async scan on same host - vsock: use ns_capable_noaudit() on socket create - vt: Disable KD_FONT_OP_COPY - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent - serial: 8250_mtk: Fix uart_get_baud_rate warning - serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init - USB: serial: cyberjack: fix write-URB completion race - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 - USB: serial: option: add Telit FN980 composition 0x1055 - USB: Add NO_LPM quirk for Kingston flash drive - ARC: stack unwinding: avoid indefinite looping - Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" - Linux 4.4.242 * [HP 635] Radeon 6310 brightness control does not work (LP: #1894667) // Xenial update: v4.4.242 upstream stable release (LP: #1903750) - ACPI: video: use ACPI backlight for HP 635 Notebook [ Ubuntu: 4.4.0-197.229 ] * xenial/linux: 4.4.0-197.229 -proposed tracker (LP: #1905489) * sha1_ce and sha2_ce modules no longer load on arm64 (LP: #1905336) - SAUCE: Revert "crypto: arm64/sha - avoid non-standard inline asm tricks" * Fails to build on powerpc (LP: #1905475) - powerpc/uaccess-flush: fix corenet64_smp_defconfig build - SAUCE: powerpc/uaccess: only include kup-radix.h on PPC_BOOK3S_64 [ Ubuntu: 4.4.0-196.228 ] * xenial/linux: 4.4.0-196.228 -proposed tracker (LP: #1905309) * CVE-2020-4788 - SAUCE: powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL - SAUCE: powerpc/64s: move some exception handlers out of line - powerpc/64s: flush L1D on kernel entry - SAUCE: powerpc: Add a framework for user access tracking - powerpc: Implement user_access_begin and friends - powerpc: Fix __clear_user() with KUAP enabled - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed - powerpc/64s: flush L1D after user accesses -- William Breathitt Gray <email address hidden> Tue, 01 Dec 2020 13:10:22 -0500
Available diffs
linux-snapdragon (4.4.0-1146.156) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1146.156 -proposed tracker (LP: #1903103) [ Ubuntu: 4.4.0-195.227 ] * xenial/linux: 4.4.0-195.227 -proposed tracker (LP: #1903107) * Update kernel packaging to support forward porting kernels (LP: #1902957) - [Debian] Update for leader included in BACKPORT_SUFFIX * Avoid double newline when running insertchanges (LP: #1903293) - [Packaging] insertchanges: avoid double newline * EFI: Fails when BootCurrent entry does not exist (LP: #1899993) - efivarfs: Replace invalid slashes with exclamation marks in dentries. * CVE-2020-14351 - perf/core: Fix race in the perf_mmap_close() function * CVE-2020-25645 - geneve: add transport ports in route lookup for geneve * Xenial update: v4.4.241 upstream stable release (LP: #1902097) - ibmveth: Identify ingress large send packets. - tipc: fix the skb_unshare() in tipc_buf_append() - net/ipv4: always honour route mtu during forwarding - r8169: fix data corruption issue on RTL8402 - ALSA: bebob: potential info leak in hwdep_read() - mm/kasan: print name of mem[set,cpy,move]() caller in report - mm/kasan: add API to check memory regions - compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() - compiler.h: Add read_word_at_a_time() function. - lib/strscpy: Shut up KASAN false-positives in strscpy() - x86/mm/ptdump: Fix soft lockup in page table walker - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() - tcp: fix to update snd_wl1 in bulk receiver fast path - icmp: randomize the global rate limiter - cifs: remove bogus debug code - ima: Don't ignore errors from crypto_shash_update() - EDAC/i5100: Fix error handling order in i5100_init_one() - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call - media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" - media: m5mols: Check function pointer in m5mols_sensor_power - media: omap3isp: Fix memleak in isp_probe - crypto: omap-sham - fix digcnt register handling with export/import - media: tc358743: initialize variable - media: ti-vpe: Fix a missing check and reference count leak - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 - mwifiex: Do not use GFP_KERNEL in atomic context - drm/gma500: fix error check - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() - backlight: sky81452-backlight: Fix refcount imbalance on error - VMCI: check return value of get_user_pages_fast() for errors - tty: serial: earlycon dependency - pty: do tty_flip_buffer_push without port->lock in pty_write - drivers/virt/fsl_hypervisor: Fix error handling path - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error - video: fbdev: sis: fix null ptr dereference - HID: roccat: add bounds checking in kone_sysfs_write_settings() - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() - misc: mic: scif: Fix error handling path - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl - quota: clear padding in v2r1_mem2diskdqb() - net: enic: Cure the enic api locking trainwreck - mfd: sm501: Fix leaks in probe() - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well - nl80211: fix non-split wiphy information - mwifiex: fix double free - net: korina: fix kfree of rx/tx descriptor array - IB/mlx4: Adjust delayed work when a dup is observed - powerpc/pseries: Fix missing of_node_put() in rng_init() - powerpc/icp-hv: Fix missing of_node_put() in success path - mtd: lpddr: fix excessive stack usage with clang - mtd: mtdoops: Don't write panic data twice - ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values - powerpc/tau: Use appropriate temperature sample interval - powerpc/tau: Remove duplicated set_thresholds() call - powerpc/tau: Disable TAU between measurements - perf intel-pt: Fix "context_switch event has no tid" error - kdb: Fix pager search for multi-line strings - powerpc/perf/hv-gpci: Fix starting index value - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier - lib/crc32.c: fix trivial typo in preprocessor condition - vfio/pci: Clear token on bypass registration failure - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() - Input: ep93xx_keypad - fix handling of platform_get_irq() error - Input: omap4-keypad - fix handling of platform_get_irq() error - Input: sun4i-ps2 - fix handling of platform_get_irq() error - KVM: x86: emulating RDPID failure shall return #UD rather than #GP - memory: omap-gpmc: Fix a couple off by ones - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error - arm64: dts: zynqmp: Remove additional compatible string for i2c IPs - powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler - powerpc/powernv/dump: Fix race while processing OPAL dump - media: firewire: fix memory leak - media: ati_remote: sanity check for both endpoints - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak - media: bdisp: Fix runtime PM imbalance on error - media: media/pci: prevent memory leak in bttv_probe - media: uvcvideo: Ensure all probed info is returned to v4l2 - mmc: sdio: Check for CISTPL_VERS_1 buffer size - media: saa7134: avoid a shift overflow - ntfs: add check for mft record size in superblock - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() - scsi: mvumi: Fix error return in mvumi_io_attach() - scsi: target: core: Add CONTROL field for trace events - usb: gadget: function: printer: fix use-after-free in __lock_acquire - udf: Limit sparing table size - udf: Avoid accessing uninitialized data on failed inode read - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() - misc: rtsx: Fix memory leak in rtsx_pci_probe - reiserfs: only call unlock_new_inode() if I_NEW - xfs: make sure the rt allocator doesn't run off the end - usb: ohci: Default to per-port over-current protection - Bluetooth: Only mark socket zapped after unlocking - scsi: ibmvfc: Fix error return in ibmvfc_probe() - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy - rtl8xxxu: prevent potential memory leak - Fix use after free in get_capset_info callback. - tty: ipwireless: fix error handling - ipvs: Fix uninit-value in do_ip_vs_set_ctl() - reiserfs: Fix memory leak in reiserfs_parse_options() - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach - usb: core: Solve race condition in anchor cleanup functions - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() - net: korina: cast KSEG0 address to pointer in kfree - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). - Linux 4.4.241 * Xenial update: v4.4.240 upstream stable release (LP: #1902096) - Bluetooth: MGMT: Fix not checking if BT_HS is enabled - Bluetooth: fix kernel oops in store_pending_adv_report - Bluetooth: Consolidate encryption handling in hci_encrypt_cfm - Bluetooth: Fix update of connection state in `hci_encrypt_cfm` - Bluetooth: Disconnect if E0 is used for Level 4 - media: usbtv: Fix refcounting mixup - USB: serial: option: add Cellient MPL200 card - USB: serial: option: Add Telit FT980-KS composition - staging: comedi: check validity of wMaxPacketSize of usb endpoints found - USB: serial: pl2303: add device-id for HP GC device - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters - reiserfs: Initialize inode keys properly - reiserfs: Fix oops during mount - spi: unbinding slave before calling spi_destroy_queue - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA - Linux 4.4.240 * Xenial update: v4.4.239 upstream stable release (LP: #1902095) - gpio: tc35894: fix up tc35894 interrupt configuration - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config - net: dec: de2104x: Increase receive ring size for Tulip - rndis_host: increase sleep time in the query-response loop - drivers/net/wan/lapbether: Make skb->protocol consistent with the header - drivers/net/wan/hdlc: Set skb->protocol before transmitting - nfs: Fix security label length not being reset - clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED - iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() - i2c: cpm: Fix i2c_ram structure - epoll: do not insert into poll queues until all sanity checks are done - epoll: replace ->visited/visited_list with generation count - epoll: EPOLL_CTL_ADD: close the race in decision to take fast path - ep_create_wakeup_source(): dentry name can change under you... - netfilter: ctnetlink: add a range check for l3/l4 protonum - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts - Revert "ravb: Fixed to be able to unload modules" - fbcon: Fix global-out-of-bounds read in fbcon_get_font() - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() - usermodehelper: reset umask to default before executing user process - platform/x86: thinkpad_acpi: initialize tp_nvram_state variable - platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse - driver core: Fix probe_count imbalance in really_probe() - perf top: Fix stdio interface input handling with glibc 2.28+ - sctp: fix sctp_auth_init_hmacs() error path - team: set dev->needed_headroom in team_setup_by_port() - net: team: fix memory leak in __team_options_register - mtd: nand: Provide nand_cleanup() function to free NAND related resources - xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate - xfrm: clone whole liftime_cur structure in xfrm_do_migrate - net: stmmac: removed enabling eee in EEE set callback - xfrm: Use correct address family in xfrm_state_find - bonding: set dev->needed_headroom in bond_setup_by_slave() - rxrpc: Fix rxkad token xdr encoding - rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read() - rxrpc: Fix server keyring leak - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails - Linux 4.4.239 * CVE-2020-12352 - Bluetooth: A2MP: Fix not initializing all members * CVE-2020-0427 - pinctrl: devicetree: Avoid taking direct reference to device name string * Xenial update: v4.4.238 upstream stable release (LP: #1899506) - af_key: pfkey_dump needs parameter validation - KVM: fix memory leak in kvm_io_bus_unregister_dev() - kprobes: fix kill kprobe which has been marked as gone - ftrace: Setup correct FTRACE_FL_REGS flags for module - RDMA/ucma: ucma_context reference leak in error path - mtd: Fix comparison in map_word_andequal() - hdlc_ppp: add range checks in ppp_cp_parse_cr() - tipc: use skb_unshare() instead in tipc_buf_append() - net: add __must_check to skb_put_padto() - ip: fix tos reflection in ack and reset packets - serial: 8250: Avoid error message on reprobe - scsi: aacraid: fix illegal IO beyond last LBA - m68k: q40: Fix info-leak in rtc_ioctl - gma/gma500: fix a memory disclosure bug due to uninitialized bytes - ASoC: kirkwood: fix IRQ error handling - PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out - mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup() - mfd: mfd-core: Protect against NULL call-back function pointer - tracing: Adding NULL checks for trace_array descriptor pointer - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock - xfs: fix attr leaf header freemap.size underflow - kernel/sys.c: avoid copying possible padding bytes in copy_to_user - neigh_stat_seq_next() should increase position index - rt_cpu_seq_next should increase position index - seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier - ACPI: EC: Reference count query handlers under lock - tracing: Set kernel_stack's caller size properly - ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter - Bluetooth: Fix refcount use-after-free issue - mm: pagewalk: fix termination condition in walk_pte_range() - Bluetooth: prefetch channel before killing sock - skbuff: fix a data race in skb_queue_len() - audit: CONFIG_CHANGE don't log internal bookkeeping as an event - selinux: sel_avc_get_stat_idx should increase position index - scsi: lpfc: Fix RQ buffer leakage when no IOCBs available - drm/omap: fix possible object reference leak - dmaengine: tegra-apb: Prevent race conditions on channel's freeing - media: go7007: Fix URB type for interrupt handling - Bluetooth: guard against controllers sending zero'd events - drm/amdgpu: increase atombios cmd timeout - Bluetooth: L2CAP: handle l2cap config request during open state - media: tda10071: fix unsigned sign extension overflow - tpm: ibmvtpm: Wait for buffer to be set before proceeding - tracing: Use address-of operator on section symbols - serial: 8250_omap: Fix sleeping function called from invalid context during probe - SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' - ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len - ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor - mm/filemap.c: clear page error before actual read - mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area - KVM: Remove CREATE_IRQCHIP/SET_PIT2 race - bdev: Reduce time holding bd_mutex in sync in blkdev_close() - drivers: char: tlclk.c: Avoid data race between init and interrupt handler - dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion - atm: fix a memory leak of vcc->user_back - phy: samsung: s5pv210-usb2: Add delay after reset - Bluetooth: Handle Inquiry Cancel error after Inquiry Complete - USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() - tty: serial: samsung: Correct clock selection logic - ALSA: hda: Fix potential race in unsol event handler - fuse: don't check refcount after stealing page - USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int - e1000: Do not perform reset in reset_task if we are already down - printk: handle blank console arguments passed in. - vfio/pci: fix memory leaks of eventfd ctx - perf kcore_copy: Fix module map when there are no modules loaded - mtd: rawnand: omap_elm: Fix runtime PM imbalance on error - ceph: fix potential race in ceph_check_caps - mtd: parser: cmdline: Support MTD names containing one or more colons - x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline - vfio/pci: Clear error and request eventfd ctx after releasing - vfio/pci: fix racy on error and request eventfd ctx - s390/init: add missing __init annotations - batman-adv: bla: fix type misuse for backbone_gw hash indexing - atm: eni: fix the missed pci_disable_device() for eni_init_one() - batman-adv: mcast/TT: fix wrongly dropped or rerouted packets - ALSA: asihpi: fix iounmap in error handler - MIPS: Add the missing 'CPU_1074K' into __get_cpu_type() - tty: vt, consw->con_scrolldelta cleanup - kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() - lib/string.c: implement stpcpy - ata: define AC_ERR_OK - ata: make qc_prep return ata_completion_errors - ata: sata_mv, avoid trigerrable BUG_ON - Linux 4.4.238 * *-tools-common packages descriptions have typo "PGKVER" (LP: #1898903) - [Packaging] Fix typo in -tools template s/PGKVER/PKGVER/ * Xenial update: v4.4.237 upstream stable release (LP: #1897602) - ARM: dts: socfpga: fix register entry for timer3 on Arria10 - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA - drivers/net/wan/lapbether: Added needed_tailroom - firestream: Fix memleak in fs_open - drivers/net/wan/lapbether: Set network_header before transmitting - xfs: initialize the shortform attr header padding entry - drivers/net/wan/hdlc_cisco: Add hard_header_len - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled - gcov: Disable gcov build with GCC 10 - iio: adc: mcp3422: fix locking scope - iio: adc: mcp3422: fix locking on error path - iio:light:ltr501 Fix timestamp alignment issue. - iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak. - iio:accel:mma8452: Fix timestamp alignment and prevent data leak. - USB: core: add helpers to retrieve endpoints - staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() - btrfs: fix wrong address when faulting in pages in the search ioctl - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem - rbd: require global CAP_SYS_ADMIN for mapping and unmapping - fbcon: remove soft scrollback code - fbcon: remove now unusued 'softback_lines' cursor() argument - vgacon: remove software scrollback support - [Config] updateconfigs for VGACON_SOFT_SCROLLBACK - KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit - video: fbdev: fix OOB read in vga_8planes_imageblit() - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules - usb: Fix out of sync data toggle if a configured device is reconfigured - gcov: add support for GCC 10.1 - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall - scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery - SUNRPC: stop printk reading past end of string - rapidio: Replace 'select' DMAENGINES 'with depends on' - i2c: algo: pca: Reapply i2c bus settings after reset - MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT - perf test: Free formats for perf pmu parse test - fbcon: Fix user font detection test at fbcon_resize(). - MIPS: SNI: Fix spurious interrupts - USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook - USB: UAS: fix disconnect by unplugging a hub - usblp: fix race between disconnect() and read() - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists - serial: 8250_pci: Add Realtek 816a and 816b - ehci-hcd: Move include to keep CRC stable - powerpc/dma: Fix dma_map_ops::get_required_mask - x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y - Linux 4.4.237 [ Ubuntu: 4.4.0-194.226 ] * CVE-2020-8694 - powercap: make attributes only readable by root -- Ian May <email address hidden> Thu, 12 Nov 2020 18:33:09 -0600
Available diffs
| Deleted in bionic-security (Reason: Raid data loss LP: #1907262) |
| Deleted in bionic-updates (Reason: Raid data loss LP: #1907262) |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1091.100) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1091.100 -proposed tracker (LP: #1903114) [ Ubuntu: 4.15.0-125.128 ] * bionic/linux: 4.15.0-125.128 -proposed tracker (LP: #1903137) * Update kernel packaging to support forward porting kernels (LP: #1902957) - [Debian] Update for leader included in BACKPORT_SUFFIX * Avoid double newline when running insertchanges (LP: #1903293) - [Packaging] insertchanges: avoid double newline * EFI: Fails when BootCurrent entry does not exist (LP: #1899993) - efivarfs: Replace invalid slashes with exclamation marks in dentries. * CVE-2020-14351 - perf/core: Fix race in the perf_mmap_close() function * raid10: Block discard is very slow, causing severe delays for mkfs and fstrim operations (LP: #1896578) - md: add md_submit_discard_bio() for submitting discard bio - md/raid10: extend r10bio devs to raid disks - md/raid10: pull codes that wait for blocked dev into one function - md/raid10: improve raid10 discard request - md/raid10: improve discard request for far layout * Bionic: btrfs: kernel BUG at /build/linux- eTBZpZ/linux-4.15.0/fs/btrfs/ctree.c:3233! (LP: #1902254) - btrfs: use offset_in_page instead of open-coding it - btrfs: use BUG() instead of BUG_ON(1) - btrfs: drop unnecessary offset_in_page in extent buffer helpers - btrfs: extent_io: do extra check for extent buffer read write functions - btrfs: extent-tree: kill BUG_ON() in __btrfs_free_extent() - btrfs: extent-tree: kill the BUG_ON() in insert_inline_extent_backref() - btrfs: ctree: check key order before merging tree blocks * Bionic update: upstream stable patchset 2020-11-04 (LP: #1902943) - USB: gadget: f_ncm: Fix NDP16 datagram validation - gpio: tc35894: fix up tc35894 interrupt configuration - vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock - vsock/virtio: stop workers during the .remove() - vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock() - net: virtio_vsock: Enhance connection semantics - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 - ftrace: Move RCU is watching check after recursion check - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config - drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices - drm/sun4i: mixer: Extend regmap max_register - net: dec: de2104x: Increase receive ring size for Tulip - rndis_host: increase sleep time in the query-response loop - nvme-core: get/put ctrl and transport module in nvme_dev_open/release() - drivers/net/wan/lapbether: Make skb->protocol consistent with the header - drivers/net/wan/hdlc: Set skb->protocol before transmitting - mac80211: do not allow bigger VHT MPDUs than the hardware supports - spi: fsl-espi: Only process interrupts for expected events - nvme-fc: fail new connections to a deleted host or remote port - pinctrl: mvebu: Fix i2c sda definition for 98DX3236 - nfs: Fix security label length not being reset - clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED - iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() - i2c: cpm: Fix i2c_ram structure - Input: trackpoint - enable Synaptics trackpoints - random32: Restore __latent_entropy attribute on net_rand_state - epoll: do not insert into poll queues until all sanity checks are done - epoll: replace ->visited/visited_list with generation count - epoll: EPOLL_CTL_ADD: close the race in decision to take fast path - ep_create_wakeup_source(): dentry name can change under you... - netfilter: ctnetlink: add a range check for l3/l4 protonum - drm/syncobj: Fix drm_syncobj_handle_to_fd refcount leak - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts - Revert "ravb: Fixed to be able to unload modules" - fbcon: Fix global-out-of-bounds read in fbcon_get_font() - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() - usermodehelper: reset umask to default before executing user process - platform/x86: thinkpad_acpi: initialize tp_nvram_state variable - platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse - driver core: Fix probe_count imbalance in really_probe() - perf top: Fix stdio interface input handling with glibc 2.28+ - mtd: rawnand: sunxi: Fix the probe error path - macsec: avoid use-after-free in macsec_handle_frame() - mm/khugepaged: fix filemap page_to_pgoff(page) != offset - cifs: Fix incomplete memory allocation on setxattr path - i2c: meson: fix clock setting overwrite - sctp: fix sctp_auth_init_hmacs() error path - team: set dev->needed_headroom in team_setup_by_port() - net: team: fix memory leak in __team_options_register - openvswitch: handle DNAT tuple collision - drm/amdgpu: prevent double kfree ttm->sg - xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate - xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrate - xfrm: clone whole liftime_cur structure in xfrm_do_migrate - net: stmmac: removed enabling eee in EEE set callback - platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP - xfrm: Use correct address family in xfrm_state_find - bonding: set dev->needed_headroom in bond_setup_by_slave() - mdio: fix mdio-thunder.c dependency & build error - net: usb: ax88179_178a: fix missing stop entry in driver_info - rxrpc: Fix rxkad token xdr encoding - rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read() - rxrpc: Fix some missing _bh annotations on locking conn->state_lock - rxrpc: Fix server keyring leak - perf: Fix task_function_call() error handling - mmc: core: don't set limits.discard_granularity as 0 - mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails - drm/nouveau/mem: guard against NULL pointer access in mem_del - i2c: i801: Exclude device from suspend direct complete optimization - nvme-core: put ctrl ref when module ref get fail - i2c: meson: fixup rate calculation with filter delay - xfrm: clone XFRMA_SET_MARK in xfrm_do_migrate - net/mlx5e: Fix VLAN cleanup flow - net/mlx5e: Fix VLAN create flow * kci_test_encap_fou() in rtnetlink.sh from kselftests/net failed with "FAIL: can't add fou port 7777, skipping test" (LP: #1891421) - selftests: rtnetlink: load fou module for kci_test_encap_fou() test * Bionic update: upstream stable patchset 2020-10-23 (LP: #1901257) - af_key: pfkey_dump needs parameter validation - KVM: fix memory leak in kvm_io_bus_unregister_dev() - kprobes: fix kill kprobe which has been marked as gone - mm/thp: fix __split_huge_pmd_locked() for migration PMD - cxgb4: Fix offset when clearing filter byte counters - geneve: add transport ports in route lookup for geneve - hdlc_ppp: add range checks in ppp_cp_parse_cr() - ip: fix tos reflection in ack and reset packets - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC - nfp: use correct define to return NONE fec - tipc: Fix memory leak in tipc_group_create_member() - tipc: fix shutdown() of connection oriented socket - tipc: use skb_unshare() instead in tipc_buf_append() - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex. - net: phy: Avoid NPD upon phy_detach() when driver is unbound - net: qrtr: check skb_put_padto() return value - net: add __must_check to skb_put_padto() - ipv4: Update exception handling for multipath routes via same device - MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info - Documentation/llvm: add documentation on building w/ Clang/LLVM - Documentation/llvm: fix the name of llvm-size - net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware - net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware - kbuild: replace AS=clang with LLVM_IAS=1 - tcp_bbr: refactor bbr_target_cwnd() for general inflight provisioning - tcp_bbr: adapt cwnd based on ack aggregation estimation - serial: 8250: Avoid error message on reprobe - RDMA/ucma: ucma_context reference leak in error path - mm: fix double page fault on arm64 if PTE_AF is cleared - scsi: aacraid: fix illegal IO beyond last LBA - m68k: q40: Fix info-leak in rtc_ioctl - gma/gma500: fix a memory disclosure bug due to uninitialized bytes - ASoC: kirkwood: fix IRQ error handling - media: smiapp: Fix error handling at NVM reading - arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback - x86/ioapic: Unbreak check_timer() - ALSA: usb-audio: Add delay quirk for H570e USB headsets - ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged - PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out - scsi: fnic: fix use after free - clk/ti/adpll: allocate room for terminating null - mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup() - mfd: mfd-core: Protect against NULL call-back function pointer - tracing: Adding NULL checks for trace_array descriptor pointer - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock - RDMA/i40iw: Fix potential use after free - xfs: fix attr leaf header freemap.size underflow - RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' - mmc: core: Fix size overflow for mmc partitions - gfs2: clean up iopen glock mess in gfs2_create_inode - debugfs: Fix !DEBUG_FS debugfs_create_automount - CIFS: Properly process SMB3 lease breaks - kernel/sys.c: avoid copying possible padding bytes in copy_to_user - neigh_stat_seq_next() should increase position index - rt_cpu_seq_next should increase position index - seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier - media: ti-vpe: cal: Restrict DMA to avoid memory corruption - ACPI: EC: Reference count query handlers under lock - dmaengine: zynqmp_dma: fix burst length configuration - powerpc/eeh: Only dump stack once if an MMIO loop is detected - tracing: Set kernel_stack's caller size properly - ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter - selftests/ftrace: fix glob selftest - tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility - Bluetooth: Fix refcount use-after-free issue - mm: pagewalk: fix termination condition in walk_pte_range() - Bluetooth: prefetch channel before killing sock - ALSA: hda: Clear RIRB status before reading WP - skbuff: fix a data race in skb_queue_len() - audit: CONFIG_CHANGE don't log internal bookkeeping as an event - selinux: sel_avc_get_stat_idx should increase position index - scsi: lpfc: Fix RQ buffer leakage when no IOCBs available - scsi: lpfc: Fix coverity errors in fmdi attribute handling - drm/omap: fix possible object reference leak - perf test: Fix test trace+probe_vfs_getname.sh on s390 - RDMA/rxe: Fix configuration of atomic queue pair attributes - KVM: x86: fix incorrect comparison in trace event - media: staging/imx: Missing assignment in imx_media_capture_device_register() - x86/pkeys: Add check for pkey "overflow" - bpf: Remove recursion prevention from rcu free callback - dmaengine: tegra-apb: Prevent race conditions on channel's freeing - media: go7007: Fix URB type for interrupt handling - Bluetooth: guard against controllers sending zero'd events - timekeeping: Prevent 32bit truncation in scale64_check_overflow() - ext4: fix a data race at inode->i_disksize - mm: avoid data corruption on CoW fault into PFN-mapped VMA - drm/amdgpu: increase atombios cmd timeout - ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read - scsi: aacraid: Disabling TM path and only processing IOP reset - Bluetooth: L2CAP: handle l2cap config request during open state - media: tda10071: fix unsigned sign extension overflow - xfs: don't ever return a stale pointer from __xfs_dir3_free_read - tpm: ibmvtpm: Wait for buffer to be set before proceeding - rtc: ds1374: fix possible race condition - tracing: Use address-of operator on section symbols - serial: 8250_port: Don't service RX FIFO if throttled - serial: 8250_omap: Fix sleeping function called from invalid context during probe - serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout - perf cpumap: Fix snprintf overflow check - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn - tools: gpio-hammer: Avoid potential overflow in main - RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices - SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' - svcrdma: Fix leak of transport addresses - ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len - ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor - NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests() - mm/kmemleak.c: use address-of operator on section symbols - mm/filemap.c: clear page error before actual read - mm/vmscan.c: fix data races using kswapd_classzone_idx - mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area - scsi: qedi: Fix termination timeouts in session logout - serial: uartps: Wait for tx_empty in console setup - KVM: Remove CREATE_IRQCHIP/SET_PIT2 race - bdev: Reduce time holding bd_mutex in sync in blkdev_close() - drivers: char: tlclk.c: Avoid data race between init and interrupt handler - staging:r8188eu: avoid skb_clone for amsdu to msdu conversion - sparc64: vcc: Fix error return code in vcc_probe() - arm64: cpufeature: Relax checks for AArch32 support at EL[0-2] - dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion - atm: fix a memory leak of vcc->user_back - power: supply: max17040: Correct voltage reading - phy: samsung: s5pv210-usb2: Add delay after reset - Bluetooth: Handle Inquiry Cancel error after Inquiry Complete - USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() - tty: serial: samsung: Correct clock selection logic - ALSA: hda: Fix potential race in unsol event handler - powerpc/traps: Make unrecoverable NMIs die instead of panic - fuse: don't check refcount after stealing page - USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int - arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register - e1000: Do not perform reset in reset_task if we are already down - drm/nouveau/debugfs: fix runtime pm imbalance on error - printk: handle blank console arguments passed in. - usb: dwc3: Increase timeout for CmdAct cleared by device controller - btrfs: don't force read-only after error in drop snapshot - vfio/pci: fix memory leaks of eventfd ctx - perf util: Fix memory leak of prefix_if_not_in - perf kcore_copy: Fix module map when there are no modules loaded - mtd: rawnand: omap_elm: Fix runtime PM imbalance on error - ceph: fix potential race in ceph_check_caps - mm/swap_state: fix a data race in swapin_nr_pages - rapidio: avoid data race between file operation callbacks and mport_cdev_add(). - mtd: parser: cmdline: Support MTD names containing one or more colons - x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline - vfio/pci: Clear error and request eventfd ctx after releasing - cifs: Fix double add page to memcg when cifs_readpages - scsi: libfc: Handling of extra kref - scsi: libfc: Skip additional kref updating work event - selftests/x86/syscall_nt: Clear weird flags after each test - vfio/pci: fix racy on error and request eventfd ctx - btrfs: qgroup: fix data leak caused by race between writeback and truncate - s390/init: add missing __init annotations - i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() - objtool: Fix noreturn detection for ignored functions - ieee802154: fix one possible memleak in ca8210_dev_com_init - ieee802154/adf7242: check status of adf7242_read_reg - clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() - batman-adv: bla: fix type misuse for backbone_gw hash indexing - atm: eni: fix the missed pci_disable_device() for eni_init_one() - batman-adv: mcast/TT: fix wrongly dropped or rerouted packets - mac802154: tx: fix use-after-free - drm/vc4/vc4_hdmi: fill ASoC card owner - net: qed: RDMA personality shouldn't fail VF load - batman-adv: Add missing include for