-
linux-iot (5.4.0-1043.44) focal; urgency=medium
* focal/linux-iot: 5.4.0-1043.44 -proposed tracker (LP: #2075943)
[ Ubuntu: 5.4.0-195.215 ]
* focal/linux: 5.4.0-195.215 -proposed tracker (LP: #2075954)
* Focal update: v5.4.280 upstream stable release (LP: #2075175)
- Compiler Attributes: Add __uninitialized macro
- drm/lima: fix shared irq handling on driver remove
- media: dvb: as102-fe: Fix as10x_register_addr packing
- media: dvb-usb: dib0700_devices: Add missing release_firmware()
- IB/core: Implement a limit on UMAD receive List
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- drm/amdgpu: Initialize timestamp for some legacy SOCs
- drm/amd/display: Skip finding free audio for unknown engine_id
- media: dw2102: Don't translate i2c read into write
- sctp: prefer struct_size over open coded arithmetic
- firmware: dmi: Stop decoding on broken entry
- Input: ff-core - prefer struct_size over open coded arithmetic
- net: dsa: mv88e6xxx: Correct check for empty list
- media: dvb-frontends: tda18271c2dd: Remove casting during div
- media: s2255: Use refcount_t instead of atomic_t for num_channels
- media: dvb-frontends: tda10048: Fix integer overflow
- i2c: i801: Annotate apanel_addr as __ro_after_init
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
- orangefs: fix out-of-bounds fsid access
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
- jffs2: Fix potential illegal address access in jffs2_free_inode
- s390/pkey: Wipe sensitive data on failure
- tcp: tcp_mark_head_lost is only valid for sack-tcp
- tcp: add ece_ack flag to reno sack functions
- net: tcp better handling of reordering then loss cases
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
- tcp_metrics: validate source addr length
- wifi: wilc1000: fix ies_len type in connect path
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- selftests: fix OOM in msg_zerocopy selftest
- selftests: make order checking verbose in msg_zerocopy selftest
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- nilfs2: fix inode number range checks
- nilfs2: add missing check for inode numbers on directory entries
- mm: optimize the redundant loop of mm_update_owner_next()
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
- fsnotify: Do not generate events for O_PATH file descriptors
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(),
again"
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- drm/amdgpu/atomfirmware: silence UBSAN warning
- media: dw2102: fix a potential buffer overflow
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
- nvme-multipath: find NUMA path only for online numa-node
- nilfs2: fix incorrect inode allocation from reserved inodes
- filelock: fix potential use-after-free in posix_lock_inode
- fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
- vfs: don't mod negative dentry count when on shrinker list
- tcp: add TCP_INFO status for failed client TFO
- tcp: fix incorrect undo caused by DSACK of TLP retransmit
- octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
- net: lantiq_etop: add blank line after declaration
- net: ethernet: lantiq_etop: fix double free in detach
- ppp: reject claimed-as-LCP but actually malformed packets
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- s390: Mark psw in __load_psw_mask() as __unitialized
- ARM: davinci: Convert comma to semicolon
- octeontx2-af: fix detection of IP layer
- USB: serial: option: add Telit generic core-dump composition
- USB: serial: option: add Telit FN912 rmnet compositions
- USB: serial: option: add Fibocom FM350-GL
- USB: serial: option: add support for Foxconn T99W651
- USB: serial: option: add Netprisma LCUK54 series modules
- USB: serial: option: add Rolling RW350-GL variants
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
- hpet: Support 32-bit userspace
- nvmem: meson-efuse: Fix return value of nvmem callbacks
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
- libceph: fix race between delayed_work() and ceph_monc_stop()
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- tcp: refactor tcp_retransmit_timer()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- tcp: avoid too many retransmit packets
- nilfs2: fix kernel bug on rename operation of broken directory
- i2c: rcar: bring hardware to known state when probing
- Linux 5.4.280
* [SRU] UBSAN warnings in bnx2x kernel driver (LP: #2074215) // Focal update:
v5.4.280 upstream stable release (LP: #2075175)
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
* Focal update: v5.4.279 upstream stable release (LP: #2073621)
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- wifi: cfg80211: pmsr: use correct nla_get_uX functions
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- vxlan: Fix regression when dropping packets due to invalid src addresses
- tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
- net/mlx5: Stop waiting for PCI if pci channel is offline
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- ptp: Fix error message on failed pin verification
- af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
- af_unix: Annotate data-races around sk->sk_state in unix_write_space() and
poll().
- af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
- af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
- af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
- af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
- af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
- af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- ASoC: ti: davinci-mcasp: remove redundant assignment to variable ret
- ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params
- ASoC: ti: davinci-mcasp: Use platform_get_irq_byname_optional
- ASoC: ti: davinci-mcasp: Remove legacy dma_request parsing
- ASoC: ti: davinci-mcasp: Simplify the configuration parameter handling
- ASoC: ti: davinci-mcasp: Handle missing required DT properties
- ASoC: ti: davinci-mcasp: Fix race condition during probe
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation
- serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
- selftests/mm: conform test to TAP format output
- selftests/mm: compaction_test: fix bogus test success on Aarch64
- nilfs2: Remove check for PageError
- nilfs2: return the mapped address from nilfs_get_page()
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- mei: me: release irq in mei_me_pci_resume error path
- jfs: xattr: fix buffer overflow for invalid xattr
- xhci: Set correct transferred length for cancelled bulk transfers
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- Input: try trimming too long modalias strings
- SUNRPC: return proper error from gss_wrap_req_priv
- gpio: tqmx86: fix typo in Kconfig label
- HID: core: remove unnecessary WARN_ON() in implement()
- iommu/amd: Fix sysfs leak in iommu init
- iommu: Return right value in iommu_sva_bind_device()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- drm/komeda: check for error-valued pointer
- drm/bridge/panel: Fix runtime warning on panel bridge release
- tcp: fix race in tcp_v6_syn_recv_sock()
- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN)
packets
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set
type
- net/ipv6: Fix the RT cache flush via sysctl using a previous delay
- ionic: fix use after netif_napi_del()
- drivers: core: synchronize really_probe() and dev_uevent()
- drm/exynos/vidi: fix memory leak in .get_modes()
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
- tracing/selftests: Fix kprobe event name test for .isra. functions
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- fs/proc: fix softlockup in __read_vmcore
- ocfs2: use coarse time for new created files
- ocfs2: fix races between hole punching and AIO+DIO
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
- dmaengine: axi-dmac: fix possible race in remove()
- intel_th: pci: Add Granite Rapids support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Meteor Lake-S support
- intel_th: pci: Add Lunar Lake support
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- tick/nohz_full: Don't abuse smp_call_function_single() in
tick_setup_device()
- hv_utils: drain the timesync packets on onchannelcallback
- hugetlb_encode.h: fix undefined behaviour (34 << 26)
- greybus: Fix use-after-free bug in gb_interface_release due to race
condition.
- usb-storage: alauda: Check whether the media is initialized
- i2c: at91: Fix the functionality flags of the slave-only interface
- rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
- selftests/bpf: Prevent client connect before server bind in
test_tc_tunnel.sh
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- drop_monitor: replace spin_lock by raw_spin_lock
- scsi: qedi: Fix crash while reading debugfs attribute
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
- powerpc/pseries: Enforce hcall result buffer validity and size
- powerpc/io: Avoid clang null pointer arithmetic warnings
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002
- udf: udftime: prevent overflow in udf_disk_stamp_to_time()
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
- MIPS: Octeon: Add PCIe link status check
- MIPS: Routerboard 532: Fix vendor retry check code
- mips: bmips: BCM6358: make sure CBR is correctly set
- cipso: fix total option length computation
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ipv6: prevent possible NULL dereference in rt6_probe()
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- netns: Make get_net_ns() handle zero refcount net
- net/sched: act_api: rely on rcu in tcf_idr_check_alloc
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- virtio_net: checksum offloading handling fix
- netfilter: ipset: Fix suspicious rcu_dereference_protected()
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
- regulator: core: Fix modpost error "regulator_get_regmap" undefined
- dmaengine: ioatdma: Fix missing kmem_cache_destroy()
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is
fine."
- drm/radeon: fix UBSAN warning in kv_dpm.c
- gcov: add support for GCC 14
- i2c: ocores: set IACK bit after core is enabled
- ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
- ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
- ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
- arm64: dts: qcom: qcs404: fix bluetooth device address
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
- Revert "kheaders: substituting --sort in archive creation"
- kheaders: explicitly define file modes for archived headers
- perf/core: Fix missing wakeup when waiting for context reference
- PCI: Add PCI_ERROR_RESPONSE and related definitions
- x86/amd_nb: Check for invalid SMN reads
- iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock
- iio: dac: ad5592r: un-indent code-block for scale read
- iio: dac: ad5592r: fix temperature channel scaling value
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- netfilter: nf_tables: validate family when identifying table via handle
- ASoC: fsl-asoc-card: set priv->pdev before using it
- net: dsa: microchip: fix initial port flush problem
- net: phy: mchp: Add support for LAN8814 QUAD PHY
- net: phy: micrel: add Microchip KSZ 9477 to the device table
- sparc: fix old compat_sys_select()
- parisc: use correct compat recv/recvfrom syscalls
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data
registers
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- mtd: partitions: redboot: Added conversion of operands to a larger type
- net/iucv: Avoid explicit cpumask var allocation on stack
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- ALSA: emux: improve patch ioctl data validation
- media: dvbdev: Initialize sbuf
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
- nvme: fixup comment for nvme RDMA Provider Type
- gpio: davinci: Validate the obtained number of IRQs
- x86: stop playing stack games in profile_pc()
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
- mmc: sdhci: Do not invert write-protect twice
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
- iio: adc: ad7266: Fix variable checking bug
- iio: chemical: bme680: Fix pressure value output
- iio: chemical: bme680: Fix calibration data variable
- iio: chemical: bme680: Fix overflows in compensate() functions
- iio: chemical: bme680: Fix sensor data read operation
- net: usb: ax88179_178a: improve link status logs
- usb: gadget: printer: SS+ support
- usb: musb: da8xx: fix a resource leak in probe()
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- tty: mcf: MCF54418 has 10 UARTS
- net: can: j1939: Initialize unused data in j1939_send_one()
- net: can: j1939: recover socket queue on CAN bus error during BAM
transmission
- net: can: j1939: enhanced error handling for tightly received RTS messages
in xtp_rx_rts_session_new
- csky, hexagon: fix broken sys_sync_file_range
- hexagon: fix fadvise64_64 calling conventions
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- batman-adv: Don't accept TT entries for out-of-spec VIDs
- ata: libata-core: Fix double free on error
- ftruncate: pass a signed offset
- mtd: spinand: macronix: Add support for serial NAND flash
- pwm: stm32: Refuse too small period requests
- nfs: Leave pages in the pagecache if readpage failed
- ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
- arm64: dts: rockchip: Add sound-dai-cells for RK3368
- Linux 5.4.279
* CVE-2024-26921
- skbuff: introduce skb_expand_head()
- skb_expand_head() adjust skb->truesize incorrectly
- inet: inet_defrag: prevent sk release while still in use
* CVE-2024-26929
- scsi: qla2xxx: Fix double free of fcport
* CVE-2024-39484
- mmc: davinci: Don't strip remove function when driver is builtin
* CVE-2024-36901
- ipv6: prevent NULL dereference in ip6_output()
* CVE-2024-26830
- i40e: Refactoring VF MAC filters counting to make more reliable
- i40e: Fix MAC address setting for a VF via Host/VM
- i40e: Do not allow untrusted VF to remove administratively set MAC
* CVE-2024-24860
- Bluetooth: Fix atomicity violation in {min, max}_key_size_set
* CVE-2023-52760
- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
* CVE-2024-2201
- [Config] Set SPECTRE_BHI_ON=y
* CVE-2023-52629
- sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
* CVE-2021-46926
- ALSA: hda: intel-sdw-acpi: harden detection of controller
-- Hannah Peuckmann <email address hidden> Wed, 14 Aug 2024 14:40:41 +0200
-
linux-iot (5.4.0-1042.43) focal; urgency=medium
* focal/linux-iot: 5.4.0-1042.43 -proposed tracker (LP: #2072294)
[ Ubuntu: 5.4.0-192.212 ]
* focal/linux: 5.4.0-192.212 -proposed tracker (LP: #2072305)
* Focal update: v5.4.278 upstream stable release (LP: #2071668)
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- ring-buffer: Fix a race between readers and resize checks
- net: smc91x: Fix m68k kernel compilation for ColdFire CPU
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt
class
- net: usb: qmi_wwan: add Telit FN920C04 compositions
- drm/amd/display: Set color_mgmt_changed to true on unsuspend
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
- ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
- ASoC: da7219-aad: fix usage of device_get_named_child_node()
- drm/amdkfd: Flush the process wq before creating a kfd_process
- nvme: find numa distance only if controller has valid numa id
- openpromfs: finish conversion to the new mount API
- crypto: bcm - Fix pointer arithmetic
- firmware: raspberrypi: Use correct device for DMA mappings
- ecryptfs: Fix buffer size for tag 66 packet
- nilfs2: fix out-of-range warning
- parisc: add missing export of __cmpxchg_u8()
- crypto: ccp - drop platform ifdef checks
- s390/cio: fix tracepoint subchannel type field
- jffs2: prevent xattr node from overflowing the eraseblock
- null_blk: Fix missing mutex_destroy() at module removal
- md: fix resync softlockup when bitmap size is less than array size
- wifi: ath10k: poll service ready message before failing
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- qed: avoid truncating work queue length
- scsi: ufs: qcom: Perform read back after writing reset bit
- scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
- scsi: ufs: core: Perform read back after disabling interrupts
- scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
- irqchip/alpine-msi: Fix off-by-one in allocation error path
- ACPI: disable -Wstringop-truncation
- cpufreq: Reorganize checks in cpufreq_offline()
- cpufreq: Split cpufreq_offline()
- cpufreq: Rearrange locking in cpufreq_remove_dev()
- cpufreq: exit() callback is optional
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: hpsa: Fix allocation size for Scsi_Host private data
- x86/purgatory: Switch to the position-independent small code model
- wifi: ath10k: Fix an error code problem in
ath10k_dbg_sta_write_peer_debug_trigger()
- wifi: ath10k: populate board data for WCN3990
- tcp: minor optimization in tcp_add_backlog()
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
- tcp: avoid premature drops in tcp_add_backlog()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid
context"
- wifi: carl9170: add a proper sanity check for endpoints
- wifi: ar5523: enable proper endpoint verification
- sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
- Revert "sh: Handle calling csum_partial with misaligned data"
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
- scsi: bfa: Ensure the copied buf is NUL terminated
- scsi: qedf: Ensure the copied buf is NUL terminated
- wifi: mwl8k: initialize cmd->addr[] properly
- usb: aqc111: stop lying about skb->truesize
- net: usb: sr9700: stop lying about skb->truesize
- m68k: Fix spinlock race in kernel thread creation
- m68k: mac: Fix reboot hang on Mac IIci
- net: ethernet: cortina: Locking fixes
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- net: usb: smsc95xx: stop lying about skb->truesize
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- ipv6: sr: add missing seg6_local_exit
- ipv6: sr: fix incorrect unregister order
- ipv6: sr: fix invalid unregister error path
- drm/amd/display: Fix potential index out of bounds in color transformation
function
- mtd: rawnand: hynix: fixed typo
- fbdev: shmobile: fix snprintf truncation
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- powerpc/fsl-soc: hide unused const variable
- fbdev: sisfb: hide unused variables
- media: ngene: Add dvb_ca_en50221_init return value check
- media: radio-shark2: Avoid led_names truncations
- platform/x86: wmi: Make two functions static
- fbdev: sh7760fb: allow modular build
- drm/arm/malidp: fix a possible null pointer dereference
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
- RDMA/hns: Use complete parentheses in macros
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
- ext4: avoid excessive credit estimate in ext4_tmpfile()
- sunrpc: removed redundant procp check
- SUNRPC: Fix gss_free_in_token_pages()
- selftests/kcmp: Make the test output consistent and clear
- selftests/kcmp: remove unused open mode
- RDMA/IPoIB: Fix format truncation compilation errors
- netrom: fix possible dead-lock in nr_rt_ioctl()
- af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
- sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax
- sched/fair: Allow disabling sched_balance_newidle with
sched_relax_domain_level
- greybus: lights: check return of get_channel_from_mode
- soundwire: cadence/intel: simplify PDI/port mapping
- soundwire: intel: don't filter out PDI0/1
- soundwire: cadence_master: improve PDI allocation
- soundwire: cadence: fix invalid PDI offset
- dmaengine: idma64: Add check for dma_set_max_seg_size
- firmware: dmi-id: add a release callback function
- serial: max3100: Lock port->lock when calling uart_handle_cts_change()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Fix bitwise types
- greybus: arche-ctrl: move device table to its right location
- iio: pressure: dps310: support negative temperature values
- microblaze: Remove gcc flag for non existing early_printk.c file
- microblaze: Remove early printk call from cpuinfo-static.c
- usb: gadget: u_audio: Clear uac pointer when freed.
- stm class: Fix a double free in stm_register_device()
- ppdev: Remove usage of the deprecated ida_simple_xx() API
- ppdev: Add an error check in register_device
- extcon: max8997: select IRQ_DOMAIN instead of depending on it
- f2fs: fix to release node block count in error path of f2fs_new_node_page()
- serial: sh-sci: protect invalidating RXDMA on shutdown
- libsubcmd: Fix parse-options memory leak
- Input: ims-pcu - fix printf string overflow
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
- drm/msm/dpu: Always flush the slave INTF on the CTL
- um: Fix return value in ubd_init()
- um: Add winch to winch_handlers before registering winch IRQ
- media: stk1160: fix bounds checking in stk1160_copy_video()
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy()
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
- um: Fix the -Wmissing-prototypes warning for __switch_mm
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
- media: cec: cec-api: add locking in cec_release()
- null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when
UNWINDER_FRAME_POINTER=y
- [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS
- nfc: nci: Fix uninit-value in nci_rx_work
- sunrpc: fix NFSACL RPC retry on soft mount
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- params: lift param_set_uint_minmax to common code
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- openvswitch: Set the skbuff pkt_type for proper pmtud support.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- net: fec: avoid lock evasion when reading pps_enable
- nfc: nci: Fix kcov check in nci_rx_work()
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in
instance_destroy_rcu()
- spi: Don't mark message DMA mapped when no transfer in it is
- nvmet: fix ns enable/disable possible hang
- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer
exhaustion
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- enic: Validate length of nl attributes in enic_set_vf_port
- smsc95xx: remove redundant function arguments
- smsc95xx: use usbnet->driver_priv
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
- net:fec: Add fec_enet_deinit()
- netfilter: tproxy: bail out if IP has been disabled on the device
- kconfig: fix comparison to constant symbols, 'm', 'n'
- spi: stm32: Don't warn about spurious interrupts
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- ALSA: timer: Set lower bound of start tick time
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
- binder: fix max_thread type inconsistency
- mmc: core: Do not force a retune before RPMB switch
- io_uring: fail NOP if non-zero op flags is passed in
- afs: Don't cross .backup mountpoint from backup volume
- nilfs2: fix use-after-free of timer for log writer thread
- vxlan: Fix regression when dropping packets due to invalid src addresses
- x86/mm: Remove broken vsyscall emulation code from the page fault code
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- media: lgdt3306a: Add a check against null-pointer-def
- drm/amdgpu: add error handle to avoid out-of-bounds
- ata: pata_legacy: make legacy_exit() work again
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
- arm64: tegra: Correct Tegra132 I2C alias
- md/raid5: fix deadlock that raid5d() wait for itself to clear
MD_SB_CHANGE_PENDING
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
- arm64: dts: hi3798cv200: fix the size of GICR
- media: mc: mark the media devnode as registered from the, start
- media: mxl5xx: Move xpt structures off stack
- media: v4l2-core: hold videodev_lock until dev reg, finishes
- fbdev: savage: Handle err return when savagefb_check_var failed
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
- crypto: ecrdsa - Fix module auto-load on add_key
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
- net/ipv6: Fix route deleting failure when metric equals 0
- net/9p: fix uninit-value in p9_client_rpc()
- intel_th: pci: Add Meteor Lake-S CPU support
- sparc64: Fix number of online CPUs
- kdb: Fix buffer overflow during tab-complete
- kdb: Use format-strings rather than '\0' injection in kdb_read()
- kdb: Fix console handling when editing and tab-completing commands
- kdb: Merge identical case statements in kdb_read()
- kdb: Use format-specifiers rather than memset() for padding in kdb_read()
- net: fix __dst_negative_advice() race
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- sparc: move struct termio to asm/termios.h
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- s390/ap: Fix crash in AP internal function modify_bitmap()
- nfs: fix undefined behavior in nfs_block_bits()
- Linux 5.4.278
* CVE-2024-27019
- netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
* CVE-2024-26886
- Bluetooth: af_bluetooth: Fix deadlock
* CVE-2023-52752
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
* CVE-2022-48674
- erofs: fix pcluster use-after-free on UP platforms
* Focal update: v5.4.277 upstream stable release (LP: #2070179)
- pinctrl: core: handle radix_tree_insert() errors in
pinctrl_register_one_pin()
- ext4: fix bug_on in __es_tree_search
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
- Revert "net: bcmgenet: use RGMII loopback for MAC reset"
- net: bcmgenet: keep MAC in reset until PHY is up
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- net: bcmgenet: synchronize UMAC_CMD access
- smb: client: fix potential OOBs in smb2_parse_contexts()
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- drm/amdgpu: Fix possible NULL dereference in
amdgpu_ras_query_error_status_helper()
- usb: typec: ucsi: displayport: Fix potential deadlock
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- docs: kernel_include.py: Cope with docutils 0.21
- Linux 5.4.277
* Focal update: v5.4.276 upstream stable release (LP: #2069758)
- dmaengine: pl330: issue_pending waits until WFP state
- dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
- wifi: nl80211: don't free NULL coalescing rule
- pinctrl: core: delete incorrect free in pinctrl_enable()
- pinctrl: mediatek: Check gpio pin number and use binary search in
mtk_hw_pin_field_lookup()
- pinctrl: mediatek: Supporting driving setting without mapping current to
register value
- pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set()
- pinctrl: mediatek: Refine mtk_pinconf_get()
- pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull
usage
- pinctrl: mediatek: remove shadow variable declaration
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback
- pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic
- pinctrl: mediatek: paris: Rework support for
PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- nfs: make the rpc_stat per net namespace
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- power: rt9455: hide unused rt9455_boost_voltage_values
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- s390/mm: Fix storage key clearing for guest huge pages
- s390/mm: Fix clearing storage keys for huge pages
- bna: ensure the copied buf is NUL terminated
- nsh: Restore skb->{protocol,data,mac_header} for outer header in
nsh_gso_segment().
- net l2tp: drop flow hash on forward
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: dsa: mv88e6xxx: Add number of MACs in the ATU
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- net: bridge: fix multicast-to-unicast with fraglist GSO
- tipc: fix a possible memleak in tipc_buf_append
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- gfs2: Fix invalid metadata access in punch_hole
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- net: mark racy access on sk->sk_rcvbuf
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- ALSA: line6: Zero-initialize message buffers
- net: bcmgenet: Reset RBUF on first open
- ata: sata_gemini: Check clk_enable() result
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- tools/power turbostat: Fix added raw MSR output
- tools/power turbostat: Fix Bzy_MHz documentation typo
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- btrfs: always clear PERTRANS metadata during commit
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- gpu: host1x: Do not setup DMA for virtual devices
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- fs/9p: only translate RWX permissions for plain 9P2000
- fs/9p: translate O_TRUNC into OTRUNC
- 9p: explicitly deny setlease attempts
- gpio: wcove: Use -ENOTSUPP consistently
- gpio: crystalcove: Use -ENOTSUPP consistently
- clk: Don't hold prepare_lock when calling kref_put()
- fs/9p: drop inodes immediately on non-.L too
- net:usb:qmi_wwan: support Rolling modules
- pinctrl: mediatek: Fix fallback call path
- xfrm: Preserve vlan tags for transport mode software GRO
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- phonet: fix rtm_phonet_notify() skb allocation
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- net: qede: use return from qede_parse_flow_attr() for flower
- firewire: nosy: ensure user_length is taken into account when fetching
packet contents
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- tipc: fix UAF in error path
- dyndbg: fix old BUG_ON in >control parser
- drm/vmwgfx: Fix invalid reads in fence signaled events
- net: fix out-of-bounds access in ops_init
- regulator: core: fix debugfs creation regression
- pinctrl: mediatek: Fix fallback behavior for bias_set_combo
- pinctrl: mediatek: Fix some off by one bugs
- pinctrl: mediatek: remove set but not used variable 'e'
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
- Linux 5.4.276
* Freezing user space processes failed after 20.008 seconds (1 tasks refusing
to freeze, wq_busy=0) (LP: #2061091)
- ALSA: Fix deadlocks with kctl removals at disconnection
* CVE-2024-36016
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
* CVE-2022-48655
- firmware: arm_scmi: Harden accesses to the reset domains
* CVE-2024-26907
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
* CVE-2024-26585
- tls: fix race between tx work scheduling and socket close
* CVE-2024-26584
- net: tls: handle backlogging of crypto requests
* CVE-2024-26583
- net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
- net/tls: Fix use-after-free after the TLS device goes down and up
- tls: splice_read: fix record type check
- tls splice: remove inappropriate flags checking for MSG_PEEK
- tls: splice_read: fix accessing pre-processed records
- tls: Fix context leak on tls_device_down
- net/tls: Check for errors in tls_device_init
- net/tls: Remove the context from the list in tls_device_down
- net/tls: pass context to tls_device_decrypted()
- net/tls: Perform immediate device ctx cleanup when possible
- net/tls: Multi-threaded calls to TX tls_dev_del
- net: tls: avoid discarding data on record close
- tls: rx: don't store the record type in socket context
- tls: rx: don't store the decryption status in socket context
- tls: rx: don't issue wake ups when data is decrypted
- tls: rx: refactor decrypt_skb_update()
- tls: hw: rx: use return value of tls_device_decrypted() to carry status
- tls: rx: drop unnecessary arguments from tls_setup_from_iter()
- tls: rx: don't report text length from the bowels of decrypt
- tls: rx: wrap decryption arguments in a structure
- tls: rx: factor out writing ContentType to cmsg
- tls: rx: don't track the async count
- tls: rx: assume crypto always calls our callback
- tls: rx: use async as an in-out argument
- tls: decrement decrypt_pending if no async completion will be called
- net: tls: fix async vs NIC crypto offload
- tls: rx: simplify async wait
- tls: extract context alloc/initialization out of tls_set_sw_offload
- net: tls: factor out tls_*crypt_async_wait()
- tls: fix race between async notify and socket close
-- Hannah Peuckmann <email address hidden> Wed, 17 Jul 2024 09:58:09 +0200
-
linux-iot (5.4.0-1041.42) focal; urgency=medium
* focal/linux-iot: 5.4.0-1041.42 -proposed tracker (LP: #2072097)
[ Ubuntu: 5.4.0-190.210 ]
* focal/linux: 5.4.0-190.210 -proposed tracker (LP: #2072108)
* CVE-2024-36016
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
* CVE-2022-48655
- firmware: arm_scmi: Harden accesses to the reset domains
* CVE-2024-26907
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
* CVE-2024-26585
- tls: fix race between tx work scheduling and socket close
* CVE-2024-26584
- net: tls: handle backlogging of crypto requests
* CVE-2024-26583
- net/tls: Replace TLS_RX_SYNC_RUNNING with RCU
- net/tls: Fix use-after-free after the TLS device goes down and up
- tls: splice_read: fix record type check
- tls splice: remove inappropriate flags checking for MSG_PEEK
- tls: splice_read: fix accessing pre-processed records
- tls: Fix context leak on tls_device_down
- net/tls: Check for errors in tls_device_init
- net/tls: Remove the context from the list in tls_device_down
- net/tls: pass context to tls_device_decrypted()
- net/tls: Perform immediate device ctx cleanup when possible
- net/tls: Multi-threaded calls to TX tls_dev_del
- net: tls: avoid discarding data on record close
- tls: rx: don't store the record type in socket context
- tls: rx: don't store the decryption status in socket context
- tls: rx: don't issue wake ups when data is decrypted
- tls: rx: refactor decrypt_skb_update()
- tls: hw: rx: use return value of tls_device_decrypted() to carry status
- tls: rx: drop unnecessary arguments from tls_setup_from_iter()
- tls: rx: don't report text length from the bowels of decrypt
- tls: rx: wrap decryption arguments in a structure
- tls: rx: factor out writing ContentType to cmsg
- tls: rx: don't track the async count
- tls: rx: assume crypto always calls our callback
- tls: rx: use async as an in-out argument
- tls: decrement decrypt_pending if no async completion will be called
- net: tls: fix async vs NIC crypto offload
- tls: rx: simplify async wait
- tls: extract context alloc/initialization out of tls_set_sw_offload
- net: tls: factor out tls_*crypt_async_wait()
- tls: fix race between async notify and socket close
-- Hannah Peuckmann <email address hidden> Thu, 11 Jul 2024 12:19:24 +0200
-
linux-iot (5.4.0-1040.41) focal; urgency=medium
* focal/linux-iot: 5.4.0-1040.41 -proposed tracker (LP: #2068441)
[ Ubuntu: 5.4.0-189.209 ]
* focal/linux: 5.4.0-189.209 -proposed tracker (LP: #2068454)
* Focal update: v5.4.275 upstream stable release (LP: #2067865)
- batman-adv: Avoid infinite loop trying to resize local TT
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- nouveau: fix function cast warning
- net: openvswitch: fix unwanted error log on timeout policy probing
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- geneve: fix header validation in geneve[6]_xmit_skb
- ipv6: fib: hide unused 'pn' variable
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- net/mlx5: Properly link new fs rules into the tree
- net: ena: Fix potential sign extension issue
- btrfs: qgroup: correctly model root qgroup rsv in convert
- drm/client: Fully protect modes[] with dev->mode_config.mutex
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- selftests: timers: Fix abs() warning in posix_timers test
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- btrfs: record delayed inode root in transaction
- selftests/ftrace: Limit length in subsystem-enable tests
- kprobes: Fix possible use-after-free issue on kprobe registration
- Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- tun: limit printing rate when illegal packet received by tun dev
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- drm: nv04: Fix out of bounds access
- clk: Remove prepare_lock hold assertion in __clk_release()
- clk: Mark 'all_lists' as const
- clk: remove extra empty line
- clk: Print an info line before disabling unused clocks
- clk: Initialize struct clk_core kref earlier
- clk: Get runtime PM before walking tree during disable_unused
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
- comedi: vmk80xx: fix incomplete endpoint checking
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood
- USB: serial: option: add Fibocom FM135-GL variants
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: add Telit FN920C04 rmnet compositions
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- speakup: Avoid crash on very long word
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- nouveau: fix instmem race condition around ptr stores
- nilfs2: fix OOB in nilfs_set_de_type
- KVM: async_pf: Cleanup kvm_setup_async_pf()
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mt2712: add ethernet device node
- arm64: dts: mediatek: mt2712: fix validation errors
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- vxlan: drop packets from invalid src-address
- mlxsw: core: Unregister EMAD trap using FORWARD action
- NFC: trf7970a: disable all regulators on removal
- net: usb: ax88179_178a: stop lying about skb->truesize
- net: gtp: Fix Use-After-Free in gtp_dellink
- ipvs: Fix checksumming on GSO of SCTP packets
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- iavf: Fix TC config comparison with existing adapter TC config
- af_unix: Suppress false-positive lockdep splat for spin_lock() in
__unix_gc().
- serial: core: Provide port lock wrappers
- serial: mxs-auart: add spinlock around changing cts state
- Revert "crypto: api - Disallow identical driver names"
- net/mlx5e: Fix a race in command alloc flow
- tracing: Show size of requested perf buffer
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker
together
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- drm/amdgpu: Fix leak when GPU memory allocation fails
- irqchip/gic-v3-its: Prevent double free on error
- ethernet: Add helper for assigning packet type when dest address does not
match device address
- net: b44: set pause params only when interface is up
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- mtd: diskonchip: work around ubsan link failure
- tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
- dmaengine: owl: fix register access functions
- idma64: Don't try to serve interrupts when device is powered off
- i2c: smbus: fix NULL function pointer dereference
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
- bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
- udp: preserve the connected status if only UDP cmsg
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
- Linux 5.4.275
* Focal update: v5.4.274 upstream stable release (LP: #2067857)
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- Documentation/hw-vuln: Update spectre doc
- x86/cpu: Support AMD Automatic IBRS
- x86/bugs: Use sysfs_emit()
- timers: Update kernel-doc for various functions
- timers: Use del_timer_sync() even on UP
- timers: Rename del_timer_sync() to timer_delete_sync()
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- ARM: dts: mmp2-brownstone: Don't redeclare phandle references
- arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- sparc64: NMI watchdog: fix return value of __setup handler
- sparc: vDSO: fix return value of __setup handler
- crypto: qat - fix double free during reset
- crypto: qat - resolve race condition during AER recovery
- selftests/mqueue: Set timeout to 180 seconds
- ext4: correct best extent lstart adjustment logic
- fat: fix uninitialized field in nostale filehandles
- ubifs: Set page uptodate in the correct place
- ubi: Check for too small LEB size in VTBL code
- ubi: correct the calculation of fastmap size
- mtd: rawnand: meson: fix scrambling mode value in command macro
- parisc: Do not hardcode registers in checksum functions
- parisc: Fix ip_fast_csum
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- PM: suspend: Set mem_sleep_current during kernel command line setup
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- USB: serial: add device ID for VeriFone adapter
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- USB: serial: option: add MeiG Smart SLM320 product
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- fuse: don't unhash root
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- PCI: Drop pci_device_remove() test of pci_dev->driver
- PCI/PM: Drain runtime-idle callbacks before driver removal
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- dm-raid: fix lockdep waring in "pers->hot_add_disk"
- mmc: core: Fix switch on gp3 partition
- hwmon: (amc6821) add of_match table
- ext4: fix corruption during on-line resize
- firmware: meson_sm: Rework driver as a proper platform driver
- nvmem: meson-efuse: fix function pointer type mismatch
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- speakup: Fix 8bit characters from direct synth
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- vfio/platform: Disable virqfds on cleanup
- ring-buffer: Fix resetting of shortest_full
- ring-buffer: Fix full_waiters_pending in poll
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- soc: fsl: qbman: Add helper for sanity checking cgr ops
- soc: fsl: qbman: Add CGR update function
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- s390/zcrypt: fix reference counting on zcrypt card objects
- drm/exynos: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/vc4: hdmi: do not return negative values from .get_modes()
- memtest: use {READ,WRITE}_ONCE in memory scanning
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- nilfs2: use a more common logging style
- nilfs2: prevent kernel bug at submit_bh_wbc()
- x86/CPU/AMD: Update the Zenbleed microcode revisions
- ahci: asm1064: correct count of reported ports
- ahci: asm1064: asm1166: don't limit reported ports
- dm snapshot: fix lockup in dm_exception_table_exit
- comedi: comedi_test: Prevent timers rescheduling during deletion
- netfilter: nf_tables: reject constant set with timeout
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897
platform
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
- usb: gadget: ncm: Fix handling of zero block length packets
- usb: port: Don't try to peer unused USB ports based on location
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
- vt: fix unicode buffer corruption when deleting characters
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
- objtool: is_fentry_call() crashes if call has no destination
- objtool: Add support for intra-function calls
- x86/speculation: Support intra-function call validation
- xen/events: close evtchn after mapping cleanup
- printk: Update @console_may_schedule in console_trylock_spinning()
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack
- Revert "loop: Check for overflow while configuring loop"
- loop: Call loop_config_discard() only after new config is applied
- loop: Remove sector_t truncation checks
- loop: Factor out setting loop device size
- loop: Refactor loop_set_status() size calculation
- loop: Factor out configuring loop from status
- loop: Check for overflow while configuring loop
- loop: loop_set_status_from_info() check before assignment
- perf/core: Fix reentry problem in perf_output_read_group()
- efivarfs: Request at most 512 bytes for variable names
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- bounds: support non-power-of-two CONFIG_NR_CPUS
- vt: fix memory overlapping when deleting chars in the buffer
- mm/memory-failure: fix an incorrect use of tail pages
- mm/migrate: set swap entry values of THP tail pages properly.
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- mmc: core: Initialize mmc_blk_ioc_data
- mmc: core: Avoid negative index with array access
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- scsi: core: Fix unremoved procfs host directory regression
- usb: dwc2: host: Fix remote wakeup from hibernation
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: gadget: LPM flow fix
- usb: udc: remove warning when queue disabled ep
- scsi: qla2xxx: Fix command flush on cable pull
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
- scsi: lpfc: Correct size for wqe for memset()
- USB: core: Fix deadlock in usb_deauthorize_interface()
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
- tcp: properly terminate timers for kernel sockets
- dm integrity: fix out-of-range warning
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- netfilter: nf_tables: disallow timeout for anonymous sets
- net/rds: fix possible cp null dereference
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- vfio/pci: Lock external INTx masking ops
- vfio: Introduce interface to flush virqfd inject workqueue
- vfio/pci: Create persistent INTx handler
- vfio/platform: Create persistent IRQ handlers
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be
mapped."
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL
allocations
- netfilter: nf_tables: flush pending destroy work before exit_net release
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- net/sched: act_skbmod: prevent kernel-infoleak
- net: stmmac: fix rx queue priority assignment
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- ipv6: Fix infinite recursion in fib6_dump_done().
- i40e: fix vf may be used uninitialized in this function warning
- staging: mmal-vchiq: Allocate and free components as required
- staging: mmal-vchiq: Fix client_component for 64 bit kernel
- staging: vc04_services: changen strncpy() to strscpy_pad()
- staging: vc04_services: fix information leak in create_component()
- fs: add a vfs_fchown helper
- fs: add a vfs_fchmod helper
- initramfs: switch initramfs unpacking to struct file based APIs
- init: open /initrd.image with O_LARGEFILE
- erspan: Add type I version 0 support.