in_interrupt() - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh - ALSA: asihpi: fix iounmap in error handler - MIPS: Add the missing 'CPU_1074K' into __get_cpu_type() - s390/dasd: Fix zero write for FBA devices - kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() - mm, THP, swap: fix allocating cluster for swapfile by mistake - lib/string.c: implement stpcpy - ata: define AC_ERR_OK - ata: make qc_prep return ata_completion_errors - ata: sata_mv, avoid trigerrable BUG_ON - media: mc-device.c: fix memleak in media_device_register_entity - tpm_crb: fix fTPM on AMD Zen+ CPUs - RDMA/qedr: Fix potential use after free - fix dget_parent() fastpath race - scsi: pm80xx: Cleanup command when a reset times out - ASoC: max98090: remove msleep in PLL unlocked workaround - ipv6_route_seq_next should increase position index - scsi: ufs: Fix a race condition in the tracing code - s390/cpum_sf: Use kzalloc and minor changes - ceph: ensure we have a new cap before continuing in fill_inode - mm/swapfile.c: swap_next should increase position index - dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all - dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all - drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic - firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp - random: fix data races at timer_rand_state - bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal - perf jevents: Fix leak of mapfile memory - xfs: mark dir corrupt when lookup-by-hash fails - rtc: sa1100: fix possible race condition - nfsd: Don't add locks to closed or closing open stateids - KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the valid ones - thermal: rcar_thermal: Handle probe error gracefully - nvme: Fix controller creation races with teardown flow - scsi: hpsa: correct race condition in offload enabled - PCI: Use ioremap(), not phys_to_virt() for platform ROM - KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi() - net: openvswitch: use u64 for meter bucket - scsi: aacraid: Fix error handling paths in aac_probe_one() - scsi: cxlflash: Fix error return code in cxlflash_probe() - drm/nouveau: fix runtime pm imbalance on error - perf evsel: Fix 2 memory leaks - perf stat: Fix duration_time value for higher intervals - perf metricgroup: Free metric_events on error - ASoC: img-i2s-out: Fix runtime PM imbalance on error - wlcore: fix runtime pm imbalance in wl1271_tx_work - nvme: fix possible deadlock when I/O is blocked - net: openvswitch: use div_u64() for 64-by-32 divisions - nvme: explicitly update mpath disk capacity on revalidation - ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811 - drm/amdkfd: fix a memory leak issue - batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh - KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE - KVM: SVM: Add a dedicated INVD intercept routine - s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE - KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch * bcache: Issues with large IO wait in bch_mca_scan() when shrinker is enabled (LP: #1898786) - bcache: remove member accessed from struct btree - bcache: reap c->btree_cache_freeable from the tail in bch_mca_scan() - bcache: reap from tail of c->btree_cache in bch_mca_scan() * *-tools-common packages descriptions have typo "PGKVER" (LP: #1898903) - [Packaging] Fix typo in -tools template s/PGKVER/PKGVER/ * [hns3-0901]add hns3_gro_complete for HW GRO process (LP: #1893711) - net: hns3: add rx multicast packets statistic - net: hns3: minor refactor for hns3_rx_checksum - net: hns3: add hns3_gro_complete for HW GRO process * mwifiex stops working after kernel upgrade (LP: #1897299) - mwifiex: Increase AES key storage size to 256 bits * Bionic update: upstream stable patchset 2020-09-30 (LP: #1897977) - ARM: dts: socfpga: fix register entry for timer3 on Arria10 - RDMA/rxe: Fix memleak in rxe_mem_init_user - RDMA/rxe: Drop pointless checks in rxe_init_ports - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA - RDMA/core: Fix reported speed and width - mmc: sdhci-msm: Add retries when all tuning phases are found valid - ARM: dts: BCM5301X: Fixed QSPI compatible string - arm64: dts: ns2: Fixed QSPI compatible string - ARC: HSDK: wireup perf irq - dmaengine: acpi: Put the CSRT table after using it - drivers/net/wan/lapbether: Added needed_tailroom - NFC: st95hf: Fix memleak in st95hf_in_send_cmd - firestream: Fix memleak in fs_open - ALSA: hda: Fix 2 channel swapping for Tegra - drivers/net/wan/lapbether: Set network_header before transmitting - xfs: initialize the shortform attr header padding entry - irqchip/eznps: Fix build error for !ARC700 builds - drivers/net/wan/hdlc_cisco: Add hard_header_len - ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id - cpufreq: intel_pstate: Refuse to turn off with HWP enabled - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled - gcov: Disable gcov build with GCC 10 - iio: adc: mcp3422: fix locking scope - iio: adc: mcp3422: fix locking on error path - iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set - iio:light:ltr501 Fix timestamp alignment issue. - iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak. - iio:adc:ti-adc084s021 Fix alignment and data leak issues. - iio:adc:ina2xx Fix timestamp alignment issue. - iio:adc:max1118 Fix alignment of timestamp and data leak issues - iio:adc:ti-adc081c Fix alignment and data leak issues - iio:magnetometer:ak8975 Fix alignment and data leak issues. - iio:light:max44000 Fix timestamp alignment and prevent data leak. - iio:chemical:ccs811: Fix timestamp alignment and prevent data leak. - iio: accel: kxsd9: Fix alignment of local buffer. - iio:accel:mma7455: Fix timestamp alignment and prevent data leak. - iio:accel:mma8452: Fix timestamp alignment and prevent data leak. - staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() - btrfs: require only sector size alignment for parent eb bytenr - btrfs: fix lockdep splat in add_missing_dev - btrfs: fix wrong address when faulting in pages in the search ioctl - regulator: push allocation in set_consumer_device_supply() out of lock - scsi: target: iscsi: Fix data digest calculation - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem - rbd: require global CAP_SYS_ADMIN for mapping and unmapping - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars - fbcon: remove soft scrollback code - fbcon: remove now unusued 'softback_lines' cursor() argument - vgacon: remove software scrollback support - [Config] updateconfigs for VGACON_SOFT_SCROLLBACK - KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit - ARM: dts: vfxxx: Add syscon compatible with OCOTP - video: fbdev: fix OOB read in vga_8planes_imageblit() - staging: greybus: audio: fix uninitialized value issue - usb: core: fix slab-out-of-bounds Read in read_descriptors - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter - USB: serial: option: support dynamic Quectel USB compositions - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules - usb: Fix out of sync data toggle if a configured device is reconfigured - usb: typec: ucsi: acpi: Check the _DEP dependencies - gcov: add support for GCC 10.1 - gfs2: initialize transaction tr_ailX_lists earlier - net: handle the return value of pskb_carve_frag_list() correctly - hv_netvsc: Remove "unlikely" from netvsc_select_queue - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall - scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort - scsi: libfc: Fix for double free() - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery - spi: spi-loopback-test: Fix out-of-bounds read - SUNRPC: stop printk reading past end of string - rapidio: Replace 'select' DMAENGINES 'with depends on' - nvme-fc: cancel async events before freeing event struct - f2fs: fix indefinite loop scanning for free nid - i2c: algo: pca: Reapply i2c bus settings after reset - spi: Fix memory leak on splited transfers - KVM: MIPS: Change the definition of kvm type - clk: rockchip: Fix initialization of mux_pll_src_4plls_p - Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload - MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT - perf test: Free formats for perf pmu parse test - fbcon: Fix user font detection test at fbcon_resize(). - MIPS: SNI: Fix spurious interrupts - drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail - drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() - USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook - USB: UAS: fix disconnect by unplugging a hub - usblp: fix race between disconnect() and read() - i2c: i801: Fix resume bug - percpu: fix first chunk size calculation for populated bitmap - Input: trackpoint - add new trackpoint variant IDs - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists - serial: 8250_pci: Add Realtek 816a and 816b - ehci-hcd: Move include to keep CRC stable - powerpc/dma: Fix dma_map_ops::get_required_mask - x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y - RDMA/bnxt_re: Do not report transparent vlan from QP1 - ARM: dts: bcm: HR2: Fixed QSPI compatible string - ARM: dts: NSP: Fixed QSPI compatible string - netfilter: conntrack: allow sctp hearbeat after connection re-use - cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled - iommu/amd: Do not use IOMMUv2 functionality when SME is active - drm/tve200: Stabilize enable/disable - drm/msm: Disable preemption on all 5xx targets - phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init - dsa: Allow forwarding of redirected IGMP traffic - RDMA/bnxt_re: Restrict the max_gids to 256 - regulator: pwm: Fix machine constraints application - openrisc: Fix cache API compile issue when not inlining - f2fs: Return EOF on unaligned end of file DIO read - ASoC: qcom: Set card->owner to avoid warnings - perf test: Fix the "signal" test inline assembly - x86/boot/compressed: Disable relocation relaxation * Bionic update: upstream stable patchset 2020-09-23 (LP: #1896817) - HID: core: Correctly handle ReportSize being zero - HID: core: Sanitize event code and type when mapping input - perf record/stat: Explicitly call out event modifiers in the documentation - drm/msm: add shutdown support for display platform_driver - hwmon: (applesmc) check status earlier. - nvmet: Disable keep-alive timer when kato is cleared to 0h - ceph: don't allow setlease on cephfs - cpuidle: Fixup IRQ state - s390: don't trace preemption in percpu macros - xen/xenbus: Fix granting of vmalloc'd memory - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling - batman-adv: Avoid uninitialized chaddr when handling DHCP - batman-adv: Fix own OGM check in aggregated OGMs - batman-adv: bla: use netif_rx_ni when not in interrupt context - dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() - MIPS: mm: BMIPS5000 has inclusive physical caches - MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores - netfilter: nf_tables: add NFTA_SET_USERDATA if not null - netfilter: nf_tables: incorrect enum nft_list_attributes definition - netfilter: nf_tables: fix destination register zeroing - net: hns: Fix memleak in hns_nic_dev_probe - net: systemport: Fix memleak in bcm_sysport_probe - ravb: Fixed to be able to unload modules - net: arc_emac: Fix memleak in arc_mdio_probe - dmaengine: pl330: Fix burst length if burst size is smaller than bus width - bnxt_en: Check for zero dir entries in NVRAM. - bnxt_en: Fix PCI AER error recovery flow - nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()' - perf tools: Correct SNOOPX field offset - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() - fix regression in "epoll: Keep a reference on files added to the check list" - tg3: Fix soft lockup when tg3_reset_task() fails. - iommu/vt-d: Serialize IOMMU GCMD register modifications - thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 - include/linux/log2.h: add missing () around n in roundup_pow_of_two() - btrfs: drop path before adding new uuid tree entry - btrfs: Remove redundant extent_buffer_get in get_old_root - btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind - btrfs: set the lockdep class for log tree extent buffers - uaccess: Add non-pagefault user-space read functions - uaccess: Add non-pagefault user-space write function - btrfs: fix potential deadlock in the search ioctl - net: usb: qmi_wwan: add Telit 0x1050 composition - usb: qmi_wwan: add D-Link DWM-222 A2 device ID - ALSA: ca0106: fix error code handling - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check - ALSA: hda/hdmi: always check pin power status in i915 pin fixup - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection - affs: fix basic permission bits to actually work - block: allow for_each_bvec to support zero len bvec - block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h> - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks - dm cache metadata: Avoid returning cmd->bm wild pointer on error - dm thin metadata: Avoid returning cmd->bm wild pointer on error - mm: slub: fix conversion of freelist_corrupted() - KVM: arm64: Add kvm_extable for vaxorcism code - KVM: arm64: Defer guest entry when an asynchronous exception is pending - KVM: arm64: Survive synchronous exceptions caused by AT instructions - KVM: arm64: Set HCR_EL2.PTW to prevent AT taking synchronous exception - checkpatch: fix the usage of capture group ( ... ) - mm/hugetlb: fix a race between hugetlb sysctl handlers - cfg80211: regulatory: reject invalid hints - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() - ALSA; firewire-tascam: exclude Tascam FE-8 from detection - block: ensure bdi->io_pages is always initialized - vfio/pci: Fix SR-IOV VF handling with MMIO blocking - bnxt: don't enable NAPI until rings are ready - netlabel: fix problems with mapping removal - net: usb: dm9601: Add USB ID of Keenetic Plus DSL - sctp: not disable bh in the whole sctp_get_port_local() - tipc: fix shutdown() of connectionless socket - net: disable netpoll on fresh napis - scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range - scsi: target: tcmu: Optimize use of flush_dcache_page - selftests/bpf: Fix massive output from test_maps - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS - perf jevents: Fix suspicious code in fixregex() - ext2: don't update mtime on COW faults - xfs: don't update mtime on COW faults [ Ubuntu: 4.15.0-124.127 ] * Packaging resync (LP: #1786013) - update dkms package versions * Introduce the new NVIDIA 455 series (LP: #1902093) - [Packaging] NVIDIA -- Add the NVIDIA 455 driver [ Ubuntu: 4.15.0-123.126 ] * CVE-2020-8694 - powercap: make attributes only readable by root -- Ian May <email address hidden> Thu, 12 Nov 2020 16:33:46 -0600
Available diffs
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Superseded in bionic-security |
| Superseded in bionic-updates |
| Deleted in bionic-proposed (Reason: moved to -updates) |
linux-snapdragon (4.15.0-1090.99) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1090.99 -proposed tracker (LP: #1899939) * CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490 - [Config] snapdragon: Disable BlueZ highspeed support [ Ubuntu: 4.15.0-122.124 ] * bionic/linux: 4.15.0-122.124 -proposed tracker (LP: #1899941) * CVE-2020-12351 // CVE-2020-12352 // CVE-2020-24490 - Bluetooth: Disable High Speed by default - Bluetooth: MGMT: Fix not checking if BT_HS is enabled - [Config] Disable BlueZ highspeed support * CVE-2020-12351 - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel * CVE-2020-12352 - Bluetooth: A2MP: Fix not initializing all members [ Ubuntu: 4.15.0-121.123 ] * Packaging resync (LP: #1786013) - update dkms package versions -- Stefan Bader <email address hidden> Thu, 15 Oct 2020 17:07:07 +0200
Available diffs
| Superseded in xenial-security |
| Superseded in xenial-updates |
| Deleted in xenial-proposed (Reason: moved to -updates) |
linux-snapdragon (4.4.0-1145.155) xenial; urgency=medium
[ Ubuntu: 4.4.0-193.224 ]
* CVE-2020-16119
- SAUCE: dccp: avoid double free of ccid on child socket
[ Ubuntu: 4.4.0-192.222 ]
* xenial/linux: 4.4.0-192.222 -proposed tracker (LP: #1897734)
* mwifiex stops working after kernel upgrade (LP: #1897299)
- mwifiex: Increase AES key storage size to 256 bits
* xenial 4.4.0-191-generic in -proposed has a regression (LP: #1896725)
- Revert "XEN uses irqdesc::irq_data_common::handler_data to store a per
interrupt XEN data pointer which contains XEN specific information."
linux-snapdragon (4.15.0-1089.98) bionic; urgency=medium
[ Ubuntu: 4.15.0-120.122 ]
* CVE-2020-16119
- SAUCE: dccp: avoid double free of ccid on child socket
* CVE-2020-16120
- Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
directories"
- ovl: pass correct flags for opening real directory
- ovl: switch to mounter creds in readdir
- ovl: verify permissions in ovl_path_open()
| Deleted in bionic-proposed (Reason: NBS) |
linux-snapdragon (4.15.0-1088.96) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1088.96 -proposed tracker (LP: #1896017) * Bionic update: upstream stable patchset 2020-09-11 (LP: #1895328) - snapdragon: [Config] updateconfigs for CONFIG_SPI_DYNAMIC [ Ubuntu: 4.15.0-119.120 ] * bionic/linux: 4.15.0-119.120 -proposed tracker (LP: #1896040) * gtp: unable to associate contextes to interfaces (LP: #1894605) - gtp: add GTPA_LINK info to msg sent to userspace * uvcvideo: add mapping for HEVC payloads (LP: #1895803) - media: videodev2.h: Add v4l2 definition for HEVC - SAUCE: media: uvcvideo: Add mapping for HEVC payloads * Novalink (mkvterm command failure) (LP: #1892546) - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() * rtnetlink.sh in net from ubuntu_kernel_selftests is returning 1 for a skipped test (LP: #1895258) - selftests: net: return Kselftest Skip code for skipped tests * Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) - net: Fix potential wrong skb->protocol in skb_vlan_untag() - tipc: fix uninit skb->data in tipc_nl_compat_dumpit() - ipvlan: fix device features - gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY - ALSA: pci: delete repeated words in comments - ASoC: tegra: Fix reference count leaks. - mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs - arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep - powerpc/xive: Ignore kmemleak false positives - media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() - blktrace: ensure our debugfs dir exists - scsi: target: tcmu: Fix crash on ARM during cmd completion - iommu/iova: Don't BUG on invalid PFNs - drm/amdkfd: Fix reference count leaks. - drm/radeon: fix multiple reference count leak - drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms - drm/amd/display: fix ref count leak in amdgpu_drm_ioctl - drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config - drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails - scsi: lpfc: Fix shost refcount mismatch when deleting vport - selftests/powerpc: Purge extra count_pmc() calls of ebb selftests - omapfb: fix multiple reference count leaks due to pm_runtime_get_sync - PCI: Fix pci_create_slot() reference count leak - rtlwifi: rtl8192cu: Prevent leaking urb - mips/vdso: Fix resource leaks in genvdso.c - cec-api: prevent leaking memory through hole in structure - f2fs: fix use-after-free issue - drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open - drm/nouveau: Fix reference count leak in nouveau_connector_detect - locking/lockdep: Fix overflow in presentation of average lock-time - scsi: iscsi: Do not put host in iscsi_set_flashnode_param() - ceph: fix potential mdsc use-after-free crash - scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() - EDAC/ie31200: Fallback if host bridge device is already initialized - media: davinci: vpif_capture: fix potential double free - KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe - powerpc/spufs: add CONFIG_COREDUMP dependency - USB: sisusbvga: Fix a potential UB casued by left shifting a negative value - efi: provide empty efi_enter_virtual_mode implementation - Revert "ath10k: fix DMA related firmware crashes on multiple devices" - media: gpio-ir-tx: improve precision of transmitted signal due to scheduling - nvme-fc: Fix wrong return value in __nvme_fc_init_request() - null_blk: fix passing of REQ_FUA flag in null_handle_rq - i2c: rcar: in slave mode, clear NACK earlier - usb: gadget: f_tcm: Fix some resource leaks in some error paths - jbd2: make sure jh have b_transaction set in refile/unfile_buffer - ext4: don't BUG on inconsistent journal feature - jbd2: abort journal if free a async write error metadata buffer - fs: prevent BUG_ON in submit_bh_wbc() - spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate - s390/cio: add cond_resched() in the slow_eval_known_fn() loop - scsi: ufs: Fix possible infinite loop in ufshcd_hold - scsi: ufs: Improve interrupt handling for shared interrupts - scsi: ufs: Clean up completed request without interrupt notification - net: gianfar: Add of_node_put() before goto statement - powerpc/perf: Fix soft lockups due to missed interrupt accounting - HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands - btrfs: fix space cache memory leak after transaction abort - fbcon: prevent user font height or width change from causing potential out- of-bounds access - USB: lvtest: return proper error code in probe - vt: defer kfree() of vc_screenbuf in vc_do_resize() - vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() - serial: samsung: Removes the IRQ not found warning - serial: pl011: Fix oops on -EPROBE_DEFER - serial: pl011: Don't leak amba_ports entry on driver register error - serial: 8250_exar: Fix number of ports for Commtech PCIe cards - serial: 8250: change lock order in serial8250_do_startup() - writeback: Protect inode->i_io_list with inode->i_lock - writeback: Avoid skipping inode writeback - writeback: Fix sync livelock due to b_dirty_time processing - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. - xhci: Do warm-reset when both CAS and XDEV_RESUME are set - PM: sleep: core: Fix the handling of pending runtime resume requests - device property: Fix the secondary firmware node handling in set_primary_fwnode() - drm/amdgpu: Fix buffer overflow in INFO ioctl - USB: yurex: Fix bad gfp argument - usb: uas: Add quirk for PNY Pro Elite - USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge - usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() - overflow.h: Add allocation size calculation helpers - USB: gadget: u_f: add overflow checks to VLA macros - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() - USB: gadget: u_f: Unbreak offset calculation in VLAs - USB: cdc-acm: rework notification_buffer resizing - usb: storage: Add unusual_uas entry for Sony PSZ drives - btrfs: check the right error variable in btrfs_del_dir_entries_in_log - tpm: Unify the mismatching TPM space buffer sizes - HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() - ALSA: usb-audio: Update documentation comment for MS2109 quirk - net: ena: Make missed_tx stat incremental - ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt - ASoC: img-parallel-out: Fix a reference count leak - xfs: Don't allow logging of XFS_ISTALE inodes - HID: quirks: add