- erspan: make sure erspan_base_hdr is present in skb->head
- net: ravb: Always process TX descriptor ring
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- scsi: mylex: Fix sysfs buffer lengths
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with
microphone
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- s390/entry: align system call table on 8 bytes
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- panic: Flush kernel log buffer at the end
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- ionic: set adminq irq affinity
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- btrfs: send: handle path ref underflow in header iterate_inode_ref()
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- sysv: don't call sb_bread() with pointers_lock held
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- isofs: handle CDs with bad root inode but good Joliet root directory
- media: sta2x11: fix irq handler cast
- drm/amd/display: Fix nanosec stat overflow
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned
int
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- block: prevent division by zero in blk_rq_stat_sum()
- Input: allocate keycode for Display refresh rate toggle
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- tools: iio: replace seekdir() in iio_generic_buffer
- usb: typec: tcpci: add generic tcpci fallback compatible
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- netfilter: nf_tables: reject new basechain after table flag update
- netfilter: nf_tables: discard table flag update with pending basechain
deletion
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
- drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
- virtio: reenable config if freezing device failed
- x86/mm/pat: fix VM_PAT handling in COW mappings
- drm/i915/gt: Reset queue_priority_hint on parking
- x86/alternative: Don't call text_poke() in lazy TLB mode
- Bluetooth: btintel: Fixe build regression
- VMCI: Fix possible memcpy() run-time warning in
vmci_datagram_invoke_guest_handler()
- erspan: Check IFLA_GRE_ERSPAN_VER is set.
- ip_gre: do not report erspan version on GRE interface
- firmware: meson_sm: fix to avoid potential NULL pointer dereference
- Linux 5.4.274
* CVE-2024-26586
- mlxsw: spectrum_acl_tcam: Fix stack corruption
* CVE-2024-26923
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
- af_unix: Fix garbage collector racing against connect()
* Focal update: v5.4.273 upstream stable release (LP: #2064561)
- io_uring/unix: drop usage of io_uring socket
- io_uring: drop any code related to SCM_RIGHTS
- selftests: tls: use exact comparison in recv_partial
- ASoC: rt5645: Make LattePanda board DMI match more precise
- x86/xen: Add some null pointer checking to smp.c
- MIPS: Clear Cause.BD in instruction_pointer_set
- HID: multitouch: Add required quirk for Synaptics 0xcddc device
- RDMA/mlx5: Relax DEVX access upon modify commands
- net/iucv: fix the allocation size of iucv_path_table array
- parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
- block: sed-opal: handle empty atoms when parsing response
- dm-verity, dm-crypt: align "struct bvec_iter" correctly
- btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
- firewire: core: use long bus reset on gap count error
- ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
- Input: gpio_keys_polled - suppress deferred probe error for gpio
- ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
- ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
- ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- fs/select: rework stack allocation hack for clang
- timekeeping: Fix cross-timestamp interpolation on counter wrap
- timekeeping: Fix cross-timestamp interpolation corner case decision
- timekeeping: Fix cross-timestamp interpolation for non-x86
- wifi: ath10k: fix NULL pointer dereference in
ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- b43: dma: Fix use true/false for bool type variable
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
- b43: main: Fix use true/false for bool type
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled
- wifi: b43: Disable QoS for bcm4331
- wifi: wilc1000: fix declarations ordering
- wifi: wilc1000: fix RCU usage in connect path
- wifi: mwifiex: debugfs: Drop unnecessary error check for
debugfs_create_dir()
- sock_diag: annotate data-races around sock_diag_handlers[family]
- af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
- net: blackhole_dev: fix build warning for ethh set but not used
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
- bpf: Add typecast to bpf helpers to help BTF generation
- bpf: Factor out bpf_spin_lock into helpers.
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
- arm64: dts: qcom: db820c: Move non-soc entries out of /soc
- arm64: dts: qcom: msm8996: Use node references in db820c
- arm64: dts: qcom: msm8996: Move regulator consumers to db820c
- arm64: dts: qcom: msm8996: Pad addresses
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- bus: tegra-aconnect: Update dependency to ARCH_TEGRA
- [Config]: Update tegra configs
- iommu/amd: Mark interrupt as managed
- wifi: brcmsmac: avoid function pointer casts
- net: ena: Remove ena_select_queue
- ARM: dts: arm: realview: Fix development chip ROM compatible value
- ARM: dts: imx6dl-yapp4: Move phy reset into switch node
- ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
- ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
- ACPI: scan: Fix device check notification handling
- x86, relocs: Ignore relocations in .notes section
- SUNRPC: fix some memleaks in gssx_dec_option_array
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove
function
- igb: move PEROUT and EXTTS isr logic to separate functions
- igb: Fix missing time sync events
- Bluetooth: Remove superfluous call to hci_conn_check_pending()
- sr9800: Add check for usbnet_get_endpoints
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix stackmap overflow check on 32-bit arches
- ipv6: fib6_rules: flush route cache when rule is changed
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- net: hns3: fix port duplex configure error in IMP reset
- tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
- l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt()
function
- udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
- net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function
- nfp: flower: handle acti_netdevs allocation failure
- dm raid: fix false positive for requeue needed during reshape
- dm: call the resume method on internal suspend
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- gpu: host1x: mipi: Update tegra_mipi_request() to be node based
- drm/tegra: dsi: Make use of the helper function dev_err_probe()
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path
of tegra_dsi_probe()
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths
of tegra_output_probe()
- drm/rockchip: inno_hdmi: Fix video timing
- drm: Don't treat 0 as -1 in drm_fixp2int_ceil
- drm/rockchip: lvds: do not overwrite error code
- dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
- media: tc358743: register v4l2 async device only after successful setup
- PCI/DPC: Print all TLP Prefixes, not just the first
- perf record: Fix possible incorrect free in record__switch_output()
- drm/amd/display: Fix potential NULL pointer dereferences in
'dcn10_set_output_transfer_func()'
- perf evsel: Fix duplicate initialization of data->id in
evsel__parse_sample()
- media: em28xx: annotate unchecked call to media_device_register()
- media: v4l2-tpg: fix some memleaks in tpg_alloc
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
- media: edia: dvbdev: fix a use-after-free
- clk: qcom: reset: Allow specifying custom reset delay
- clk: qcom: reset: support resetting multiple bits
- clk: qcom: reset: Commonize the de/assert functions
- clk: qcom: reset: Ensure write completion on reset de/assertion
- quota: simplify drop_dquot_ref()
- quota: Fix potential NULL pointer dereference
- quota: Fix rcu annotations of inode dquot pointers
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
- ALSA: seq: fix function cast warnings
- perf stat: Avoid metric-only segv
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
- media: go7007: add check of return value of go7007_read_addr()
- media: pvrusb2: remove redundant NULL check
- media: pvrusb2: fix pvr2_stream_callback casts
- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
- PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
- clk: hisilicon: hi3519: Release the correct number of gates in
hi3519_clk_unregister()
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a
ref
- crypto: arm/sha - fix function cast warnings
- mtd: maps: physmap-core: fix flash size larger than 32-bit
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
- ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: dvb-frontends: avoid stack overflow warnings with clang
- media: go7007: fix a memleak in go7007_load_encoder
- media: v4l2-core: correctly validate video and metadata ioctls
- media: rename VFL_TYPE_GRABBER to _VIDEO
- media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO
- media: ttpci: fix two memleaks in budget_av_attach
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
- drm/msm/dpu: add division of drm_display_mode's hskew parameter
- powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
- backlight: lm3630a: Initialize backlight_properties on init
- backlight: lm3630a: Don't set bl->props.brightness in get_brightness
- backlight: da9052: Fully initialize backlight_properties during probe
- backlight: lm3639: Fully initialize backlight_properties during probe
- backlight: lp8788: Fully initialize backlight_properties during probe
- sparc32: Fix section mismatch in leon_pci_grpci
- clk: Fix clk_core_get NULL dereference
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- scsi: csiostor: Avoid function pointer casts
- RDMA/device: Fix a race between mad_client and cm_client init
- scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
- watchdog: stm32_iwdg: initialize default timeout
- NFS: Fix an off by one in root_nfs_cat()
- afs: Revert "afs: Hide silly-rename files from userspace"
- tty: vt: fix 20 vs 0x20 typo in EScsiignore
- serial: max310x: fix syntax error in IRQ error message
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
- kconfig: fix infinite loop when expanding a macro at the end of file
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it
- serial: 8250_exar: Don't remove GPIO device on suspend
- staging: greybus: fix get_channel_from_mode() failure path
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
- octeontx2-af: Use matching wake_up API variant in CGX command interface
- s390/vtime: fix average steal time calculation
- hsr: Fix uninit-value access in hsr_get_node()
- packet: annotate data-races around ignore_outgoing
- rds: introduce acquire/release ordering in acquire/release_in_xmit()
- hsr: Handle failures in module init
- net/bnx2x: Prevent access to a freed page in page_pool
- octeontx2-af: Use separate handlers for interrupts
- ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and
vcc1v2
- netfilter: nf_tables: do not compare internal table flags on updates
- rcu: add a helper to report consolidated flavor QS
- bpf: report RCU QS in cpumap kthread
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
- regmap: Add missing map->bus check
- Linux 5.4.273
* Focal update: v5.4.272 upstream stable release (LP: #2064555)
- lan78xx: Fix white space and style issues
- lan78xx: Add missing return code checks
- lan78xx: Fix partial packet errors on suspend/resume
- lan78xx: Fix race conditions in suspend/resume handling
- net: lan78xx: fix runtime PM count underflow on link stop
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
- geneve: make sure to pull inner header in geneve_rx()
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
- net/rds: fix WARNING in rds_conn_connect_if_down
- netfilter: nft_ct: fix l3num expectations with inet pseudo family
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range
- netrom: Fix a data-race around sysctl_netrom_default_path_quality
- netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
- netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
- netrom: Fix a data-race around sysctl_netrom_transport_timeout
- netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
- netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
- netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
- netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
- netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
- netrom: Fix a data-race around sysctl_netrom_routing_control
- netrom: Fix a data-race around sysctl_netrom_link_fails_count
- netrom: Fix data-races around sysctl_net_busy_read
- selftests: mm: fix map_hugetlb failure on 64K page size systems
- um: allow not setting extra rpaths in the linux binary
- serial: max310x: Use devm_clk_get_optional() to get the input clock
- serial: max310x: Try to get crystal clock rate from property
- serial: max310x: fail probe if clock crystal is unstable
- serial: max310x: Make use of device properties
- serial: max310x: use regmap methods for SPI batch operations
- serial: max310x: use a separate regmap for each port
- serial: max310x: prevent infinite while() loop in port startup
- Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number
- hv_netvsc: use netif_is_bond_master() instead of open code
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
- y2038: rusage: use __kernel_old_timeval
- getrusage: add the "signal_struct *sig" local variable
- getrusage: move thread_group_cputime_adjusted() outside of
lock_task_sighand()
- getrusage: use __for_each_thread()
- getrusage: use sig->stats_lock rather than lock_task_sighand()
- serial: max310x: Unprepare and disable clock in error path
- regmap: allow to define reg_update_bits for no bus configuration
- regmap: Add bulk read/write callbacks into regmap_config
- serial: max310x: make accessing revision id interface-agnostic
- serial: max310x: implement I2C support
- serial: max310x: fix IO data corruption in batched operations
- arm64: dts: qcom: add PDC interrupt controller for SDM845
- arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
- Linux 5.4.272
* CVE-2024-23307
- md/raid5: fix atomicity violation in raid5_cache_count
* CVE-2024-26889
- Bluetooth: hci_core: Fix possible buffer overflow
* CVE-2024-26828
- cifs: fix underflow in parse_server_interfaces()
* CVE-2024-24861
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
* CVE-2023-6270
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
* CVE-2024-26642
- netfilter: nf_tables: disallow anonymous set with timeout flag
* CVE-2024-26926
- binder: check offset alignment in binder_get_object()
* CVE-2024-26922
- drm/amdgpu: validate the parameters of bo mapping operations more clearly
* CVE-2024-26925
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
- netfilter: nf_tables: release batch on table validation from abort path
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
* CVE-2024-26643
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with
timeout
* CVE-2024-2201
- x86/cpufeatures: Add new word for scattered features
- x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
- x86/bhi: Add support for clearing branch history at syscall entry
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S
- x86/bhi: Enumerate Branch History Injection (BHI) bug
- x86/bhi: Add BHI mitigation knob
- x86/bhi: Mitigate KVM by default
- [Config] updateconfigs for CONFIG_BHI_{AUTO|ON|OFF}
- x86/bugs: Fix BHI documentation
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
- x86/bugs: Fix BHI handling of RRSBA
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
- x86/bugs: Fix BHI retpoline check
-- Wen-chien Jesse Sung <email address hidden> Wed, 19 Jun 2024 14:14:02 +0800
-
linux-iot (5.4.0-1039.40) focal; urgency=medium
* focal/linux-iot: 5.4.0-1039.40 -proposed tracker (LP: #2068280)
[ Ubuntu: 5.4.0-187.207 ]
* focal/linux: 5.4.0-187.207 -proposed tracker (LP: #2068291)
* CVE-2024-26925
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
- netfilter: nf_tables: release batch on table validation from abort path
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
* CVE-2024-26643
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with
timeout
* CVE-2024-2201
- x86/cpufeatures: Add new word for scattered features
- x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
- x86/bhi: Add support for clearing branch history at syscall entry
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S
- x86/bhi: Enumerate Branch History Injection (BHI) bug
- x86/bhi: Add BHI mitigation knob
- x86/bhi: Mitigate KVM by default
- [Config] updateconfigs for CONFIG_BHI_{AUTO|ON|OFF}
- x86/bugs: Fix BHI documentation
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
- x86/bugs: Fix BHI handling of RRSBA
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
- x86/bugs: Fix BHI retpoline check
-- Wen-chien Jesse Sung <email address hidden> Mon, 17 Jun 2024 17:26:01 +0800
-
linux-iot (5.4.0-1038.39) focal; urgency=medium
* focal/linux-iot: 5.4.0-1038.39 -proposed tracker (LP: #2063800)
[ Ubuntu: 5.4.0-186.206 ]
* focal/linux: 5.4.0-186.206 -proposed tracker (LP: #2063812)
* Mount CIFS fails with Permission denied (LP: #2061986)
- cifs: fix ntlmssp auth when there is no key exchange
* USB stick can't be detected (LP: #2040948)
- usb: Disable USB3 LPM at shutdown
* CVE-2024-26733
- net: dev: Convert sa_data to flexible array in struct sockaddr
- arp: Prevent overflow in arp_req_get().
- stddef: Introduce DECLARE_FLEX_ARRAY() helper
* CVE-2024-26712
- powerpc/kasan: Fix addr error caused by page alignment
* CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
* CVE-2021-47063
- drm: bridge/panel: Cleanup connector on bridge detach
* [Ubuntu 22.04.4/linux-image-6.5.0-26-generic] Kernel output "UBSAN: array-
index-out-of-bounds in /build/linux-hwe-6.5-34pCLi/linux-
hwe-6.5-6.5.0/drivers/net/hyperv/netvsc.c:1445:41" multiple times,
especially during boot. (LP: #2058477)
- hv: hyperv.h: Replace one-element array with flexible-array member
* CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
* Focal update: v5.4.271 upstream stable release (LP: #2060216)
- netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
- net: ip_tunnel: prevent perpetual headroom growth
- tun: Fix xdp_rxq_info's queue_index when detaching
- ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
- lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is
detected
- net: usb: dm9601: fix wrong return value in dm9601_mdio_read
- Bluetooth: Avoid potential use-after-free in hci_error_reset
- Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
- Bluetooth: Enforce validation on max value of connection interval
- netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
- rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
- efi/capsule-loader: fix incorrect allocation size
- power: supply: bq27xxx-i2c: Do not free non existing IRQ
- ALSA: Drop leftover snd-rtctimer stuff from Makefile
- afs: Fix endless loop in directory parsing
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
- wifi: nl80211: reject iftype change with mesh ID change
- btrfs: dev-replace: properly validate device names
- dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
- dmaengine: fsl-qdma: init irq after reg initialization
- mmc: core: Fix eMMC initialization with 1-bit bus connection
- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers
- cachefiles: fix memory leak in cachefiles_add_cache()
- fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
- gpio: 74x164: Enable output pins after registers are reset
- Linux 5.4.271
* Focal update: v5.4.270 upstream stable release (LP: #2060019)
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
- net/sched: Retire CBQ qdisc
- [Config] updateconfigs for NET_SCH_CBQ
- net/sched: Retire ATM qdisc
- [Config] updateconfigs for NET_SCH_ATM
- net/sched: Retire dsmark qdisc
- [Config] updateconfigs for NET_SCH_DSMARK
- sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
- memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
- nilfs2: replace WARN_ONs for invalid DAT metadata block requests
- userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
- sched/rt: Fix sysctl_sched_rr_timeslice intial value
- sched/rt: Disallow writing invalid values to sched_rt_period_us
- scsi: target: core: Add TMF to tmr_list handling
- dmaengine: shdma: increase size of 'dev_id'
- dmaengine: fsl-qdma: increase size of 'irq_name'
- wifi: cfg80211: fix missing interfaces when dumping
- wifi: mac80211: fix race condition on enabling fast-xmit
- fbdev: savage: Error out if pixclock equals zero
- fbdev: sis: Error out if pixclock equals zero
- ahci: asm1166: correct count of reported ports
- ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
- ext4: avoid allocating blocks from corrupted group in
ext4_mb_try_best_found()
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
- regulator: pwm-regulator: Add validity checks in continuous .get_voltage
- nvmet-tcp: fix nvme tcp ida memory leak
- ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
- netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in
sctp_new
- nvmet-fc: abort command when there is no binding
- hwmon: (coretemp) Enlarge per package core count limit
- scsi: lpfc: Use unsigned type for num_sge
- firewire: core: send bus reset promptly on gap count error
- virtio-blk: Ensure no requests in virtqueues before deleting vqs.
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues
- pmdomain: renesas: r8a77980-sysc: CR7 must be always on
- tcp: factor out __tcp_close() helper
- tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit
- tcp: add annotations around sk->sk_shutdown accesses
- pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
- spi: mt7621: Fix an error message in mt7621_spi_probe()
- net: bridge: clear bridge's private skb space on xmit
- selftests/bpf: Avoid running unprivileged tests with alignment requirements
- Revert "drm/sun4i: dsi: Change the start delay calculation"
- drm/amdgpu: Check for valid number of registers to read
- x86/alternatives: Disable KASAN in apply_alternatives()
- dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
- iomap: Set all uptodate bits for an Uptodate page
- drm/amdgpu: Fix type of second parameter in trans_msg() callback
- arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
- PCI: tegra: Fix reporting GPIO error value
- PCI: tegra: Fix OF node reference leak
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
- dm-crypt: don't modify the data when using authenticated encryption
- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
- PCI/MSI: Prevent MSI hardware interrupt number truncation
- l2tp: pass correct message length to ip6_append_data
- ARM: ep93xx: Add terminator to gpiod_lookup_table
- usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
- usb: cdns3: fix memory double free when handle zero packet
- usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
- usb: roles: don't get/set_role() when usb_role_switch is unregistered
- IB/hfi1: Fix a memleak in init_credit_return
- RDMA/bnxt_re: Return error for SRQ resize
- RDMA/srpt: Make debug output more detailed
- RDMA/srpt: fix function pointer cast warnings
- scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions
- bpf, scripts: Correct GPL license name
- scsi: jazz_esp: Only build if SCSI core is builtin
- nouveau: fix function cast warnings
- ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
- ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
- afs: Increase buffer size in afs_update_volume_status()
- ipv6: sr: fix possible use-after-free and null-ptr-deref
- packet: move from strlcpy with unused retval to strscpy
- s390: use the correct count for __iowrite64_copy()
- tls: rx: jump to a more appropriate label
- tls: rx: drop pointless else after goto
- tls: stop recv() if initial process_rx_list gave us non-DATA
- netfilter: nf_tables: set dormant flag on hook register failure
- drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
- drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- scripts/bpf: Fix xdp_md forward declaration typo
- Linux 5.4.270
* CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
* CVE-2021-47070
- uio: uio_hv_generic: use devm_kzalloc() for private data alloc
- uio_hv_generic: Fix another memory leak in error handling paths
* CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
-- Portia Stephens <email address hidden> Mon, 27 May 2024 14:31:09 +1000
-
linux-iot (5.4.0-1037.38) focal; urgency=medium
* focal/linux-iot: 5.4.0-1037.38 -proposed tracker (LP: #2063674)
[ Ubuntu: 5.4.0-182.202 ]
* focal/linux: 5.4.0-182.202 -proposed tracker (LP: #2063685)
* CVE-2023-52530
- wifi: mac80211: fix potential key use-after-free
* CVE-2024-26622
- tomoyo: fix UAF write bug in tomoyo_write_control()
* CVE-2024-26614
- tcp: make sure init the accept_queue's spinlocks once
- ipv6: init the accept_queue's spinlocks in inet6_create
* CVE-2023-47233
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
-- Wen-chien Jesse Sung <email address hidden> Wed, 08 May 2024 22:06:13 +0800
-
linux-iot (5.4.0-1036.37) focal; urgency=medium
* focal/linux-iot: 5.4.0-1036.37 -proposed tracker (LP: #2059538)
[ Ubuntu: 5.4.0-181.201 ]
* focal/linux: 5.4.0-181.201 -proposed tracker (LP: #2059549)
* Packaging resync (LP: #1786013)
- [Packaging] drop getabis data
* Drop fips-checks script from trees (LP: #2055083)
- [Packaging] Remove fips-checks script
* Remove getabis scripts (LP: #2059143)
- [Packaging] Remove getabis
* Focal update: v5.4.269 upstream stable release (LP: #2058948)
- PCI: mediatek: Clear interrupt status before dispatching handler
- include/linux/units.h: add helpers for kelvin to/from Celsius conversion
- units: Add Watt units
- units: change from 'L' to 'UL'
- units: add the HZ macros
- serial: sc16is7xx: set safe default SPI clock frequency
- spi: introduce SPI_MODE_X_MASK macro
- serial: sc16is7xx: add check for unsupported SPI modes during probe
- ext4: allow for the last group to be marked as trimmed
- crypto: api - Disallow identical driver names
- PM: hibernate: Enforce ordering during image compression/decompression
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng
- rpmsg: virtio: Free driver_override when rpmsg_remove()
- parisc/firmware: Fix F-extend for PDC addresses
- arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
- mmc: core: Use mrq.sbc in close-ended ffu
- nouveau/vmm: don't set addr on the fail path to avoid warning
- ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
- rename(): fix the locking of subdirectories
- block: Remove special-casing of compound pages
- mtd: spinand: macronix: Fix MX35LFxGE4AD page size
- fs: add mode_strip_sgid() helper
- fs: move S_ISGID stripping into the vfs_*() helpers
- powerpc: Use always instead of always-y in for crtsavres.o
- x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum
- net/smc: fix illegal rmb_desc access in SMC-D connection dump
- vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
- llc: make llc_ui_sendmsg() more robust against bonding changes
- llc: Drop support for ETH_P_TR_802_2.
- net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
- tracing: Ensure visibility when inserting an element into tracing_map
- afs: Hide silly-rename files from userspace
- tcp: Add memory barrier to tcp_push()
- netlink: fix potential sleeping issue in mqueue_flush_file
- net/mlx5: DR, Use the right GVMI number for drop action
- net/mlx5: Use kfree(ft->g) in arfs_create_groups()
- net/mlx5e: fix a double-free in arfs_create_groups
- netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
- netfilter: nf_tables: validate NFPROTO_* family
- fjes: fix memleaks in fjes_hw_setup
- net: fec: fix the unhandled context fault from smmu
- btrfs: ref-verify: free ref cache before clearing mount opt
- btrfs: tree-checker: fix inline ref size in error messages
- btrfs: don't warn if discard range is not aligned to sector
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
- rbd: don't move requests to the running list on errors
- gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
- drm: Don't unref the same fb many times by mistake due to deadlock handling
- drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
- drm/bridge: nxp-ptn3460: simplify some error checking
- drm/exynos: fix accidental on-stack copy of exynos_drm_plane
- drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
- gpio: eic-sprd: Clear interrupt after set the interrupt type
- spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
- mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
- tick/sched: Preserve number of idle sleeps across CPU hotplug events
- x86/entry/ia32: Ensure s32 is sign extended to s64
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
- powerpc: Fix build error due to is_valid_bugaddr()
- powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
- powerpc: pmd_move_must_withdraw() is only needed for
CONFIG_TRANSPARENT_HUGEPAGE
- powerpc/lib: Validate size for vector operations
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
- perf/core: Fix narrow startup race when creating the perf nr_addr_filters
sysfs file
- regulator: core: Only increment use_count when enable_count changes
- audit: Send netlink ACK before setting connection in auditd_set
- ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
- PNP: ACPI: fix fortify warning
- ACPI: extlog: fix NULL pointer dereference check
- FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
- jfs: fix slab-out-of-bounds Read in dtSearch
- jfs: fix array-index-out-of-bounds in dbAdjTree
- pstore/ram: Fix crash when setting number of cpus to an odd number
- crypto: stm32/crc32 - fix parsing list of devices
- afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
- rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
- jfs: fix array-index-out-of-bounds in diNewExt
- s390/ptrace: handle setting of fpc register correctly
- KVM: s390: fix setting of fpc register
- SUNRPC: Fix a suspicious RCU usage warning
- ecryptfs: Reject casefold directory inodes
- ext4: fix inconsistent between segment fstrim and full fstrim
- ext4: unify the type of flexbg_size to unsigned int
- ext4: remove unnecessary check from alloc_flex_gd()
- ext4: avoid online resizing failures due to oversized flex bg
- wifi: rt2x00: restart beacon queue when hardware reset
- selftests/bpf: satisfy compiler by having explicit return in btf test
- selftests/bpf: Fix pyperf180 compilation failure with clang18
- scsi: lpfc: Fix possible file string name overflow when updating firmware
- PCI: Add no PM reset quirk for NVIDIA Spectrum devices
- bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
- ARM: dts: imx7d: Fix coresight funnel ports
- ARM: dts: imx7s: Fix lcdif compatible
- ARM: dts: imx7s: Fix nand-controller #size-cells
- wifi: ath9k: Fix potential array-index-out-of-bounds read in
ath9k_htc_txstatus()
- bpf: Add map and need_defer parameters to .map_fd_put_ptr()
- scsi: libfc: Don't schedule abort twice
- scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
- ARM: dts: rockchip: fix rk3036 hdmi ports node
- ARM: dts: imx25/27-eukrea: Fix RTC node name
- ARM: dts: imx: Use flash@0,0 pattern
- ARM: dts: imx27: Fix sram node
- ARM: dts: imx1: Fix sram node
- ARM: dts: imx25/27: Pass timing0
- ARM: dts: imx27-apf27dev: Fix LED name
- ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
- ARM: dts: imx23/28: Fix the DMA controller node name
- block: prevent an integer overflow in bvec_try_merge_hw_page
- md: Whenassemble the array, consult the superblock of the freshest device
- arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
- arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
- wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
- wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
- wifi: cfg80211: free beacon_ies when overridden from hidden BSS
- f2fs: fix to check return value of f2fs_reserve_new_block()
- ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
- fast_dput(): handle underflows gracefully
- RDMA/IPoIB: Fix error code return in ipoib_mcast_join
- drm/drm_file: fix use of uninitialized variable
- drm/framebuffer: Fix use of uninitialized variable
- drm/mipi-dsi: Fix detach call without attach
- media: stk1160: Fixed high volume of stk1160_dbg messages
- media: rockchip: rga: fix swizzling for RGB formats
- PCI: add INTEL_HDA_ARL to pci_ids.h
- ALSA: hda: Intel: add HDA_ARL PCI ID support
- drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
- IB/ipoib: Fix mcast list locking
- media: ddbridge: fix an error code problem in ddb_probe
- drm/msm/dpu: Ratelimit framedone timeout msgs
- clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
- clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
- drm/amdgpu: Let KFD sync with VM fences
- drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
- leds: trigger: panic: Don't register panic notifier if creating the trigger
failed
- um: Fix naming clash between UML and scheduler
- um: Don't use vfprintf() for os_info()
- um: net: Fix return type of uml_net_start_xmit()
- i3c: master: cdns: Update maximum prescaler value for i2c clock
- mfd: ti_am335x_tscadc: Fix TI SoC dependencies
- [Config] updateconfigs for MFD_TI_AM335X_TSCADC
- PCI: Only override AMD USB controller if required
- PCI: switchtec: Fix stdev_release() crash after surprise hot remove
- usb: hub: Replace hardcoded quirk value with BIT() macro
- fs/kernfs/dir: obey S_ISGID
- PCI/AER: Decode Requester ID when no error info found
- libsubcmd: Fix memory leak in uniq()
- virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region
of size 10" warnings
- blk-mq: fix IO hang from sbitmap wakeup race
- ceph: fix deadlock or deadcode of misusing dget()
- drm/amdgpu: Release 'adev->pm.fw' before return in
'amdgpu_device_need_post()'
- perf: Fix the nr_addr_filters fix
- wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
- scsi: isci: Fix an error code problem in isci_io_request_build()
- net: remove unneeded break
- ixgbe: Remove non-inclusive language
- ixgbe: Refactor returning internal error codes
- ixgbe: Refactor overtemp event handling
- ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
- ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
- llc: call sock_orphan() at release time
- netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
- netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom
expectations
- net: ipv4: fix a memleak in ip_setup_cork
- af_unix: fix lockdep positive in sk_diag_dump_icons()
- SAUCE: Sync apparmor copy of af_unix.c
- net: sysfs: Fix /sys/class/net/<iface> path
- HID: apple: Add support for the 2021 Magic Keyboard
- HID: apple: Swap the Fn and Left Control keys on Apple keyboards
- HID: apple: Add 2021 magic keyboard FN key mapping
- bonding: remove print in bond_verify_device_path
- dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
- dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
- phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
- dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
- net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
- selftests: net: avoid just another constant wait
- atm: idt77252: fix a memleak in open_card_ubr0
- hwmon: (aspeed-pwm-tacho) mutex for tach reading
- hwmon: (coretemp) Fix out-of-bounds memory access
- hwmon: (coretemp) Fix bogus core_id to attr name mapping
- inet: read sk->sk_family once in inet_recv_error()
- rxrpc: Fix response to PING RESPONSE ACKs to a dead call
- tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
- ppp_async: limit MRU to 64K
- netfilter: nft_compat: reject unused compat flag
- netfilter: nft_compat: restrict match/target protocol to u16
- netfilter: nft_ct: reject direction for ct id
- net/af_iucv: clean up a try_then_request_module()
- USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
- USB: serial: option: add Fibocom FM101-GL variant
- USB: serial: cp210x: add ID for IMST iM871A-USB
- hrtimer: Report offline hrtimer enqueue
- Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
- net: stmmac: xgmac: use #define for string constants
- net: stmmac: xgmac: fix a typo of register name in DPP safety handling
- btrfs: forbid creating subvol qgroups
- btrfs: forbid deleting live subvol qgroup
- btrfs: send: return EOPNOTSUPP on unknown flags
- of: unittest: add overlay gpio test to catch gpio hog problem
- of: unittest: Fix compile in the non-dynamic case
- spi: ppc4xx: Drop write-only variable
- ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
- MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
- i40e: Fix waiting for queues of all VSIs to be disabled
- tracing/trigger: Fix to return error if failed to alloc snapshot
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
- HID: wacom: generic: Avoid reporting a serial of '0' to userspace
- HID: wacom: Do not register input devices until after hid_hw_start
- USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
- usb: f_mass_storage: forbid async queue when shutdown happen
- i2c: i801: Remove i801_set_block_buffer_mode
- i2c: i801: Fix block process call transactions
- scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
- firewire: core: correct documentation of fw_csr_string() kernel API
- kbuild: Fix changing ELF file type for output of gen_btf for big endian
- nfc: nci: free rx_data_reassembly skb on NCI device cleanup
- xen-netback: properly sync TX responses
- ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
- binder: signal epoll threads of self-work
- misc: fastrpc: Mark all sessions as invalid in cb_remove
- ext4: fix double-free of blocks due to wrong extents moved_len
- tracing: Fix wasted memory in saved_cmdlines logic
- staging: iio: ad5933: fix type mismatch regression
- iio: magnetometer: rm3100: add boundary check for the value read from
RM3100_REG_TMRC
- ring-buffer: Clean ring_buffer_poll_wait() error return
- serial: max310x: set default value when reading clock ready bit
- serial: max310x: improve crystal stable clock detection
- x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- mmc: slot-gpio: Allow non-sleeping GPIO ro
- ALSA: hda/conexant: Add quirk for SWS JS201D
- nilfs2: fix data corruption in dsync block recovery for small block sizes
- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
- nfp: use correct macro for LengthSelect in BAR config
- nfp: flower: prevent re-adding mac index for bonded port
- irqchip/irq-brcmstb-l2: Add write memory barrier before exit
- can: j1939: Fix UAF in j1939_sk_match_filter during
setsockopt(SO_J1939_FILTER)
- pmdomain: core: Move the unused cleanup to a _sync initcall
- tracing: Inform kmemleak of saved_cmdlines allocation
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
- bus: moxtet: Add spi device table
- arch, mm: remove stale mentions of DISCONIGMEM
- mips: Fix max_mapnr being uninitialized on early stages
- KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
- netfilter: ipset: fix performance regression in swap operation
- netfilter: ipset: Missing gc cancellations fixed
- net: prevent mss overflow in skb_segment()
- sched/membarrier: reduce the ability to hammer on sys_membarrier
- nilfs2: fix potential bug in end_buffer_async_write
- PM: runtime: add devm_pm_runtime_enable helper
- PM: runtime: Have devm_pm_runtime_enable() handle
pm_runtime_dont_use_autosuspend()
- drm/msm/dsi: Enable runtime PM
- lsm: new security_file_ioctl_compat() hook
- Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting""
- net: bcmgenet: Fix EEE implementation
- of: unittest: fix EXPECT text for gpio hog errors
- of: gpio unittest kfree() wrong object
- Linux 5.4.269
* Focal update: v5.4.269 upstream stable release (LP: #2058948) //
CVE-2023-52603
- UBSAN: array-index-out-of-bounds in dtSplitRoot
* CVE-2023-52600
- jfs: fix uaf in jfs_evict_inode
* CVE-2023-24023
- Bluetooth: Add more enc key size check
* CVE-2024-26581
- netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure
- netfilter: nft_set_rbtree: skip end interval element from gc
* CVE-2024-26589
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
-- Wen-chien Jesse Sung <email address hidden> Fri, 19 Apr 2024 15:27:29 +0800
-
linux-iot (5.4.0-1035.36) focal; urgency=medium
* focal/linux-iot: 5.4.0-1035.36 -proposed tracker (LP: #2059622)
* Packaging resync (LP: #1786013)
- [Packaging] drop getabis data
[ Ubuntu: 5.4.0-177.197 ]
* focal/linux: 5.4.0-177.197 -proposed tracker (LP: #2059633)
* Packaging resync (LP: #1786013)
- [Packaging] drop getabis data
* Remove getabis scripts (LP: #2059143)
- [Packaging] Remove getabis
* CVE-2023-24023
- Bluetooth: Add more enc key size check
* CVE-2023-52600
- jfs: fix uaf in jfs_evict_inode
* Focal update: v5.4.269 upstream stable release (LP: #2058948) //
CVE-2023-52603
- UBSAN: array-index-out-of-bounds in dtSplitRoot
* CVE-2024-26581
- netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure
- netfilter: nft_set_rbtree: skip end interval element from gc
* CVE-2024-26589
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
[ Ubuntu: 5.4.0-176.196 ]
* focal/linux: 5.4.0-176.196 -proposed tracker (LP: #2058756)
* Problems with HVCS and hotplugging (LP: #2056373)
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry
- powerpc/pseries: Fix of_read_drc_info_cell() to point at next record
- hvcs: Fix hvcs port reference counting
- hvcs: Use dev_groups to manage hvcs device attributes
- hvcs: Use driver groups to manage driver attributes
- hvcs: Get reference to tty in remove
- hvcs: Use vhangup in hotplug remove
- hvcs: Synchronize hotplug remove with port free
-- Wen-chien Jesse Sung <email address hidden> Thu, 11 Apr 2024 18:56:56 +0800
-
linux-iot (5.4.0-1034.35) focal; urgency=medium
* focal/linux-iot: 5.4.0-1034.35 -proposed tracker (LP: #2055673)
* Packaging resync (LP: #1786013)
- [Packaging] drop ABI data
- debian.iot/dkms-versions -- update from kernel-versions (main/2024.03.04)
[ Ubuntu: 5.4.0-175.195 ]
* focal/linux: 5.4.0-175.195 -proposed tracker (LP: #2055684)
* Packaging resync (LP: #1786013)
- [Packaging] drop ABI data
- [Packaging] update annotations scripts
- debian.master/dkms-versions -- update from kernel-versions (main/2024.03.04)
* Drop ABI checks from kernel build (LP: #2055686)
- [Packaging] Remove in-tree abi checks
- [Packaging] Bring back install-<flavour> prerequisite for checks-<flavour>
- [Packaging] Remove abi-check from final-checks
* Cranky update-dkms-versions rollout (LP: #2055685)
- [Packaging] remove update-dkms-versions
- Move debian/dkms-versions to debian.master/dkms-versions
- [Packaging] Replace debian/dkms-versions with $(DEBIAN)/dkms-versions
- [Packaging] remove update-version-dkms
* linux-tools-common: man page of usbip[d] is misplaced (LP: #2054094)
- [Packaging] rules: Put usbip manpages in the correct directory
* CVE-2024-23851
- dm ioctl: log an error if the ioctl structure is corrupted
- dm: limit the number of targets and parameter size area
* Focal update: v5.4.268 upstream stable release (LP: #2055075)
- f2fs: explicitly null-terminate the xattr list
- pinctrl: lochnagar: Don't build on MIPS
- ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
- ASoC: Intel: Skylake: Fix mem leak in few functions
- ASoC: nau8822: Fix incorrect type in assignment and cast to restricted
__be16
- ASoC: Intel: Skylake: mem leak in skl register function
- ASoC: cs43130: Fix the position of const qualifier
- ASoC: cs43130: Fix incorrect frame delay configuration
- ASoC: rt5650: add mutex to avoid the jack detection failure
- nouveau/tu102: flush all pdbs on vmm flush
- net/tg3: fix race condition in tg3_reset_task()
- ASoC: da7219: Support low DC impedance headset
- nvme: introduce helper function to get ctrl state
- drm/exynos: fix a potential error pointer dereference
- drm/exynos: fix a wrong error checking
- clk: rockchip: rk3128: Fix HCLK_OTG gate register
- jbd2: correct the printing of write_flags in jbd2_write_superblock()
- drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
- neighbour: Don't let neigh_forced_gc() disable preemption for long
- tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
- tracing: Add size check when printing trace_marker output
- ring-buffer: Do not record in NMI if the arch does not support cmpxchg in
NMI
- reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
- Input: atkbd - skip ATKBD_CMD_GETID in translated mode
- Input: i8042 - add nomux quirk for Acer P459-G2-M
- s390/scm: fix virtual vs physical address confusion
- ARC: fix spare error
- Input: xpad - add Razer Wolverine V2 support
- ARM: sun9i: smp: fix return code check of of_property_match_string
- drm/crtc: fix uninitialized variable use
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- binder: use EPOLLERR from eventpoll.h
- binder: fix trivial typo of binder_free_buf_locked()
- binder: fix comment on binder_alloc_new_buf() return value
- uio: Fix use-after-free in uio_open
- parport: parport_serial: Add Brainboxes BAR details
- parport: parport_serial: Add Brainboxes device IDs and geometry
- coresight: etm4x: Fix width of CCITMIN field
- x86/lib: Fix overflow when counting digits
- EDAC/thunderx: Fix possible out-of-bounds string access
- powerpc: add crtsavres.o to always-y instead of extra-y
- powerpc/44x: select I2C for CURRITUCK
- powerpc/pseries/memhotplug: Quieten some DLPAR operations
- powerpc/pseries/memhp: Fix access beyond end of drmem array
- selftests/powerpc: Fix error handling in FPU/VMX preemption tests
- powerpc/powernv: Add a null pointer check to scom_debug_init_one()
- powerpc/powernv: Add a null pointer check in opal_event_init()
- powerpc/powernv: Add a null pointer check in opal_powercap_init()
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
- mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
- ACPI: video: check for error while searching for backlight device parent
- ACPI: LPIT: Avoid u32 multiplication overflow
- net: netlabel: Fix kerneldoc warnings
- netlabel: remove unused parameter in netlbl_netlink_auditinfo()
- calipso: fix memory leak in netlbl_calipso_add_pass()
- spi: sh-msiof: Enforce fixed DTDL for R-Car H3
- mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
- selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
- crypto: virtio - Handle dataq logic with tasklet
- crypto: virtio - don't use 'default m'
- virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC
- crypto: ccp - fix memleak in ccp_init_dm_workarea
- crypto: af_alg - Disallow multiple in-flight AIO requests
- crypto: sahara - remove FLAGS_NEW_KEY logic
- crypto: sahara - fix ahash selftest failure
- crypto: sahara - fix processing requests with cryptlen < sg->length
- crypto: sahara - fix error handling in sahara_hw_descriptor_create()
- pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
- gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
- crypto: virtio - Wait for tasklet to complete on device remove
- crypto: sahara - fix ahash reqsize
- crypto: sahara - fix wait_for_completion_timeout() error handling
- crypto: sahara - improve error handling in sahara_sha_process()
- crypto: sahara - fix processing hash requests with req->nbytes < sg->length
- crypto: sahara - do not resize req->src when doing hash operations
- crypto: scomp - fix req->dst buffer overflow
- blocklayoutdriver: Fix reference leak of pnfs_device_node
- NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
- wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
- bpf, lpm: Fix check prefixlen before walking trie
- wifi: libertas: stop selecting wext
- ARM: dts: qcom: apq8064: correct XOADC register address
- ncsi: internal.h: Fix a spello
- net/ncsi: Fix netlink major/minor version numbers
- firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
- rtlwifi: Use ffs in <foo>_phy_calculate_bit_shift
- wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
- scsi: fnic: Return error if vmalloc() failed
- arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
- scsi: hisi_sas: Replace with standard error code return value
- selftests/net: fix grep checking for fib_nexthop_multiprefix
- virtio/vsock: fix logic which reduces credit update messages
- dma-mapping: clear dev->dma_mem to NULL after freeing it
- wifi: rtlwifi: add calculate_bit_shift()
- wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
- rtlwifi: rtl8192de: make arrays static const, makes object smaller
- wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
- wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
- netfilter: nf_tables: mark newset as dead on transaction abort
- Bluetooth: Fix bogus check for re-auth no supported with non-ssp
- Bluetooth: btmtkuart: fix recv_buf() return value
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
- ARM: davinci: always select CONFIG_CPU_ARM926T
- RDMA/usnic: Silence uninitialized symbol smatch warnings
- media: pvrusb2: fix use after free on context disconnection
- drm/bridge: Fix typo in post_disable() description
- f2fs: fix to avoid dirent corruption
- drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
- drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
- drm/radeon: check return value of radeon_ring_lock()
- ASoC: cs35l33: Fix GPIO name and drop legacy include
- ASoC: cs35l34: Fix GPIO name and drop legacy include
- drm/msm/mdp4: flush vblank event on disable
- drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
- drm/drv: propagate errors from drm_modeset_register_all()
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
- drm/radeon/dpm: fix a memleak in sumo_parse_power_table
- drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
- drm/bridge: tc358767: Fix return value on error case
- media: cx231xx: fix a memleak in cx231xx_init_isoc
- media: dvbdev: drop refcount on error path in dvb_device_open()
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
- drm/amd/pm: fix a double-free in si_dpm_init
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table
- gpu/drm/radeon: fix two memleaks in radeon_vm_init
- drivers: clk: zynqmp: calculate closest mux rate
- watchdog: set cdev owner before adding
- watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
- watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
- clk: si5341: fix an error code problem in si5341_output_clk_set_rate
- mmc: sdhci_omap: Fix TI SoC dependencies
- [Config] update annotations for CONFIG_MMC_SDHCI_OMAP
- [Config] remove sdhci-omap module for arm64/ppc64el
- of: Fix double free in of_parse_phandle_with_args_map
- of: unittest: Fix of_count_phandle_with_args() expected value message
- binder: fix async space check for 0-sized buffers
- binder: fix use-after-free in shinker's callback
- Input: atkbd - use ab83 as id when skipping the getid command
- Revert "ASoC: atmel: Remove system clock tree configuration for
at91sam9g20ek"
- binder: fix race between mmput() and do_exit()
- binder: fix unused alloc->free_async_space
- tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
- usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
- usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
- Revert "usb: dwc3: Soft reset phy on probe for host"
- Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-
only"
- usb: chipidea: wait controller resume finished for wakeup irq
- Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
- usb: typec: class: fix typec_altmode_put_partner to put plugs
- usb: mon: Fix atomicity violation in mon_bin_vma_fault
- ALSA: oxygen: Fix right channel of capture volume mixer
- fbdev: flush deferred work in fb_deferred_io_fsync()
- rootfs: Fix support for rootfstype= when root= is given
- wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
- wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
- wifi: mwifiex: configure BSSID consistently when starting AP
- x86/kvm: Do not try to disable kvmclock if it was not enabled
- HID: wacom: Correct behavior when processing some confidence == false
touches
- mips: Fix incorrect max_low_pfn adjustment
- MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
- MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
- serial: 8250: omap: Don't skip resource freeing if
pm_runtime_resume_and_get() failed
- acpi: property: Let args be NULL in __acpi_node_get_property_reference
- software node: Let args be NULL in software_node_get_reference_args
- perf genelf: Set ELF program header addresses properly
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
- nvmet-tcp: fix a crash in nvmet_req_complete()
- perf env: Add perf_env__numa_node()
- perf record: Move sb_evlist to 'struct record'
- perf top: Move sb_evlist to 'struct perf_top'
- perf bpf: Decouple creating the evlist from adding the SB event
- perf env: Avoid recursively taking env->bpf_progs.lock
- apparmor: avoid crash when parsed profile name is empty
- serial: imx: Correct clock error message in function probe()
- nvmet-tcp: Fix the H2C expected PDU len calculation
- PCI: keystone: Fix race condition when initializing PHYs
- s390/pci: fix max size calculation in zpci_memcpy_toio()
- net: qualcomm: rmnet: fix global oob in rmnet_policy
- net: phy: micrel: populate .soft_reset for KSZ9131
- net: ravb: Fix dma_addr_t truncation in error case
- net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
- netfilter: nf_tables: skip dead set elements in netlink dump
- ipvs: avoid stat macros calls from preemptible context
- kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ
- kdb: Fix a potential buffer overflow in kdb_local()
- mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
- i2c: s3c24xx: fix read transfers in polling mode
- i2c: s3c24xx: fix transferring more than one message in polling mode
- perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set
- arm64: dts: armada-3720-turris-mox: set irq type for RTC
- Linux 5.4.268
* CVE-2024-24855
- scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
* Focal update: v5.4.267 upstream stable release (LP: #2054406)
- nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to
llcp_local
- i40e: Fix filter input checks to prevent config with invalid values
- net: sched: em_text: fix possible memory leak in em_text_destroy()
- can: raw: add support for SO_TXTIME/SCM_TXTIME
- can: raw: add support for SO_MARK
- net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps
- ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
- net: bcmgenet: Fix FCS generation for fragmented skbuffs
- net: Save and restore msg_namelen in sock_sendmsg
- i40e: fix use-after-free in i40e_aqc_add_filters()
- ASoC: meson: g12a: extract codec-to-codec utils
- [Config] Update annotations for CONFIG_SND_MESON_CODEC_GLUE
- ASoC: meson: g12a-tohdmitx: Validate written enum values
- ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
- i40e: Restore VF MSI-X state during PCI reset
- net/qla3xxx: switch from 'pci_' to 'dma_' API
- net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
- asix: Add check for usbnet_get_endpoints
- bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
- net: Implement missing SO_TIMESTAMPING_NEW cmsg support
- mm/memory-failure: check the mapcount of the precise page
- firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and
ASM108x/VT630x PCIe cards
- i2c: core: Fix atomic xfer check for non-preempt config
- mm: fix unmap_mapping_range high bits shift bug
- mmc: rpmb: fixes pause retune on all RPMB partitions.
- mmc: core: Cancel delayed work before releasing host
- mmc: sdhci-sprd: Fix eMMC init failure after hw reset
- ath10k: Wait until copy complete is actually done before completing
- ath10k: Add interrupt summary based CE processing
- ath10k: Keep track of which interrupts fired, don't poll them
- ath10k: Get rid of "per_ce_irq" hw param
- PCI: Extract ATS disabling to a helper function
- PCI: Disable ATS for specific Intel IPU E2000 devices
- net/dst: use a smaller percpu_counter batch for dst entries accounting
- ipv6: make ip6_rt_gc_expire an atomic_t
- ipv6: remove max_size check inline with ipv4
- ASoC: meson: codec-glue: fix pcm format cast warning
- Linux 5.4.267
* CVE-2023-23000
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
* CVE-2023-23004
- malidp: Fix NULL vs IS_ERR() checking
* CVE-2023-46838
- xen-netback: don't produce zero-size SKB frags
* CVE-2024-1086
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
* Focal update: v5.4.266 upstream stable release (LP: #2051655)
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5
- ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
- ARM: OMAP2+: Fix null pointer dereference and memory leak in
omap_soc_device_init
- reset: Fix crash when freeing non-existent optional resets
- s390/vx: fix save/restore of fpu kernel context
- wifi: mac80211: mesh_plink: fix matches_local logic
- net/mlx5: improve some comments
- net/mlx5: Fix fw tracer first block check
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer used
by representors
- net: sched: ife: fix potential use-after-free
- ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
- net/rose: fix races in rose_kill_by_device()
- net: check vlan filter feature in vlan_vids_add_by_dev() and
vlan_vids_del_by_dev()
- afs: Fix the dynamic root's d_delete to always delete unused dentries
- afs: Fix dynamic root lookup DNS check
- net: warn if gso_type isn't set for a GSO SKB
- net: check dev->gso_max_size in gso_features_check()
- afs: Fix overwriting of result of DNS query
- i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
- pinctrl: at91-pio4: use dedicated lock class for IRQ
- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10
- ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB
- smb: client: fix NULL deref in asn1_ber_decoder()
- btrfs: do not allow non subvolume root targets for snapshot
- interconnect: Treat xlate() returning NULL node as an error
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
- Input: ipaq-micro-keys - add error handling for devm_kmemdup
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
- iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
- wifi: cfg80211: Add my certificate
- wifi: cfg80211: fix certs build to not depend on file order
- USB: serial: ftdi_sio: update Actisense PIDs constant names
- USB: serial: option: add Quectel EG912Y module support
- USB: serial: option: add Foxconn T99W265 with new baseline
- USB: serial: option: add Quectel RM500Q R13 firmware support
- Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf
- net: rfkill: gpio: set GPIO direction
- x86/alternatives: Sync core before enabling interrupts
- usb: fotg210-hcd: delete an incorrect bounds test
- ring-buffer: Fix wake ups when buffer_percent is set to 100
- block: Don't invalidate pagecache for invalid falloc modes
- Linux 5.4.266
* CVE-2024-0607
- netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
-- Wen-chien Jesse Sung <email address hidden> Mon, 25 Mar 2024 21:36:58 +0800
-
linux-iot (5.4.0-1033.34) focal; urgency=medium
* focal/linux-iot: 5.4.0-1033.34 -proposed tracker (LP: #2055966)
[ Ubuntu: 5.4.0-174.193 ]
* focal/linux: 5.4.0-174.193 -proposed tracker (LP: #2055978)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
- debian/dkms-versions -- update from kernel-versions (main/s2024.02.05)
* CVE-2024-24855
- scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
* CVE-2024-1086
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
* CVE-2023-23004
- malidp: Fix NULL vs IS_ERR() checking
* CVE-2023-23000
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
-- Wen-chien Jesse Sung <email address hidden> Fri, 15 Mar 2024 18:50:02 +0800
-
linux-iot (5.4.0-1032.33) focal; urgency=medium
* focal/linux-iot: 5.4.0-1032.33 -proposed tracker (LP: #2052124)
* Focal update: v5.4.261 upstream stable release (LP: #2049049)
- [Config] iot: cleanup after removing CONFIG_QCOM_SDM845_LLCC
* Focal update: v5.4.260 upstream stable release (LP: #2049024)
- [Config] iot: cleanup after removing CONFIG_BLK_DEV_SX8
[ Ubuntu: 5.4.0-173.191 ]
* focal/linux: 5.4.0-173.191 -proposed tracker (LP: #2052135)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2024.02.05)
* CVE-2023-0340
- vhost: use kzalloc() instead of kmalloc() followed by memset()
* CVE-2023-6915
- ida: Fix crash in ida_free when the bitmap is empty
* Focal update: v5.4.265 upstream stable release (LP: #2051644)
- afs: Fix refcount underflow from error handling race
- net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX
- qca_debug: Prevent crash on TX ring changes
- qca_debug: Fix ethtool -G iface tx behavior
- qca_spi: Fix reset behavior
- atm: solos-pci: Fix potential deadlock on &cli_queue_lock
- atm: solos-pci: Fix potential deadlock on &tx_queue_lock
- atm: Fix Use-After-Free in do_vcc_ioctl
- qed: Fix a potential use-after-free in qed_cxt_tables_alloc
- net: Remove acked SYN flag from packet in the transmit queue correctly
- sign-file: Fix incorrect return values check
- vsock/virtio: Fix unsigned integer wrap around in
virtio_transport_has_space()
- net: stmmac: use dev_err_probe() for reporting mdio bus registration failure
- net: stmmac: Handle disabled MDIO busses from devicetree
- cred: switch to using atomic_long_t
- ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants
- usb: aqc111: check packet for fixup for true limit
- blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock
required!"
- bcache: avoid oversize memory allocation by small stripe_size
- bcache: add code comments for bch_btree_node_get() and
__bch_btree_node_alloc()
- bcache: avoid NULL checking to c->root in run_cache_set()
- platform/x86: intel_telemetry: Fix kernel doc descriptions
- HID: add ALWAYS_POLL quirk for Apple kb
- HID: hid-asus: reset the backlight brightness level on resume
- HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad
- asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290
- HID: hid-asus: add const to read-only outgoing usb buffer
- soundwire: stream: fix NULL pointer dereference for multi_link
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify
- team: Fix use-after-free when an option instance allocation fails
- ring-buffer: Fix memory leak of free page
- mmc: block: Be sure to wait while busy in CQE error recovery
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind
- powerpc/ftrace: Fix stack teardown in ftrace_no_trace
- Linux 5.4.265
* Focal update: v5.4.264 upstream stable release (LP: #2049935)
- hrtimers: Push pending hrtimers away from outgoing CPU earlier
- netfilter: ipset: fix race condition between swap/destroy and kernel side
add/del/test
- tg3: Move the [rt]x_dropped counters to tg3_napi
- tg3: Increment tx_dropped in tg3_tso_bug()
- kconfig: fix memory leak from range properties
- drm/amdgpu: correct chunk_ptr to a pointer to chunk.
- of: base: Add of_get_cpu_state_node() to get idle states for a CPU node
- ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic
- ACPI/IORT: Make iort_msi_map_rid() PCI agnostic
- of/iommu: Make of_map_rid() PCI agnostic
- of/irq: make of_msi_map_get_device_domain() bus agnostic
- of/irq: Make of_msi_map_rid() PCI bus agnostic
- of: base: Fix some formatting issues and provide missing descriptions
- of: Fix kerneldoc output formatting
- of: Add missing 'Return' section in kerneldoc comments
- of: dynamic: Fix of_reconfig_get_state_change() return value documentation
- ipv6: fix potential NULL deref in fib6_add()
- hv_netvsc: rndis_filter needs to select NLS
- net: arcnet: Fix RESET flag handling
- net: arcnet: com20020 fix error handling
- arcnet: restoring support for multiple Sohard Arcnet cards
- ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
- net: hns: fix fake link up on xge port
- netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
- tcp: do not accept ACK of bytes we never sent
- bpf: sockmap, updating the sg structure should also update curr
- RDMA/bnxt_re: Correct module description string
- hwmon: (acpi_power_meter) Fix 4.29 MW bug
- ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate
- tracing: Fix a warning when allocating buffered events fails
- scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle()
- ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init
- ARM: dts: imx: make gpt node name generic
- ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt
- ALSA: pcm: fix out-of-bounds in snd_pcm_state_names
- nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
- tracing: Always update snapshot buffer size
- tracing: Fix incomplete locking when disabling buffered events
- tracing: Fix a possible race when disabling buffered events
- packet: Move reference count in packet_sock to atomic_long_t
- arm64: dts: mediatek: mt7622: fix memory node warning check
- arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names
- gpiolib: sysfs: Fix error handling on failed export
- mmc: core: add helpers mmc_regulator_enable/disable_vqmmc
- mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled
- usb: gadget: f_hid: fix report descriptor allocation
- parport: Add support for Brainboxes IX/UC/PX parallel cards
- usb: typec: class: fix typec_altmode_put_partner to put plugs
- ARM: PL011: Fix DMA support
- serial: sc16is7xx: address RX timeout interrupt errata
- serial: 8250_omap: Add earlycon support for the AM654 UART controller
- x86/CPU/AMD: Check vendor in the AMD microcode callback
- KVM: s390/mm: Properly reset no-dat
- nilfs2: fix missing error check for sb_set_blocksize call
- io_uring/af_unix: disable sending io_uring over sockets
- netlink: don't call ->netlink_bind with table lock held
- genetlink: add CAP_NET_ADMIN test for multicast bind
- psample: Require 'CAP_NET_ADMIN' when joining "packets" group
- drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
- tools headers UAPI: Sync linux/perf_event.h with the kernel sources
- cifs: Fix non-availability of dedup breaking generic/304
- smb: client: fix potential NULL deref in parse_dfs_referrals()
- devcoredump : Serialize devcd_del work
- devcoredump: Send uevent once devcd is ready
- Linux 5.4.264
* CVE-2024-0646
- net: tls, update curr on splice as well
* CVE-2024-0565
- smb: client: fix OOB in receive_encrypted_standard()
* CVE-2023-51781
- appletalk: Fix Use-After-Free in atalk_ioctl
* CVE-2023-51782
- net/rose: Fix Use-After-Free in rose_ioctl
* Focal update: v5.4.263 upstream stable release (LP: #2049084)
- driver core: Release all resources during unbind before updating device
links
- RDMA/irdma: Prevent zero-length STAG registration
- PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}()
- afs: Make error on cell lookup failure consistent with OpenAFS
- drm/panel: simple: Fix Innolux G101ICE-L01 bus flags
- drm/panel: simple: Fix Innolux G101ICE-L01 timings
- ata: pata_isapnp: Add missing error check for devm_ioport_map()
- drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full
- HID: core: store the unique system identifier in hid_device
- HID: fix HID device resource race between HID core and debugging support
- ipv4: Correct/silence an endian warning in __ip_do_redirect
- net: usb: ax88179_178a: fix failed operations during ax88179_reset
- arm/xen: fix xen_vcpu_info allocation alignment
- amd-xgbe: handle corner-case during sfp hotplug
- amd-xgbe: handle the corner-case during tx completion
- amd-xgbe: propagate the correct speed and duplex status
- net: axienet: Fix check for partial TX checksum
- afs: Return ENOENT if no cell DNS record can be found
- afs: Fix file locking on R/O volumes to operate in local mode
- nvmet: remove unnecessary ctrl parameter
- nvmet: nul-terminate the NQNs passed in the connect command
- MIPS: KVM: Fix a build warning about variable set but not used
- ext4: add a new helper to check if es must be kept
- ext4: factor out __es_alloc_extent() and __es_free_extent()
- ext4: use pre-allocated es in __es_insert_extent()
- ext4: use pre-allocated es in __es_remove_extent()
- ext4: using nofail preallocation in ext4_es_remove_extent()
- ext4: using nofail preallocation in ext4_es_insert_delayed_block()
- ext4: using nofail preallocation in ext4_es_insert_extent()
- ext4: fix slab-use-after-free in ext4_es_insert_extent()
- ext4: make sure allocate pending entry not fail
- arm64: cpufeature: Extract capped perfmon fields
- KVM: arm64: limit PMU version to PMUv3 for ARMv8.1
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in
btree_gc_coalesce()
- s390/dasd: protect device queue against concurrent access
- USB: serial: option: add Luat Air72*U series products
- hv_netvsc: Fix race of register_netdevice_notifier and VF register
- hv_netvsc: Mark VF as slave before exposing it to user-mode
- dm-delay: fix a race between delay_presuspend and delay_bio
- bcache: check return value from btree_node_alloc_replacement()
- bcache: prevent potential division by zero error
- USB: serial: option: add Fibocom L7xx modules
- USB: serial: option: fix FM101R-GL defines
- USB: serial: option: don't claim interface 4 for ZTE MF290
- USB: dwc2: write HCINT with INTMASK applied
- usb: dwc3: set the dma max_seg_size
- USB: dwc3: qcom: fix resource leaks on probe deferral
- USB: dwc3: qcom: fix wakeup after probe deferral
- io_uring: fix off-by one bvec index
- pinctrl: avoid reload of p state in list iteration
- firewire: core: fix possible memory leak in create_units()
- mmc: block: Do not lose cache flush during CQE error recovery
- ALSA: hda: Disable power-save on KONTRON SinglePC
- ALSA: hda/realtek: Headset Mic VREF to 100%
- ALSA: hda/realtek: Add supported ALC257 for ChromeOS
- dm-verity: align struct dm_verity_fec_io properly
- dm verity: don't perform FEC for failed readahead IO
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
- powerpc: Don't clobber f0/vs0 during fp|altivec register save
- btrfs: fix off-by-one when checking chunk map includes logical address
- btrfs: send: ensure send_fd is writable
- btrfs: make error messages more clear when getting a chunk map
- Input: xpad - add HyperX Clutch Gladiate Support
- net: stmmac: xgmac: Disable FPE MMC interrupts
- ravb: Fix races between ravb_tx_timeout_work() and net related ops
- net: ravb: Use pm_runtime_resume_and_get()
- net: ravb: Start TX queues after HW initialization succeeded
- smb3: fix touch -h of symlink
- s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family
- s390/cmma: fix detection of DAT pages
- mtd: cfi_cmdset_0001: Support the absence of protection registers
- mtd: cfi_cmdset_0001: Byte swap OTP info
- fbdev: stifb: Make the STI next font pointer a 32-bit signed offset
- ima: annotate iint mutex to avoid lockdep false positive warnings
- ovl: skip overlayfs superblocks at global sync
- ima: detect changes to the backing overlay file
- scsi: qla2xxx: Simplify the code for aborting SCSI commands
- scsi: core: Introduce the scsi_cmd_to_rq() function
- scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: qla2xxx: Fix system crash due to bad pointer access
- cpufreq: imx6q: don't warn for disabling a non-existing frequency
- cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
- mmc: cqhci: Increase recovery halt timeout
- mmc: cqhci: Warn of halt or task clear failure
- mmc: cqhci: Fix task clearing in CQE error recovery
- mmc: core: convert comma to semicolon
- mmc: block: Retry commands in CQE error recovery
- Linux 5.4.263
* Focal update: v5.4.262 upstream stable release (LP: #2049069)
- locking/ww_mutex/test: Fix potential workqueue corruption
- perf/core: Bail out early if the request AUX area is out of bound
- clocksource/drivers/timer-imx-gpt: Fix potential memory leak
- clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware
- x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size
- wifi: mac80211_hwsim: fix clang-specific fortify warning
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- wifi: ath9k: fix clang-specific fortify warnings
- wifi: ath10k: fix clang-specific fortify warning
- net: annotate data-races around sk->sk_tx_queue_mapping
- net: annotate data-races around sk->sk_dst_pending_confirm
- wifi: ath10k: Don't touch the CE interrupt registers after power up
- Bluetooth: Fix double free in hci_conn_cleanup
- platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
- drm/komeda: drop all currently held locks if deadlock happens
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- selftests/efivarfs: create-read: fix a resource leak
- crypto: pcrypt - Fix hungtask for PADATA_RESET
- RDMA/hfi1: Use FIELD_GET() to extract Link Width
- fs/jfs: Add check for negative db_l2nbperpage
- fs/jfs: Add validity check for db_maxag and db_agpref
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- jfs: fix array-index-out-of-bounds in diAlloc
- ARM: 9320/1: fix stack depot IRQ stack filter
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields
- atm: iphase: Do PCI error checks on own line
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
- tty: vcc: Add check for kstrdup() in vcc_probe()
- usb: gadget: f_ncm: Always set current gadget in ncm_bind()
- i2c: sun6i-p2wi: Prevent potential division by zero
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- media: vivid: avoid integer overflow
- gfs2: ignore negated quota changes
- media: cobalt: Use FIELD_GET() to extract Link Width
- drm/amd/display: Avoid NULL dereference of timing generator
- kgdb: Flush console before entering kgdb on panic
- ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings
- pwm: Fix double shift bug
- wifi: iwlwifi: Use FW rate for non-data frames
- NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO
- ipvlan: add ipvlan_route_v6_outbound() helper
- tty: Fix uninit-value access in ppp_sync_receive()
- net: hns3: fix variable may not initialized problem in hns3_init_mac_addr()
- tipc: Fix kernel-infoleak due to uninitialized TLV value
- ppp: limit MRU to 64K
- xen/events: fix delayed eoi list handling
- ptp: annotate data-race around q->head and q->tail
- bonding: stop the device in bond_setup_by_slave()
- net: ethernet: cortina: Fix max RX frame define
- net: ethernet: cortina: Handle large frames
- net: ethernet: cortina: Fix MTU max setting
- netfilter: nf_conntrack_bridge: initialize err to 0
- net: stmmac: Rework stmmac_rx()
- net: stmmac: fix rx budget limit check
- net/mlx5_core: Clean driver version and name
- net/mlx5e: Check return value of snprintf writing to fw_version buffer for
representors
- macvlan: Don't propagate promisc change to lower dev in passthru
- tools/power/turbostat: Fix a knl bug
- cifs: spnego: add ';' in HOST_KEY_LEN
- media: venus: hfi: add checks to perform sanity on queue pointers
- randstruct: Fix gcc-plugin performance mode to stay in group
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END
- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for
selected registers
- x86/cpu/hygon: Fix the CPU topology evaluation for real
- KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space
- KVM: x86: Ignore MSR_AMD64_TW_CFG access
- audit: don't take task_lock() in audit_exe_compare() code path
- audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver
- PCI/sysfs: Protect driver's D3cold preference from user space
- ACPI: resource: Do IRQ override on TongFang GMxXGxx
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
- PCI: keystone: Don't discard .remove() callback
- PCI: keystone: Don't discard .probe() callback
- parisc/pdc: Add width field to struct pdc_model
- clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks
- mmc: vub300: fix an error code
- PM: hibernate: Use __get_safe_page() rather than touching the list
- PM: hibernate: Clean up sync_read handling in snapshot_write_next()
- btrfs: don't arbitrarily slow down delalloc if we're committing
- jbd2: fix potential data lost in recovering journal raced with synchronizing
fs bdev
- quota: explicitly forbid quota files from being encrypted
- kernel/reboot: emergency_restart: Set correct system_state
- i2c: core: Run atomic i2c xfer when !preemptible
- mcb: fix error handling for different scenarios when parsing
- dmaengine: stm32-mdma: correct desc prep when channel running
- mm/cma: use nth_page() in place of direct struct page manipulation
- i3c: master: cdns: Fix reading status register
- parisc: Prevent booting 64-bit kernels on PA1.x machines
- parisc/pgtable: Do not drop upper 5 address bits of physical address
- ALSA: info: Fix potential deadlock at disconnection
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC
- serial: meson: remove redundant initialization of variable id
- tty: serial: meson: retrieve port FIFO size from DT
- serial: meson: Use platform_get_irq() to get the interrupt
- tty: serial: meson: fix hard LOCKUP on crtscts mode
- Bluetooth: btusb: add Realtek 8822CE to usb_device_id table
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559
- bluetooth: Add device 0bda:887b to device tables
- bluetooth: Add device 13d3:3571 to device tables
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
- Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
- net: dsa: lan9303: consequently nested-lock physical MDIO
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte
- media: lirc: drop trailing space from scancode transmit
- media: sharp: fix sharp encoding
- media: venus: hfi_parser: Add check to keep the number of codecs within
range
- media: venus: hfi: fix the check to handle session buffer requirement
- media: venus: hfi: add checks to handle capabilities from firmware
- nfsd: fix file memleak on client_opens_release
- ext4: apply umask if ACL support is disabled
- ext4: correct offset of gdb backup in non meta_bg group to update_backups
- ext4: correct return value of ext4_convert_meta_bg
- ext4: correct the start block of counting reserved clusters
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks
- drm/amdgpu: fix error handling in amdgpu_bo_list_get()
- tracing: Have trace_event_file have ref counters
- netfilter: nf_tables: pass context to nft_set_destroy()
- netfilter: nftables: rename set element data activation/deactivation
functions
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
- netfilter: nft_set_rbtree: fix null deref on element insertion
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
- netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
- netfilter: nf_tables: fix memleak when more than 255 elements expired
- netfilter: nf_tables: unregister flowtable hooks on netns exit
- netfilter: nf_tables: double hook unregistration in netns path
- netfilter: nftables: update table flags from the commit phase
- netfilter: nf_tables: fix table flag updates
- netfilter: nf_tables: disable toggling dormant table state more than once
- netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for
5.4)
- Linux 5.4.262
* Focal update: v5.4.261 upstream stable release (LP: #2049049)
- vfs: fix readahead(2) on block devices
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
- i40e: fix potential memory leaks in i40e_remove()
- tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
- wifi: mt76: mt7603: rework/fix rx pse hang check
- tcp_metrics: add missing barriers on delete
- tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
- tcp_metrics: do not create an entry from tcp_init_metrics()
- wifi: rtlwifi: fix EDCA limit set by BT coexistence
- can: dev: can_restart(): don't crash kernel if carrier is OK
- can: dev: can_restart(): fix race condition between controller restart and
netif_carrier_on()
- thermal: core: prevent potential string overflow
- r8169: use tp_to_dev instead of open code
- r8169: fix rare issue with broken rx after link-down on RTL8125
- chtls: fix tp->rcv_tstamp initialization
- tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp
- tcp: fix cookie_init_timestamp() overflows
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
- ipv6: avoid atomic fragment on GSO packets
- net: add DEV_STATS_READ() helper
- ipvlan: properly track tx_errors
- regmap: debugfs: Fix a erroneous check after snprintf()
- clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies
- clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents
- clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src
- clk: imx: Select MXC_CLK for CLK_IMX8QXP
- clk: keystone: pll: fix a couple NULL vs IS_ERR() checks
- clk: npcm7xx: Fix incorrect kfree
- clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
- clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
- clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
- clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
- clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
- platform/x86: wmi: Fix probe failure when failing to register WMI devices
- platform/x86: wmi: remove unnecessary initializations
- platform/x86: wmi: Fix opening of char device
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name
- drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs
- drm/rockchip: vop: Fix call to crtc reset helper
- drm/radeon: possible buffer overflow
- drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()
- arm64: dts: qcom: sdm845-mtp: fix WiFi configuration
- ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator
- soc: qcom: llcc cleanup to get rid of sdm845 specific driver file
- [Config] remove CONFIG_QCOM_SDM845_LLCC
- soc: qcom: Rename llcc-slice to llcc-qcom
- [Config] remove llcc-slice module
- soc: qcom: llcc: Handle a second device without data corruption
- firmware: ti_sci: Replace HTTP links with HTTPS ones
- firmware: ti_sci: Mark driver as non removable
- clk: scmi: Free scmi_clk allocated when the clocks with invalid info are
skipped
- hwrng: geode - fix accessing registers
- libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return
value
- sched/rt: Provide migrate_disable/enable() inlines
- nd_btt: Make BTT lanes preemptible
- crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure
- crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
- HID: cp2112: Use irqchip template
- hid: cp2112: Fix duplicate workqueue initialization
- ARM: 9321/1: memset: cast the constant byte to unsigned char
- ext4: move 'ix' sanity check to corrent position
- scsi: ufs: core: Leave space for '\0' in utf8 desc string
- RDMA/hfi1: Workaround truncation compilation error
- sh: bios: Revive earlyprintk support
- ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails
- ASoC: ams-delta.c: use component after check
- mfd: dln2: Fix double put in dln2_probe
- leds: pwm: simplify if condition
- leds: pwm: convert to atomic PWM API
- leds: pwm: Don't disable the PWM when the LED should be off
- ledtrig-cpu: Limit to 8 CPUs
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
- usb: dwc2: fix possible NULL pointer dereference caused by driver
concurrency
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors
- misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
- tools: iio: privatize globals and functions in iio_generic_buffer.c file
- tools: iio: iio_generic_buffer: Fix some integer type and calculation
- tools: iio: iio_generic_buffer ensure alignment
- USB: usbip: fix stub_dev hub disconnect
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
- f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host
- powerpc/xive: Fix endian conversion size
- powerpc/imc-pmu: Use the correct spinlock initializer.
- powerpc/pseries: fix potential memory leak in init_cpu_associativity()
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs
- rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
- pcmcia: cs: fix possible hung task and memory leak pccardd()
- pcmcia: ds: fix refcount leak in pcmcia_device_add()
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
- media: bttv: fix use after free error due to btv->timeout timer
- media: s3c-camif: Avoid inappropriate kfree()
- media: dvb-usb-v2: af9035: fix missing unlock
- regmap: prevent noinc writes from clobbering cache
- pwm: sti: Avoid conditional gotos
- pwm: sti: Reduce number of allocations and drop usage of chip_data
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- llc: verify mac len before reading mac header
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- inet: shrink struct flowi_common
- dccp: Call security_inet_conn_request() after setting IPv4 addresses.
- dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
- Fix termination state for idr_for_each_entry_ul()
- net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- tg3: power down device only on SYSTEM_POWER_OFF
- r8169: respect userspace disabling IFF_MULTICAST
- netfilter: xt_recent: fix (increase) ipv6 literal buffer length
- netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate
eval call-backs
- netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE
- spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
- fbdev: imsttfb: Fix error path of imsttfb_probe()
- fbdev: imsttfb: fix a resource leak in probe
- fbdev: fsl-diu-fb: mark wr_reg_wa() static
- Revert "mmc: core: Capture correct oemid-bits for eMMC cards"
- btrfs: use u64 for buffer sizes in the tree search ioctls
- Linux 5.4.261
* Focal update: v5.4.260 upstream stable release (LP: #2049024)
- mtd: rawnand: marvell: Ensure program page operations are successful
- selftests/ftrace: Add new test case which checks non unique symbol
- mcb: Return actual parsed size when reading chameleon table
- mcb-lpc: Reallocate memory region to avoid memory overlapping
- virtio_balloon: Fix endless deflation and inflation on arm64
- virtio-mmio: fix memory leak of vm_dev
- r8169: fix the KCSAN reported data-race in rtl_tx while reading
TxDescArray[entry].opts1
- r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1
- treewide: Spelling fix in comment
- igb: Fix potential memory leak in igb_add_ethtool_nfc_entry
- neighbour: fix various data-races
- igc: Fix ambiguity in the ethtool advertising
- net: ieee802154: adf7242: Fix some potential buffer overflow in
adf7242_stats_show()
- r8152: Increase USB control msg timeout to 5000ms as per spec
- r8152: Run the unload routine if we have errors during probe
- r8152: Cancel hw_phy_work if we have an error in probe
- tcp: fix wrong RTO timeout when received SACK reneging
- gtp: uapi: fix GTPA_MAX
- gtp: fix fragmentation needed check with gso
- iio: exynos-adc: request second interupt only when touchscreen mode is used
- i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
- i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
- i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
- i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
- i2c: aspeed: Fix i2c bus hang in slave read
- nvmem: imx: correct nregs for i.MX6ULL
- nvmem: imx: correct nregs for i.MX6SLL
- nvmem: imx: correct nregs for i.MX6UL
- perf/core: Fix potential NULL deref
- clk: Sanitize possible_parent_show to Handle Return Value of
of_clk_get_parent_name
- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR
- x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility
- drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper()
- arm64: fix a concurrency issue in emulation_proc_handler()
- smbdirect: missing rc checks while waiting for rdma events
- f2fs: fix to do sanity check on inode type during garbage collection
- nfsd: lock_rename() needs both directories to live on the same fs
- x86/mm: Simplify RESERVE_BRK()
- x86/mm: Fix RESERVE_BRK() for older binutils
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: avoid overlapping preallocations due to overflow
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- driver: platform: Add helper for safer setting of driver_override
- rpmsg: Constify local variable in field store macro
- rpmsg: Fix kfree() of static memory on setting driver_override
- rpmsg: Fix calling device_lock() on non-initialized device
- rpmsg: glink: Release driver_override
- rpmsg: Fix possible refcount leak in rpmsg_register_device_override()
- x86: Fix .brk attribute in linker script
- Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
- irqchip/stm32-exti: add missing DT IRQ flag translation
- dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe
- Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport
- fbdev: atyfb: only use ioremap_uc() on i386 and ia64
- spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0
- netfilter: nfnetlink_log: silence bogus compiler warning
- ASoC: rt5650: fix the wrong result of key button
- fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
- scsi: mpt3sas: Fix in error path
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e
- platform/mellanox: mlxbf-tmfifo: Fix a warning message
- net: chelsio: cxgb4: add an error code check in t4_load_phy_fw
- ata: ahci: fix enum constants for gcc-13
- remove the sx8 block driver
- [Config] remove CONFIG_BLK_DEV_SX8
- Revert "ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver"
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device
- usb: storage: set 1.50 as the lower bcdDevice for older "Super Top"
compatibility
- tty: 8250: Remove UC-257 and UC-431
- tty: 8250: Add support for additional Brainboxes UC cards
- tty: 8250: Add support for Brainboxes UP cards
- tty: 8250: Add support for Intashield IS-100
- Linux 5.4.260
* CVE-2023-51779
- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
* CVE-2023-22995
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in
dwc3_qcom_acpi_register_core
-- Wen-chien Jesse Sung <email address hidden> Wed, 21 Feb 2024 18:16:14 +0800
-
linux-iot (5.4.0-1031.32) focal; urgency=medium
* focal/linux-iot: 5.4.0-1031.32 -proposed tracker (LP: #2052209)
[ Ubuntu: 5.4.0-172.190 ]
* focal/linux: 5.4.0-172.190 -proposed tracker (LP: #2052220)
* CVE-2023-51781
- appletalk: Fix Use-After-Free in atalk_ioctl
* CVE-2023-6915
- ida: Fix crash in ida_free when the bitmap is empty
* CVE-2024-0565
- smb: client: fix OOB in receive_encrypted_standard()
* CVE-2024-0646
- net: tls, update curr on splice as well
-- Portia Stephens <email address hidden> Thu, 15 Feb 2024 14:01:00 +1000
-
linux-iot (5.4.0-1030.31) focal; urgency=medium
* focal/linux-iot: 5.4.0-1030.31 -proposed tracker (LP: #2048271)
[ Ubuntu: 5.4.0-171.189 ]
* focal/linux: 5.4.0-171.189 -proposed tracker (LP: #2048282)
* Packaging resync (LP: #1786013)
- [Packaging] remove helper scripts
- [Packaging] update annotations scripts
- debian/dkms-versions -- update from kernel-versions (main/2024.01.08)
* Page fault in RDMA ODP triggers BUG_ON during MMU notifier registration
(LP: #2046534)
- RDMA/odp: Ensure the mm is still alive before creating an implicit child
* Hotplugging SCSI disk in QEMU VM fails (LP: #2047382)
- Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
* CVE-2023-6040
- netfilter: nf_tables: Reject tables of unsupported family
* kernel_selftests failures on kernel-P10d-LPAR10.ppc64el.10
(LP: #2032641)
- selftests: Skip TM tests on synthetic TM implementations
* [Debian] autoreconstruct - Do not generate chmod -x for deleted files
(LP: #2045562)
- [Debian] autoreconstruct - Do not generate chmod -x for deleted files
* CVE-2023-6931
- perf/core: Add a new read format to get a number of lost samples
- perf: Fix perf_event_validate_size()
- perf: Fix perf_event_validate_size() lockdep splat
* CVE-2023-6932
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
* CVE-2023-6606
- smb: client: fix OOB in smbCalcSize()
* CVE-2023-45863
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
* Focal update: v5.4.259 upstream stable release (LP: #2043724)
- RDMA/cxgb4: Check skb value for failure to allocate
- lib/test_meminit: fix off-by-one error in test_pages()
- pwm: hibvt: Explicitly set .polarity in .get_state()
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
- quota: Fix slow quotaoff
- net: prevent address rewrite in kernel_bind()
- drm: etvnaviv: fix bad backport leading to warning
- drm/msm/dsi: skip the wait for video mode done if not applicable
- ravb: Fix up dma_free_coherent() call in ravb_remove()
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
- xen-netback: use default TX queue size for vifs
- drm/vmwgfx: fix typo of sizeof argument
- ixgbe: fix crash with empty VF macvlan list
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- nfc: nci: assert requested protocol is valid
- workqueue: Override implicit ordered attribute in
workqueue_apply_unbound_cpumask()
- dmaengine: stm32-mdma: abort resume if no ongoing transfer
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
- usb: dwc3: Soft reset phy on probe for host
- usb: musb: Get the musb_qh poniter after musb_giveback
- usb: musb: Modify the "HWVers" register address
- iio: pressure: bmp280: Fix NULL pointer exception
- iio: pressure: dps310: Adjust Timeout Settings
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
- mcb: remove is_added flag from mcb_device struct
- libceph: use kernel_connect()
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
- Input: powermate - fix use-after-free in powermate_config_complete
- Input: psmouse - fix fast_reconnect function for PS/2 mode
- Input: xpad - add PXN V900 support
- cgroup: Remove duplicates in cgroup v1 tasks file
- pinctrl: avoid unsafe code pattern in find_pinctrl()
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
- powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
- powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()
- Documentation: sysctl: align cells in second content column
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- Bluetooth: hci_event: Ignore NULL link key
- Bluetooth: Reject connection with the device which has same BD_ADDR
- Bluetooth: Fix a refcnt underflow problem for hci_conn
- Bluetooth: vhci: Fix race when opening vhci device
- Bluetooth: hci_event: Fix coding style
- Bluetooth: avoid memcmp() out of bounds warning
- ice: fix over-shifted variable
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- regmap: fix NULL deref on lookup
- KVM: x86: Mask LVTPC when handling a PMI
- netfilter: nft_payload: fix wrong mac header matching
- qed: fix LL2 RX buffer allocation
- xfrm: fix a data-race in xfrm_gen_index()
- xfrm: interface: use DEV_STATS_INC()
- net: ipv4: fix return value check in esp_remove_trailer
- net: ipv6: fix return value check in esp_remove_trailer
- net: rfkill: gpio: prevent value glitch during probe
- tcp: fix excessive TLP and RACK timeouts from HZ rounding
- tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
- tun: prevent negative ifindex
- ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
- i40e: prevent crash on probe if hw registers have invalid values
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
- netfilter: nft_set_rbtree: .deactivate fails if element has expired
- net: pktgen: Fix interface flags printing
- resource: Add irqresource_disabled()
- ACPI: Drop acpi_dev_irqresource_disabled()
- ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
- ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
- ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
- ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
- btrfs: initialize start_slot in btrfs_log_prealloc_extents
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
- overlayfs: set ctime when setting mtime and atime
- gpio: timberdale: Fix potential deadlock on &tgpio->lock
- ata: libata-eh: Fix compilation warning in ata_eh_link_report()
- tracing: relax trace_event_eval_update() execution with cond_resched()
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
- Bluetooth: Avoid redundant authentication
- Bluetooth: hci_core: Fix build warnings
- wifi: mac80211: allow transmitting EAPOL frames with tainted key
- wifi: cfg80211: avoid leaking stack data into trace
- regulator/core: Revert "fix kobject release warning and memory leak in
regulator_register()"
- sky2: Make sure there is at least one frag_addr available
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
- btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
- Bluetooth: hci_event: Fix using memcmp when comparing keys
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
- mtd: spinand: micron: correct bitmask for ecc status
- mtd: physmap-core: Restore map_rom fallback
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
- mmc: core: Capture correct oemid-bits for eMMC cards
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
- USB: serial: option: add entry for Sierra EM9191 with new firmware
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
- s390/pci: fix iommu bitmap allocation
- gpio: vf610: set value before the direction to avoid a glitch
- ASoC: pxa: fix a memory leak in probe()
- phy: mapphone-mdm6600: Fix runtime disable on probe
- phy: mapphone-mdm6600: Fix runtime PM for remove
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
- xfrm6: fix inet6_dev refcount underflow problem
- Linux 5.4.259
* Focal update: v5.4.258 upstream stable release (LP: #2042107)
- NFS/pNFS: Report EINVAL errors from connect() to the server
- SUNRPC: Mark the cred for revalidation if the server rejects it
- tracing: Increase trace array ref count on enable and filter files
- ata: libahci: clear pending interrupt status
- ext4: remove the 'group' parameter of ext4_trim_extent
- ext4: add new helper interface ext4_try_to_trim_range()
- ext4: scope ret locally in ext4_try_to_trim_range()
- ext4: change s_last_trim_minblks type to unsigned long
- ext4: mark group as trimmed only if it was fully scanned
- ext4: replace the traditional ternary conditional operator with with
max()/min()
- ext4: move setting of trimmed bit into ext4_try_to_trim_range()
- ext4: do not let fstrim block system suspend
- ASoC: meson: spdifin: start hw on dai probe
- netfilter: nf_tables: disallow element removal on anonymous sets
- bpf: Avoid deadlock when using queue and stack maps from NMI
- selftests/tls: Add {} to avoid static checker warning
- selftests: tls: swap the TX and RX sockets in some tests
- ASoC: imx-audmix: Fix return error with devm_clk_get()
- i40e: Fix for persistent lldp support
- SAUCE: Revert "UBUNTU: SAUCE: i40e Fix GPF when deleting VMs"
- i40e: Remove scheduling while atomic possibility
- i40e: Fix warning message and call stack during rmmod i40e driver
- i40e: Fix VF VLAN offloading when port VLAN is configured
- powerpc/perf/hv-24x7: Update domain value check
- dccp: fix dccp_v4_err()/dccp_v6_err() again
- net: hns3: add 5ms delay before clear firmware reset irq source
- net: bridge: use DEV_STATS_INC()
- team: fix null-ptr-deref when team device type is changed
- net: rds: Fix possible NULL-pointer dereference
- gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
- i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()
- Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN
- scsi: qla2xxx: Fix update_fcport for current_topology
- scsi: qla2xxx: Fix deletion race condition
- drm/amd/display: Reinstate LFC optimization
- drm/amd/display: Fix LFC multiplier changing erratically
- drm/amd/display: prevent potential division by zero errors
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled
- clk: tegra: fix error return case for recalc_rate
- ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot
- bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
- xtensa: add default definition for XCHAL_HAVE_DIV32
- xtensa: iss/network: make functions static
- xtensa: boot: don't add include-dirs
- xtensa: boot/lib: fix function prototypes
- gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
- parisc: sba: Fix compile warning wrt list of SBA devices
- parisc: iosapic.c: Fix sparse warnings
- parisc: drivers: Fix sparse warning
- parisc: irq: Make irq_stack_union static to avoid sparse warning
- selftests/ftrace: Correctly enable event in instance-event.tc
- ring-buffer: Avoid softlockup in ring_buffer_resize()
- ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()
- spi: nxp-fspi: reset the FLSHxCR1 registers
- bpf: Clarify error expectations from bpf_clone_redirect
- powerpc/watchpoints: Annotate atomic context in more places
- ncsi: Propagate carrier gain/loss events to the NCSI controller
- fbdev/sh7760fb: Depend on FB=y
- nvme-pci: do not set the NUMA node of device if it has none
- watchdog: iTCO_wdt: No need to stop the timer in probe
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
- i40e: improve locking of mac_filter_hash
- i40e: always propagate error value in i40e_set_vsi_promisc()
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc
- smack: Record transmuting in smk_transmuted
- smack: Retrieve transmuting information in smack_inode_getsecurity()
- Smack:- Use overlay inode label in smack_inode_copy_up()
- serial: 8250_port: Check IRQ data before use
- nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre
M70q
- ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES
- i2c: i801: unregister tco_pdev in i801_probe() error path
- ring-buffer: Update "shortest_full" in polling
- btrfs: properly report 0 avail for very full file systems
- net: thunderbolt: Fix TCPv6 GSO checksum calculation
- ata: libata-core: Fix ata_port_request_pm() locking
- ata: libata-core: Fix port and device removal
- ata: libata-core: Do not register PM operations for SAS ports
- ata: libata-sata: increase PMP SRST timeout to 10s
- fs: binfmt_elf_efpic: fix personality for ELF-FDPIC
- rbd: move rbd_dev_refresh() definition
- rbd: decouple header read-in from updating rbd_dev->header
- rbd: decouple parent info read-in from updating rbd_dev
- rbd: take header_rwsem in rbd_dev_refresh() only when updating
- Revert "PCI: qcom: Disable write access to read only registers for IP
v2.3.3"
- scsi: zfcp: Fix a double put in zfcp_port_enqueue()
- qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info
- wifi: mwifiex: Fix tlv_buf_left calculation
- net: replace calls to sock->ops->connect() with kernel_connect()
- net: prevent rewrite of msg_name in sock_sendmsg()
- wifi: iwlwifi: dbg_ini: fix structure packing
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
- drivers/net: process the result of hdlc_open() and add call of hdlc_close()
in uhdlc_close()
- wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
- regmap: rbtree: Fix wrong register marked as in-cache when creating new node
- ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig
- scsi: target: core: Fix deadlock due to recursive locking
- NFS4: Trace state recovery operation
- NFS: Add a helper nfs_client_for_each_server()
- NFSv4: Fix a nfs4_state_manager() race
- modpost: add missing else to the "of" check
- net: fix possible store tearing in neigh_periodic_work()
- ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
- net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
- net: nfc: llcp: Add lock when modifying device list
- netfilter: handle the connecting collision properly in
nf_conntrack_proto_sctp
- net: stmmac: dwmac-stm32: fix resume on STM32 MCU
- tcp: fix quick-ack counting to count actual ACKs of new data
- tcp: fix delayed ACKs for MSS boundary condition
- sctp: update transport state when processing a dupcook packet
- sctp: update hb timer immediately after users change hb_interval
- cpupower: add Makefile dependencies for install targets
- RDMA/core: Require admin capabilities to set system parameters
- IB/mlx4: Fix the size of a buffer in add_port_entries()
- gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()
- gpio: pxa: disable pinctrl calls for MMP_GPIO
- RDMA/cma: Fix truncation compilation warning in make_cma_ports
- RDMA/uverbs: Fix typo of sizeof argument
- RDMA/siw: Fix connection failure handling
- RDMA/mlx5: Fix NULL string error
- parisc: Restore __ldcw_align for PA-RISC 2.0 processors
- NFS: Fix a race in __nfs_list_for_each_server()
- ima: rework CONFIG_IMA dependency block
- [Config] Update IMA_BLACKLIST_KEYRING and IMA_LOAD_X509
- xen/events: replace evtchn_rwlock with RCU
- Linux 5.4.258
-- Wen-chien Jesse Sung <email address hidden> Fri, 19 Jan 2024 14:50:06 +0800
-
linux-iot (5.4.0-1029.30) focal; urgency=medium
* focal/linux-iot: 5.4.0-1029.30 -proposed tracker (LP: #2048646)
* Packaging resync (LP: #1786013)
- [Packaging] remove helper scripts
[ Ubuntu: 5.4.0-170.188 ]
* focal/linux: 5.4.0-170.188 -proposed tracker (LP: #2048654)
* CVE-2023-6040
- netfilter: nf_tables: Reject tables of unsupported family
* CVE-2023-6606
- smb: client: fix OOB in smbCalcSize()
* CVE-2023-6932
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
* CVE-2023-6931
- perf/core: Add a new read format to get a number of lost samples
- perf: Fix perf_event_validate_size()
- perf: Fix perf_event_validate_size() lockdep splat
-- Wen-chien Jesse Sung <email address hidden> Mon, 15 Jan 2024 13:02:15 +0800
-
linux-iot (5.4.0-1028.29) focal; urgency=medium
* focal/linux-iot: 5.4.0-1028.29 -proposed tracker (LP: #2044528)
[ Ubuntu: 5.4.0-169.187 ]
* focal/linux: 5.4.0-169.187 -proposed tracker (LP: #2044375)
* USB bus error after upgrading to proposed kernel on lunar, jammy and focal
(LP: #2043197)
- USB: core: Fix oversight in SuperSpeed initialization
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
- [Packaging] update annotations scripts
linux-iot (5.4.0-1027.28) focal; urgency=medium
* focal/linux-iot: 5.4.0-1027.28 -proposed tracker (LP: #2041643)
[ Ubuntu: 5.4.0-168.186 ]
* focal/linux: 5.4.0-168.186 -proposed tracker (LP: #2041652)
* Focal update: v5.4.257 upstream stable release (LP: #2040284)
- erofs: ensure that the post-EOF tails are all zeroed
- ARM: pxa: remove use of symbol_get()
- mmc: au1xmmc: force non-modular build and remove symbol_get usage
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition
- serial: sc16is7xx: fix bug when first setting GPIO direction
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- pinctrl: amd: Don't show `Invalid config param` errors
- 9p: virtio: make sure 'offs' is initialized in zc_request
- ASoC: da7219: Flush pending AAD IRQ when suspending
- ASoC: da7219: Check for failure reading AAD IRQ events
- ethernet: atheros: fix return value check in atl1c_tso_csum()
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- m68k: Fix invalid .section syntax
- s390/dasd: use correct number of retries for ERP requests
- s390/dasd: fix hanging device after request requeue
- fs/nls: make load_nls() take a const parameter
- ASoc: codecs: ES8316: Fix DMIC config
- ASoC: atmel: Fix the 8K sample parameter in I2SC master
- platform/x86: intel: hid: Always call BTNL ACPI method
- platform/x86: huawei-wmi: Silence ambient light sensor
- security: keys: perform capable check only on privileged operations
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
- net: usb: qmi_wwan: add Quectel EM05GV2
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
- scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
- bnx2x: fix page fault following EEH recovery
- sctp: handle invalid error codes without calling BUG()
- cifs: add a warning when the in-flight count goes negative
- scsi: storvsc: Always set no_report_opcodes
- ALSA: seq: oss: Fix racy open/close of MIDI devices
- platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE
notifications
- powerpc/32s: Fix assembler warning about r0
- udf: Check consistency of Space Bitmap Descriptor
- udf: Handle error when adding extent to a file
- Revert "net: macsec: preserve ingress frame ordering"
- reiserfs: Check the return value from __getblk()
- eventfd: Export eventfd_ctx_do_read()
- eventfd: prevent underflow for eventfd semaphores
- new helper: lookup_positive_unlocked()
- fs: Fix error checking for d_hash_and_lookup()
- tmpfs: verify {g,u}id mount options correctly
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
- x86/asm: Make more symbols local
- x86/boot: Annotate local functions
- x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used
- cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
- bpf: Clear the probe_addr for uprobe
- tcp: tcp_enter_quickack_mode() should be static
- regmap: rbtree: Use alloc_flags for memory allocations
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in
tegra_sflash_probe()
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
in case of OOM
- wifi: mwifiex: Fix OOB and integer underflow when rx packets
- mwifiex: switch from 'pci_' to 'dma_' API
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
- crypto: stm32 - Properly handle pm_runtime_get failing
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
- crypto: caam - fix unchecked return value error
- hwrng: iproc-rng200 - use semicolons rather than commas to separate
statements
- hwrng: iproc-rng200 - Implement suspend and resume calls
- lwt: Fix return values of BPF xmit ops
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
- fs: ocfs2: namei: check return value of ocfs2_add_entry()
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
- wifi: mwifiex: Fix missed return in oob checks failed path
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
- wifi: ath9k: protect WMI command response buffer replacement with a lock
- wifi: mwifiex: avoid possible NULL skb pointer dereference
- wifi: ath9k: use IS_ERR() with debugfs_create_dir()
- net: arcnet: Do not call kfree_skb() under local_irq_disable()
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer
- mlxsw: i2c: Limit single transaction buffer size
- netrom: Deny concurrent connect().
- drm/bridge: tc358764: Fix debug print parameter order
- quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
- quota: factor out dquot_write_dquot()
- quota: rename dquot_active() to inode_quota_active()
- quota: add new helper dquot_active()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- ARM: dts: BCM53573: Add cells sizes to PCIe node
- ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
- drm/etnaviv: fix dumping of active MMU context
- ARM: dts: s3c6410: move fixed clocks under root node in Mini6410
- ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410
- ARM: dts: s3c64xx: align pinctrl with dtschema
- ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
- ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210
- ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210
- ARM: dts: s5pv210: correct ethernet unit address in SMDKV210
- ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
- ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
- drm: adv7511: Fix low refresh rate register for ADV7533/5
- ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
- arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
- md/bitmap: don't set max_write_behind if there is no write mostly device
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
- drm/tegra: Remove superfluous error messages around platform_get_irq()
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
- of: unittest: fix null pointer dereferencing in
of_unittest_find_node_by_name()
- drm/armada: Fix off-by-one error in armada_overlay_get_property()
- drm/panel: simple: Add missing connector type and pixel format for AUO
T215HVN01
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
- [Config] Update annotations after CONFIG_IMA_TRUSTED_KEYRING removal
- drm/msm/mdp5: Don't leak some plane state
- smackfs: Prevent underflow in smk_set_cipso()
- audit: fix possible soft lockup in __audit_inode_child()
- drm/mediatek: Fix potential memory leak if vmap() fail
- of: unittest: Fix overlay type in apply/revert check
- ALSA: ac97: Fix possible error value of *rac97
- ipmi:ssif: Add check for kstrdup
- ipmi:ssif: Fix a memory leak when scanning for an adapter
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
- clk: sunxi-ng: Modify mismatched function name
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset
- PCI: pciehp: Use RMW accessors for changing LNKCTL
- PCI/ASPM: Use RMW accessors for changing LNKCTL
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
- powerpc/fadump: reset dump area size if fadump memory reserve fails
- PCI: Add #defines for Enter Compliance, Transmit Margin
- drm/amdgpu: Correct Transmit Margin masks
- drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions
- drm/amdgpu: Prefer pcie_capability_read_word()
- drm/amdgpu: Use RMW accessors for changing LNKCTL
- drm/radeon: Correct Transmit Margin masks
- drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions
- drm/radeon: Prefer pcie_capability_read_word()
- drm/radeon: Use RMW accessors for changing LNKCTL
- wifi: ath10k: Use RMW accessors for changing LNKCTL
- nfs/blocklayout: Use the passed in gfp flags
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
- jfs: validate max amount of blocks before allocation.
- fs: lockd: avoid possible wrong NULL parameter
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling
- media: v4l2-fwnode: simplify v4l2_fwnode_parse_link
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
- drivers: usb: smsusb: fix error handling code in smsusb_init_device
- media: dib7000p: Fix potential division by zero
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- media: cx24120: Add retval check for cx24120_message_send()
- media: mediatek: vcodec: Return NULL if no vdec_fb is found
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
- scsi: be2iscsi: Add length check when parsing nlattrs
- scsi: qla4xxx: Add length check when parsing nlattrs
- serial: sprd: getting port index via serial aliases only
- serial: sprd: remove redundant sprd_port cleanup
- serial: sprd: Assign sprd_port after initialized to avoid wrong access
- serial: sprd: Fix DMA buffer leak issue
- x86/APM: drop the duplicate APM_MINOR_DEV macro
- scsi: qedf: Do not touch __user pointer in
qedf_dbg_stop_io_on_error_cmd_read() directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
directly
- coresight: tmc: Explicit type conversions to prevent integer overflow
- dma-buf/sync_file: Fix docs syntax
- driver core: test_async: fix an error code
- IB/uverbs: Fix an potential error pointer dereference
- iommu/vt-d: Fix to flush cache of PASID directory table
- media: go7007: Remove redundant if statement
- USB: gadget: f_mass_storage: Fix unused variable warning
- media: i2c: ov5640: Configure HVP lines in s_power callback
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
- media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
- media: ov2680: Remove auto-gain and auto-exposure controls
- media: ov2680: Fix ov2680_bayer_order()
- media: ov2680: Fix vflip / hflip set functions
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
- scsi: core: Use 32-bit hostnum in scsi_host_lookup()
- scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
- amba: bus: fix refcount leak
- Revert "IB/isert: Fix incorrect release of isert connection"
- RDMA/siw: Balance the reference of cep->kref in the error path
- RDMA/siw: Correct wrong debug message
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
- HID: multitouch: Correct devm device reference for hidinput input_dev name
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
- tracing: Fix race issue between cpu buffer write and swap
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
- rpmsg: glink: Add check for kstrdup
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
- um: Fix hostaudio build errors
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
- cpufreq: Fix the race condition while updating the transition_task of policy
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
- skbuff: skb_segment, Call zero copy functions before using skbuff frags
- PM / devfreq: Fix leak in devfreq_dev_release()
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
- ipmi_si: fix a memleak in try_smi_init()
- ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
- backlight/gpio_backlight: Compare against struct fb_info.device
- backlight/bd6107: Compare against struct fb_info.device
- backlight/lv5207lp: Compare against struct fb_info.device
- xtensa: PMU: fix base address for the newer hardware
- media: dvb: symbol fixup for dvb_attach()
- ntb: Drop packets when qp link is down
- ntb: Clean up tx tail index on link down
- ntb: Fix calculation ntb_transport_tx_free_entry()
- Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
- procfs: block chmod on /proc/thread-self/comm
- parisc: Fix /proc/cpuinfo output for lscpu
- dlm: fix plock lookup when using multiple lockspaces
- dccp: Fix out of bounds access in DCCP error handler
- X.509: if signature is unsupported skip validation
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
- fsverity: skip PKCS#7 parser when keyring is empty
- pstore/ram: Check start of empty przs during init
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
- crypto: stm32 - fix loop iterating through scatterlist for DMA
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
- sc16is7xx: Set iobase to device index
- serial: sc16is7xx: fix broken port 0 uart init
- usb: typec: tcpci: clear the fault status bit
- udf: initialize newblock to 0
- drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create
- net/ipv6: SKB symmetric hash should incorporate transport ports
- scsi: qla2xxx: fix inconsistent TMF timeout
- scsi: qla2xxx: Fix erroneous link up failure
- scsi: qla2xxx: Turn off noisy message log
- scsi: qla2xxx: Remove unsupported ql2xenabledif option
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
- drm/ast: Fix DRAM init on AST2200
- lib/test_meminit: allocate pages up to order MAX_ORDER
- parisc: led: Fix LAN receive and transmit LEDs
- parisc: led: Reduce CPU overhead for disk & lan LED computation
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
- soc: qcom: qmi_encdec: Restrict string length in decode
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
- kconfig: fix possible buffer overflow
- perf annotate bpf: Don't enclose non-debug code with an assert()
- x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
- pwm: lpc32xx: Remove handling of PWM channels
- sctp: annotate data-races around sk->sk_wmem_queued
- ipv4: annotate data-races around fi->fib_dead
- net: read sk->sk_family once in sk_mc_loop()
- igb: disable virtualization features on 82580
- veth: Fixing transmit return status for dropped packets
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
- af_unix: Fix data-races around user->unix_inflight.
- af_unix: Fix data-race around unix_tot_inflight.
- af_unix: Fix data-races around sk->sk_shutdown.
- af_unix: Fix data race around sk->sk_err.
- kcm: Destroy mutex in kcm_exit_net()
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
- s390/zcrypt: don't leak memory if dev_set_name() fails
- idr: fix param name in idr_alloc_cyclic() doc
- ip_tunnels: use DEV_STATS_INC()
- net: hns3: fix the port information display when sfp is absent
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
- ata: sata_gemini: Add missing MODULE_DESCRIPTION
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION
- fuse: nlookup missing decrement in fuse_direntplus_link
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super
- mtd: rawnand: brcmnand: Fix crash during the panic_write
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
- mtd: rawnand: brcmnand: Fix potential false time out warning
- perf hists browser: Fix hierarchy mode header
- perf tools: Handle old data in PERF_RECORD_ATTR
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request
- usb: typec: bus: verify partner exists in typec_altmode_attention
- ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
- clk: imx8mm: Move 1443X/1416X PLL clock structure to common place
- net: ipv4: fix one memleak in __inet_del_ifa()
- net: ethernet: mvpp2_main: fix possible OOB write in
mvpp2_ethtool_get_rxnfc()
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
mtk_hwlro_get_fdir_all()
- r8152: check budget for r8152_poll()
- kcm: Fix memory leak in error path of kcm_sendmsg()
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
- mlxbf-tmfifo: sparse tags for config access
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- ixgbe: fix timestamp configuration code
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
- drm/amd/display: Fix a bug when searching for insert_above_mpcc
- parisc: Drop loops_per_jiffy from per_cpu struct
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode
- btrfs: output extra debug info if we failed to find an inline backref
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
- kernel/fork: beware of __put_task_struct() calling context
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler
- devlink: remove reload failed checks in params get/set callbacks
- wifi: ath9k: fix printk specifier
- wifi: mwifiex: fix fortify warning
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
- tpm_tis: Resend command to recover from data transfer errors
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
- alx: fix OOB-read compiler warning
- wifi: mac80211_hwsim: drop short frames
- drm/exynos: fix a possible null-pointer dereference due to data race in
exynos_drm_crtc_atomic_disable()
- bus: ti-sysc: Configure uart quirks for k3 SoC
- md: raid1: fix potential OOB in raid1_remove_disk()
- ext2: fix datatype of block number in ext2_xattr_set2()
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
- media: anysee: fix null-ptr-deref in anysee_master_xfer
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
- media: tuners: qt1010: replace BUG_ON with a regular error
- media: pci: cx23885: replace BUG with error return
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
- serial: cpm_uart: Avoid suspicious locking
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
- kobject: Add sanity check for kset->kobj.ktype in kset_register()
- tools features: Add feature test to check if libbfd has buildid support
- perf jevents: Make build dependency on test JSONs
- perf tools: Add an option to build without libbfd
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
- btrfs: add a helper to read the superblock metadata_uuid
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
- selftests: tracing: Fix to unmount tracefs for recovering environment
- md/raid1: fix error: ISO C90 forbids mixed declarations
- attr: block mode changes of symlinks
- btrfs: fix lockdep splat and potential deadlock after failure running
delayed items
- tracing: Have current_trace inc the trace array ref count
- tracing: Have option files inc the trace array ref count
- nfsd: fix change_info in NFSv4 RENAME replies
- tracefs: Add missing lockdown check to tracefs_create_dir()
- i2c: aspeed: Reset the i2c controller when timeout occurs
- scsi: megaraid_sas: Fix deadlock on firmware crashdump
- ext4: fix rec_len verify error
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
- drm/amdgpu: fix amdgpu_cs_p1_user_fence
- Linux 5.4.257
* Focal update: v5.4.257 upstream stable release (LP: #2040284) //
CVE-2023-39189
- netfilter: nfnetlink_osf: avoid OOB read
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-39193
- netfilter: xt_sctp: validate the flag_info count
* CVE-2023-39192
- netfilter: xt_u32: validate user space input
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-5717
- perf: Disallow mis-matched inherited group reads
* CVE-2023-5178
- nvmet-tcp: move send/recv error handling in the send/recv methods instead of
call-sites
- nvmet-tcp: Fix a possible UAF in queue intialization setup
* CVE-2023-42754
- ipv4: fix null-deref in ipv4_link_failure
* Focal update: v5.4.256 upstream stable release (LP: #2039446)
- powerpc/pmac/smp: Avoid unused-variable warnings
- powerpc/pmac/smp: Drop unnecessary volatile qualifier
- Revert "MIPS: Alchemy: fix dbdma2"
- Linux 5.4.256
* Focal update: v5.4.255 upstream stable release (LP: #2039440)
- mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- selftests: forwarding: tc_flower: Relax success criterion
- macsec: Fix traffic counters/statistics
- macsec: use DEV_STATS_INC()
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- MIPS: dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- media: platform: mediatek: vpu: fix NULL ptr dereference
- usb: chipidea: imx: don't request QoS for imx8ulp
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- Bluetooth: L2CAP: Fix use-after-free
- drm/amdgpu: Fix potential fence use-after-free v2
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- powerpc/kasan: Disable KCOV in KASAN code
- IMA: allow/fix UML builds
- iio: add addac subdirectory
- iio: adc: stx104: Utilize iomap interface
- iio: adc: stx104: Implement and utilize register structures
- iio: stx104: Move to addac subdirectory
- iio: addac: stx104: Fix race condition for stx104_write_raw()
- iio: addac: stx104: Fix race condition when converting analog-to-digital
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
- PM-runtime: add tracepoints for usage_count changes
- PM: runtime: Add pm_runtime_get_if_active()
- ALSA: hda: Fix unhandled register update during auto-suspend period
- irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
- irqchip/mips-gic: Use raw spinlock for gic_lock
- interconnect: Move internal structs into a separate file
- interconnect: Add helpers for enabling/disabling a path
- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs
- USB: dwc3: qcom: fix NULL-deref on suspend
- mmc: bcm2835: fix deferred probing
- mmc: sunxi: fix deferred probing
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- net/ncsi: Fix gma flag setting after response
- nfsd4: kill warnings on testing stateids with mismatched clientids
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- virtio-mmio: convert to devm_platform_ioremap_resource
- virtio-mmio: Use to_virtio_mmio_device() to simply code
- virtio-mmio: don't break lifecycle of vm_dev
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- fbdev: mmp: fix value check in mmphw_probe()
- powerpc/rtas_flash: allow user copy to flash block cache objects
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- selftests: mirror_gre_changes: Tighten up the TTL test match
- ipvs: fix racy memcpy in proc_do_sync_threshold
- netfilter: nft_dynset: disallow object maps
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- bus: ti-sysc: Improve reset to work with modules with no sysconfig
- bus: ti-sysc: Flush posted write on enable before reset
- ARM: dts: imx7s: Drop dma-apb interrupt-names
- ARM: dts: imx: Adjust dma-apbh node name
- ARM: dts: imx: Set default tuning step for imx7d usdhc
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- ASoC: rt5665: add missed regulator_bulk_disable
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- virtio-net: set queues after driver_ok
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
- net: phy: broadcom: stub c45 read/write for 54810
- PCI: acpiphp: Reassign resources on bridge if necessary
- dlm: improve plock logging if interrupted
- dlm: replace usage of found with dedicated list iterator variable
- fs: dlm: add pid to debug log
- fs: dlm: change plock interrupted message to debug again
- fs: dlm: use dlm_plock_info for do_unlock_close
- fs: dlm: fix mismatch of plock results from userspace
- MIPS: cpu-features: Enable octeon_cache by cpu_type
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features
- fbdev: Improve performance of sys_imageblit()
- fbdev: Fix sys_imageblit() for arbitrary image widths
- fbdev: fix potential OOB read in fast_imageblit()
- dm integrity: increase RECALC_SECTORS to improve recalculate speed
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- ALSA: pcm: Set per-card upper limit of PCM buffer allocations
- ALSA: pcm: Use SG-buffer only when direct DMA is available
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- regmap: Account for register length in SMBus I/O limits
- ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger()
- ASoC: fsl_sai: Add new added registers and new bit definition
- ASoC: fsl_sai: Disable bit clock with transmitter
- drm/amd/display: do not wait for mpc idle if tg is disabled
- drm/amd/display: check TG is non-null before checking if enabled
- tracing: Fix memleak due to race between current_tracer and trace
- octeontx2-af: SDP: fix receive link config
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- net: bgmac: Fix return value check for fixed_phy_register()
- net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- igb: Avoid starting unnecessary workqueues
- net/sched: fix a qdisc modification with ambiguous command request
- net: remove bond_slave_has_mac_rcu()
- bonding: fix macvlan over alb bond support
- ibmveth: Use dcbf rather than dcbfl
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- radix tree: remove unused variable
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root
bus
- drm/display/dp: Fix the DP DSC Receiver cap size
- mm: allow a controlled amount of unfairness in the page lock
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- ALSA: pcm: Fix build error on m68k and others
- Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available"
- interconnect: Do not skip aggregation for disabled paths
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing
it
- Documentation/sysctl: document page_lock_unfairness
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
- pinctrl: renesas: rza2: Add lock around
pinctrl_generic{{add,remove}_group,{add,remove}_function}
- dma-buf/sw_sync: Avoid recursive lock during fence signal
- Linux 5.4.255
* Focal update: v5.4.254 upstream stable release (LP: #2039291)
- mmc: moxart: read scr register without changing byte order
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- radix tree test suite: fix incorrect allocation size for pthreads
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- iio: cros_ec: Fix the allocation size for cros_ec_command
- binder: fix memory leak in binder_init()
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- usb: dwc3: Properly handle processing of pending events
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
- x86: Move gds_ucode_mitigated() declaration to header
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- selftests/rseq: Fix build with undefined __weak
- mISDN: Update parameter type of dsp_cmx_send()
- net/packet: annotate data-races around tp->status
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- IB/hfi1: Fix possible panic during hotplug remove
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- dmaengine: mcf-edma: Fix a potential un-allocated memory access
- net/mlx5: Allow 0 for total host VFs
- ibmvnic: Handle DMA unmapping of login buffs in release functions
- btrfs: don't stop integrity writeback too early
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: 53c700: Check that command slot is not NULL
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- alpha: remove __init annotation from exported page_is_ram()
- sch_netem: fix issues in netem_change() vs get_dist_table()
- Linux 5.4.254
* Focal update: v5.4.253 upstream stable release (LP: #2038652)
- jbd2: fix incorrect code style
- jbd2: fix kernel-doc markups
- jbd2: remove redundant buffer io error checks
- jbd2: recheck chechpointing non-dirty buffer
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- bcache: remove 'int n' from parameter list of bch_bucket_alloc_set()
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- btrfs: qgroup: catch reserved space leaks at unmount time
- btrfs: fix race between quota disable and relocation
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info
- ext4: Fix reusing stale buffer heads from last failed mounting
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- dlm: cleanup plock_op vs plock_xop
- dlm: rearrange async condition return
- fs: dlm: interrupt posix locks only when process is killed
- ftrace: Add information on number of page groups allocated
- ftrace: Check if pages were allocated before calling free_pages()
- ftrace: Store the order of pages allocated in ftrace_page
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- pwm: meson: Remove redundant assignment to variable fin_freq
- pwm: meson: Simplify duplicated per-channel tracking
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c
- scsi: qla2xxx: Array index may go out of bound
- uapi: General notification queue definitions
- keys: Fix linking a duplicate key to a keyring's assoc_array
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- vxlan: calculate correct header length for GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- virtio-net: fix race between set queues and probe
- s390/dasd: fix hanging device after quiesce/resume
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- btrfs: qgroup: remove one-time use variables for quota_root checks
- btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
- perf: Fix function pointer case
- loop: Select I/O scheduler 'none' from inside add_disk()
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- KVM: s390: fix sthyi error handling
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- perf test uprobe_from_different_cu: Skip if there is no gcc
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- driver core: add device probe log helper
- net: ll_temac: Switch to use dev_err_probe() helper
- net: ll_temac: fix error checking of irq_of_parse_and_map()
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- mtd: spinand: toshiba: Fix ecc_get_status
- mtd: rawnand: meson: fix OOB available bytes for ECC
- fs/sysv: Null check to prevent null-ptr-deref bug
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- ext2: Drop fragment support
- test_firmware: prevent race conditions by a correct implementation of
locking
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
- mtd: rawnand: omap_elm: Fix incorrect type in assignment
- powerpc/mm/altmap: Fix altmap boundary check
- selftests/rseq: check if libc rseq support is registered
- selftests/rseq: Play nice with binaries statically linked against glibc
2.35+
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called
- PM: sleep: wakeirq: fix wake irq arming
- ceph: show tasks waiting on caps in debugfs caps file
- ceph: use kill_anon_super helper
- ceph: defer stopping mdsc delayed_work
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal
- ARM: dts: imx6sll: Make ssi node name same as other platforms
- ARM: dts: imx: Align L2 cache-controller nodename with dtschema
- ARM: dts: imx: add usb alias
- ARM: dts: imx6sll: fixup of operating points
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
- driver core: Annotate dev_err_probe() with __must_check
- driver code: print symbolic error code
- drivers: core: fix kernel-doc markup for dev_err_probe()
- Revert "driver core: Annotate dev_err_probe() with __must_check"
- Linux 5.4.253
- Upstream stable to v5.4.253
* CVE-2023-37453
- USB: hub: Clean up use of port initialization schemes and retries
- USB: hub: Add Kconfig option to reduce number of port initialization retries
- USB: core: Unite old scheme and new scheme descriptor reads
- usb: hub: Check device descriptor before resusciation
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Roxana Nicolescu <email address hidden> Fri, 24 Nov 2023 16:35:05 +0100
-
linux-iot (5.4.0-1027.28) focal; urgency=medium
* focal/linux-iot: 5.4.0-1027.28 -proposed tracker (LP: #2041643)
[ Ubuntu: 5.4.0-168.186 ]
* focal/linux: 5.4.0-168.186 -proposed tracker (LP: #2041652)
* Focal update: v5.4.257 upstream stable release (LP: #2040284)
- erofs: ensure that the post-EOF tails are all zeroed
- ARM: pxa: remove use of symbol_get()
- mmc: au1xmmc: force non-modular build and remove symbol_get usage
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition
- serial: sc16is7xx: fix bug when first setting GPIO direction
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- pinctrl: amd: Don't show `Invalid config param` errors
- 9p: virtio: make sure 'offs' is initialized in zc_request
- ASoC: da7219: Flush pending AAD IRQ when suspending
- ASoC: da7219: Check for failure reading AAD IRQ events
- ethernet: atheros: fix return value check in atl1c_tso_csum()
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- m68k: Fix invalid .section syntax
- s390/dasd: use correct number of retries for ERP requests
- s390/dasd: fix hanging device after request requeue
- fs/nls: make load_nls() take a const parameter
- ASoc: codecs: ES8316: Fix DMIC config
- ASoC: atmel: Fix the 8K sample parameter in I2SC master
- platform/x86: intel: hid: Always call BTNL ACPI method
- platform/x86: huawei-wmi: Silence ambient light sensor
- security: keys: perform capable check only on privileged operations
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
- net: usb: qmi_wwan: add Quectel EM05GV2
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
- scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
- bnx2x: fix page fault following EEH recovery
- sctp: handle invalid error codes without calling BUG()
- cifs: add a warning when the in-flight count goes negative
- scsi: storvsc: Always set no_report_opcodes
- ALSA: seq: oss: Fix racy open/close of MIDI devices
- platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE
notifications
- powerpc/32s: Fix assembler warning about r0
- udf: Check consistency of Space Bitmap Descriptor
- udf: Handle error when adding extent to a file
- Revert "net: macsec: preserve ingress frame ordering"
- reiserfs: Check the return value from __getblk()
- eventfd: Export eventfd_ctx_do_read()
- eventfd: prevent underflow for eventfd semaphores
- new helper: lookup_positive_unlocked()
- fs: Fix error checking for d_hash_and_lookup()
- tmpfs: verify {g,u}id mount options correctly
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
- x86/asm: Make more symbols local
- x86/boot: Annotate local functions
- x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used
- cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
- bpf: Clear the probe_addr for uprobe
- tcp: tcp_enter_quickack_mode() should be static
- regmap: rbtree: Use alloc_flags for memory allocations
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in
tegra_sflash_probe()
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
in case of OOM
- wifi: mwifiex: Fix OOB and integer underflow when rx packets
- mwifiex: switch from 'pci_' to 'dma_' API
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
- crypto: stm32 - Properly handle pm_runtime_get failing
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
- crypto: caam - fix unchecked return value error
- hwrng: iproc-rng200 - use semicolons rather than commas to separate
statements
- hwrng: iproc-rng200 - Implement suspend and resume calls
- lwt: Fix return values of BPF xmit ops
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
- fs: ocfs2: namei: check return value of ocfs2_add_entry()
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
- wifi: mwifiex: Fix missed return in oob checks failed path
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
- wifi: ath9k: protect WMI command response buffer replacement with a lock
- wifi: mwifiex: avoid possible NULL skb pointer dereference
- wifi: ath9k: use IS_ERR() with debugfs_create_dir()
- net: arcnet: Do not call kfree_skb() under local_irq_disable()
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer
- mlxsw: i2c: Limit single transaction buffer size
- netrom: Deny concurrent connect().