NOGET quirk for Logitech GROUP - drm/msm/adreno: fix updating ring fence - ext4: handle read only external journal device - ext4: handle option set by mount flags correctly - ext4: handle error of ext4_setup_system_zone() on remount - scsi: qla2xxx: Check if FW supports MQ before enabling - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem - macvlan: validate setting of multiple remote source MAC addresses - block: loop: set discard granularity and alignment for block device backed loop - blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART - btrfs: reset compression level for lzo on remount - usb: host: xhci: fix ep context print mismatch in debugfs - genirq/matrix: Deal with the sillyness of for_each_cpu() on UP - drm/amd/pm: correct Vega10 swctf limit setting - USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D * DELL LATITUDE 5491 touchscreen doesn't work (LP: #1889446) // Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) - USB: quirks: Add no-lpm quirk for another Raydium touchscreen * Bionic update: upstream stable patchset 2020-09-11 (LP: #1895328) - drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() - perf probe: Fix memory leakage when the probe point is not found - khugepaged: khugepaged_test_exit() check mmget_still_valid() - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter() - powerpc/mm: Only read faulting instruction when necessary in do_page_fault() - btrfs: export helpers for subvolume name/id resolution - btrfs: don't show full path of bind mounts in subvol= - btrfs: Move free_pages_out label in inline extent handling branch in compress_file_range - btrfs: inode: fix NULL pointer dereference if inode doesn't need compression - btrfs: sysfs: use NOFS for device creation - romfs: fix uninitialized memory leak in romfs_dev_read() - kernel/relay.c: fix memleak on destroy relay channel - mm: include CMA pages in lowmem_reserve at boot - mm, page_alloc: fix core hung in free_pcppages_bulk() - ext4: fix checking of directory entry validity for inline directories - jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() - [Config] updateconfigs for CONFIG_SPI_DYNAMIC - spi: Prevent adding devices below an unregistering controller - scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices - media: budget-core: Improve exception handling in budget_register() - rtc: goldfish: Enable interrupt in set_alarm() when necessary - media: vpss: clean up resources in init - Input: psmouse - add a newline when printing 'proto' by sysfs - m68knommu: fix overwriting of bits in ColdFire V3 cache control - xfs: fix inode quota reservation checks - jffs2: fix UAF problem - cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0 - scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases - virtio_ring: Avoid loop when vq is broken in virtqueue_poll - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init - alpha: fix annotation of io{read,write}{16,32}be() - ext4: fix potential negative array index in do_split() - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN - i40e: Fix crash during removing i40e driver - net: fec: correct the error path for regulator disable in probe - bonding: show saner speed for broadcast mode - bonding: fix a potential double-unregister - ASoC: msm8916-wcd-analog: fix register Interrupt offset - ASoC: intel: Fix memleak in sst_media_open - vfio/type1: Add proper error unwind for vfio_iommu_replay() - bonding: fix active-backup failover for current ARP slave - hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() - net: dsa: b53: check for timeout - powerpc/pseries: Do not initiate shutdown when system is running on UPS - epoll: Keep a reference on files added to the check list - do_epoll_ctl(): clean the failure exits up a bit - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible - xen: don't reschedule in preemption off sections - clk: Evict unregistered clks from parent caches - KVM: arm/arm64: Don't reschedule in unmap_stage2_range() - scsi: zfcp: Fix use-after-free in request timeout handlers - ext4: don't allow overlapping system zones - s390/runtime_instrumentation: fix storage key handling - s390/ptrace: fix storage key handling - kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode - kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode - Fix build error when CONFIG_ACPI is not set/enabled: - net: ena: Prevent reset after device destruction * Bionic update: upstream stable patchset 2020-09-02 (LP: #1893986) - net/mlx5e: Don't support phys switch id if not in switchdev mode - tracepoint: Mark __tracepoint_string's __used - HID: input: Fix devices that return multiple bytes in battery report - x86/mce/inject: Fix a wrong assignment of i_mce.status - sched: correct SD_flags returned by tl->sd_flags() - arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio - arm64: dts: rockchip: fix rk3399-puma gmac reset gpio - EDAC: Fix reference count leaks - arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property - arm64: dts: exynos: Fix silent hang after boot on Espresso - m68k: mac: Don't send IOP message until channel is idle - m68k: mac: Fix IOP status/control register writes - platform/x86: intel-hid: Fix return value check in check_acpi_dev() - platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() - ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() - spi: lantiq: fix: Rx overflow error in full duplex mode - ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() - drm/tilcdc: fix leak & null ref in panel_connector_get_modes - Bluetooth: add a mutex lock to avoid UAF in do_enale_set - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync - video: fbdev: neofb: fix memory leak in neo_scan_monitor() - md-cluster: fix wild pointer of unlock_all_bitmaps() - arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding - drm/nouveau: fix multiple instances of reference count leaks - drm/debugfs: fix plain echo to connector "force" attribute - irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls - brcmfmac: To fix Bss Info flag definition Bug - brcmfmac: set state of hanger slot to FREE when flushing PSQ - iwlegacy: Check the return value of pcie_capability_read_*() - gpu: host1x: debug: Fix multiple channels emitting messages simultaneously - usb: gadget: net2280: fix memory leak on probe error handling paths - bdc: Fix bug causing crash after multiple disconnects - usb: bdc: Halt controller on suspend - dyndbg: fix a BUG_ON in ddebug_describe_flags - bcache: fix super block seq numbers comparision in register_cache_set() - ACPICA: Do not increment operation_region reference counts for field units - agp/intel: Fix a memory leak on module initialisation failure - video: fbdev: sm712fb: fix an issue about iounmap for a wrong address - console: newport_con: fix an issue about leak related system resources - video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call - iio: improve IIO_CONCENTRATION channel type description - drm/arm: fix unintentional integer overflow on left shift - leds: lm355x: avoid enum conversion warning - media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() - ASoC: Intel: bxt_rt298: add missing .owner field - scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline - cxl: Fix kobject memleak - drm/radeon: fix array out-of-bounds read and write issues - scsi: powertec: Fix different dev_id between request_irq() and free_irq() - scsi: eesox: Fix different dev_id between request_irq() and free_irq() - ipvs: allow connection reuse for unconfirmed conntrack - media: firewire: Using uninitialized values in node_probe() - media: exynos4-is: Add missed check for pinctrl_lookup_state() - xfs: fix reflink quota reservation accounting error - PCI: Fix pci_cfg_wait queue locking problem - leds: core: Flush scheduled work for system suspend - drm: panel: simple: Fix bpc for LG LB070WV8 panel - drm/bridge: sil_sii8620: initialize return of sii8620_readb - scsi: scsi_debug: Add check for sdebug_max_queue during module init - mwifiex: Prevent memory corruption handling keys - powerpc/vdso: Fix vdso cpu truncation - staging: rtl8192u: fix a dubious looking mask before a shift - PCI/ASPM: Add missing newline in sysfs 'policy' - drm/imx: tve: fix regulator_disable error path - USB: serial: iuu_phoenix: fix led-activity helpers - thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor() - coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb() - MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init() - usb: dwc2: Fix error path in gadget registration - scsi: mesh: Fix panic after host or bus reset - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration - Smack: fix another vsscanf out of bounds - Smack: prevent underflow in smk_set_cipso() - power: supply: check if calc_soc succeeded in pm860x_init_battery - Bluetooth: hci_serdev: Only unregister device if it was registered - selftests/powerpc: Fix CPU affinity for child process - PCI: Release IVRS table in AMD ACS quirk - selftests/powerpc: Fix online CPU selection - s390/qeth: don't process empty bridge port events - wl1251: fix always return 0 error - tools, build: Propagate build failures from tools/build/Makefile.build - net: ethernet: aquantia: Fix wrong return value - liquidio: Fix wrong return value in cn23xx_get_pf_num() - net: spider_net: Fix the size used in a 'dma_free_coherent()' call - fsl/fman: use 32-bit unsigned integer - fsl/fman: fix dereference null return value - fsl/fman: fix unreachable code - fsl/fman: check dereferencing null pointer - fsl/fman: fix eth hash table allocation - dlm: Fix kobject memleak - pinctrl-single: fix pcs_parse_pinconf() return value - x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task - crypto: aesni - add compatibility with IAS - af_packet: TPACKET_V3: fix fill status rwlock imbalance - drivers/net/wan/lapbether: Added needed_headroom and a skb->len check - net/nfc/rawsock.c: add CAP_NET_RAW check. - net: refactor bind_bucket fastreuse into helper - net: Set fput_needed iff FDPUT_FPUT is set - USB: serial: cp210x: re-enable auto-RTS on open - USB: serial: cp210x: enable usb generic throttle/unthrottle - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 - ALSA: usb-audio: add quirk for Pioneer DDJ-RB - crypto: qat - fix double free in qat_uclo_create_batch_init_list - crypto: ccp - Fix use of merged scatterlists - crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified - bitfield.h: don't compile-time validate _val in FIELD_FIT - fs/minix: check return value of sb_getblk() - fs/minix: don't allow getting deleted inodes - fs/minix: reject too-large maximum file size - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 - 9p: Fix memory leak in v9fs_mount - spi: spidev: Align buffers for DMA - mtd: rawnand: qcom: avoid write to unavailable register - parisc: Implement __smp_store_release and __smp_load_acquire barriers - parisc: mask out enable and reserved bits from sba imask - ARM: 8992/1: Fix unwind_frame for clang-built kernels - irqdomain/treewide: Free firmware node after domain removal - xen/balloon: fix accounting in alloc_xenballooned_pages error path - xen/balloon: make the balloon wait interruptible - net: initialize fastreuse on inet_inherit_port - smb3: warn on confusing error scenario with sec=krb5 - PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() - btrfs: don't allocate anonymous block device for user invisible roots - btrfs: only search for left_info if there is no right_info in try_merge_free_space - btrfs: fix memory leaks after failure to lookup checksums during inode