- drm/bridge: tc358764: Fix debug print parameter order
- quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
- quota: factor out dquot_write_dquot()
- quota: rename dquot_active() to inode_quota_active()
- quota: add new helper dquot_active()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- ARM: dts: BCM53573: Add cells sizes to PCIe node
- ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
- drm/etnaviv: fix dumping of active MMU context
- ARM: dts: s3c6410: move fixed clocks under root node in Mini6410
- ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410
- ARM: dts: s3c64xx: align pinctrl with dtschema
- ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
- ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210
- ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210
- ARM: dts: s5pv210: correct ethernet unit address in SMDKV210
- ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
- ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
- drm: adv7511: Fix low refresh rate register for ADV7533/5
- ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
- arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
- md/bitmap: don't set max_write_behind if there is no write mostly device
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
- drm/tegra: Remove superfluous error messages around platform_get_irq()
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
- of: unittest: fix null pointer dereferencing in
of_unittest_find_node_by_name()
- drm/armada: Fix off-by-one error in armada_overlay_get_property()
- drm/panel: simple: Add missing connector type and pixel format for AUO
T215HVN01
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
- [Config] Update annotations after CONFIG_IMA_TRUSTED_KEYRING removal
- drm/msm/mdp5: Don't leak some plane state
- smackfs: Prevent underflow in smk_set_cipso()
- audit: fix possible soft lockup in __audit_inode_child()
- drm/mediatek: Fix potential memory leak if vmap() fail
- of: unittest: Fix overlay type in apply/revert check
- ALSA: ac97: Fix possible error value of *rac97
- ipmi:ssif: Add check for kstrdup
- ipmi:ssif: Fix a memory leak when scanning for an adapter
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
- clk: sunxi-ng: Modify mismatched function name
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset
- PCI: pciehp: Use RMW accessors for changing LNKCTL
- PCI/ASPM: Use RMW accessors for changing LNKCTL
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
- powerpc/fadump: reset dump area size if fadump memory reserve fails
- PCI: Add #defines for Enter Compliance, Transmit Margin
- drm/amdgpu: Correct Transmit Margin masks
- drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions
- drm/amdgpu: Prefer pcie_capability_read_word()
- drm/amdgpu: Use RMW accessors for changing LNKCTL
- drm/radeon: Correct Transmit Margin masks
- drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions
- drm/radeon: Prefer pcie_capability_read_word()
- drm/radeon: Use RMW accessors for changing LNKCTL
- wifi: ath10k: Use RMW accessors for changing LNKCTL
- nfs/blocklayout: Use the passed in gfp flags
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
- jfs: validate max amount of blocks before allocation.
- fs: lockd: avoid possible wrong NULL parameter
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling
- media: v4l2-fwnode: simplify v4l2_fwnode_parse_link
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
- drivers: usb: smsusb: fix error handling code in smsusb_init_device
- media: dib7000p: Fix potential division by zero
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- media: cx24120: Add retval check for cx24120_message_send()
- media: mediatek: vcodec: Return NULL if no vdec_fb is found
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
- scsi: be2iscsi: Add length check when parsing nlattrs
- scsi: qla4xxx: Add length check when parsing nlattrs
- serial: sprd: getting port index via serial aliases only
- serial: sprd: remove redundant sprd_port cleanup
- serial: sprd: Assign sprd_port after initialized to avoid wrong access
- serial: sprd: Fix DMA buffer leak issue
- x86/APM: drop the duplicate APM_MINOR_DEV macro
- scsi: qedf: Do not touch __user pointer in
qedf_dbg_stop_io_on_error_cmd_read() directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
directly
- coresight: tmc: Explicit type conversions to prevent integer overflow
- dma-buf/sync_file: Fix docs syntax
- driver core: test_async: fix an error code
- IB/uverbs: Fix an potential error pointer dereference
- iommu/vt-d: Fix to flush cache of PASID directory table
- media: go7007: Remove redundant if statement
- USB: gadget: f_mass_storage: Fix unused variable warning
- media: i2c: ov5640: Configure HVP lines in s_power callback
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
- media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
- media: ov2680: Remove auto-gain and auto-exposure controls
- media: ov2680: Fix ov2680_bayer_order()
- media: ov2680: Fix vflip / hflip set functions
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
- scsi: core: Use 32-bit hostnum in scsi_host_lookup()
- scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
- amba: bus: fix refcount leak
- Revert "IB/isert: Fix incorrect release of isert connection"
- RDMA/siw: Balance the reference of cep->kref in the error path
- RDMA/siw: Correct wrong debug message
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
- HID: multitouch: Correct devm device reference for hidinput input_dev name
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
- tracing: Fix race issue between cpu buffer write and swap
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
- rpmsg: glink: Add check for kstrdup
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
- um: Fix hostaudio build errors
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
- cpufreq: Fix the race condition while updating the transition_task of policy
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
- skbuff: skb_segment, Call zero copy functions before using skbuff frags
- PM / devfreq: Fix leak in devfreq_dev_release()
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
- ipmi_si: fix a memleak in try_smi_init()
- ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
- backlight/gpio_backlight: Compare against struct fb_info.device
- backlight/bd6107: Compare against struct fb_info.device
- backlight/lv5207lp: Compare against struct fb_info.device
- xtensa: PMU: fix base address for the newer hardware
- media: dvb: symbol fixup for dvb_attach()
- ntb: Drop packets when qp link is down
- ntb: Clean up tx tail index on link down
- ntb: Fix calculation ntb_transport_tx_free_entry()
- Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
- procfs: block chmod on /proc/thread-self/comm
- parisc: Fix /proc/cpuinfo output for lscpu
- dlm: fix plock lookup when using multiple lockspaces
- dccp: Fix out of bounds access in DCCP error handler
- X.509: if signature is unsupported skip validation
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
- fsverity: skip PKCS#7 parser when keyring is empty
- pstore/ram: Check start of empty przs during init
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
- crypto: stm32 - fix loop iterating through scatterlist for DMA
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
- sc16is7xx: Set iobase to device index
- serial: sc16is7xx: fix broken port 0 uart init
- usb: typec: tcpci: clear the fault status bit
- udf: initialize newblock to 0
- drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create
- net/ipv6: SKB symmetric hash should incorporate transport ports
- scsi: qla2xxx: fix inconsistent TMF timeout
- scsi: qla2xxx: Fix erroneous link up failure
- scsi: qla2xxx: Turn off noisy message log
- scsi: qla2xxx: Remove unsupported ql2xenabledif option
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
- drm/ast: Fix DRAM init on AST2200
- lib/test_meminit: allocate pages up to order MAX_ORDER
- parisc: led: Fix LAN receive and transmit LEDs
- parisc: led: Reduce CPU overhead for disk & lan LED computation
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
- soc: qcom: qmi_encdec: Restrict string length in decode
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
- kconfig: fix possible buffer overflow
- perf annotate bpf: Don't enclose non-debug code with an assert()
- x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
- pwm: lpc32xx: Remove handling of PWM channels
- sctp: annotate data-races around sk->sk_wmem_queued
- ipv4: annotate data-races around fi->fib_dead
- net: read sk->sk_family once in sk_mc_loop()
- igb: disable virtualization features on 82580
- veth: Fixing transmit return status for dropped packets
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
- af_unix: Fix data-races around user->unix_inflight.
- af_unix: Fix data-race around unix_tot_inflight.
- af_unix: Fix data-races around sk->sk_shutdown.
- af_unix: Fix data race around sk->sk_err.
- kcm: Destroy mutex in kcm_exit_net()
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
- s390/zcrypt: don't leak memory if dev_set_name() fails
- idr: fix param name in idr_alloc_cyclic() doc
- ip_tunnels: use DEV_STATS_INC()
- net: hns3: fix the port information display when sfp is absent
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
- ata: sata_gemini: Add missing MODULE_DESCRIPTION
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION
- fuse: nlookup missing decrement in fuse_direntplus_link
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super
- mtd: rawnand: brcmnand: Fix crash during the panic_write
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
- mtd: rawnand: brcmnand: Fix potential false time out warning
- perf hists browser: Fix hierarchy mode header
- perf tools: Handle old data in PERF_RECORD_ATTR
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request
- usb: typec: bus: verify partner exists in typec_altmode_attention
- ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
- clk: imx8mm: Move 1443X/1416X PLL clock structure to common place
- net: ipv4: fix one memleak in __inet_del_ifa()
- net: ethernet: mvpp2_main: fix possible OOB write in
mvpp2_ethtool_get_rxnfc()
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
mtk_hwlro_get_fdir_all()
- r8152: check budget for r8152_poll()
- kcm: Fix memory leak in error path of kcm_sendmsg()
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
- mlxbf-tmfifo: sparse tags for config access
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- ixgbe: fix timestamp configuration code
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
- drm/amd/display: Fix a bug when searching for insert_above_mpcc
- parisc: Drop loops_per_jiffy from per_cpu struct
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode
- btrfs: output extra debug info if we failed to find an inline backref
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
- kernel/fork: beware of __put_task_struct() calling context
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler
- devlink: remove reload failed checks in params get/set callbacks
- wifi: ath9k: fix printk specifier
- wifi: mwifiex: fix fortify warning
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
- tpm_tis: Resend command to recover from data transfer errors
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
- alx: fix OOB-read compiler warning
- wifi: mac80211_hwsim: drop short frames
- drm/exynos: fix a possible null-pointer dereference due to data race in
exynos_drm_crtc_atomic_disable()
- bus: ti-sysc: Configure uart quirks for k3 SoC
- md: raid1: fix potential OOB in raid1_remove_disk()
- ext2: fix datatype of block number in ext2_xattr_set2()
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
- media: anysee: fix null-ptr-deref in anysee_master_xfer
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
- media: tuners: qt1010: replace BUG_ON with a regular error
- media: pci: cx23885: replace BUG with error return
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
- serial: cpm_uart: Avoid suspicious locking
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
- kobject: Add sanity check for kset->kobj.ktype in kset_register()
- tools features: Add feature test to check if libbfd has buildid support
- perf jevents: Make build dependency on test JSONs
- perf tools: Add an option to build without libbfd
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
- btrfs: add a helper to read the superblock metadata_uuid
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
- selftests: tracing: Fix to unmount tracefs for recovering environment
- md/raid1: fix error: ISO C90 forbids mixed declarations
- attr: block mode changes of symlinks
- btrfs: fix lockdep splat and potential deadlock after failure running
delayed items
- tracing: Have current_trace inc the trace array ref count
- tracing: Have option files inc the trace array ref count
- nfsd: fix change_info in NFSv4 RENAME replies
- tracefs: Add missing lockdown check to tracefs_create_dir()
- i2c: aspeed: Reset the i2c controller when timeout occurs
- scsi: megaraid_sas: Fix deadlock on firmware crashdump
- ext4: fix rec_len verify error
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
- drm/amdgpu: fix amdgpu_cs_p1_user_fence
- Linux 5.4.257
* Focal update: v5.4.257 upstream stable release (LP: #2040284) //
CVE-2023-39189
- netfilter: nfnetlink_osf: avoid OOB read
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-39193
- netfilter: xt_sctp: validate the flag_info count
* CVE-2023-39192
- netfilter: xt_u32: validate user space input
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-5717
- perf: Disallow mis-matched inherited group reads
* CVE-2023-5178
- nvmet-tcp: move send/recv error handling in the send/recv methods instead of
call-sites
- nvmet-tcp: Fix a possible UAF in queue intialization setup
* CVE-2023-42754
- ipv4: fix null-deref in ipv4_link_failure
* Focal update: v5.4.256 upstream stable release (LP: #2039446)
- powerpc/pmac/smp: Avoid unused-variable warnings
- powerpc/pmac/smp: Drop unnecessary volatile qualifier
- Revert "MIPS: Alchemy: fix dbdma2"
- Linux 5.4.256
* Focal update: v5.4.255 upstream stable release (LP: #2039440)
- mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- selftests: forwarding: tc_flower: Relax success criterion
- macsec: Fix traffic counters/statistics
- macsec: use DEV_STATS_INC()
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- MIPS: dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- media: platform: mediatek: vpu: fix NULL ptr dereference
- usb: chipidea: imx: don't request QoS for imx8ulp
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- Bluetooth: L2CAP: Fix use-after-free
- drm/amdgpu: Fix potential fence use-after-free v2
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- powerpc/kasan: Disable KCOV in KASAN code
- IMA: allow/fix UML builds
- iio: add addac subdirectory
- iio: adc: stx104: Utilize iomap interface
- iio: adc: stx104: Implement and utilize register structures
- iio: stx104: Move to addac subdirectory
- iio: addac: stx104: Fix race condition for stx104_write_raw()
- iio: addac: stx104: Fix race condition when converting analog-to-digital
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
- PM-runtime: add tracepoints for usage_count changes
- PM: runtime: Add pm_runtime_get_if_active()
- ALSA: hda: Fix unhandled register update during auto-suspend period
- irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
- irqchip/mips-gic: Use raw spinlock for gic_lock
- interconnect: Move internal structs into a separate file
- interconnect: Add helpers for enabling/disabling a path
- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs
- USB: dwc3: qcom: fix NULL-deref on suspend
- mmc: bcm2835: fix deferred probing
- mmc: sunxi: fix deferred probing
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- net/ncsi: Fix gma flag setting after response
- nfsd4: kill warnings on testing stateids with mismatched clientids
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- virtio-mmio: convert to devm_platform_ioremap_resource
- virtio-mmio: Use to_virtio_mmio_device() to simply code
- virtio-mmio: don't break lifecycle of vm_dev
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- fbdev: mmp: fix value check in mmphw_probe()
- powerpc/rtas_flash: allow user copy to flash block cache objects
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- selftests: mirror_gre_changes: Tighten up the TTL test match
- ipvs: fix racy memcpy in proc_do_sync_threshold
- netfilter: nft_dynset: disallow object maps
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- bus: ti-sysc: Improve reset to work with modules with no sysconfig
- bus: ti-sysc: Flush posted write on enable before reset
- ARM: dts: imx7s: Drop dma-apb interrupt-names
- ARM: dts: imx: Adjust dma-apbh node name
- ARM: dts: imx: Set default tuning step for imx7d usdhc
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- ASoC: rt5665: add missed regulator_bulk_disable
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- virtio-net: set queues after driver_ok
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
- net: phy: broadcom: stub c45 read/write for 54810
- PCI: acpiphp: Reassign resources on bridge if necessary
- dlm: improve plock logging if interrupted
- dlm: replace usage of found with dedicated list iterator variable
- fs: dlm: add pid to debug log
- fs: dlm: change plock interrupted message to debug again
- fs: dlm: use dlm_plock_info for do_unlock_close
- fs: dlm: fix mismatch of plock results from userspace
- MIPS: cpu-features: Enable octeon_cache by cpu_type
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features
- fbdev: Improve performance of sys_imageblit()
- fbdev: Fix sys_imageblit() for arbitrary image widths
- fbdev: fix potential OOB read in fast_imageblit()
- dm integrity: increase RECALC_SECTORS to improve recalculate speed
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- ALSA: pcm: Set per-card upper limit of PCM buffer allocations
- ALSA: pcm: Use SG-buffer only when direct DMA is available
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- regmap: Account for register length in SMBus I/O limits
- ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger()
- ASoC: fsl_sai: Add new added registers and new bit definition
- ASoC: fsl_sai: Disable bit clock with transmitter
- drm/amd/display: do not wait for mpc idle if tg is disabled
- drm/amd/display: check TG is non-null before checking if enabled
- tracing: Fix memleak due to race between current_tracer and trace
- octeontx2-af: SDP: fix receive link config
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- net: bgmac: Fix return value check for fixed_phy_register()
- net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- igb: Avoid starting unnecessary workqueues
- net/sched: fix a qdisc modification with ambiguous command request
- net: remove bond_slave_has_mac_rcu()
- bonding: fix macvlan over alb bond support
- ibmveth: Use dcbf rather than dcbfl
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- radix tree: remove unused variable
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root
bus
- drm/display/dp: Fix the DP DSC Receiver cap size
- mm: allow a controlled amount of unfairness in the page lock
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- ALSA: pcm: Fix build error on m68k and others
- Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available"
- interconnect: Do not skip aggregation for disabled paths
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing
it
- Documentation/sysctl: document page_lock_unfairness
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
- pinctrl: renesas: rza2: Add lock around
pinctrl_generic{{add,remove}_group,{add,remove}_function}
- dma-buf/sw_sync: Avoid recursive lock during fence signal
- Linux 5.4.255
* Focal update: v5.4.254 upstream stable release (LP: #2039291)
- mmc: moxart: read scr register without changing byte order
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- radix tree test suite: fix incorrect allocation size for pthreads
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- iio: cros_ec: Fix the allocation size for cros_ec_command
- binder: fix memory leak in binder_init()
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- usb: dwc3: Properly handle processing of pending events
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
- x86: Move gds_ucode_mitigated() declaration to header
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- selftests/rseq: Fix build with undefined __weak
- mISDN: Update parameter type of dsp_cmx_send()
- net/packet: annotate data-races around tp->status
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- IB/hfi1: Fix possible panic during hotplug remove
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- dmaengine: mcf-edma: Fix a potential un-allocated memory access
- net/mlx5: Allow 0 for total host VFs
- ibmvnic: Handle DMA unmapping of login buffs in release functions
- btrfs: don't stop integrity writeback too early
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: 53c700: Check that command slot is not NULL
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- alpha: remove __init annotation from exported page_is_ram()
- sch_netem: fix issues in netem_change() vs get_dist_table()
- Linux 5.4.254
* Focal update: v5.4.253 upstream stable release (LP: #2038652)
- jbd2: fix incorrect code style
- jbd2: fix kernel-doc markups
- jbd2: remove redundant buffer io error checks
- jbd2: recheck chechpointing non-dirty buffer
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- bcache: remove 'int n' from parameter list of bch_bucket_alloc_set()
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- btrfs: qgroup: catch reserved space leaks at unmount time
- btrfs: fix race between quota disable and relocation
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info
- ext4: Fix reusing stale buffer heads from last failed mounting
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- dlm: cleanup plock_op vs plock_xop
- dlm: rearrange async condition return
- fs: dlm: interrupt posix locks only when process is killed
- ftrace: Add information on number of page groups allocated
- ftrace: Check if pages were allocated before calling free_pages()
- ftrace: Store the order of pages allocated in ftrace_page
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- pwm: meson: Remove redundant assignment to variable fin_freq
- pwm: meson: Simplify duplicated per-channel tracking
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c
- scsi: qla2xxx: Array index may go out of bound
- uapi: General notification queue definitions
- keys: Fix linking a duplicate key to a keyring's assoc_array
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- vxlan: calculate correct header length for GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- virtio-net: fix race between set queues and probe
- s390/dasd: fix hanging device after quiesce/resume
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- btrfs: qgroup: remove one-time use variables for quota_root checks
- btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
- perf: Fix function pointer case
- loop: Select I/O scheduler 'none' from inside add_disk()
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- KVM: s390: fix sthyi error handling
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- perf test uprobe_from_different_cu: Skip if there is no gcc
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- driver core: add device probe log helper
- net: ll_temac: Switch to use dev_err_probe() helper
- net: ll_temac: fix error checking of irq_of_parse_and_map()
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- mtd: spinand: toshiba: Fix ecc_get_status
- mtd: rawnand: meson: fix OOB available bytes for ECC
- fs/sysv: Null check to prevent null-ptr-deref bug
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- ext2: Drop fragment support
- test_firmware: prevent race conditions by a correct implementation of
locking
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
- mtd: rawnand: omap_elm: Fix incorrect type in assignment
- powerpc/mm/altmap: Fix altmap boundary check
- selftests/rseq: check if libc rseq support is registered
- selftests/rseq: Play nice with binaries statically linked against glibc
2.35+
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called
- PM: sleep: wakeirq: fix wake irq arming
- ceph: show tasks waiting on caps in debugfs caps file
- ceph: use kill_anon_super helper
- ceph: defer stopping mdsc delayed_work
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal
- ARM: dts: imx6sll: Make ssi node name same as other platforms
- ARM: dts: imx: Align L2 cache-controller nodename with dtschema
- ARM: dts: imx: add usb alias
- ARM: dts: imx6sll: fixup of operating points
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
- driver core: Annotate dev_err_probe() with __must_check
- driver code: print symbolic error code
- drivers: core: fix kernel-doc markup for dev_err_probe()
- Revert "driver core: Annotate dev_err_probe() with __must_check"
- Linux 5.4.253
- Upstream stable to v5.4.253
* CVE-2023-37453
- USB: hub: Clean up use of port initialization schemes and retries
- USB: hub: Add Kconfig option to reduce number of port initialization retries
- USB: core: Unite old scheme and new scheme descriptor reads
- usb: hub: Check device descriptor before resusciation
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Wen-chien Jesse Sung <email address hidden> Tue, 21 Nov 2023 13:38:32 +0800
-
linux-iot (5.4.0-1026.27) focal; urgency=medium
* focal/linux-iot: 5.4.0-1026.27 -proposed tracker (LP: #2041980)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
[ Ubuntu: 5.4.0-167.184 ]
* focal/linux: 5.4.0-167.184 -proposed tracker (LP: #2041988)
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
-- Wen-chien Jesse Sung <email address hidden> Mon, 13 Nov 2023 15:51:36 +0800
-
linux-iot (5.4.0-1025.26) focal; urgency=medium
* focal/linux-iot: 5.4.0-1025.26 -proposed tracker (LP: #2037999)
* Use new annotations model (LP: #2019000)
- [Config] iot: Migrate to the new annotations format
[ Ubuntu: 5.4.0-166.183 ]
* focal/linux: 5.4.0-166.183 -proposed tracker (LP: #2038010)
* Use new annotations model (LP: #2019000)
- [Packaging] new annotations model infrastructure
- [Packaging] config-check: Handle new annotations format 4
- [Packaging] rules: Use old-kernelconfig for old configs
- [Config] sanitize annotations
- [Config] import generated configs into annotation file
- [Packaging] kernelconfig: add i386 as supported arch
- [Config] Remove all old configs files
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- [Packaging] update annotations scripts
* fix typo in config-checks invocation (LP: #2020413)
- [Packaging] fix typo when calling the old config-check
- [Packaging] fix typo in 4-checks.mk
* support python < 3.9 with annotations (LP: #2020531)
- [Packaging] kconfig/annotations.py: support older way of merging dicts
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* Focal update: v5.4.252 upstream stable release (LP: #2036240)
- ia64/cpu: Switch to arch_cpu_finalize_init()
- m68k/cpu: Switch to arch_cpu_finalize_init()
- mips/cpu: Switch to arch_cpu_finalize_init()
- sh/cpu: Switch to arch_cpu_finalize_init()
- x86/cpufeatures: Add SEV-ES CPU feature
- x86/cpu: Add VM page flush MSR availablility as a CPUID feature
- x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX]
- tools headers cpufeatures: Sync with the kernel sources
- x86/cpu, kvm: Add support for CPUID_80000021_EAX
- Linux 5.4.252
- Upstream stable to v5.4.252
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
* Avoid address overwrite in kernel_connect (LP: #2035163)
- net: Avoid address overwrite in kernel_connect
* [regression] Unable to initialize SGX enclaves with XFRM other than 3
(LP: #2034745)
- x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* Focal update: v5.4.251 upstream stable release (LP: #2034918)
- x86/smp: Use dedicated cache-line for mwait_play_dead()
- video: imsttfb: check for ioremap() failures
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
- HID: wacom: Use ktime_t rather than int when dealing with timestamps
- drm/i915: Initialise outparam for error return from wait_for_register
- scripts/tags.sh: Resolve gtags empty index generation
- drm/amdgpu: Validate VM ioctl flags.
- bgmac: fix *initial* chip reset to support BCM5358
- x86/resctrl: Use is_closid_match() in more places
- x86/resctrl: Only show tasks' pid in current pid namespace
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- md/raid10: fix overflow of md/safe_mode_delay
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- irqchip/jcore-aic: Kill use of irq_create_strict_mappings()
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
- clocksource/drivers/cadence-ttc: Use ttc driver as platform driver
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
- PM: domains: fix integer overflow issues in genpd_parse_state()
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
- ARM: 9303/1: kprobes: avoid missing-declaration warnings
- evm: Complete description of evm_inode_setattr()
- pstore/ram: Add check for kstrdup
- ima: Fix build warnings
- wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
- samples/bpf: Fix buffer overflow in tcp_basertt
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
- wifi: mwifiex: Fix the size of a memory allocation in
mwifiex_ret_802_11_scan()
- nfc: constify several pointers to u8, char and sk_buff
- nfc: llcp: fix possible use of uninitialized variable in
nfc_llcp_send_connect()
- regulator: core: Fix more error checking for debugfs_create_dir()
- regulator: core: Streamline debugfs operations
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
- wifi: atmel: Fix an error handling path in atmel_probe()
- wl3501_cs: Fix a bunch of formatting issues related to function docs
- wl3501_cs: Remove unnecessary NULL check
- wl3501_cs: Fix misspelling and provide missing documentation
- net: create netdev->dev_addr assignment helpers
- wl3501_cs: use eth_hw_addr_set()
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
- wifi: ray_cs: Utilize strnlen() in parse_addr()
- wifi: ray_cs: Drop useless status variable in parse_addr()
- wifi: ray_cs: Fix an error handling path in ray_probe()
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
config
- watchdog/perf: more properly prevent false positives with turbo modes
- kexec: fix a memory leak in crash_shrink_memory()
- memstick r592: make memstick_debug_get_tpc_name() static
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
- wifi: iwlwifi: pull from TXQs with softirqs disabled
- wifi: cfg80211: rewrite merging of inherited elements
- wifi: ath9k: convert msecs to jiffies where needed
- netlink: fix potential deadlock in netlink_set_err()
- netlink: do not hard code device address lenth in fdb dumps
- selftests: rtnetlink: remove netdevsim device after ipsec offload test
- gtp: Fix use-after-free in __gtp_encap_destroy().
- lib/ts_bm: reset initial match offset for every block of text
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just
basic one
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
value.
- ipvlan: Fix return value of ipvlan_queue_xmit()
- netlink: Add __sock_i_ino() for __netlink_diag_dump().
- radeon: avoid double free in ci_dpm_init()
- Input: drv260x - sleep between polling GO bit
- ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
- Input: adxl34x - do not hardcode interrupt trigger type
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
- RDMA/bnxt_re: Fix to remove an unnecessary log
- ARM: dts: gta04: Move model property out of pinctrl node
- arm64: dts: qcom: msm8916: correct camss unit address
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
- ARM: ep93xx: fix missing-prototype warnings
- memory: brcmstb_dpfe: fix testing array offset after use
- ASoC: es8316: Increment max value for ALC Capture Target Volume control
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs
- soc/fsl/qe: fix usb.c build errors
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
- arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- drm/amdkfd: Fix potential deallocation of previously deallocated memory.
- drm/radeon: fix possible division-by-zero errors
- clk: tegra: tegra124-emc: Fix potential memory leak
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- clk: cdce925: check return value of kasprintf()
- clk: keystone: sci-clk: check return value of kasprintf()
- ASoC: imx-audmix: check return value of devm_kasprintf()
- scsi: qedf: Fix NULL dereference in error handling
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
- PCI: pciehp: Cancel bringup sequence if card is not present
- PCI: ftpci100: Release the clock resources
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI
- pinctrl: cherryview: Return correct value if pin in push-pull mode
- perf dwarf-aux: Fix off-by-one in die_get_varname()
- pinctrl: at91-pio4: check return value of devm_kasprintf()
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-
boundary
- hwrng: virtio - add an internal buffer
- hwrng: virtio - don't wait on cleanup
- hwrng: virtio - don't waste entropy
- hwrng: virtio - always add a pending request
- hwrng: virtio - Fix race on data_avail and actual data
- crypto: nx - fix build warnings when DEBUG_FS is not enabled
- modpost: fix section mismatch message for R_ARM_ABS32
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
- crypto: marvell/cesa - Fix type mismatch warning
- modpost: fix off by one in is_executable_section()
- ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
- hwrng: st - Fix W=1 unused variable warning
- hwrng: st - keep clock enabled while hwrng is registered
- USB: serial: option: add LARA-R6 01B PIDs
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup
- block: fix signed int overflow in Amiga partition support
- block: change all __u32 annotations to __be32 in affs_hardblocks.h
- w1: fix loop in w1_fini()
- sh: j2: Use ioremap() to translate device tree address into kernel memory
- media: usb: Check az6007_read() return value
- media: videodev2.h: Fix struct v4l2_input tuner index comment
- usb: dwc3: qcom: Fix potential memory leak
- extcon: Fix kernel doc of property fields to avoid warnings
- extcon: Fix kernel doc of property capability fields to avoid warnings
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- usb: hide unused usbfs_notify_suspend/resume functions
- mfd: rt5033: Drop rt5033-battery sub-device
- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
- mfd: intel-lpss: Add missing check for platform_get_resource
- serial: 8250_omap: Use force_suspend and resume for system suspend
- mfd: stmfx: Fix error path in stmfx_chip_init
- KVM: s390: vsie: fix the length of APCB bitmap
- mfd: stmpe: Only disable the regulators if they are enabled
- pwm: imx-tpm: force 'real_period' to be zero in suspend
- pwm: sysfs: Do not apply state to already disabled PWMs
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
- f2fs: fix error path handling in truncate_dnode()
- powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
- tcp: annotate data races in __tcp_oow_rate_limited()
- xsk: Improve documentation for AF_XDP
- xsk: Honor SO_BINDTODEVICE on bind
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames
- sh: dma: Fix DMA channel offset calculation
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
- i2c: xiic: Don't try to handle more interrupt events after error
- ALSA: jack: Fix mutex call in snd_jack_report()
- NFSD: add encoding of op_recall flag for write delegation
- mmc: core: disable TRIM on Kingston EMMC04G-M627
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
used.
- bcache: Remove unnecessary NULL point check in node allocations
- integrity: Fix possible multiple allocation in integrity_inode_get()
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
- fs: avoid empty option when generating legacy mount string
- ext4: Remove ext4 locking of moved directory
- Revert "f2fs: fix potential corruption when moving a directory"
- fs: Establish locking order for unrelated directories
- fs: Lock moved directories
- btrfs: fix race when deleting quota root from the dirty cow roots list
- ARM: orion5x: fix d2net gpio initialization
- fs: no need to check source
- fanotify: disallow mount/sb marks on kernel internal pseudo fs
- block: add overflow checks for Amiga partition support
- netfilter: nf_tables: fix nat hook table deletion
- netfilter: nftables: add helper function to set the base sequence number
- netfilter: add helper function to set up the nfnetlink header and use it
- netfilter: nf_tables: use net_generic infra for transaction data
- netfilter: nf_tables: add rescheduling points during loop detection walks
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: fix scheduling-while-atomic splat
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
- block/partition: fix signedness issue for Amiga partitions
- net: lan743x: Don't sleep in atomic context
- workqueue: clean up WORK_* constant types, clarify masking
- drm/panel: Initialise panel dev and funcs through drm_panel_init()
- drm/panel: Add and fill drm_panel type field
- drm/panel: simple: Add connector_type for innolux_at043tn24
- igc: Remove delay during TX ring configuration
- igc: set TP bit in 'supported' and 'advertising' fields of
ethtool_link_ksettings
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
- net: mvneta: fix txq_map in case of txq_number==1
- ionic: improve irq numa locality
- ionic: clean irq affinity on queue deinit
- ionic: move irq request to qcq alloc
- ionic: ionic_intr_free parameter change
- ionic: remove WARN_ON to prevent panic_on_warn
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- udp6: fix udp6_ehashfn() typo
- ntb: idt: Fix error handling in idt_pci_driver_init()
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
- NTB: ntb_transport: fix possible memory leak while device_register() fails
- NTB: ntb_tool: Add check for devm_kcalloc
- ipv6/addrconf: fix a potential refcount underflow for idev
- platform/x86: wmi: Replace UUID redefinitions by their originals
- platform/x86: wmi: Fix indentation in some cases
- platform/x86: wmi: remove unnecessary argument
- platform/x86: wmi: use guid_t and guid_equal()
- platform/x86: wmi: move variables
- platform/x86: wmi: Break possible infinite loop when parsing GUID
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
- wifi: airo: avoid uninitialized warning in airo_get_rate()
- cls_flower: Add extack support for src and dst port range options
- net/sched: flower: Ensure both minimum and maximum ports are specified
- net/sched: make psched_mtu() RTNL-less safe
- pinctrl: amd: Fix mistake in handling clearing pins at startup
- pinctrl: amd: Detect internal GPIO0 debounce handling
- pinctrl: amd: Only use special debounce behavior for GPIO 0
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
- mtd: rawnand: meson: fix unaligned DMA buffers handling
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled
- powerpc: Fail build if using recordmcount with binutils v2.37
- misc: fastrpc: Create fastrpc scalar with correct buffer count
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- erofs: fix compact 4B support for 16k block size
- ext4: fix wrong unit use in ext4_mb_clear_bb
- ext4: only update i_reserved_data_blocks on successful block allocation
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
- PCI: qcom: Disable write access to read only registers for IP v2.3.3
- PCI: rockchip: Assert PCI Configuration Enable bit after probe
- PCI: rockchip: Write PCI Device ID to correct register
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
- PCI: rockchip: Use u32 variable to access 32-bit registers
- PCI: rockchip: Set address alignment for endpoint mode
- misc: pci_endpoint_test: Free IRQs before removing the device
- misc: pci_endpoint_test: Re-init completion for every test
- md/raid0: add discard support for the 'original' layout
- fs: dlm: return positive pid value for F_GETLK
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
- drm/rockchip: vop: Leave vblank enabled in self-refresh
- serial: atmel: don't enable IRQs prematurely
- firmware: stratix10-svc: Fix a potential resource leak in
svc_create_memory_pool()
- hwrng: imx-rngc - fix the timeout for init and self check
- ceph: don't let check_caps skip sending responses for revoke msgs
- meson saradc: fix clock divider mask length
- Revert "8250: add support for ASIX devices with a FIFO bug"
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
case of error
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when
iterating clk
- tracing/histograms: Add histograms to hist_vars if they have referenced
variables
- ring-buffer: Fix deadloop issue on reading trace_pipe
- xtensa: ISS: fix call to split_if_spec
- tracing: Fix null pointer dereference in tracing_err_log_open()
- tracing/probes: Fix not to count error code to total length
- scsi: qla2xxx: Wait for io return on terminate rport
- scsi: qla2xxx: Fix potential NULL pointer dereference
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- scsi: qla2xxx: Correct the index of array
- scsi: qla2xxx: Pointer may be dereferenced
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- drm/atomic: Fix potential use-after-free in nonblocking commits
- perf probe: Add test for regression introduced by switch to
die_get_decl_file()
- btrfs: fix warning when putting transaction with qgroups enabled after abort
- fuse: revalidate: don't invalidate if interrupted
- selftests: tc: set timeout to 15 minutes
- can: bcm: Fix UAF in bcm_proc_show()
- drm/client: Fix memory leak in drm_client_target_cloned
- drm/client: Fix memory leak in drm_client_modeset_probe
- ext4: correct inline offset when handling xattrs in inode body
- debugobjects: Recheck debug_objects_enabled before reporting
- nbd: Add the maximum limit of allocated index in nbd_dev_add
- md: fix data corruption for raid456 when reshape restart while grow up
- md/raid10: prevent soft lockup while flush writes
- posix-timers: Ensure timer ID search-loop limit is valid
- arm64: mm: fix VA-range sanity check
- sched/fair: Don't balance task to its current running CPU
- bpf: Address KCSAN report on bpf_lru_list
- devlink: report devlink_port_type_warn source device
- wifi: wext-core: Fix -Wstringop-overflow warning in
ioctl_standard_iw_point()
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- igb: Fix igb_down hung on surprise removal
- spi: bcm63xx: fix max prepend length
- fbdev: imxfb: warn about invalid left/right margin
- pinctrl: amd: Use amd_pinconf_set() for all config options
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
- iavf: Fix use-after-free in free_netdev
- net:ipv6: check return value of pskb_trim()
- Revert "tcp: avoid the lookup process failing to get sk in ehash table"
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
- llc: Don't drop packet from non-root netns.
- netfilter: nf_tables: fix spurious set element insertion failure
- netfilter: nf_tables: can't schedule in nft_chain_validate
- tcp: annotate data-races around tp->tcp_tx_delay
- net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
- tcp: annotate data-races around tp->linger2
- tcp: annotate data-races around rskq_defer_accept
- tcp: annotate data-races around tp->notsent_lowat
- tcp: annotate data-races around fastopenq.max_qlen
- tracing/histograms: Return an error if we fail to add histogram to hist_vars
list
- Linux 5.4.251
* Focal update: v5.4.250 upstream stable release (LP: #2033297)
- x86/microcode/AMD: Load late on both threads too
- Linux 5.4.250
* Focal update: v5.4.249 upstream stable release (LP: #2033278)
- nilfs2: reject devices with insufficient block count
- mm: rewrite wait_on_page_bit_common() logic
- list: add "list_del_init_careful()" to go with "list_empty_careful()"
- epoll: ep_autoremove_wake_function should use list_del_init_careful
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- x86/purgatory: remove PGO flags
- tick/common: Align tick period during sched_timer setup
- media: dvbdev: Fix memleak in dvb_register_device
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- nilfs2: fix buffer corruption due to concurrent device reads
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
- PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- cgroup: Do not corrupt task iteration when rebinding subsystem
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context
- ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
- writeback: fix dereferencing NULL mapping->host on writeback_page_template
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- cifs: Clean up DFS referral cache
- cifs: Get rid of kstrdup_const()'d paths
- cifs: Introduce helpers for finding TCP connection
- cifs: Merge is_path_valid() into get_normalized_path()
- cifs: Fix potential deadlock when updating vol in cifs_reconnect()
- x86/mm: Avoid using set_pgd() outside of real PGD pages
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Linearize the skb after offloading if needed.
- net: qca_spi: Avoid high load if QCA7000 is not available
- mmc: mtk-sd: fix deferred probing
- mmc: mvsdio: convert to devm_platform_ioremap_resource
- mmc: mvsdio: fix deferred probing
- mmc: omap: fix deferred probing
- mmc: omap_hsmmc: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- mmc: sh_mmcif: fix deferred probing
- mmc: usdhi60rol0: fix deferred probing
- ipvs: align inner_mac_header for encapsulation
- net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- Revert "net: phy: dp83867: perform soft reset and retain established link"
- sch_netem: acquire qdisc lock in netem_change()
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- arm64: Add missing Set/Way CMO encodings
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- usb: gadget: udc: fix NULL dereference in remove()
- s390/cio: unregister device when the only path is gone
- ASoC: nau8824: Add quirk to active-high jack-detect
- ARM: dts: Fix erroneous ADS touchscreen polarities
- drm/exynos: vidi: fix a wrong error return
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock
cycle
- mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback)
- mm: make wait_on_page_writeback() wait for multiple pending writebacks
- Linux 5.4.249
* allow io_uring to be disabled in runtime (LP: #2035116)
- io_uring: add a sysctl to disable io_uring system-wide
* CVE-2023-31083
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
* CVE-2023-4132
- media: usb: siano: Fix warning due to null work_func_t function pointer
* CVE-2023-3772
- xfrm: add NULL check in xfrm_update_ae_params
* CVE-2023-0597
- random32: add noise from network and scheduling activity
- x86/kasan: Map shadow for percpu pages on demand
- x86/mm: Randomize per-cpu entry area
- x86/mm: Recompute physical address for every page of per-CPU CEA mapping
- x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area
- x86/mm: Do not shuffle CPU entry areas without KASLR
-- Wen-chien Jesse Sung <email address hidden> Tue, 24 Oct 2023 16:31:33 +0800
-
linux-iot (5.4.0-1024.25) focal; urgency=medium
* focal/linux-iot: 5.4.0-1024.25 -proposed tracker (LP: #2038152)
* CVE-2023-42755
- [Config] iot: remove NET_CLS_RSVP and NET_CLS_RSVP6
[ Ubuntu: 5.4.0-165.182 ]
* focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163)
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
-- Wen-chien Jesse Sung <email address hidden> Thu, 12 Oct 2023 17:49:08 +0800
-
linux-iot (5.4.0-1023.24) focal; urgency=medium
* focal/linux-iot: 5.4.0-1023.24 -proposed tracker (LP: #2033856)
* Please enable Renesas RZ platform serial installer (LP: #2022361)
- [Config] iot: Disable hihope RZ/G2M serial console
* Focal update: v5.4.248 upstream stable release (LP: #2031121)
- [Config] iot: updateconfigs for DECNET
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
[ Ubuntu: 5.4.0-164.181 ]
* focal/linux: 5.4.0-164.181 -proposed tracker (LP: #2033867)
* Please enable Renesas RZ platform serial installer (LP: #2022361)
- [Config] enable hihope RZ/G2M serial console
* Azure: hv_netvsc: add support for vlans in AF_PACKET mode (LP: #2030872)
- hv_netvsc: add support for vlans in AF_PACKET mode
* systemd mount units fail during boot, while file system is correctly mounted
(LP: #1837227)
- list: introduce list_for_each_continue()
- proc/mounts: add cursor
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4194
- net: tun_chr_open(): set sk_uid from current_fsuid()
- net: tap_open(): set sk_uid from current_fsuid()
* CVE-2023-1206
- tcp: Reduce chance of collisions in inet6_hashfn().
* CVE-2021-4001
- bpf: Fix toctou on read-only map's constant scalar tracking
* Focal update: v5.4.248 upstream stable release (LP: #2031121)
- test_firmware: fix a memory leak with reqs buffer
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
- dasd: refactor dasd_ioctl_information
- s390/dasd: Use correct lock while counting channel queue length
- power: supply: ab8500: Fix external_power_changed race
- power: supply: sc27xx: Fix external_power_changed race
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
schedule()
- ARM: dts: vexpress: add missing cache properties
- power: supply: Ratelimit no data debug output
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
- regulator: Fix error checking for debugfs_create_dir
- irqchip/meson-gpio: Mark OF related data as maybe unused
- power: supply: Fix logic checking if system is running from battery
- btrfs: handle memory allocation failure in btrfs_csum_one_bio
- parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
- parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
- MIPS: Alchemy: fix dbdma2
- mips: Move initrd_start check after initrd address sanitisation.
- xen/blkfront: Only check REQ_FUA for writes
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
- ocfs2: fix use-after-free when unmounting read-only filesystem
- ocfs2: check new file size on fallocate call
- nios2: dts: Fix tse_mac "max-frame-size" property
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
- kexec: support purgatories with .text.hot sections
- powerpc/purgatory: remove PGO flags
- nouveau: fix client work fence deletion race
- RDMA/uverbs: Restrict usage of privileged QKEYs
- net: usb: qmi_wwan: add support for Compal RXM-G1
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6
- Remove DECnet support from kernel
- [Config] updateconfigs for DECNET
- USB: serial: option: add Quectel EM061KGL series
- serial: lantiq: add missing interrupt ack
- usb: dwc3: gadget: Reset num TRBs before giving back the request
- spi: spi-fsl-dspi: Remove unused chip->void_write_data
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- ping6: Fix send to link-local addresses with VRF.
- RDMA/rxe: Remove the unused variable obj
- RDMA/rxe: Removed unused name from rxe_task struct
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- iavf: remove mask from iavf_irq_enable_queues()
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- ipvlan: fix bound dev checking for IPv6 l3s mode
- sctp: fix an error code in sctp_sf_eat_auth()
- igb: fix nvm.ops.read() error handling
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau/kms: Don't change EDID when it hasn't actually changed
- drm/nouveau: add nv_encoder pointer check for NULL
- net/sched: cls_api: Fix lockup on flushing explicitly created chain
- net: lapbether: only support ethernet devices
- net: tipc: resize nlattr array to correct size
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
- afs: Fix vlserver probe RTT handling
- neighbour: Remove unused inline function neigh_key_eq16()
- net: Remove unused inline function dst_hold_and_use()
- neighbour: delete neigh_lookup_nodev as not used
- drm/nouveau/kms: Fix NULL pointer dereference in
nouveau_connector_detect_depth
- mmc: block: ensure error propagation for non-blk
- Linux 5.4.248
* Focal update: v5.4.247 upstream stable release (LP: #2030818)
- blk-iocost: avoid 64-bit division in ioc_timer_fn
- block/blk-iocost (gcc13): keep large values in a new enum
- i40iw: fix build warning in i40iw_manage_apbvt()
- i40e: fix build warnings in i40e_alloc.h
- spi: qup: Request DMA before enabling clocks
- neighbour: Replace zero-length array with flexible-array member
- neighbour: fix unaligned access to pneigh_entry
- net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
- Bluetooth: Fix l2cap_disconnect_req deadlock
- Bluetooth: L2CAP: Add missing checks for invalid DCID
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
- netfilter: ipset: Add schedule point in call_ad().
- rfs: annotate lockless accesses to sk->sk_rxhash
- rfs: annotate lockless accesses to RFS sock flow table
- net: sched: move rtm_tca_policy declaration to include file
- net: sched: fix possible refcount leak in tc_chain_tmplt_add()
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
- bnxt_en: Query default VLAN before VNIC setup on a VF
- batman-adv: Broken sync while rescheduling delayed work
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
- Input: psmouse - fix OOB access in Elantech protocol
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
- ALSA: hda/realtek: Add Lenovo P3 Tower platform
- drm/amdgpu: fix xclk freq on CHIP_STONEY
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in
J1939 Socket
- can: j1939: change j1939_netdev_lock type to mutex
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
- ceph: fix use-after-free bug for inodes when flushing capsnaps
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
- pinctrl: meson-axg: add missing GPIOA_18 gpio group
- usb: usbfs: Enforce page requirements for mmap
- usb: usbfs: Use consistent mmap functions
- bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
- i2c: sprd: Delete i2c adapter in .remove's error path
- eeprom: at24: also select REGMAP
- ext4: only check dquot_initialize_needed() when debugging
- drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
- rbd: get snapshot context after exclusive lock is ensured to be held
- mtd: spinand: macronix: Add support for MX35LFxGE4AD
- Linux 5.4.247
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
* CVE-2023-3863
- nfc: llcp: simplify llcp_sock_connect() error paths
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
* CVE-2023-3212
- gfs2: Don't deref jdesc in evict
-- Wen-chien Jesse Sung <email address hidden> Mon, 25 Sep 2023 15:00:02 +0800
-
linux-iot (5.4.0-1022.23) focal; urgency=medium
* focal/linux-iot: 5.4.0-1022.23 -proposed tracker (LP: #2034236)
[ Ubuntu: 5.4.0-163.180 ]
* focal/linux: 5.4.0-163.180 -proposed tracker (LP: #2034247)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-40283
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
* CVE-2023-20588
- x86/bugs: Increase the x86 bugs vector size to two u32s
- x86/CPU/AMD: Do not leak quotient data after a division by 0
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt
* CVE-2023-4128
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-
free
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-
after-free
-- Wen-chien Jesse Sung <email address hidden> Fri, 08 Sep 2023 15:47:02 +0800
-
linux-iot (5.4.0-1021.22) focal; urgency=medium
* focal/linux-iot: 5.4.0-1021.22 -proposed tracker (LP: #2031006)
[ Ubuntu: 5.4.0-162.179 ]
* focal/linux: 5.4.0-162.179 -proposed tracker (LP: #2031128)
* libgnutls report "trap invalid opcode" when trying to install packages over
https (LP: #2031093)
- [Config]: disable CONFIG_GDS_FORCE_MITIGATION
[ Ubuntu: 5.4.0-160.177 ]
* focal/linux: 5.4.0-160.177 -proposed tracker (LP: #2031017)
* Fix boot test warning for log_check "CPU: 0 PID: 0 at
arch/x86/kernel/fpu/xstate.c:878 get_xsave_addr+0x98/0xb0" (LP: #2031022)
- x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to init_fpstate")
-- Wen-chien Jesse Sung <email address hidden> Tue, 29 Aug 2023 22:02:11 +0800
-
linux-iot (5.4.0-1019.20) focal; urgency=medium
* focal/linux-iot: 5.4.0-1019.20 -proposed tracker (LP: #2026573)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- [Packaging] resync getabis
[ Ubuntu: 5.4.0-156.173 ]
* focal/linux: 5.4.0-156.173 -proposed tracker (LP: #2026585)
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* Focal update: v5.4.241 upstream stable release (LP: #2023930)
- scsi: ses: Handle enclosure with just a primary component gracefully
- x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
- treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()
- smb3: fix problem with null cifs super block with previous patch
- pinctrl: amd: Use irqchip template
- pinctrl: amd: disable and mask interrupts on probe
- pinctrl: amd: Disable and mask interrupts on resume
- pwm: cros-ec: Explicitly set .polarity in .get_state()
- pwm: sprd: Explicitly set .polarity in .get_state()
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded
sta
- icmp: guard against too small mtu
- net: don't let netpoll invoke NAPI if in xmit context
- sctp: check send stream number after wait_for_sndbuf
- ipv6: Fix an uninit variable access bug in __ip6_make_skb()
- gpio: davinci: Add irq chip flag to skip set wake
- sunrpc: only free unix grouplist after RCU settles
- NFSD: callback request does not use correct credential for AUTH_SYS
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
- usb: typec: altmodes/displayport: Fix configure initial pin assignment
- USB: serial: option: add Telit FE990 compositions
- USB: serial: option: add Quectel RM500U-CN modem
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
- tty: serial: sh-sci: Fix transmit end interrupt handler
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI
- tty: serial: fsl_lpuart: avoid checking for transfer complete when
UARTCTRL_SBK is asserted in lpuart32_tx_empty
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread()
- nilfs2: fix sysfs interface lifetime
- ALSA: hda/realtek: Add quirk for Clevo X370SNW
- perf/core: Fix the same task check in perf_event_set_output
- ftrace: Mark get_lock_parent_ip() __always_inline
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
- tracing: Free error logs of tracing instances
- net_sched: prevent NULL dereference if default qdisc setup failed
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
- ring-buffer: Fix race while reader and writer are on the same page
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
- irqdomain: Look for existing mapping only once
- irqdomain: Refactor __irq_domain_alloc_irqs()
- irqdomain: Fix mapping-creation race
- Revert "pinctrl: amd: Disable and mask interrupts on resume"
- ALSA: emu10k1: fix capture interrupt handler unlinking
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation
- ALSA: firewire-tascam: add missing unwind goto in
snd_tscm_stream_start_duplex()
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
- Bluetooth: Fix race condition in hidp_session_thread
- btrfs: print checksum type and implementation at mount time
- btrfs: fix fast csum implementation detection
- mtdblock: tolerate corrected bit-flips
- mtd: rawnand: meson: fix bitmask for length in command word
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
- niu: Fix missing unwind goto in niu_alloc_channels()
- qlcnic: check pci_reset_function result
- sctp: fix a potential overflow in sctp_ifwdtsn_skip
- RDMA/core: Fix GID entry ref leak when create_ah fails
- udp6: fix potential access to stale information
- net: macb: fix a memory corruption in extended buffer descriptor mode
- power: supply: cros_usbpd: reclassify "default case!" as debug
- i2c: imx-lpi2c: clean rx/tx buffers upon new message
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F
- verify_pefile: relax wrapper length check
- asymmetric_keys: log on fatal failures in PE/pkcs7
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- ubi: Fix deadlock caused by recursively holding work_sem
- i2c: ocores: generate stop condition after timeout in polling mode
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits
- coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug
- xfs: show the proper user quota options
- xfs: remove the kuid/kgid conversion wrappers
- xfs: add a new xfs_sb_version_has_v3inode helper
- xfs: only check the superblock version for dinode size calculation
- xfs: simplify di_flags2 inheritance in xfs_ialloc
- xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize
- xfs: remove the di_version field from struct icdinode
- xfs: set inode size after creating symlink
- xfs: report corruption only as a regular error
- xfs: shut down the filesystem if we screw up quota reservation
- xfs: consider shutdown in bmapbt cursor delete assert
- xfs: don't reuse busy extents on extent trim
- xfs: force log and push AIL to clear pinned inodes when aborting mount
- Linux 5.4.241
* [UBUNTU 20.04] [HPS] Kernel panic with "refcount_t: underflow" in mlx5
driver (LP: #2019011)
- net/mlx5: cmdif, Avoid skipping reclaim pages if FW is not accessible
- net/mlx5: Fix handling of entry refcount when command is not issued to FW
* Disable hv-kvp-daemon if /dev/vmbus/hv_kvp is not present (LP: #2024900)
- [Packaging] disable hv-kvp-daemon if needed
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-32629
- ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs
* CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
* CVE-2023-3111
- btrfs: check return value of btrfs_commit_transaction in relocation
- btrfs: unset reloc control if transaction commit fails in
prepare_to_relocate()
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
* CVE-2023-1611
- btrfs: fix race between quota disable and quota assign ioctls
* CVE-2022-0168
- cifs: move some variables off the stack in smb2_ioctl_query_info
- cifs: prevent bad output lengths in smb2_ioctl_query_info()
- cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
* CVE-2022-27672
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
* Severe NFS performance degradation after LP #2003053 (LP: #2022098)
- SAUCE: Make NFS file-access stale cache behaviour opt-in
* Encountering an issue with memcpy_fromio causing failed boot of SEV-enabled
guest (LP: #2020319)
- x86/sev: Unroll string mmio with CC_ATTR_GUEST_UNROLL_STRING_IO
* Focal update: v5.4.240 upstream stable release (LP: #2023601)
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and
do_tls_setsockopt_conf()
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due
to race condition
- iavf: fix inverted Rx hash condition leading to disabled hash
- iavf: fix non-tunneled IPv6 UDP packet type and hashing
- intel/igbvf: free irq on the error path in igbvf_request_msix()
- igbvf: Regard vf reset nack as success
- i2c: imx-lpi2c: check only for enabled interrupt flags
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
- net: usb: smsc95xx: Limit packet length to skb->len
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition
- net/ps3_gelic_net: Fix RX sk_buff length
- net/ps3_gelic_net: Use dma_mapping_error
- keys: Do not cache key in task struct if key is requested from kernel thread
- bpf: Adjust insufficient default bpf_jit_limit
- net/mlx5: Read the TC mapping of all priorities on ETS query
- atm: idt77252: fix kmemleak when rmmod idt77252
- erspan: do not use skb_mac_header() in ndo_start_xmit()
- net/sonic: use dma_mapping_error() for error check
- nvme-tcp: fix nvme_tcp_term_pdu to match spec
- hvc/xen: prevent concurrent accesses to the shared ring
- net: mdio: thunder: Add missing fwnode_handle_put()
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address
- platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
- scsi: qla2xxx: Perform lockless command completion in abort path
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2
- thunderbolt: Use const qualifier for `ring_interrupt_index`
- riscv: Bump COMMAND_LINE_SIZE value to 1024
- ca8210: fix mac_len negative array access
- m68k: Only force 030 bus error if PC not in exception table
- selftests/bpf: check that modifier resolves after pointer
- scsi: target: iscsi: Fix an error message in iscsi_check_key()
- scsi: ufs: core: Add soft dependency on governor_simpleondemand
- scsi: lpfc: Avoid usage of list iterator variable after loop
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
- net: usb: qmi_wwan: add Telit 0x1080 composition
- sh: sanitize the flags on sigreturn
- cifs: empty interface list when server doesn't support query interfaces
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
- usb: gadget: u_audio: don't let userspace block driver unbind
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue
- igb: revert rtnl_lock() that causes deadlock
- dm thin: fix deadlock when swapping to thin device
- usb: cdns3: Fix issue with using incorrect PCI device function
- usb: chipdea: core: fix return -EINVAL if request role is the same with
current role
- usb: chipidea: core: fix possible concurrent when switch role
- wifi: mac80211: fix qos on mesh interfaces
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer()
- dm stats: check for and propagate alloc_percpu failure
- dm crypt: add cond_resched() to dmcrypt_write()
- sched/fair: sanitize vruntime of entity being placed
- sched/fair: Sanitize vruntime of entity being migrated
- tun: avoid double free in tun_free_netdev
- ocfs2: fix data corruption after failed write
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
- bus: imx-weim: fix branch condition evaluates to a garbage value
- md: avoid signed overflow in slot_store()
- ALSA: asihpi: check pao in control_message()
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
- fbdev: tgafb: Fix potential divide by zero
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
- fbdev: nvidia: Fix potential divide by zero
- fbdev: intelfb: Fix potential divide by zero
- fbdev: lxfb: Fix potential divide by zero
- fbdev: au1200fb: Fix potential divide by zero
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx()
- dma-mapping: drop the dev argument to arch_sync_dma_for_*
- mips: bmips: BCM6358: disable RAC flush for TP1
- mtd: rawnand: meson: invalidate cache on polling ECC bit
- scsi: megaraid_sas: Fix crash after a double completion
- ptp_qoriq: fix memory leak in probe()
- regulator: fix spelling mistake "Cant" -> "Can't"
- regulator: Handle deferred clk
- net/net_failover: fix txq exceeding warning
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write
- s390/vfio-ap: fix memory leak in vfio_ap device driver
- i40e: fix registers dump after run ethtool adapter self test
- bnxt_en: Fix typo in PCI id to device description string mapping
- net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
- net: mvneta: make tx buffer array agnostic
- pinctrl: ocelot: Fix alt mode for ocelot
- Input: alps - fix compatibility with -funsigned-char
- Input: focaltech - use explicitly signed char type
- cifs: prevent infinite recursion in CIFSGetDFSRefer()
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
- xen/netback: don't do grant copy across page boundary
- pinctrl: at91-pio4: fix domain name assignment
- NFSv4: Fix hangs when recovering open state after a server reboot
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo
- ALSA: usb-audio: Fix regression on detection of Roland VS-100
- drm/etnaviv: fix reference leak when mmaping imported buffer
- btrfs: scan device in non-exclusive mode
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- net_sched: add __rcu annotation to netdev->qdisc
- net: sched: fix race condition in qdisc_graft()
- firmware: arm_scmi: Fix device node validation for mailbox transport
- gfs2: Always check inode size of inline inodes
- Linux 5.4.240
* Focal update: v5.4.239 upstream stable release (LP: #2023600)
- Linux 5.4.239
* CVE-2023-2124
- xfs: verify buffer contents when we skip log replay
* CVE-2020-36691
- netlink: limit recursion depth in policy validation
* CVE-2022-1184
- ext4: check if directory block is within i_size
- ext4: fix check for block being out of directory size
* CVE-2022-4269
- net: sched: extract qstats update code into functions
- net: sched: don't expose action qstats to skb_tc_reinsert()
- net/sched: act_mirred: refactor the handle of xmit
- net: sched: remove unused tcf_result extension
- net/sched: act_mirred: better wording on protection against excessive stack
growth
- act_mirred: use the backlog for nested calls to mirred ingress
* Focal update: v5.4.238 upstream stable release (LP: #2023427)
- ext4: fix cgroup writeback accounting with fs-layer encryption
- xfrm: Allow transport-mode states with AF_UNSPEC selector
- drm/panfrost: Don't sync rpm suspension after mmu flushing
- cifs: Move the in_send statistic to __smb_send_rqst()
- drm/meson: fix 1px pink line on GXM when scaling video overlay
- clk: HI655X: select REGMAP instead of depending on it
- docs: Correct missing "d_" prefix for dentry_operations member
d_weak_revalidate
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- ALSA: hda - add Intel DG1 PCI and HDMI ids
- ALSA: hda - controller is in GPU on the DG1
- ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid
- ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
- netfilter: nft_redir: correct value of inet type `.maxattrs`
- scsi: core: Fix a comment in function scsi_host_dev_release()
- scsi: core: Fix a procfs host directory removal regression
- tcp: tcp_make_synack() can be called from process context
- nfc: pn533: initialize struct pn533_out_arg properly
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode
- i40e: Fix kernel crash during reboot when adapter is in recovery mode
- qed/qed_dev: guard against a possible division by zero
- net: tunnels: annotate lockless accesses to dev->needed_headroom
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
- net: usb: smsc75xx: Limit packet length to skb->len
- nvmet: avoid potential UAF in nvmet_req_complete()
- block: sunvdc: add check for mdesc_grab() returning NULL
- ipv4: Fix incorrect table ID in IOCTL path
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in
skb_pull
- net/iucv: Fix size of interrupt data
- ethernet: sun: add check for the mdesc_grab()
- hwmon: (adt7475) Display smoothing attributes in correct order
- hwmon: (adt7475) Fix masking of hysteresis registers
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race
condition
- hwmon: (ina3221) return prober error code
- media: m5mols: fix off-by-one loop termination error
- mmc: atmel-mci: fix race between stop command and start of next command
- jffs2: correct logic when creating a hole in jffs2_write_begin
- ext4: fail ext4_iget if special inode unallocated
- ext4: fix task hung in ext4_xattr_delete_inode
- drm/amdkfd: Fix an illegal memory access
- sh: intc: Avoid spurious sizeof-pointer-div warning
- ext4: fix possible double unlock when moving a directory
- tty: serial: fsl_lpuart: skip waiting for transmission complete when
UARTCTRL_SBK is asserted
- interconnect: fix mem leak when freeing nodes
- tracing: Check field value in hist_field_name()
- tracing: Make tracepoint lockdep check actually test something
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks
- x86/mm: Fix use of uninitialized buffer in sme_enable()
- drm/i915: Don't use stolen memory for ring buffers with LLC
- serial: 8250_em: Fix UART port type
- s390/ipl: add missing intersection check to ipl_report handling
- PCI: Unify delay handling for reset and resume
- HID: core: Provide new max_buffer_size attribute to over-ride the default
- HID: uhid: Over-ride the default maximum data buffer value with our own
- Linux 5.4.238
* Focal update: v5.4.237 upstream stable release (LP: #2023420)
- fs: prevent out-of-bounds array speculation when closing a file descriptor
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17
- drm/connector: print max_requested_bpc in state debugfs
- ext4: fix RENAME_WHITEOUT handling for inline directories
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- ext4: move where set the MAY_INLINE_DATA flag is set
- ext4: fix WARNING in ext4_update_inline_data
- ext4: zero i_disksize when initializing the bootloader inode
- nfc: change order inside nfc_se_io error path
- iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options
- iommu/amd: Add a length limitation for the ivrs_acpihid command-line
parameter
- ipmi:ssif: make ssif_i2c_send() void
- ipmi:ssif: resend_msg() cannot fail
- ipmi:ssif: Remove rtc_us_timer
- ipmi:ssif: Increase the message retry time
- ipmi:ssif: Add a timer between request retries
- irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent
- irqdomain: Fix domain registration race
- iommu/vt-d: Fix PASID directory pointer coherency
- SMB3: Backup intent flag missing from some more ops
- cifs: Fix uninitialized memory read in smb3_qfs_tcon()
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
- ext4: Fix possible corruption when moving a directory
- drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
- nfc: fdp: add null check of devm_kmalloc_array in
fdp_nci_i2c_read_device_properties
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
- selftests: nft_nat: ensuring the listening side is up before starting the
client
- net: usb: lan78xx: Remove lots of set but unused 'ret' variables
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers
from the MAC driver
- net: caif: Fix use-after-free in cfusbl_device_notify()
- bnxt_en: Avoid order-5 memory allocation for TPA data
- netfilter: tproxy: fix deadlock due to missing BH disable
- btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
- scsi: megaraid_sas: Update max supported LD IDs to 240
- net/smc: fix fallback failed while sendmsg with fastopen
- riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode
- ext4: Fix deadlock during directory rename
- MIPS: Fix a compilation issue
- alpha: fix R_ALPHA_LITERAL reloc for large modules
- macintosh: windfarm: Use unsigned type for 1-bit bitfields
- PCI: Add SolidRun vendor ID
- media: ov5640: Fix analogue gain control
- ipmi/watchdog: replace atomic_add() and atomic_sub()
- ipmi:watchdog: Set panic count to proper value on a panic
- drm/i915: Don't use BAR mappings for ring buffers with LLC
- x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS
- arch: fix broken BuildID for arm64 and riscv
- powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT
- powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds
- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
- sh: define RUNTIME_DISCARD_EXIT
- UML: define RUNTIME_DISCARD_EXIT
- s390/dasd: add missing discipline function
- Linux 5.4.237
* Focal update: v5.4.236 upstream stable release (LP: #2020390)
- staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
- staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
- Linux 5.4.236
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
-- Wen-chien Jesse Sung <email address hidden> Thu, 27 Jul 2023 12:05:23 +0800
-
linux-iot (5.4.0-1018.19) focal; urgency=medium
* focal/linux-iot: 5.4.0-1018.19 -proposed tracker (LP: #2026389)
[ Ubuntu: 5.4.0-155.172 ]
* focal/linux: 5.4.0-155.172 -proposed tracker (LP: #2026401)
* CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
* CVE-2023-35001
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
* CVE-2023-32629
- ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs
* CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
-- Wen-chien Jesse Sung <email address hidden> Tue, 18 Jul 2023 14:44:58 +0800
-
linux-iot (5.4.0-1017.18) focal; urgency=medium
* focal/linux-iot: 5.4.0-1017.18 -proposed tracker (LP: #2024095)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
[ Ubuntu: 5.4.0-153.170 ]
* focal/linux: 5.4.0-153.170 -proposed tracker (LP: #2024108)
* cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
* Some INVLPG implementations can leave Global translations unflushed when
PCIDs are enabled (LP: #2023220)
- x86/mm: Avoid incomplete Global INVLPG flushes
[ Ubuntu: 5.4.0-152.169 ]
* focal/linux: 5.4.0-152.169 -proposed tracker (LP: #2023070)
* Focal update: v5.4.236 upstream stable release (LP: #2020390)
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync getabis
[ Ubuntu: 5.4.0-151.168 ]
* focal/linux: 5.4.0-151.168 -proposed tracker (LP: #2019375)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- debian/dkms-versions -- update from kernel-versions (main/2023.05.15)
* CVE-2023-32233
- netfilter: nf_tables: deactivate anonymous set from preparation phase
* CVE-2023-2612
- SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()
* CVE-2023-31436
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
* CVE-2023-1380
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
* Focal update: Focal update: v5.4.235 upstream stable release (LP: #2017706)
- HID: asus: Remove check for same LED brightness on set
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: use spinlock to safely schedule workers
- ARM: OMAP2+: Fix memory leak in realtime_counter_init()
- arm64: dts: qcom: qcs404: use symbol names for PCIe resets
- ARM: zynq: Fix refcount leak in zynq_early_slcr_init
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name
- arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
- arm64: dts: meson: remove CPU opps below 1GHz for G12A boards
- ARM: OMAP1: call platform_device_put() in error case in
omap1_dm_timer_init()
- ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
- ARM: imx: Call ida_simple_remove() for ida_simple_get
- arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
- arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
- arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
- arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
- arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node
name
- arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name
- ARM: dts: imx7s: correct iomuxc gpr mux controller cells
- arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
- Revert "scsi: core: run queue if SCSI device queue isn't ready and queue is
idle"
- block: Limit number of items taken from the I/O scheduler in one go
- blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
- blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait
- blk-mq: correct stale comment of .get_budget
- s390/dasd: Prepare for additional path event handling
- s390/dasd: Fix potential memleak in dasd_eckd_init()
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
- sched/rt: pick_next_rt_entity(): check list_entry
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned
- wifi: rsi: Fix memory leak in rsi_coex_attach()
- net/wireless: Delete unnecessary checks before the macro call
“dev_kfree_skb”
- wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: libertas: fix memory leak in lbs_init_adapter()
- wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
- rtlwifi: fix -Wpointer-sign warning
- wifi: rtlwifi: Fix global-out-of-bounds bug in
_rtl8812ae_phy_set_txpower_limit()
- ipw2x00: switch from 'pci_' to 'dma_' API
- wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: ipw2200: fix memory leak in ipw_wdev_init()
- wilc1000: let wilc_mac_xmit() return NETDEV_TX_OK
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
- wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
- wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
- crypto: x86/ghash - fix unaligned access in ghash_setkey()
- ACPICA: Drop port I/O validation for some regions
- genirq: Fix the return type of kstat_cpu_irqs_sum()
- lib/mpi: Fix buffer overrun when SG is too long
- ACPICA: nsrepair: handle cases without a return value correctly
- wifi: orinoco: check return value of hermes_write_wordrec()
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback
function
- ath9k: hif_usb: simplify if-if to if-else
- ath9k: htc: clean up statistics macros
- wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
- wifi: ath9k: Fix potential stack-out-of-bounds write in
ath9k_wmi_rsp_callback()
- ACPI: battery: Fix missing NUL-termination with large strings
- crypto: ccp - Failure on re-initialization due to duplicate sysfs filename
- crypto: essiv - remove redundant null pointer check before kfree
- crypto: essiv - Handle EBUSY correctly
- crypto: seqiv - Handle EBUSY correctly
- powercap: fix possible name leak in powercap_register_zone()
- net/mlx5: Enhance debug print in page allocation failure
- irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
- irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
- irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
- mptcp: add sk_stop_timer_sync helper
- net: add sock_init_data_uid()
- tun: tun_chr_open(): correctly initialize socket uid
- tap: tap_open(): correctly initialize socket uid
- OPP: fix error checking in opp_migrate_dentry()
- Bluetooth: L2CAP: Fix potential user-after-free
- libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
- rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
- crypto: rsa-pkcs1pad - Use akcipher_request_complete
- m68k: /proc/hardware should depend on PROC_FS
- RISC-V: time: initialize hrtimer based broadcast clock event device
- usb: gadget: udc: Avoid tasklet passing a global
- wifi: iwl3945: Add missing check for create_singlethread_workqueue
- wifi: iwl4965: Add missing check for create_singlethread_workqueue()
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
- crypto: crypto4xx - Call dma_unmap_page when done
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
- thermal/drivers/hisi: Drop second sensor hi3660
- can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a
bus error
- irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
- irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
- selftests/net: Interpret UDP_GRO cmsg data as an int value
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
- drm/bridge: megachips: Fix error handling in i2c_register_driver()
- drm/vc4: dpi: Add option for inverting pixel clock and output enable
- drm/vc4: dpi: Fix format mapping for RGB565
- gpu: ipu-v3: common: Add of_node_put() for reference returned by
of_graph_get_port_by_id()
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
- pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
- ASoC: fsl_sai: initialize is_dsp_mode flag
- ALSA: hda/ca0132: minor fix for allocation size
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
- drm/msm: use strscpy instead of strncpy
- drm/msm/dpu: Add check for cstate
- drm/msm/dpu: Add check for pstates
- drm/exynos: Don't reset bridge->next
- drm/bridge: Rename bridge helpers targeting a bridge chain
- drm/bridge: Introduce drm_bridge_get_next_bridge()
- drm: Initialize struct drm_crtc_state.no_vblank from device settings
- drm/msm/mdp5: Add check for kzalloc
- gpu: host1x: Don't skip assigning syncpoints to channels
- drm/mediatek: remove cast to pointers passed to kfree
- drm/mediatek: Use NULL instead of 0 for NULL pointer
- drm/mediatek: Drop unbalanced obj unref
- drm/mediatek: Clean dangling pointer on bind error path
- ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
- gpio: vf610: connect GPIO label to dev name
- hwmon: (ltc2945) Handle error case in ltc2945_value_store
- scsi: aic94xx: Add missing check for dma_map_single()
- spi: bcm63xx-hsspi: fix pm_runtime
- spi: bcm63xx-hsspi: Fix multi-bit mode setting
- hwmon: (mlxreg-fan) Return zero speed for broken fan
- dm: remove flush_scheduled_work() during local_exit()
- spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()
- ASoC: dapm: declare missing structure prototypes
- ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared
- HID: bigben: use spinlock to protect concurrent accesses
- HID: bigben_worker() remove unneeded check on report_field
- HID: bigben: use spinlock to safely schedule workers
- HID: asus: Only set EV_REP if we are adding a mapping
- HID: asus: Add report_size to struct asus_touchpad_info
- HID: asus: Add support for multi-touch touchpad on Medion Akoya E1239T
- HID: asus: Fix mute and touchpad-toggle keys on Medion Akoya E1239T
- hid: bigben_probe(): validate report count
- nfsd: fix race to check ls_layouts
- cifs: Fix lost destroy smbd connection when MR allocate failed
- cifs: Fix warning and UAF when destroy the MR list
- gfs2: jdata writepage fix
- perf llvm: Fix inadvertent file creation
- perf tools: Fix auto-complete on aarch64
- sparc: allow PM configs for sparc32 COMPILE_TEST
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
- clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
- clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
- mtd: rawnand: sunxi: Fix the size of the last OOB region
- clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed
- clk: renesas: cpg-mssr: Use enum clk_reg_layout instead of a boolean flag
- clk: renesas: cpg-mssr: Remove superfluous check in resume code
- Input: ads7846 - don't report pressure for ads7845
- Input: ads7846 - don't check penirq immediately for 7845
- clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
- powerpc/pseries/lpar: add missing RTAS retry status handling
- powerpc/pseries/lparcfg: add missing RTAS retry status handling
- powerpc/rtas: make all exports GPL
- powerpc/rtas: ensure 4KB alignment for rtas_data_buf
- powerpc/eeh: Small refactor of eeh_handle_normal_event()
- powerpc/eeh: Set channel state after notifying the drivers
- MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
- MIPS: vpe-mt: drop physical_memsize
- remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers
- media: platform: ti: Add missing check for devm_regulator_get
- powerpc: Remove linker flag from KBUILD_AFLAGS
- media: ov5675: Fix memleak in ov5675_init_controls()
- media: i2c: ov772x: Fix memleak in ov772x_probe()
- media: i2c: ov7670: 0 instead of -EINVAL was returned
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- rpmsg: glink: Avoid infinite loop on intent for missing channel
- udf: Define EFSCORRUPTED error code
- ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
- blk-iocost: fix divide by 0 error in calc_lcoefs()
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
- rcu: Suppress smp_processor_id() complaint in
synchronize_rcu_expedited_wait()
- thermal: intel: Fix unsigned comparison with less than zero
- timers: Prevent union confusion from unexpected restart_syscall()
- x86/bugs: Reset speculation control settings on init
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-
of-bounds
- wifi: mt7601u: fix an integer underflow
- inet: fix fast path in __inet_hash_connect()
- ice: add missing checks for PF vsi type
- ACPI: Don't build ACPICA with '-Os'
- net: bcmgenet: Add a check for oversized packets
- m68k: Check syscall_trace_enter() return code
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
- ACPI: video: Fix Lenovo Ideapad Z570 DMI match
- net/mlx5: fw_tracer: Fix debug print
- coda: Avoid partial allocation of sig_inputArgs
- uaccess: Add minimum bounds check on kernel buffer size
- drm/amd/display: Fix potential null-deref in dm_resume
- drm/omap: dsi: Fix excessive stack usage
- HID: Add Mapping for System Microphone Mute
- drm/radeon: free iio for atombios when driver shutdown
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue
- docs/scripts/gdb: add necessary make scripts_gdb step
- ASoC: kirkwood: Iterate over array indexes instead of using pointer math
- regulator: max77802: Bounds check regulator id against opmode
- regulator: s5m8767: Bounds check id indexing into arrays
- hwmon: (coretemp) Simplify platform device handling
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
- dm thin: add cond_resched() to various workqueue loops
- dm cache: add cond_resched() to various workqueue loops
- nfsd: zero out pointers after putting nfsd_files on COPY setup error
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits
- rtc: pm8xxx: fix set-alarm race
- ipmi_ssif: Rename idle state and check
- s390: discard .interp section
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter
- ARM: dts: exynos: correct HDMI phy compatible in Exynos4
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- f2fs: fix information leak in f2fs_move_inline_dirents()
- f2fs: fix cgroup writeback accounting with fs-layer encryption
- ocfs2: fix defrag path triggering jbd2 ASSERT
- ocfs2: fix non-auto defrag path not working issue
- udf: Truncate added extents on failed expansion
- udf: Do not bother merging very long extents
- udf: Do not update file length for failed writes to inline files
- udf: Preserve link count of system files
- udf: Detect system inodes linked into directory hierarchy
- udf: Fix file corruption when appending just after end of preallocated
extent
- KVM: Destroy target device if coalesced MMIO unregistration fails
- KVM: s390: disable migration mode when dirty tracking is disabled
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
- x86/reboot: Disable virtualization in an emergency if SVM is supported
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe
range
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions
- x86/microcode/AMD: Fix mixed steppings support
- x86/speculation: Allow enabling STIBP with legacy IBRS
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook
- irqdomain: Fix association race
- irqdomain: Fix disassociation race
- irqdomain: Drop bogus fwspec-mapping error handling
- ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
- ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
- ext4: optimize ea_inode block expansion
- ext4: refuse to create ea block when umounted
- wifi: rtl8xxxu: Use a longer retry limit of 48
- wifi: cfg80211: Fix use after free for wext
- thermal: intel: powerclamp: Fix cur_state for multi package system
- dm flakey: fix logic when corrupting a bio
- dm flakey: don't corrupt the zero page
- ARM: dts: exynos: correct TMU phandle in Exynos4
- ARM: dts: exynos: correct TMU phandle in Odroid XU
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
- alpha: fix FEN fault handling
- mips: fix syscall_get_nr
- media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
- mm: memcontrol: deprecate charge moving
- mm/thp: check and bail out if page in deferred queue already
- ktest.pl: Give back console on Ctrt^C on monitor
- ktest.pl: Fix missing "end_monitor" when machine check fails
- ktest.pl: Add RUN_TIMEOUT option with default unlimited
- scsi: qla2xxx: Fix link failure in NPIV environment
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
- scsi: qla2xxx: Fix erroneous link down
- scsi: ses: Don't attach if enclosure has no components
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- PCI/PM: Observe reset delay irrespective of bridge_d3
- PCI: hotplug: Allow marking devices as disconnected during bind/unbind
- PCI: Avoid FLR for AMD FCH AHCI adapters
- drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
- drm/radeon: Fix eDP for single-display iMac11,2
- wifi: ath9k: use proper statements in conditionals
- kbuild: Port silent mode detection to future gnu make.