logging - dt-bindings: iio: io-channel-mux: Fix compatible string in example code - iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() - xtensa: fix xtensa_pmu_setup prototype - powerpc: Fix circular dependency between percpu.h and mmu.h - net: ethernet: stmmac: Disable hardware multicast filter - net: stmmac: dwmac1000: provide multicast filter fallback - net/compat: Add missing sock updates for SCM_RIGHTS - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 - bcache: allocate meta data pages as compound pages - mac80211: fix misplaced while instead of if - MIPS: CPU#0 is not hotpluggable - ext2: fix missing percpu_counter_inc - ocfs2: change slot number type s16 to u16 - ftrace: Setup correct FTRACE_FL_REGS flags for module - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler - tracing/hwlat: Honor the tracing_cpumask - tracing: Use trace_sched_process_free() instead of exit() for pid tracing - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options - watchdog: f71808e_wdt: remove use of wrong watchdog_info option - watchdog: f71808e_wdt: clear watchdog timeout occurred flag - pseries: Fix 64 bit logical memory block panic - perf intel-pt: Fix FUP packet state - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable() - mfd: arizona: Ensure 32k clock is put on driver unbind and error - RDMA/ipoib: Return void from ipoib_ib_dev_stop() - USB: serial: ftdi_sio: make process-packet buffer unsigned - USB: serial: ftdi_sio: clean up receive processing - gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() - iommu/omap: Check for failure of a call to omap_iommu_dump_ctx - iommu/vt-d: Enforce PASID devTLB field mask - i2c: rcar: slave: only send STOP event when we have been addressed - clk: clk-atlas6: fix return value check in atlas6_clk_init() - pwm: bcm-iproc: handle clk_get_rate() return - tools build feature: Use CC and CXX from parent - i2c: rcar: avoid race when unregistering slave - Input: sentelic - fix error return when fsp_reg_write fails - drm/vmwgfx: Use correct vmw_legacy_display_unit pointer - drm/vmwgfx: Fix two list_for_each loop exit tests - net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init - nfs: Fix getxattr kernel panic and memory overflow - fs/ufs: avoid potential u32 multiplication overflow - test_kmod: avoid potential double free in trigger_config_run_type() - mfd: dln2: Run event handler loop under spinlock - ALSA: echoaudio: Fix potential Oops in snd_echo_resume() - perf bench mem: Always memset source before memcpy - tools build feature: Quote CC and CXX for their arguments - sh: landisk: Add missing initialization of sh_io_port_base - khugepaged: retract_page_tables() remember to test exit - genirq/affinity: Make affinity setting if activated opt-in - ARM: dts: gose: Fix ports node name for adv7180 - ARM: dts: gose: Fix ports node name for adv7612 - drm/amdgpu: avoid dereferencing a NULL pointer - usb: mtu3: clear dual mode of u3port when disable device - drm/radeon: disable AGP by default - brcmfmac: keep SDIO watchdog running when console_interval is non-zero - ath10k: Acquire tx_lock in tx error paths - xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork - RDMA/rxe: Skip dgid check in loopback mode - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue - usb: core: fix quirks_param_set() writing to a const pointer - powerpc/boot: Fix CONFIG_PPC_MPC52XX references - include/asm-generic/vmlinux.lds.h: align ro_after_init - PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken - PCI: Add device even if driver attach failed - PCI: qcom: Define some PARF params needed for ipq8064 SoC - PCI: qcom: Add support for tx term offset for rev 2.1.0 - PCI: Probe bridge window attributes once at enumeration-time - btrfs: ref-verify: fix memory leak in add_block_entry - btrfs: don't traverse into the seed devices in show_devname - btrfs: fix messages after changing compression level by remount - btrfs: fix return value mixup in btrfs_get_extent - powerpc: Allow 4224 bytes of stack expansion for the signal frame - driver core: Avoid binding drivers to dead devices - RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() - media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic - media: rockchip: rga: Only set output CSC mode for RGB input - mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete - openrisc: Fix oops caused when dumping stack - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport - watchdog: initialize device before misc_register - fs/minix: set s_maxbytes correctly - fs/minix: fix block limit check for V1 filesystems - fs/minix: remove expected error message in block_to_path() - arm64: dts: marvell: espressobin: add ethernet alias - drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume * [UBUNTU 20.04] kernel: s390/cpum_cf,perf: changeDFLT_CCERROR counter name (LP: #1891454) - s390/cpum_cf: Add new extended counters for IBM z15 * CVE-2018-10322 - xfs: move inode fork verifiers to xfs_dinode_verify - xfs: enhance dinode verifier -- William Breathitt Gray <email address hidden> Mon, 21 Sep 2020 13:12:34 -0400
Available diffs
| Deleted in xenial-proposed (Reason: NBS) |
linux-snapdragon (4.4.0-1144.153) xenial; urgency=medium * xenial/linux-snapdragon: 4.4.0-1144.153 -proposed tracker (LP: #1896063) [ Ubuntu: 4.4.0-191.221 ] * xenial/linux: 4.4.0-191.221 -proposed tracker (LP: #1896067) * Novalink (mkvterm command failure) (LP: #1892546) - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() * Xenial update: v4.4.236 upstream stable release (LP: #1895891) - HID: core: Correctly handle ReportSize being zero - HID: core: Sanitize event code and type when mapping input - perf record/stat: Explicitly call out event modifiers in the documentation - mm, page_alloc: remove unnecessary variable from free_pcppages_bulk - hwmon: (applesmc) check status earlier. - ceph: don't allow setlease on cephfs - s390: don't trace preemption in percpu macros - xen/xenbus: Fix granting of vmalloc'd memory - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling - batman-adv: Avoid uninitialized chaddr when handling DHCP - batman-adv: bla: use netif_rx_ni when not in interrupt context - dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() - netfilter: nf_tables: incorrect enum nft_list_attributes definition - netfilter: nf_tables: fix destination register zeroing - dmaengine: pl330: Fix burst length if burst size is smaller than bus width - bnxt_en: Check for zero dir entries in NVRAM. - fix regression in "epoll: Keep a reference on files added to the check list" - tg3: Fix soft lockup when tg3_reset_task() fails. - iommu/vt-d: Serialize IOMMU GCMD register modifications - thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 - include/linux/log2.h: add missing () around n in roundup_pow_of_two() - btrfs: drop path before adding new uuid tree entry - btrfs: Remove redundant extent_buffer_get in get_old_root - btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind - btrfs: set the lockdep class for log tree extent buffers - uaccess: Add non-pagefault user-space read functions - uaccess: Add non-pagefault user-space write function - btrfs: fix potential deadlock in the search ioctl - net: qmi_wwan: MDM9x30 specific power management - net: qmi_wwan: support "raw IP" mode - net: qmi_wwan: should hold RTNL while changing netdev type - net: qmi_wwan: ignore bogus CDC Union descriptors - Add Dell Wireless 5809e Gobi 4G HSPA+ Mobile Broadband Card (rev3) to qmi_wwan - qmi_wwan: Added support for Gemalto's Cinterion PHxx WWAN interface - qmi_wwan: add support for Quectel EC21 and EC25 - NET: usb: qmi_wwan: add support for Telit LE922A PID 0x1040 - drivers: net: usb: qmi_wwan: add QMI_QUIRK_SET_DTR for Telit PID 0x1201 - usb: qmi_wwan: add D-Link DWM-222 A2 device ID - net: usb: qmi_wwan: add Telit ME910 support - net: usb: qmi_wwan: add Telit 0x1050 composition - ALSA: ca0106: fix error code handling - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check - dm cache metadata: Avoid returning cmd->bm wild pointer on error - dm thin metadata: Avoid returning cmd->bm wild pointer on error - net: refactor bind_bucket fastreuse into helper - net: initialize fastreuse on inet_inherit_port - checkpatch: fix the usage of capture group ( ... ) - mm/hugetlb: fix a race between hugetlb sysctl handlers - cfg80211: regulatory: reject invalid hints - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() - ALSA: firewire-digi00x: add support for console models of Digi00x series - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection - ALSA; firewire-tascam: exclude Tascam FE-8 from detection - fs/affs: use octal for permissions - affs: fix basic permission bits to actually work - ravb: Fixed to be able to unload modules - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() - bnxt_en: Failure to update PHY is not fatal condition. - bnxt: don't enable NAPI until rings are ready - net: usb: dm9601: Add USB ID of Keenetic Plus DSL - sctp: not disable bh in the whole sctp_get_port_local() - net: disable netpoll on fresh napis - Linux 4.4.236 * clock: overriding the clocksource should select the requested clocksource (LP: #1894591) - clocksource: Defer override invalidation unless clock is unstable * alsa/hdmi: the hdmi audio stops working from Ubuntu-4.4.0-155.182 (LP: #1895603) - ALSA: hda/hdmi - Read the pin sense from register when repolling - SAUCE: ALSA: hda/hdmi - Check pin_eld->monitor_present * Xenial update: v4.4.235 upstream stable release (LP: #1895031) - net: Fix potential wrong skb->protocol in skb_vlan_untag() - tipc: fix uninit skb->data in tipc_nl_compat_dumpit() - ipvlan: fix device features - bonding: show saner speed for broadcast mode - bonding: fix a potential double-unregister - powerpc/pseries: Do not initiate shutdown when system is running on UPS - ALSA: pci: delete repeated words in comments - ASoC: tegra: Fix reference count leaks. - media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() - scsi: target: tcmu: Fix crash on ARM during cmd completion - drm/amdkfd: Fix reference count leaks. - drm/radeon: fix multiple reference count leak - drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms - drm/amd/display: fix ref count leak in amdgpu_drm_ioctl - drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config - drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails - scsi: lpfc: Fix shost refcount mismatch when deleting vport - selftests/powerpc: Purge extra count_pmc() calls of ebb selftests - PCI: Fix pci_create_slot() reference count leak - rtlwifi: rtl8192cu: Prevent leaking urb - mips/vdso: Fix resource leaks in genvdso.c - drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open - drm/nouveau: Fix reference count leak in nouveau_connector_detect - locking/lockdep: Fix overflow in presentation of average lock-time - scsi: iscsi: Do not put host in iscsi_set_flashnode_param() - ceph: fix potential mdsc use-after-free crash - scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() - EDAC/ie31200: Fallback if host bridge device is already initialized - media: davinci: vpif_capture: fix potential double free - powerpc/spufs: add CONFIG_COREDUMP dependency - USB: sisusbvga: Fix a potential UB casued by left shifting a negative value - Revert "ath10k: fix DMA related firmware crashes on multiple devices" - i2c: rcar: in slave mode, clear NACK earlier - jbd2: make sure jh have b_transaction set in refile/unfile_buffer - jbd2: abort journal if free a async write error metadata buffer - s390/cio: add cond_resched() in the slow_eval_known_fn() loop - scsi: ufs: Fix possible infinite loop in ufshcd_hold - net: gianfar: Add of_node_put() before goto statement - fbcon: prevent user font height or width change from causing potential out- of-bounds access - USB: lvtest: return proper error code in probe - vt: defer kfree() of vc_screenbuf in vc_do_resize() - vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() - serial: samsung: Removes the IRQ not found warning - serial: pl011: Don't leak amba_ports entry on driver register error - serial: 8250: change lock order in serial8250_do_startup() - writeback: Protect inode->i_io_list with inode->i_lock - writeback: Avoid skipping inode writeback - writeback: Fix sync livelock due to b_dirty_time processing - XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. - xhci: Do warm-reset when both CAS and XDEV_RESUME are set - PM: sleep: core: Fix the handling of pending runtime resume requests - device property: Fix the secondary firmware node handling in set_primary_fwnode() - USB: yurex: Fix bad gfp argument - usb: uas: Add quirk for PNY Pro Elite - USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge - usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() - usb: storage: Add unusual_uas entry for Sony PSZ drives - btrfs: check the right error variable in btrfs_del_dir_entries_in_log - HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() - ALSA: usb-audio: Update documentation comment for MS2109 quirk - Linux 4.4.235 * DELL LATITUDE 5491 touchscreen doesn't work (LP: #1889446) // Xenial update: v4.4.235 upstream stable release (LP: #1895031) - USB: quirks: Add no-lpm quirk for another Raydium touchscreen * Xenial update: v4.4.234 upstream stable release (LP: #1893248) - cxl: Fix kobject memleak - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable() - perf probe: Fix memory leakage when the probe point is not found - net/compat: Add missing sock updates for SCM_RIGHTS - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options - watchdog: f71808e_wdt: remove use of wrong watchdog_info option - coredump: fix race condition between collapse_huge_page() and core dumping - khugepaged: khugepaged_test_exit() check mmget_still_valid() - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter() - btrfs: export helpers for subvolume name/id resolution - btrfs: don't show full path of bind mounts in subvol= - romfs: fix uninitialized memory leak in romfs_dev_read() - mm: include CMA pages in lowmem_reserve at boot - mm, page_alloc: fix core hung in free_pcppages_bulk() - ext4: clean up ext4_match() and callers - ext4: fix checking of directory entry validity for inline directories - media: budget-core: Improve exception handling in budget_register() - media: vpss: clean up resources in init - Input: psmouse - add a newline when printing 'proto' by sysfs - m68knommu: fix overwriting of bits in ColdFire V3 cache control - xfs: fix inode quota reservation checks - jffs2: fix UAF problem - scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases - virtio_ring: Avoid loop when vq is broken in virtqueue_poll - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init - alpha: fix annotation of io{read,write}{16,32}be() - ext4: fix potential negative array index in do_split() - ASoC: intel: Fix memleak in sst_media_open - powerpc: Allow 4224 bytes of stack expansion for the signal frame - epoll: Keep a reference on files added to the check list - do_epoll_ctl(): clean the failure exits up a bit - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible - xen: don't reschedule in preemption off sections - omapfb: dss: Fix max fclk divider for omap36xx - KVM: arm/arm64: Don't reschedule in unmap_stage2_range() - Linux 4.4.234 * CVE-2018-10322 - libxfs: synchronize dinode_verify with userspace - xfs: sanity check directory inode di_size - xfs: move inode fork verifiers to xfs_dinode_verify - xfs: enhance dinode verifier -- Ian May <email address hidden> Mon, 21 Sep 2020 14:56:59 -0500
Available diffs
linux-snapdragon (4.15.0-1087.95) bionic; urgency=medium * bionic/linux-snapdragon: 4.15.0-1087.95 -proposed tracker (LP: #1894674) [ Ubuntu: 4.15.0-118.119 ] * bionic/linux: 4.15.0-118.119 -proposed tracker (LP: #1894697) * Packaging resync (LP: #1786013) - update dkms package versions * Introduce the new NVIDIA 450-server and the 450 UDA series (LP: #1887674) - [packaging] add signed modules for nvidia 450 and 450-server * cgroup refcount is bogus when cgroup_sk_alloc is disabled (LP: #1886860) - cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone() * CVE-2020-12888 - vfio/type1: Support faulting PFNMAP vmas - vfio-pci: Fault mmaps to enable vma tracking - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory * [Hyper-V] VSS and File Copy daemons intermittently fails to start (LP: #1891224) - [Packaging] Bind hv_vss_daemon startup to hv_vss device - [Packaging] bind hv_fcopy_daemon startup to hv_fcopy device * KVM: Fix zero_page reference counter overflow when using KSM on KVM compute host (LP: #1837810) - KVM: fix overflow of zero page refcount with ksm running * Fix false-negative return value for rtnetlink.sh in kselftests/net (LP: #1890136) - selftests: rtnetlink: correct the final return value for the test - selftests: rtnetlink: make kci_test_encap() return sub-test result * Bionic update: upstream stable patchset 2020-08-18 (LP: #1892091) - USB: serial: qcserial: add EM7305 QDL product ID - USB: iowarrior: fix up report size handling for some devices - usb: xhci: define IDs for various ASMedia host controllers - usb: xhci: Fix ASMedia ASM1142 DMA addressing - Revert "ALSA: hda: call runtime_allow() for all hda controllers" - ALSA: seq: oss: Serialize ioctls - staging: android: ashmem: Fix lockdep warning for write operation - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() - omapfb: dss: Fix max fclk divider for omap36xx - binder: Prevent context manager from incrementing ref 0 - vgacon: Fix for missing check in scrollback handling - mtd: properly check all write ioctls for permissions - leds: wm831x-status: fix use-after-free on unbind - leds: da903x: fix use-after-free on unbind - leds: lm3533: fix use-after-free on unbind - leds: 88pm860x: fix use-after-free on unbind - net/9p: validate fds in p9_fd_open - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure - i2c: slave: improve sanity check when registering - i2c: slave: add sanity check when unregistering - usb: hso: check for return value in hso_serial_common_create() - firmware: Fix a reference count leak. - cfg80211: check vendor command doit pointer before use - igb: reinit_locked() should be called with rtnl_lock - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent - tools lib traceevent: Fix memory leak in process_dynamic_array_len - Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23) - xattr: break delegations in {set,remove}xattr - ipv4: Silence suspicious RCU usage warning - ipv6: fix memory leaks on IPV6_ADDRFORM path - net: ethernet: mtk_eth_soc: fix MTU warnings - vxlan: Ensure FDB dump is performed under RCU - net: lan78xx: replace bogus endpoint lookup - hv_netvsc: do not use VF device if link is down - net: gre: recompute gre csum for sctp over gre tunnels - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() - Revert "vxlan: fix tos value before xmit" - selftests/net: relax cpu affinity requirement in msg_zerocopy test - rxrpc: Fix race between recvmsg and sendmsg on immediate call failure - i40e: add num_vectors checker in iwarp handler - i40e: Wrong truncation from u16 to u8 - i40e: Memory leak in i40e_config_iwarp_qvlist - Smack: fix use-after-free in smk_write_relabel_self() * Bionic update: upstream stable patchset 2020-08-11 (LP: #1891228) - AX.25: Fix out-of-bounds read in ax25_connect() - AX.25: Prevent out-of-bounds read in ax25_sendmsg() - dev: Defer free of skbs in flush_backlog - drivers/net/wan/x25_asy: Fix to make it work - net-sysfs: add a newline when printing 'tx_timeout' by sysfs - net: udp: Fix wrong clean up for IS_UDPLITE macro - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA - AX.25: Prevent integer overflows in connect and sendmsg - ip6_gre: fix null-ptr-deref in ip6gre_init_net() - rtnetlink: Fix memory(net_device) leak when ->newlink fails - tcp: allow at most one TLP probe per flight - regmap: debugfs: check count when read regmap file - qrtr: orphan socket in qrtr_release() - sctp: shrink stream outq only when new outcnt < old outcnt - sctp: shrink stream outq when fails to do addstream reconf - crypto: ccp - Release all allocated memory if sha type is invalid - media: rc: prevent memory leak in cx23888_ir_probe - iio: imu: adis16400: fix memory leak - ath9k_htc: release allocated buffer if timed out - ath9k: release allocated buffer if timed out - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge - wireless: Use offsetof instead of custom macro. - ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() - drm: hold gem reference until object is no longer accessed - f2fs: check memory boundary by insane namelen - f2fs: check if file namelen exceeds max value - 9p/trans_fd: abort p9_read_work if req status changed - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work - x86/build/lto: Fix truncated .bss with -fdata-sections - rds: Prevent kernel-infoleak in rds_notify_queue_get() - xfs: fix missed wakeup on l_flush_wait - net/x25: Fix x25_neigh refcnt leak when x25 disconnect - net/x25: Fix null-ptr-deref in x25_disconnect - selftests/net: rxtimestamp: fix clang issues for target arch PowerPC - sh: Fix validation of system call number - net: lan78xx: add missing endpoint sanity check - net: lan78xx: fix transfer-buffer memory leak - mlx4: disable device on shutdown - mlxsw: core: Increase scope of RCU read-side critical section - mlxsw: core: Free EMAD transactions using kfree_rcu() - ibmvnic: Fix IRQ mapping disposal in error path - bpf: Fix map leak in HASH_OF_MAPS map - mac80211: mesh: Free ie data when leaving mesh - mac80211: mesh: Free pending skb when destroying a mpath - arm64/alternatives: move length validation inside the subsection - arm64: csum: Fix handling of bad packets - usb: hso: Fix debug compile warning on sparc32 - qed: Disable "MFW indication via attention" SPAM every 5 minutes - nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame - parisc: add support for cmpxchg on u8 pointers - net: ethernet: ravb: exit if re-initialization fails in tx timeout - Revert "i2c: cadence: Fix the hold bit setting" - x86/unwind/orc: Fix ORC for newly forked tasks - cxgb4: add missing release on skb in uld_send() - xen-netfront: fix potential deadlock in xennet_remove() - KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled - x86/i8259: Use printk_deferred() to prevent deadlock - drm/amdgpu: fix multiple memory leaks in acp_hw_init - selftests/net: psock_fanout: fix clang issues for target arch PowerPC - net/mlx5: Verify Hardware supports requested ptp function on a given pin - random32: update the net random state on interrupt and activity - ARM: percpu.h: fix build error - random: fix circular include dependency on arm64 after addition of percpu.h - random32: remove net_rand_state from the latent entropy gcc plugin - random32: move the pseudo-random 32-bit definitions to prandom.h - ext4: fix direct I/O read error -- Kelsey Skunberg <email address hidden> Tue, 08 Sep 2020 19:49:35 -0600
Available diffs
- diff from 4.15.0-1084.92 to 4.15.0-1087.95 (3.3 MiB)
- diff from 4.15.0-1086.94 to 4.15.0-1087.95 (3.3 MiB)
| 1 → 75 of 255 results | First • Previous • Next • Last |