- fs/jfs: fix shift exponent db_agl2size negative
- pwm: sifive: Reduce time the controller lock is held
- pwm: sifive: Always let the first pwm_apply_state succeed
- pwm: stm32-lp: fix the check on arr and cmp registers update
- f2fs: use memcpy_{to,from}_page() where possible
- fs: f2fs: initialize fsdata in pagecache_write()
- um: vector: Fix memory leak in vector_config
- ubi: ensure that VID header offset + VID header size <= alloc, size
- ubifs: Fix build errors as symbol undefined
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
- ubifs: Rectify space budget for ubifs_xrename()
- ubifs: Fix wrong dirty space budget for dirty inode
- ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
- ubifs: Reserve one leb for each journal head while doing budget
- ubi: Fix use-after-free when volume resizing failed
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
- ubifs: Fix memory leak in alloc_wbufs()
- ubi: Fix possible null-ptr-deref in ubi_free_volume()
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
- x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in
error path
- watchdog: Fix kmemleak in watchdog_cdev_register
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory
- netfilter: ctnetlink: fix possible refcount leak in
ctnetlink_create_conntrack()
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
- net: fix __dev_kfree_skb_any() vs drop monitor
- 9p/xen: fix version parsing
- 9p/xen: fix connection sequence
- 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
- net/mlx5: Geneve, Fix handling of Geneve object id as error code
- nfc: fix memory leak of se_io context in nfc_genl_se_io
- net/sched: act_sample: fix action bind logic
- ARM: dts: spear320-hmi: correct STMPE GPIO compatible
- tcp: tcp_check_req() can be called from process context
- vc_screen: modify vcs_size() handling in vcs_read()
- rtc: sun6i: Make external 32k oscillator optional
- rtc: sun6i: Always export the internal oscillator
- scsi: ipr: Work around fortify-string warning
- thermal: intel: quark_dts: fix error pointer dereference
- thermal: intel: BXT_PMIC: select REGMAP instead of depending on it
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
- mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak
- media: uvcvideo: Handle cameras with invalid descriptors
- media: uvcvideo: Handle errors from calls to usb_string
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
- media: uvcvideo: Silence memcpy() run-time false positive warnings
- staging: emxx_udc: Add checks for dma_alloc_coherent()
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- tty: serial: fsl_lpuart: disable the CTS when send break signal
- mei: bus-fixup:upon error print return values of send and receive
- tools/iio/iio_utils:fix memory leak
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_status_word()
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_config_word()
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer
math
- USB: ene_usb6250: Allocate enough memory for full object
- usb: uvc: Enumerate valid values for color matching
- kernel/fail_function: fix memory leak with using debugfs_lookup()
- PCI: Add ACS quirk for Wangxun NICs
- phy: rockchip-typec: Fix unsigned comparison with less than zero
- net: tls: avoid hanging tasks on the tx_lock
- x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- x86/resctl: fix scheduler confusion with 'current'
- Bluetooth: hci_sock: purge socket queues in the destruct() callback
- SAUCE: Revert "UBUNTU: SAUCE: Fix inet_csk_listen_start after CVE-2023-0461"
- tcp: Fix listen() regression in 5.4.229.
- media: uvcvideo: Provide sync and async uvc_ctrl_status_event
- media: uvcvideo: Fix race condition with usb_kill_urb
- dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks
- Linux 5.4.235
- [Config] Drop mxsfb for armhf:generic-lpae
* Focal update: v5.4.234 upstream stable release (LP: #2017691)
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
- ARM: dts: rockchip: add power-domains property to dp node on rk3288
- ACPI: NFIT: fix a potential deadlock during NFIT teardown
- btrfs: send: limit number of clones and allocated memory size
- IB/hfi1: Assign npages earlier
- neigh: make sure used and confirmed times are valid
- HID: core: Fix deadloop in hid_apply_multiplier.
- bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
- net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
- vc_screen: don't clobber return value in vcs_read
- dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
- USB: serial: option: add support for VW/Skoda "Carstick LTE"
- USB: core: Don't hold device lock while reading the "descriptors" sysfs file
- Linux 5.4.234
* CVE-2023-30456
- KVM: nVMX: add missing consistency checks for CR0 and CR4
* CVE-2023-1859
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race
condition
* CVE-2023-1670
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
[ Ubuntu: 5.4.0-149.166 ]
* focal/linux: 5.4.0-149.166 -proposed tracker (LP: #2016591)
* Focal update: v5.4.233 upstream stable release (LP: #2015909)
- dma-mapping: add generic helpers for mapping sgtable objects
- scatterlist: add generic wrappers for iterating over sgtable objects
- drm: etnaviv: fix common struct sg_table related issues
- drm/etnaviv: don't truncate physical page address
- wifi: rtl8xxxu: gen2: Turn on the rate control
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
- random: always mix cycle counter in add_latent_entropy()
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
- can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
- alarmtimer: Prevent starvation by small intervals and SIG_IGN
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
- uaccess: Add speculation barrier to copy_from_user()
- wifi: mwifiex: Add missing compatible string for SD8787
- ext4: Fix function prototype mismatch for ext4_feat_ktype
- Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo
child qdiscs"
- bpf: add missing header file include
- Linux 5.4.233
* selftest: fib_tests: Always cleanup before exit (LP: #2015956)
- selftest: fib_tests: Always cleanup before exit
* fib_tests.sh in ubuntu_kernel_selftests was skipped silently on Focal
(LP: #2015440)
- selftests: Fix the executable permissions for fib_tests.sh
* Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
- [Debian] autoreconstruct - fix restoration of execute permissions
* kernel: fix __clear_user() inline assembly constraints (LP: #2013088)
- s390/uaccess: add missing earlyclobber annotations to __clear_user()
* i/o error if next unused loop device is queried (LP: #1856871)
- loop: fix I/O error on fsync() in detached loop devices
* CVE-2023-1075
- net/tls: tls_is_tx_ready() checked list_entry
* Focal update: v5.4.232 upstream stable release (LP: #2011625)
- firewire: fix memory leak for payload of request subaction to IEC 61883-1
FCP region
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
- scsi: Revert "scsi: core: map PQ=1, PDT=other values to
SCSI_SCAN_TARGET_PRESENT"
- WRITE is "data source", not destination...
- fix iov_iter_bvec() "direction" argument
- fix "direction" argument of iov_iter_kvec()
- netrom: Fix use-after-free caused by accept on already connected socket
- netfilter: br_netfilter: disable sabotage_in hook after first suppression
- squashfs: harden sanity check in squashfs_read_xattr_id_table
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy
benchmarking
- virtio-net: Keep stop() to follow mirror sequence of open()
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- efi: fix potential NULL deref in efi_mem_reserve_persistent
- scsi: target: core: Fix warning on RT kernels
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- i2c: rk3x: fix a bunch of kernel-doc warnings
- net/x25: Fix to not accept on connected socket
- iio: adc: stm32-dfsdm: fill module aliases
- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- Input: i8042 - move __initconst to fix code styling warning
- Input: i8042 - merge quirk tables
- Input: i8042 - add TUXEDO devices to i8042 quirk tables
- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
- fbcon: Check font dimension limits
- watchdog: diag288_wdt: do not use stack buffers for hardware data
- watchdog: diag288_wdt: fix __diag288() inline assembly
- efi: Accept version 2 of memory attributes table
- iio: hid: fix the retval in accel_3d_capture_sample
- iio: adc: berlin2-adc: Add missing of_node_put() in error path
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
- parisc: Fix return code of pdc_iodc_print()
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
- riscv: disable generation of unwind tables
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
- mm/swapfile: add cond_resched() in get_swap_pages()
- Squashfs: fix handling and sanity checking of xattr_ids count
- nvmem: core: fix cell removal on error
- mm: swap: properly update readahead statistics in unuse_pte_range()
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
- serial: 8250_dma: Fix DMA Rx completion race
- serial: 8250_dma: Fix DMA Rx rearm race
- powerpc/imc-pmu: Revert nest_init_lock to being a mutex
- fbdev: smscufx: fix error handling code in ufx_usb_probe
- f2fs: fix to do sanity check on i_extra_isize in is_alive()
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of-
bounds reads
- iio:adc:twl6030: Enable measurement of VAC
- btrfs: limit device extents to the device size
- btrfs: zlib: zero-initialize zlib workspace
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and
trace_pipe_raw
- can: j1939: do not wait 250 ms if the same addr was already claimed
- IB/hfi1: Restore allocated resources on failed copyout
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- iommu: Add gfp parameter to iommu_ops::map
- RDMA/usnic: use iommu_map_atomic() under spin_lock()
- xfrm: fix bug with DSCP copy to v6 from v4 tunnel
- bonding: fix error checking in bond_debug_reregister()
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
- ionic: clean interrupt before enabling queue to avoid credit race
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- selftests: forwarding: lib: quote the sysctl values
- ALSA: pci: lx6464es: fix a debug loop
- pinctrl: aspeed: Fix confusing types in return value
- pinctrl: single: fix potential NULL dereference
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
- net: USB: Fix wrong-direction WARNING in plusb.c
- usb: core: add quirk for Alcor Link AK9563 smartcard reader
- usb: typec: altmodes/displayport: Fix probe pin assign check
- ceph: flush cap releases when the session is flushed
- riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-
sensitive
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
- nvme-pci: Move enumeration by class to be last in the table
- bpf: Always return target ifindex in bpf_fib_lookup
- migrate: hugetlb: check for hugetlb shared PMD in node migration
- selftests/bpf: Verify copy_register_state() preserves parent/live fields
- ASoC: cs42l56: fix DT probe
- tools/virtio: fix the vringh test for virtio ring changes
- net/rose: Fix to not accept on connected socket
- net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
- net: sched: sch: Bounds check priority
- s390/decompressor: specify __decompress() buf len to avoid overflow
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
- aio: fix mremap after fork null-deref
- btrfs: free device in btrfs_close_devices for a single device filesystem
- netfilter: nft_tproxy: restrict to prerouting hook
- xfs: remove the xfs_efi_log_item_t typedef
- xfs: remove the xfs_efd_log_item_t typedef
- xfs: remove the xfs_inode_log_item_t typedef
- xfs: factor out a xfs_defer_create_intent helper
- xfs: merge the ->log_item defer op into ->create_intent
- xfs: merge the ->diff_items defer op into ->create_intent
- xfs: turn dfp_intent into a xfs_log_item
- xfs: refactor xfs_defer_finish_noroll
- xfs: log new intent items created as part of finishing recovered intent
items
- xfs: fix finobt btree block recovery ordering
- xfs: proper replay of deferred ops queued during log recovery
- xfs: xfs_defer_capture should absorb remaining block reservations
- xfs: xfs_defer_capture should absorb remaining transaction reservation
- xfs: clean up bmap intent item recovery checking
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering
- xfs: fix an incore inode UAF in xfs_bui_recover
- xfs: change the order in which child and parent defer ops are finished
- xfs: periodically relog deferred intent items
- xfs: expose the log push threshold
- xfs: only relog deferred intent items if free space in the log gets low
- xfs: fix missing CoW blocks writeback conversion retry
- xfs: ensure inobt record walks always make forward progress
- xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks
- xfs: prevent UAF in xfs_log_item_in_current_chkpt
- xfs: sync lazy sb accounting on quiesce of read-only mounts
- Revert "ipv4: Fix incorrect route flushing when source address is deleted"
- ipv4: Fix incorrect route flushing when source address is deleted
- mmc: sdio: fix possible resource leaks in some error paths
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ALSA: hda/conexant: add a new hda codec SN6180
- ALSA: hda/realtek - fixed wrong gpio assigned
- sched/psi: Fix use-after-free in ep_remove_wait_queue()
- hugetlb: check for undefined shift on 32 bit architectures
- Revert "mm: Always release pages to the buddy allocator in
memblock_free_late()."
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
- ixgbe: allow to increase MTU to 3K with XDP enabled
- i40e: add double of VLAN header when computing the max MTU
- net: bgmac: fix BCM5358 support by setting correct flags
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
- bnxt_en: Fix mqprio and XDP ring checking logic
- net: stmmac: Restrict warning on disabling DMA store and fwd mode
- ixgbe: add double of VLAN header when computing the max MTU
- ipv6: Fix datagram socket connection with DSCP.
- ipv6: Fix tcp socket connection with DSCP.
- i40e: Add checking for null for nlmsg_find_attr()
- kvm: initialize all of the kvm_debugregs structure before sending it to
userspace
- nilfs2: fix underflow in second superblock position calculations
- ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
- net: sched: sch: Fix off by one in htb_activate_prios()
- iommu/amd: Pass gfp flags to iommu_map_page() in amd_iommu_map()
- Linux 5.4.232
* CVE-2023-1118
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
-- Wen-chien Jesse Sung <email address hidden> Wed, 21 Jun 2023 15:38:54 +0800
-
linux-iot (5.4.0-1016.17) focal; urgency=medium
* focal/linux-iot: 5.4.0-1016.17 -proposed tracker (LP: #2011945)
* CVE-2023-1829
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync getabis
- [Packaging] update helper scripts
* Build pciesvc module and kpciemgr as module
- SAUCE: ubuntu/pensando: restore original compiler flags
* Build pciesvc module and kpciemgr as module (LP: #2018947)
- SAUCE: ubuntu/pensando: build pciesvc driver
- [Config] Enable CONFIG_PCIESVC
* [UC20][Task] Ensure latest kernel patches from Pensando are pulled in (LP:
#2012525)
- SAUCE: ubuntu/pensando: update the version number of DSC drivers
* Miscellaneous Ubuntu changes
- SAUCE: ubuntu/pensando: Fix include path to common
[ Ubuntu: 5.4.0-148.165 ]
* focal/linux: 5.4.0-148.165 -proposed tracker (LP: #2016777)
* CVE-2023-1829
- net/sched: Retire tcindex classifier
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
[ Ubuntu: 5.4.0-147.164 ]
* focal/linux: 5.4.0-147.164 -proposed tracker (LP: #2011959)
* CVE-2023-26545
- net: mpls: fix stale pointer if allocation fails during device rename
* CVE-2023-1281
- rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
- net/sched: tcindex: update imperfect hash filters respecting rcu
* Focal update: v5.4.231 upstream stable release (LP: #2011226)
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in
atmel_ramc_probe()
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe()
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
- ARM: imx27: Retrieve the SYSCTRL base address from devicetree
- ARM: imx31: Retrieve the IIM base address from devicetree
- ARM: imx35: Retrieve the IIM base address from devicetree
- ARM: imx: add missing of_node_put()
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- EDAC/highbank: Fix memory leak in highbank_mc_probe()
- tomoyo: fix broken dependency on *.conf.default
- RDMA/core: Fix ib block iterator counter overflow
- IB/hfi1: Reject a zero-length user expected buffer
- IB/hfi1: Reserve user expected TIDs
- IB/hfi1: Fix expected receive setup error exit issues
- affs: initialize fsdata in affs_truncate()
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- amd-xgbe: Delay AN timeout during KR training
- bpf: Fix pointer-leak due to insufficient speculative store bypass
mitigation
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
- gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
- net/sched: sch_taprio: fix possible use-after-free
- net: fix a concurrency bug in l2tp_tunnel_register()
- l2tp: Serialize access to sk_user_data with sk_callback_lock
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values()
- HID: check empty report_list in bigben_probe()
- net: stmmac: fix invalid call to mdiobus_get_phy()
- HID: revert CHERRY_MOUSE_000C quirk
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- net: mlx5: eliminate anonymous module_init & module_exit
- drm/panfrost: fix GENERIC_ATOMIC64 dependency
- dmaengine: Fix double increment of client_count in dma_chan_get()
- net: macb: fix PTP TX timestamp failure due to packet padding
- HID: betop: check shape of output reports
- dmaengine: xilinx_dma: use devm_platform_ioremap_resource()
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- dmaengine: xilinx_dma: call of_node_put() when breaking out of
for_each_child_of_node()
- tcp: avoid the lookup process failing to get sk in ehash table
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- driver core: Fix test_async_probe_init saves device in wrong array
- net: dsa: microchip: ksz9477: port map correction in ALU table entry
register
- tcp: fix rate_app_limited to default to 1
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
- ASoC: fsl_micfil: Correct the number of steps on SX controls
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
- s390/debug: add _ASM_S390_ prefix to header guard
- cpufreq: armada-37xx: stop using 0 as NULL pointer
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
- spi: spidev: remove debug messages that access spidev->spi without locking
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
- scsi: hisi_sas: Set a port invalid only if there are no devices attached
when refreshing port id
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
- lockref: stop doing cpu_relax in the cmpxchg loop
- mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci
- mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- trace_events_hist: add check for return value of 'create_hist_field'
- ftrace/scripts: Update the instructions for ftrace-bisect.sh
- cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
- thermal: intel: int340x: Protect trip temperature from concurrent updates
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
- EDAC/device: Respect any driver-supplied workqueue polling value
- EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
- netlink: prevent potential spectre v1 gadgets
- net: fix UaF in netns ops registration error path
- netfilter: nft_set_rbtree: skip elements in transaction from garbage
collection
- netlink: annotate data races around nlk->portid
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- net/sched: sch_taprio: do not schedule in taprio_reset()
- sctp: fail if no bound addresses can be used for a given scope
- net: ravb: Fix possible hang if RIS2_QFF1 happen
- thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net/phy/mdio-i2c: Move header file to include/linux/mdio
- net: xgene: Move shared header file into include/linux
- net: mdio-mux-meson-g12a: force internal PHY off on mux switch
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
- block: fix and cleanup bio_check_ro
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- netfilter: conntrack: unify established states for SCTP paths
- perf/x86/amd: fix potential integer overflow on shift of a int
- clk: Fix pointer casting to prevent oops in devm_clk_release()
- x86/asm: Fix an assembler warning with current binutils
- ARM: dts: imx: Fix pca9547 i2c-mux node name
- bpf: Skip task with pid=1 in send_signal_common()
- blk-cgroup: fix missing pd_online_fn() while activating policy
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
- sysctl: add a new register_sysctl_init() interface
- panic: unset panic_on_warn inside panic()
- mm: kasan: do not panic if both panic_on_warn and kasan_multishot set
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- hexagon: Fix function name in die()
- h8300: Fix build errors from do_exit() to make_task_dead() transition
- csky: Fix function name in csky_alignment() and die()
- ia64: make IA64_MCA_RECOVERY bool instead of tristate
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- docs: Fix path paste-o for /sys/kernel/warn_count
- exit: Use READ_ONCE() for all oops/warn limit reads
- ipv6: ensure sane device mtu in tunnels
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
- usb: host: xhci-plat: add wakeup entry at sysfs
- Revert "xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()"
- Linux 5.4.231
* CVE-2022-3903
- USB: add usb_control_msg_send() and usb_control_msg_recv()
- USB: correct API of usb_control_msg_send/recv
- USB: move snd_usb_pipe_sanity_check into the USB core
- media: mceusb: Use new usb_control_msg_*() routines
* CVE-2022-3108
- drm/amdkfd: Check for null pointer after calling kmemdup
* Focal update: v5.4.230 upstream stable release (LP: #2008946)
- pNFS/filelayout: Fix coalescing test for single DS
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- RDMA/srp: Move large values to a new enum for gcc13
- f2fs: let's avoid panic if extent_tree is not created
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
- Add exception protection processing for vd in axi_chan_handle_err function
- nilfs2: fix general protection fault in nilfs_btree_insert()
- efi: fix userspace infinite retry read efivars after EFI runtime services
page fault
- drm/i915/gt: Reset twice
- ALSA: hda/realtek - Turn on power early
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- xhci: Fix null pointer dereference when host dies
- xhci: Add update_hub_device override for PCI xHCI hosts
- xhci: Add a flag to disable USB3 lpm on a xhci root port level.
- usb: acpi: add helper to check port lpm capability using acpi _DSM
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
- prlimit: do_prlimit needs to have a speculation check
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
- misc: fastrpc: Don't remove map on creater_process and device_release
- misc: fastrpc: Fix use-after-free race condition for maps
- usb: core: hub: disable autosuspend for TI TUSB8041
- comedi: adv_pci1760: Fix PWM instruction handling
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
- btrfs: fix race between quota rescan and disable leading to NULL pointer
deref
- cifs: do not include page data when checking signature
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: host: ehci-fsl: Fix module alias
- usb: typec: altmodes/displayport: Add pin assignment helper
- usb: typec: altmodes/displayport: Fix pin assignment calculation
- usb: gadget: g_webcam: Send color matching descriptor per frame
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
- serial: pch_uart: Pass correct sg to dma_unmap_sg()
- dmaengine: tegra210-adma: fix global intr clear
- serial: atmel: fix incorrect baudrate setup
- gsmi: fix null-deref in gsmi_get_variable
- drm/i915: re-disable RC6p on Sandy Bridge
- drm/amd/display: Fix set scaling doesn's work
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
- Linux 5.4.230
-- Wen-chien Jesse Sung <email address hidden> Mon, 29 May 2023 19:44:05 +0800
-
linux-iot (5.4.0-1015.17) focal; urgency=medium
* focal/linux-iot: 5.4.0-1015.17 -proposed tracker (LP: #2011945)
* CVE-2023-1829
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
* Build pciesvc module and kpciemgr as module (LP: #2018947)
- SAUCE: ubuntu/pensando: build pciesvc driver
* [UC20][Task] Ensure latest kernel patches from Pensando are pulled in (LP:
#2012525)
- SAUCE: ubuntu/pensando: update the version number of DSC drivers
* Miscellaneous Ubuntu changes
- SAUCE: ubuntu/pensando: Fix include path to common
- [Config] Enable CONFIG_PCIESVC
* Miscellaneous upstream changes
- RM
[ Ubuntu: 5.4.0-149.166 ]
* focal/linux: 5.4.0-149.166 -proposed tracker (LP: #2016591)
* Focal update: v5.4.233 upstream stable release (LP: #2015909)
- dma-mapping: add generic helpers for mapping sgtable objects
- scatterlist: add generic wrappers for iterating over sgtable objects
- drm: etnaviv: fix common struct sg_table related issues
- drm/etnaviv: don't truncate physical page address
- wifi: rtl8xxxu: gen2: Turn on the rate control
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
- random: always mix cycle counter in add_latent_entropy()
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
- can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
- alarmtimer: Prevent starvation by small intervals and SIG_IGN
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
- uaccess: Add speculation barrier to copy_from_user()
- wifi: mwifiex: Add missing compatible string for SD8787
- ext4: Fix function prototype mismatch for ext4_feat_ktype
- Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo
child qdiscs"
- bpf: add missing header file include
- Linux 5.4.233
* selftest: fib_tests: Always cleanup before exit (LP: #2015956)
- selftest: fib_tests: Always cleanup before exit
* fib_tests.sh in ubuntu_kernel_selftests was skipped silently on Focal
(LP: #2015440)
- selftests: Fix the executable permissions for fib_tests.sh
* Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
- [Debian] autoreconstruct - fix restoration of execute permissions
* kernel: fix __clear_user() inline assembly constraints (LP: #2013088)
- s390/uaccess: add missing earlyclobber annotations to __clear_user()
* i/o error if next unused loop device is queried (LP: #1856871)
- loop: fix I/O error on fsync() in detached loop devices
* CVE-2023-1075
- net/tls: tls_is_tx_ready() checked list_entry
* Focal update: v5.4.232 upstream stable release (LP: #2011625)
- firewire: fix memory leak for payload of request subaction to IEC 61883-1
FCP region
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
- scsi: Revert "scsi: core: map PQ=1, PDT=other values to
SCSI_SCAN_TARGET_PRESENT"
- WRITE is "data source", not destination...
- fix iov_iter_bvec() "direction" argument
- fix "direction" argument of iov_iter_kvec()
- netrom: Fix use-after-free caused by accept on already connected socket
- netfilter: br_netfilter: disable sabotage_in hook after first suppression
- squashfs: harden sanity check in squashfs_read_xattr_id_table
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy
benchmarking
- virtio-net: Keep stop() to follow mirror sequence of open()
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- efi: fix potential NULL deref in efi_mem_reserve_persistent
- scsi: target: core: Fix warning on RT kernels
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- i2c: rk3x: fix a bunch of kernel-doc warnings
- net/x25: Fix to not accept on connected socket
- iio: adc: stm32-dfsdm: fill module aliases
- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- Input: i8042 - move __initconst to fix code styling warning
- Input: i8042 - merge quirk tables
- Input: i8042 - add TUXEDO devices to i8042 quirk tables
- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
- fbcon: Check font dimension limits
- watchdog: diag288_wdt: do not use stack buffers for hardware data
- watchdog: diag288_wdt: fix __diag288() inline assembly
- efi: Accept version 2 of memory attributes table
- iio: hid: fix the retval in accel_3d_capture_sample
- iio: adc: berlin2-adc: Add missing of_node_put() in error path
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
- parisc: Fix return code of pdc_iodc_print()
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
- riscv: disable generation of unwind tables
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
- mm/swapfile: add cond_resched() in get_swap_pages()
- Squashfs: fix handling and sanity checking of xattr_ids count
- nvmem: core: fix cell removal on error
- mm: swap: properly update readahead statistics in unuse_pte_range()
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
- serial: 8250_dma: Fix DMA Rx completion race
- serial: 8250_dma: Fix DMA Rx rearm race
- powerpc/imc-pmu: Revert nest_init_lock to being a mutex
- fbdev: smscufx: fix error handling code in ufx_usb_probe
- f2fs: fix to do sanity check on i_extra_isize in is_alive()
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of-
bounds reads
- iio:adc:twl6030: Enable measurement of VAC
- btrfs: limit device extents to the device size
- btrfs: zlib: zero-initialize zlib workspace
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and
trace_pipe_raw
- can: j1939: do not wait 250 ms if the same addr was already claimed
- IB/hfi1: Restore allocated resources on failed copyout
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- iommu: Add gfp parameter to iommu_ops::map
- RDMA/usnic: use iommu_map_atomic() under spin_lock()
- xfrm: fix bug with DSCP copy to v6 from v4 tunnel
- bonding: fix error checking in bond_debug_reregister()
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
- ionic: clean interrupt before enabling queue to avoid credit race
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- selftests: forwarding: lib: quote the sysctl values
- ALSA: pci: lx6464es: fix a debug loop
- pinctrl: aspeed: Fix confusing types in return value
- pinctrl: single: fix potential NULL dereference
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
- net: USB: Fix wrong-direction WARNING in plusb.c
- usb: core: add quirk for Alcor Link AK9563 smartcard reader
- usb: typec: altmodes/displayport: Fix probe pin assign check
- ceph: flush cap releases when the session is flushed
- riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-
sensitive
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
- nvme-pci: Move enumeration by class to be last in the table
- bpf: Always return target ifindex in bpf_fib_lookup
- migrate: hugetlb: check for hugetlb shared PMD in node migration
- selftests/bpf: Verify copy_register_state() preserves parent/live fields
- ASoC: cs42l56: fix DT probe
- tools/virtio: fix the vringh test for virtio ring changes
- net/rose: Fix to not accept on connected socket
- net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
- net: sched: sch: Bounds check priority
- s390/decompressor: specify __decompress() buf len to avoid overflow
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
- aio: fix mremap after fork null-deref
- btrfs: free device in btrfs_close_devices for a single device filesystem
- netfilter: nft_tproxy: restrict to prerouting hook
- xfs: remove the xfs_efi_log_item_t typedef
- xfs: remove the xfs_efd_log_item_t typedef
- xfs: remove the xfs_inode_log_item_t typedef
- xfs: factor out a xfs_defer_create_intent helper
- xfs: merge the ->log_item defer op into ->create_intent
- xfs: merge the ->diff_items defer op into ->create_intent
- xfs: turn dfp_intent into a xfs_log_item
- xfs: refactor xfs_defer_finish_noroll
- xfs: log new intent items created as part of finishing recovered intent
items
- xfs: fix finobt btree block recovery ordering
- xfs: proper replay of deferred ops queued during log recovery
- xfs: xfs_defer_capture should absorb remaining block reservations
- xfs: xfs_defer_capture should absorb remaining transaction reservation
- xfs: clean up bmap intent item recovery checking
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering
- xfs: fix an incore inode UAF in xfs_bui_recover
- xfs: change the order in which child and parent defer ops are finished
- xfs: periodically relog deferred intent items
- xfs: expose the log push threshold
- xfs: only relog deferred intent items if free space in the log gets low
- xfs: fix missing CoW blocks writeback conversion retry
- xfs: ensure inobt record walks always make forward progress
- xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks
- xfs: prevent UAF in xfs_log_item_in_current_chkpt
- xfs: sync lazy sb accounting on quiesce of read-only mounts
- Revert "ipv4: Fix incorrect route flushing when source address is deleted"
- ipv4: Fix incorrect route flushing when source address is deleted
- mmc: sdio: fix possible resource leaks in some error paths
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ALSA: hda/conexant: add a new hda codec SN6180
- ALSA: hda/realtek - fixed wrong gpio assigned
- sched/psi: Fix use-after-free in ep_remove_wait_queue()
- hugetlb: check for undefined shift on 32 bit architectures
- Revert "mm: Always release pages to the buddy allocator in
memblock_free_late()."
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
- ixgbe: allow to increase MTU to 3K with XDP enabled
- i40e: add double of VLAN header when computing the max MTU
- net: bgmac: fix BCM5358 support by setting correct flags
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
- bnxt_en: Fix mqprio and XDP ring checking logic
- net: stmmac: Restrict warning on disabling DMA store and fwd mode
- ixgbe: add double of VLAN header when computing the max MTU
- ipv6: Fix datagram socket connection with DSCP.
- ipv6: Fix tcp socket connection with DSCP.
- i40e: Add checking for null for nlmsg_find_attr()
- kvm: initialize all of the kvm_debugregs structure before sending it to
userspace
- nilfs2: fix underflow in second superblock position calculations
- ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
- net: sched: sch: Fix off by one in htb_activate_prios()
- iommu/amd: Pass gfp flags to iommu_map_page() in amd_iommu_map()
- Linux 5.4.232
* CVE-2023-1118
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
[ Ubuntu: 5.4.0-148.165 ]
* focal/linux: 5.4.0-148.165 -proposed tracker (LP: #2016777)
* CVE-2023-1829
- net/sched: Retire tcindex classifier
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
[ Ubuntu: 5.4.0-147.164 ]
* focal/linux: 5.4.0-147.164 -proposed tracker (LP: #2011959)
* CVE-2023-26545
- net: mpls: fix stale pointer if allocation fails during device rename
* CVE-2023-1281
- rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
- net/sched: tcindex: update imperfect hash filters respecting rcu
* Focal update: v5.4.231 upstream stable release (LP: #2011226)
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in
atmel_ramc_probe()
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe()
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
- ARM: imx27: Retrieve the SYSCTRL base address from devicetree
- ARM: imx31: Retrieve the IIM base address from devicetree
- ARM: imx35: Retrieve the IIM base address from devicetree
- ARM: imx: add missing of_node_put()
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- EDAC/highbank: Fix memory leak in highbank_mc_probe()
- tomoyo: fix broken dependency on *.conf.default
- RDMA/core: Fix ib block iterator counter overflow
- IB/hfi1: Reject a zero-length user expected buffer
- IB/hfi1: Reserve user expected TIDs
- IB/hfi1: Fix expected receive setup error exit issues
- affs: initialize fsdata in affs_truncate()
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- amd-xgbe: Delay AN timeout during KR training
- bpf: Fix pointer-leak due to insufficient speculative store bypass
mitigation
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
- gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
- net/sched: sch_taprio: fix possible use-after-free
- net: fix a concurrency bug in l2tp_tunnel_register()
- l2tp: Serialize access to sk_user_data with sk_callback_lock
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values()
- HID: check empty report_list in bigben_probe()
- net: stmmac: fix invalid call to mdiobus_get_phy()
- HID: revert CHERRY_MOUSE_000C quirk
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- net: mlx5: eliminate anonymous module_init & module_exit
- drm/panfrost: fix GENERIC_ATOMIC64 dependency
- dmaengine: Fix double increment of client_count in dma_chan_get()
- net: macb: fix PTP TX timestamp failure due to packet padding
- HID: betop: check shape of output reports
- dmaengine: xilinx_dma: use devm_platform_ioremap_resource()
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- dmaengine: xilinx_dma: call of_node_put() when breaking out of
for_each_child_of_node()
- tcp: avoid the lookup process failing to get sk in ehash table
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- driver core: Fix test_async_probe_init saves device in wrong array
- net: dsa: microchip: ksz9477: port map correction in ALU table entry
register
- tcp: fix rate_app_limited to default to 1
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
- ASoC: fsl_micfil: Correct the number of steps on SX controls
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
- s390/debug: add _ASM_S390_ prefix to header guard
- cpufreq: armada-37xx: stop using 0 as NULL pointer
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
- spi: spidev: remove debug messages that access spidev->spi without locking
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
- scsi: hisi_sas: Set a port invalid only if there are no devices attached
when refreshing port id
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
- lockref: stop doing cpu_relax in the cmpxchg loop
- mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci
- mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- trace_events_hist: add check for return value of 'create_hist_field'
- ftrace/scripts: Update the instructions for ftrace-bisect.sh
- cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
- thermal: intel: int340x: Protect trip temperature from concurrent updates
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
- EDAC/device: Respect any driver-supplied workqueue polling value
- EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
- netlink: prevent potential spectre v1 gadgets
- net: fix UaF in netns ops registration error path
- netfilter: nft_set_rbtree: skip elements in transaction from garbage
collection
- netlink: annotate data races around nlk->portid
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- net/sched: sch_taprio: do not schedule in taprio_reset()
- sctp: fail if no bound addresses can be used for a given scope
- net: ravb: Fix possible hang if RIS2_QFF1 happen
- thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net/phy/mdio-i2c: Move header file to include/linux/mdio
- net: xgene: Move shared header file into include/linux
- net: mdio-mux-meson-g12a: force internal PHY off on mux switch
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
- block: fix and cleanup bio_check_ro
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- netfilter: conntrack: unify established states for SCTP paths
- perf/x86/amd: fix potential integer overflow on shift of a int
- clk: Fix pointer casting to prevent oops in devm_clk_release()
- x86/asm: Fix an assembler warning with current binutils
- ARM: dts: imx: Fix pca9547 i2c-mux node name
- bpf: Skip task with pid=1 in send_signal_common()
- blk-cgroup: fix missing pd_online_fn() while activating policy
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
- sysctl: add a new register_sysctl_init() interface
- panic: unset panic_on_warn inside panic()
- mm: kasan: do not panic if both panic_on_warn and kasan_multishot set
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- hexagon: Fix function name in die()
- h8300: Fix build errors from do_exit() to make_task_dead() transition
- csky: Fix function name in csky_alignment() and die()
- ia64: make IA64_MCA_RECOVERY bool instead of tristate
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- docs: Fix path paste-o for /sys/kernel/warn_count
- exit: Use READ_ONCE() for all oops/warn limit reads
- ipv6: ensure sane device mtu in tunnels
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
- usb: host: xhci-plat: add wakeup entry at sysfs
- Revert "xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()"
- Linux 5.4.231
* CVE-2022-3903
- USB: add usb_control_msg_send() and usb_control_msg_recv()
- USB: correct API of usb_control_msg_send/recv
- USB: move snd_usb_pipe_sanity_check into the USB core
- media: mceusb: Use new usb_control_msg_*() routines
* CVE-2022-3108
- drm/amdkfd: Check for null pointer after calling kmemdup
* Focal update: v5.4.230 upstream stable release (LP: #2008946)
- pNFS/filelayout: Fix coalescing test for single DS
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- RDMA/srp: Move large values to a new enum for gcc13
- f2fs: let's avoid panic if extent_tree is not created
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
- Add exception protection processing for vd in axi_chan_handle_err function
- nilfs2: fix general protection fault in nilfs_btree_insert()
- efi: fix userspace infinite retry read efivars after EFI runtime services
page fault
- drm/i915/gt: Reset twice
- ALSA: hda/realtek - Turn on power early
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- xhci: Fix null pointer dereference when host dies
- xhci: Add update_hub_device override for PCI xHCI hosts
- xhci: Add a flag to disable USB3 lpm on a xhci root port level.
- usb: acpi: add helper to check port lpm capability using acpi _DSM
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
- prlimit: do_prlimit needs to have a speculation check
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
- misc: fastrpc: Don't remove map on creater_process and device_release
- misc: fastrpc: Fix use-after-free race condition for maps
- usb: core: hub: disable autosuspend for TI TUSB8041
- comedi: adv_pci1760: Fix PWM instruction handling
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
- btrfs: fix race between quota rescan and disable leading to NULL pointer
deref
- cifs: do not include page data when checking signature
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: host: ehci-fsl: Fix module alias
- usb: typec: altmodes/displayport: Add pin assignment helper
- usb: typec: altmodes/displayport: Fix pin assignment calculation
- usb: gadget: g_webcam: Send color matching descriptor per frame
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
- serial: pch_uart: Pass correct sg to dma_unmap_sg()
- dmaengine: tegra210-adma: fix global intr clear
- serial: atmel: fix incorrect baudrate setup
- gsmi: fix null-deref in gsmi_get_variable
- drm/i915: re-disable RC6p on Sandy Bridge
- drm/amd/display: Fix set scaling doesn's work
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
- Linux 5.4.230
-- Masahiro Yamada <email address hidden> Wed, 10 May 2023 16:04:07 +0900
-
linux-iot (5.4.0-1014.16) focal; urgency=medium
* focal/linux-iot: 5.4.0-1014.16 -proposed tracker (LP: #2013364)
* Add support for Pensando SoC (LP: #2013438)
- mmc: sdhci-cadence: remove unneeded 'inline' marker
- mmc: sdhci-cadence: fix PHY write
- mtd: spi-nor: cadence-quadspi: Provide a way to disable DAC mode
- spi: fix client driver breakages when using GPIO descriptors
- mtd: spi-nor: macronix: Add support for mx66u2g45g
- mtd: spi-nor: micron: Add SPI_NOR_DUAL_READ flag on mt25qu02g
- SAUCE: mtd/spi-nor/cadence-quadspi.c: support spi-rx-bus-width property on
subnodes.
- SAUCE: hwmon/pmbus: Add a driver for the TI TPS53659, based on Vadim
Pasternak's TPS53679.c driver.
- SAUCE: drivers/hwmon: Adding support LTC3888
- SAUCE: i2c-designware: Add I2C code that attempts to recover from a stuck
SDA line.
- SAUCE: arm64/traps: Call platform handler for bad_mode
- SAUCE: mtd/spi-nor/cadence-quadspi.c: add quirks for the Pensando controller
- SAUCE: drivers/mmc/host: Pensando Elba support in the Cadence EMMC host
controller
- SAUCE: spi-dw: Support Pensando Elba custom chip-select
- SAUCE: drivers/spi/spidev.c: Add pensando,cpld device tree compat entry
- SAUCE: arch/arm64: Initial support for the Pensando Elba SoC
- SAUCE: dts/pensnado: Elba flash partitions
- SAUCE: drivers/edac: Add Elba EDAC support
- SAUCE: drivers/soc/pensando: /dev/capmem driver.
- SAUCE: Interrupt domain controllers for Elba ASIC.
- SAUCE: i2c: Add Lattice RD1173 I2C controller driver.
- SAUCE: drivers/uio: UIO drivers for Elba
- SAUCE: drivers/pensando/soc: Boot State Machine (BSM) integration.
- SAUCE: drivers/soc/pensando: crash dump driver.
- SAUCE: drivers/soc/pensando: Add the Reset Cause driver
- SAUCE: soc/pensando: pcie driver
- SAUCE: dts/pensando: add mnet and mcrypt devices, with reserved dma memory
- [Config] add Pensando Elba support
- [Config] CONFIG_ARM64_VA_BITS_39=y
- SAUCE: Pensando DSC drivers 1.15.9-C-65
- SAUCE: add Pensando DSC drivers build machinery
- SAUCE: pensando-dsc-drivers: Kconfig: Make the configs available only for
ARCH_PENSANDO
- [Config] enable Pensando DSC drivers as modules
- SAUCE: arm64: fix platform_serror handling.
- SAUCE: i2c: Add MODULE_ALIAS to support udev
- SAUCE: edac: elba: Add MODULE_DEVICE_TABLE
- SAUCE: ubuntu/pensando: mdev: Add MODULE_DEVICE_TABLE
- [Config] arm64: CONFIG_VFIO_MDEV=n
- SAUCE: spi/spidev: Add MODULE_ALIAS
- [Packaging] Do not blacklist dw_wdt.ko
- SAUCE: arm64: dts: pensando: remove unneeded Makefile code
- SAUCE: dsc-drivers: update drivers for 1.15.9-C-100 (#19)
- SAUCE: pciesvc - initial version
- SAUCE: dsc-drivers: update ionic drivers to 22.11.1-001 (#21)
- SAUCE: drivers/soc/pensando: refactor pciep_regrd32 for kpcimgr
- SAUCE: drivers/soc/pensando: kpcimgr driver.
- SAUCE: drivers/reset: Add emmc hardware reset
- SAUCE: drivers/soc/pensando sbus driver
- SAUCE: drivers/soc/pensando: boot_count to sysfs for kdump.log
- SAUCE: drivers/i2c: Reset Lattice RD1173 master for i2c_busy set.
- SAUCE: drivers/mtd/spi-nor: Winbond w25q02nw flash support.
- SAUCE: drivers/soc/pensando: penfw driver
- SAUCE: defconfig: cleanup elba_defconfig
- SAUCE: arch/arm64/boot/dts: psci support
- SAUCE: reset: change RESET_ELBASR to bool
- [Config] Enable 4 new pensando options
- watchdog: make DesignWare watchdog allow users to set bigger timeout value
- SAUCE: drivers/i2c: Fix Lattice RD1173 interrupt handling
- SAUCE: drivers/hwmon: Fix LTC3888-1 support.
- SAUCE: ubuntu/pensando: Update to 1.59.0-C-5 (#26)
* INVALID or PRIVATE BUG (LP: #2002610) // Add support for Pensando SoC
(LP: #2013438)
- SAUCE: ubuntu/pensando: set is_mgmt_nic to fix ethtool oob_mnic0
-- Wen-chien Jesse Sung <email address hidden> Fri, 31 Mar 2023 18:33:16 +0800
-
linux-iot (5.4.0-1013.15) focal; urgency=medium
* focal/linux-iot: 5.4.0-1013.15 -proposed tracker (LP: #2008375)
* Focal update: v5.4.226 upstream stable release (LP: #2003896)
- [Config] updateconfigs for INET_TABLE_PERTURB_ORDER
[ Ubuntu: 5.4.0-146.163 ]
* focal/linux: 5.4.0-146.163 -proposed tracker (LP: #2012094)
* NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
- NFS: Correct timing for assigning access cache timestamp
[ Ubuntu: 5.4.0-145.162 ]
* focal/linux: 5.4.0-145.162 -proposed tracker (LP: #2008389)
* [SRU]Update ice driver to support E823 devices (LP: #1986717)
- ice: Add device ids for E822 devices
- ice: add support for E823 devices
* btrfs/154: rename fails with EOVERFLOW when calculating item size during
item key collision (LP: #2004132)
- btrfs: correctly calculate item size used when item key collision happens
* rtcpie in timers from ubuntu_kernel_selftests randomly failing
(LP: #1814234)
- SAUCE: selftest: rtcpie: Force passing unreliable subtest
* [UBUNTU 20.04] KVM: s390: pv: don't allow userspace to set the clock under
PV - kernel part (LP: #1999882)
- KVM: s390x: fix SCK locking
- KVM: s390: pv: don't allow userspace to set the clock under PV
* CVE-2021-3669
- ipc: replace costly bailout check in sysvipc_find_ipc()
* net:fcnal-test.sh 'nettest' command not found on F/K (LP: #2006391)
- selftests/net: Find nettest in current directory
* xfs: Preallocated ioend transactions cause deadlock due to log buffer
exhaustion (LP: #2007219)
- xfs: drop submit side trans alloc for append ioends
* CVE-2022-4382
- USB: gadgetfs: Fix race between mounting and unmounting
* CVE-2022-2196
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
* ubuntu_kernel_selftests: net:udpgso_bench.sh failed (LP: #1951447)
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
* net:fcnal-test.sh didn't return a non-zero value even with some sub-tests
failed (LP: #2006692)
- selftests: net/fcnal-test.sh: add exit code
* Fix selftests/ftracetests/Meta-selftests in Focal (LP: #2006453)
- SAUCE: Fix ftrace/Meta-selftests bashism check
* CVE-2023-23559
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
[ Ubuntu: 5.4.0-144.161 ]
* focal/linux: 5.4.0-144.161 -proposed tracker (LP: #2004653)
* CVE-2023-0461
- SAUCE: Fix inet_csk_listen_start after CVE-2023-0461
[ Ubuntu: 5.4.0-143.160 ]
* focal/linux: 5.4.0-143.160 -proposed tracker (LP: #2004385)
* NFS: client permission error after adding user to permissible group
(LP: #2003053)
- NFS: Clear the file access cache upon login
- NFS: Judge the file access cache's timestamp in rcu path
- NFS: Fix up a sparse warning
* Focal update: v5.4.229 upstream stable release (LP: #2003914)
- tracing/ring-buffer: Only do full wait when cpu != RING_BUFFER_ALL_CPUS
- udf: Discard preallocation before extending file with a hole
- udf: Fix preallocation discarding at indirect extent boundary
- udf: Do not bother looking for prealloc extents if i_lenExtents matches
i_size
- udf: Fix extending file within last block
- usb: gadget: uvc: Prevent buffer overflow in setup handler
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs
- USB: serial: f81232: fix division by zero on line-speed change
- USB: serial: f81534: fix division by zero on line-speed change
- igb: Initialize mailbox message for VF reset
- xen-netback: move removal of "hotplug-status" to the right place
- HID: ite: Add support for Acer S1002 keyboard-dock
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
- usb: musb: remove extra check in musb_gadget_vbus_draw
- ARM: dts: qcom: apq8064: fix coresight compatible
- arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias
- drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static
- arm: dts: spear600: Fix clcd interrupt
- soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of
pm_runtime_get_sync
- soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe
- soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe
- perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init()
- perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
- arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators
- arm64: dts: mt2712e: Fix unit address for pinctrl node
- arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names
- arm64: dts: mt2712-evb: Fix usb vbus regulators unit names
- arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name
- ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port
- ARM: dts: turris-omnia: Add ethernet aliases
- ARM: dts: turris-omnia: Add switch port 6 node
- arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC
- pstore/ram: Fix error return code in ramoops_probe()
- ARM: mmp: fix timer_read delay
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
- tpm/tpm_crb: Fix error message in __crb_relinquish_locality()
- cpuidle: dt: Return the correct numbers of parsed idle states
- alpha: fix syscall entry in !AUDUT_SYSCALL case
- PM: hibernate: Fix mistake in kerneldoc comment
- fs: don't audit the capability check in simple_xattr_list()
- selftests/ftrace: event_triggers: wait longer for test_event_enable
- perf: Fix possible memleak in pmu_dev_alloc()
- timerqueue: Use rb_entry_safe() in timerqueue_getnext()
- proc: fixup uptime selftest
- lib/fonts: fix undefined behavior in bit shift for get_default_font
- ocfs2: fix memory leak in ocfs2_stack_glue_init()
- MIPS: vpe-mt: fix possible memory leak while module exiting
- MIPS: vpe-cmp: fix possible memory leak while module exiting
- selftests/efivarfs: Add checking of the test return value
- PNP: fix name memory leak in pnp_alloc_dev()
- perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()
- irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
- EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
- nfsd: don't call nfsd_file_put from client states seqfile display
- genirq/irqdesc: Don't try to remove non-existing sysfs files
- cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
- lib/notifier-error-inject: fix error when writing -errno to debugfs file
- docs: fault-injection: fix non-working usage of negative values
- debugfs: fix error when writing negative value to atomic_t debugfs file
- ocfs2: ocfs2_mount_volume does cleanup job before return error
- ocfs2: rewrite error handling of ocfs2_fill_super
- ocfs2: fix memory leak in ocfs2_mount_volume()
- rapidio: fix possible name leaks when rio_add_device() fails
- rapidio: rio: fix possible name leak in rio_register_mport()
- clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
- uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
- xen/events: only register debug interrupt for 2-level events
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}()
- x86/xen: Fix memory leak in xen_init_lock_cpu()
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
- PM: runtime: Improve path in rpm_idle() when no callback
- PM: runtime: Do not call __rpm_callback() from rpm_idle()
- platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
- MIPS: BCM63xx: Add check for NULL for clk in clk_enable
- MIPS: OCTEON: warn only once if deprecated link status is being used
- fs: sysv: Fix sysv_nblocks() returns wrong value
- rapidio: fix possible UAF when kfifo_alloc() fails
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
- relay: fix type mismatch when allocating memory in relay_create_buf()
- hfs: Fix OOB Write in hfs_asc2mac
- rapidio: devices: fix missing put_device in mport_cdev_open
- wifi: ath9k: hif_usb: fix memory leak of urbs in
ath9k_hif_usb_dealloc_tx_urbs()
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
- wifi: rtl8xxxu: Fix reading the vendor of combo chips
- pata_ipx4xx_cf: Fix unsigned comparison with less than zero
- media: i2c: ad5820: Fix error path
- can: kvaser_usb: do not increase tx statistics when sending error message
frames
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to
{leaf,usbcan}_cmd_can_error_event
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
- can: kvaser_usb_leaf: Set Warning state even without bus errors
- can: kvaser_usb_leaf: Fix improved state not being reported
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping
- can: kvaser_usb_leaf: Fix bogus restart events
- can: kvaser_usb: Add struct kvaser_usb_busparams
- can: kvaser_usb: Compare requested bittiming parameters with actual
parameters in do_set_{,data}_bittiming
- clk: renesas: r9a06g032: Repair grave increment error
- spi: Update reference to struct spi_controller
- drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
- ima: Rename internal filter rule functions
- ima: Fix fall-through warnings for Clang
- ima: Handle -ESTALE returned by ima_filter_rule_match()
- media: vivid: fix compose size exceed boundary
- bpf: propagate precision in ALU/ALU64 operations
- mtd: Fix device name leak when register device failed in add_mtd_device()
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
- media: camss: Clean up received buffers on failed start of streaming
- net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write()
- rxrpc: Fix ack.bufferSize to be 0 when generating an ack
- drm/radeon: Add the missed acpi_put_table() to fix memory leak
- drm/mediatek: Modify dpi power on/off sequence.
- ASoC: pxa: fix null-pointer dereference in filter()
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
- integrity: Fix memory leakage in keyring allocation error path
- ima: Fix misuse of dereference of pointer in template_desc_init_fields()
- wifi: ath10k: Fix return value in ath10k_pci_init()
- mtd: lpddr2_nvm: Fix possible null-ptr-deref
- Input: elants_i2c - properly handle the reset GPIO when power is off
- media: solo6x10: fix possible memory leak in solo_sysfs_init()
- media: platform: exynos4-is: Fix error handling in fimc_md_init()
- media: videobuf-dma-contig: use dma_mmap_coherent
- bpf: Move skb->len == 0 checks into __bpf_redirect
- HID: hid-sensor-custom: set fixed size for custom attributes
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
- ALSA: seq: fix undefined behavior in bit shift for
SNDRV_SEQ_FILTER_USE_EVENT
- regulator: core: use kfree_const() to free space conditionally
- clk: rockchip: Fix memory leak in rockchip_clk_register_pll()
- bonding: Export skip slave logic to function
- bonding: Rename slave_arr to usable_slaves
- bonding: fix link recovery in mode 2 when updelay is nonzero
- mtd: maps: pxa2xx-flash: fix memory leak in probe
- media: imon: fix a race condition in send_packet()
- clk: imx8mn: correct the usb1_ctrl parent to be usb_bus
- clk: imx: replace osc_hdmi with dummy
- pinctrl: pinconf-generic: add missing of_node_put()
- media: dvb-core: Fix ignored return value in dvb_register_frontend()
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
- media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC
- drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe()
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example
- ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd
- NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
- NFSv4.2: Fix a memory stomp in decode_attr_security_label
- NFSv4.2: Fix initialisation of struct nfs4_label
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
- ALSA: asihpi: fix missing pci_disable_device()
- wifi: iwlwifi: mvm: fix double free on tx path.
- ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
- ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe
- netfilter: conntrack: set icmpv6 redirects as RELATED
- bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
- bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect
- bonding: uninitialized variable in bond_miimon_inspect()
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys()
fails
- regulator: core: fix module refcount leak in set_supply()
- clk: qcom: clk-krait: fix wrong div2 functions
- hsr: Avoid double remove of a node.
- configfs: fix possible memory leak in configfs_create_dir()
- regulator: core: fix resource leak in regulator_register()
- bpf, sockmap: fix race in sock_map_free()
- media: saa7164: fix missing pci_disable_device()
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
- SUNRPC: Fix missing release socket in rpc_sockname()
- NFSv4.x: Fail client initialisation if state manager thread can't run
- mmc: alcor: fix return value check of mmc_add_host()
- mmc: moxart: fix return value check of mmc_add_host()
- mmc: mxcmmc: fix return value check of mmc_add_host()
- mmc: pxamci: fix return value check of mmc_add_host()
- mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host()
- mmc: toshsd: fix return value check of mmc_add_host()
- mmc: vub300: fix return value check of mmc_add_host()
- mmc: wmt-sdmmc: fix return value check of mmc_add_host()
- mmc: atmel-mci: fix return value check of mmc_add_host()
- mmc: omap_hsmmc: fix return value check of mmc_add_host()
- mmc: meson-gx: fix return value check of mmc_add_host()
- mmc: via-sdmmc: fix return value check of mmc_add_host()
- mmc: wbsd: fix return value check of mmc_add_host()
- mmc: mmci: fix return value check of mmc_add_host()
- media: c8sectpfe: Add of_node_put() when breaking out of loop
- media: coda: Add check for dcoda_iram_alloc
- media: coda: Add check for kmalloc
- clk: samsung: Fix memory leak in _samsung_clk_register_pll()
- spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
- blktrace: Fix output non-blktrace event when blk_classic option enabled
- clk: socfpga: clk-pll: Remove unused variable 'rc'
- clk: socfpga: use clk_hw_register for a5/c5
- clk: socfpga: Fix memory leak in socfpga_gate_init()
- net: vmw_vsock: vmci: Check memcpy_from_msg()
- net: defxx: Fix missing err handling in dfx_init()
- net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload()
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
- of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry()
and find_dup_cset_prop()
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: farsync: Fix kmemleak when rmmods farsync
- net/tunnel: wait until all sk_user_data reader finish before releasing the
sock
- net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: amd-xgbe: Fix logic around active and passive cables
- net: amd-xgbe: Check only the minimum speed for active/passive cables
- can: tcan4x5x: Remove invalid write in clear_interrupts
- net: lan9303: Fix read error execution path
- ntb_netdev: Use dev_kfree_skb_any() in interrupt context
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
- stmmac: fix potential division by 0
- apparmor: fix a memleak in multi_transaction_new()
- apparmor: fix lockdep warning when removing a namespace
- apparmor: Fix abi check to include v8 abi
- apparmor: Use pointer to struct aa_label for lbs_cred
- RDMA/core: Fix order of nldev_exit call
- f2fs: fix normal discard process
- RDMA/siw: Fix immediate work request flush to completion queue
- RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
- RDMA/siw: Set defined status for work completion with undefined status
- scsi: scsi_debug: Fix a warning in resp_write_scat()
- crypto: ccree - swap SHA384 and SHA512 larval hashes at build time
- crypto: ccree - Remove debugfs when platform_driver_register failed
- PCI: Check for alloc failure in pci_request_irq()
- RDMA/hfi: Decrease PCI device reference count in error path
- crypto: ccree - Make cc_debugfs_global_fini() available for module init
function
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create
failed
- scsi: hpsa: Fix possible memory leak in hpsa_init_one()
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
- scsi: hpsa: Fix error handling in hpsa_add_sas_host()
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
- scsi: fcoe: Fix possible name leak when device_register() fails
- scsi: ipr: Fix WARNING in ipr_init()
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
- scsi: snic: Fix possible UAF in snic_tgt_create()
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
- f2fs: avoid victim selection from previous victim section
- crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe()
- RDMA/hfi1: Fix error return code in parse_platform_config()
- orangefs: Fix sysfs not cleanup when dev init failed
- crypto: img-hash - Fix variable dereferenced before check 'hdev->req'
- hwrng: amd - Fix PCI device refcount leak
- hwrng: geode - Fix PCI device refcount leak
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
- drivers: dio: fix possible memory leak in dio_init()
- tty: serial: tegra: Activate RX DMA transfer by request
- serial: tegra: Read DMA status before terminating
- class: fix possible memory leak in __class_register()
- vfio: platform: Do not pass return buffer to ACPI _RST method
- uio: uio_dmem_genirq: Fix missing unlock in irq configuration
- uio: uio_dmem_genirq: Fix deadlock between irq config and handling
- usb: fotg210-udc: Fix ages old endianness issues
- staging: vme_user: Fix possible UAF in tsi148_dma_list_add
- usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
- serial: amba-pl011: avoid SBSA UART accessing DMACR register
- serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
- serial: pch: Fix PCI device refcount leak in pch_request_dma()
- tty: serial: clean up stop-tx part in altera_uart_tx_chars()
- tty: serial: altera_uart_{r,t}x_chars() need only uart_port
- serial: altera_uart: fix locking in polling mode
- serial: sunsab: Fix error handling in sunsab_init()
- test_firmware: fix memory leak in test_firmware_init()
- misc: ocxl: fix possible name leak in ocxl_file_register_afu()
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault
and gru_handle_user_call_os
- cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter()
- cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()
- counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
- usb: gadget: f_hid: optional SETUP/SET_REPORT mode
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev
- usb: gadget: f_hid: fix refcount leak on error path
- drivers: mcb: fix resource leak in mcb_probe()
- mcb: mcb-parse: fix error handing in chameleon_parse_gdd()
- chardev: fix error handling in cdev_device_add()
- i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe
- staging: rtl8192u: Fix use after free in ieee80211_rx()
- staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor()
- vme: Fix error not catched in fake_init()
- i2c: ismt: Fix an out-of-bounds bug in ismt_access()
- usb: storage: Add check for kcalloc
- tracing/hist: Fix issue of losting command info in error_log
- samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe()
- fbdev: ssd1307fb: Drop optional dependency
- fbdev: pm2fb: fix missing pci_disable_device()
- fbdev: via: Fix error in via_core_init()
- fbdev: vermilion: decrease reference count in error path
- fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
- HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
- HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
- power: supply: fix residue sysfs file in error handle route of
__power_supply_register()
- perf trace: Return error if a system call doesn't exist
- perf trace: Separate 'struct syscall_fmt' definition from syscall_fmts
variable
- perf trace: Factor out the initialization of syscal_arg_fmt->scnprintf
- perf trace: Add the syscall_arg_fmt pointer to syscall_arg
- perf trace: Allow associating scnprintf routines with well known arg names
- perf trace: Add a strtoul() method to 'struct syscall_arg_fmt'
- perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
- perf trace: Handle failure when trace point folder is missed
- perf symbol: correction while adjusting symbol
- HSI: omap_ssi_core: Fix error handling in ssi_init()
- power: supply: fix null pointer dereferencing in
power_supply_get_battery_info
- RDMA/siw: Fix pointer cast warning
- include/uapi/linux/swab: Fix potentially missing __always_inline
- rtc: snvs: Allow a time difference on clock register read
- rtc: pcf85063: Fix reading alarm
- iommu/amd: Fix pci device refcount leak in ppr_notifier()
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
- macintosh: fix possible memory leak in macio_add_one_device()
- macintosh/macio-adb: check the return value of ioremap()
- powerpc/52xx: Fix a resource leak in an error handling path
- cxl: Fix refcount leak in cxl_calc_capp_routing
- powerpc/xive: add missing iounmap() in error path in
xive_spapr_populate_irq_data()
- powerpc/perf: callchain validate kernel stack pointer bounds
- powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in
of_fsl_spi_probe()
- powerpc/hv-gpci: Fix hv_gpci event list
- selftests/powerpc: Fix resource leaks
- pwm: sifive: Call pwm_sifive_update_clock() while mutex is held
- remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
- remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in
adsp_alloc_memory_region()
- rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe()
- rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe()
- nfsd: Define the file access mode enum for tracing
- NFSD: Add tracepoints to NFSD's duplicate reply cache
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- nfc: pn533: Clear nfc_target before being used
- r6040: Fix kmemleak in probe and remove
- rtc: mxc_v2: Add missing clk_disable_unprepare()
- openvswitch: Fix flow lookup to use unmasked key
- skbuff: Account for tail adjustment during pull operations
- mailbox: zynq-ipi: fix error handling while device_register() fails
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
- myri10ge: Fix an error handling path in myri10ge_probe()
- net: stream: purge sk_error_queue in sk_stream_kill_queues()
- rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
- binfmt_misc: fix shift-out-of-bounds in check_special_flags
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- udf: Avoid double brelse() in udf_rename()
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG
- ACPICA: Fix error code path in acpi_ds_call_control_method()
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
- acct: fix potential integer overflow in encode_comp_t()
- hfs: fix OOB Read in __hfs_brec_find
- drm/etnaviv: add missing quirks for GC300
- brcmfmac: return error when getting invalid max_flowrings from dongle
- wifi: ath9k: verify the expected usb_endpoints are present
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
- ASoC: codecs: rt298: Add quirk for KBL-R RVP platform
- ipmi: fix memleak when unload ipmi driver
- bpf: make sure skb->len != 0 when redirecting to a tunneling device
- net: ethernet: ti: Fix return type of netcp_ndo_start_xmit()
- hamradio: baycom_epp: Fix return type of baycom_send_packet()
- wifi: brcmfmac: Fix potential shift-out-of-bounds in
brcmf_fw_alloc_request()
- igb: Do not free q_vector unless new one was allocated
- s390/ctcm: Fix return type of ctc{mp,}m_tx()
- s390/netiucv: Fix return type of netiucv_tx()
- s390/lcs: Fix return type of lcs_start_xmit()
- drm/rockchip: Use drm_mode_copy()
- drm/sti: Use drm_mode_copy()
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- net: add atomic_long_t to net_device_stats fields
- mrp: introduce active flags to prevent UAF when applicant uninit
- ppp: associate skb with a device at tx
- bpf: Prevent decl_tag from being referenced in func_proto arg
- media: dvb-frontends: fix leak of memory fw
- media: dvbdev: adopts refcnt to avoid UAF
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- blk-mq: fix possible memleak when register 'hctx' failed
- regulator: core: fix use_count leakage when handling boot-on
- mmc: f-sdh30: Add quirks for broken timeout clock capability
- media: si470x: Fix use-after-free in si470x_int_in_callback()
- clk: st: Fix memory leak in st_of_quadfs_setup()
- hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
- drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid()
- drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
- ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
- ALSA: hda: add snd_hdac_stop_streams() helper
- ASoC: Intel: Skylake: Fix driver hang during shutdown
- ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in
mt8173_rt5650_rt5514_dev_probe()
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in
__graph_for_each_link()
- ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in
rockchip_pdm_runtime_resume()
- ASoC: wm8994: Fix potential deadlock
- ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in
rk_spdif_runtime_resume()
- ASoC: rt5670: Remove unbalanced pm_runtime_put()
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
- usb: dwc3: core: defer probe on ulpi_read_id timeout
- HID: wacom: Ensure bootloader PID is usable in hidraw mode
- reiserfs: Add missing calls to reiserfs_security_free()
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock
- iio: adc128s052: add proper .data members in adc128_of_match table
- regulator: core: fix deadlock on regulator enable
- gcov: add support for checksum field
- media: dvbdev: fix build warning due to comments
- media: dvbdev: fix refcnt bug
- cifs: fix oops during encryption
- nvme-pci: fix doorbell buffer value endianness
- ata: ahci: Fix PCS quirk application for suspend
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
- objtool: Fix SEGFAULT
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
- powerpc/rtas: avoid scheduling in rtas_os_term()
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
- HID: plantronics: Additional PIDs for double volume key presses quirk
- hfsplus: fix bug causing custom uid and gid being unable to be assigned with
mount
- ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
- ALSA: line6: correct midi status byte when receiving data from podxt
- ALSA: line6: fix stack overflow in line6_midi_transmit
- pnode: terminate at peers of source
- md: fix a crash in mempool_free
- mm, compaction: fix fast_isolate_around() to stay within boundaries
- f2fs: should put a page when checking the summary info
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
- net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
- net/af_packet: make sure to pull mac header
- media: stv0288: use explicitly signed char
- soc: qcom: Select REMAP_MMIO for LLCC driver
- kest.pl: Fix grub2 menu handling for rebooting
- ktest.pl minconfig: Unset configs instead of just removing them
- mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
- btrfs: fix resolving backrefs for inline extent followed by prealloc
- ARM: ux500: do not directly dereference __iomem
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
- selftests: Use optional USERCFLAGS and USERLDFLAGS
- cpufreq: Init completion before kobject_init_and_add()
- binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf
- binfmt: Fix error return code in load_elf_fdpic_binary()
- dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- dm thin: Use last transaction's pmd->root when commit failed
- dm thin: Fix UAF in run_timer_softirq()
- dm integrity: Fix UAF in dm_integrity_dtr()
- dm clone: Fix UAF in clone_dtr()
- dm cache: Fix UAF in destroy()
- dm cache: set needs_check flag after aborting metadata
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
- x86/microcode/intel: Do not retry microcode reloading on the APs
- tracing/hist: Fix wrong return value in parse_action_params()
- tracing: Fix infinite loop in tracing_read_pipe on overflowed
print_trace_line
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
- media: dvb-core: Fix double free in dvb_register_device()
- cifs: fix confusing debug message
- cifs: fix missing display of three mount options
- md/bitmap: Fix bitmap chunk size overflow issues
- efi: Add iMac Pro 2017 to uefi skip cert quirk
- ipmi: fix long wait in unload when IPMI disconnect
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list
- ipmi: fix use after free in _ipmi_destroy_user()
- PCI: Fix pci_device_is_present() for VFs by checking PF
- PCI/sysfs: Fix double free in error path
- crypto: n2 - add missing hash statesize
- iommu/amd: Fix ivrs_acpihid cmdline parsing code
- parisc: led: Fix potential null-ptr-deref in start_task()
- device_cgroup: Roll back to original exceptions after copy failure
- drm/connector: send hotplug uevent on connector cleanup
- drm/vmwgfx: Validate the box size for the snooped cursor
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
- ext4: add helper to check quota inums
- ext4: fix reserved cluster accounting in __es_remove_extent()
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
- ext4: init quota for 'old.inode' in 'ext4_rename'
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
- ext4: fix corruption when online resizing a 1K bigalloc fs
- ext4: fix error code return to user-space in ext4_get_branch()
- ext4: avoid BUG_ON when creating xattrs
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path
- ext4: initialize quota before expanding inode in setproject ioctl
- ext4: avoid unaccounted block allocation when expanding inode
- ext4: allocate extended attribute value in vmalloc area
- btrfs: replace strncpy() with strscpy()
- PM/devfreq: governor: Add a private governor_data for governor
- media: s5p-mfc: Fix to handle reference queue during finishing
- media: s5p-mfc: Clear workbit to handle error condition
- media: s5p-mfc: Fix in register read and write for H264
- dm thin: resume even if in FAIL mode
- perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
- perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged
data
- KVM: x86: optimize more exit handlers in vmx.c
- KVM: retpolines: x86: eliminate retpoline from vmx.c exit handlers
- KVM: VMX: Rename INTERRUPT_PENDING to INTERRUPT_WINDOW
- KVM: VMX: Rename NMI_PENDING to NMI_WINDOW
- KVM: VMX: Fix the spelling of CPU_BASED_USE_TSC_OFFSETTING
- KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1
- ravb: Fix "failed to switch device to config mode" message during unbind
- ext4: goto right label 'failed_mount3a'
- ext4: correct inconsistent error msg in nojournal mode
- mm/highmem: Lift memcpy_[to|from]_page to core
- ext4: use memcpy_to_page() in pagecache_write()
- fs: ext4: initialize fsdata in pagecache_write()
- ext4: use kmemdup() to replace kmalloc + memcpy
- mbcache: don't reclaim used entries
- mbcache: add functions to delete entry if unused
- ext4: remove EA inode entry from mbcache on inode eviction
- ext4: unindent codeblock in ext4_xattr_block_set()
- ext4: fix race when reusing xattr blocks
- mbcache: automatically delete entries from cache on freeing
- ext4: fix deadlock due to mbcache entry corruption
- SUNRPC: ensure the matching upcall is in-flight upon downcall
- bpf: pull before calling skb_postpull_rcsum()
- nfsd: shut down the NFSv4 state objects before the filecache
- net: hns3: add interrupts re-initialization while doing VF FLR
- net: sched: fix memory leak in tcindex_set_parms
- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
- nfc: Fix potential resource leaks
- vhost: fix range used in translate_desc()
- net: amd-xgbe: add missed tasklet_kill
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
- RDMA/uverbs: Silence shiftTooManyBitsSigned warning
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
- net: sched: atm: dont intepret cls results when asked to drop
- net: sched: cbq: dont intepret cls results when asked to drop
- perf tools: Fix resources leak in perf_data__open_dir()
- drivers/net/bonding/bond_3ad: return when there's no aggregator
- usb: rndis_host: Secure rndis_query check against int overflow
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
- caif: fix memory leak in cfctrl_linkup_request()
- udf: Fix extension of the last extent in the file
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
- x86/bugs: Flush IBP in ib_prctl_set()
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout
- riscv: uaccess: fix type of 0 variable on error in get_user()
- ext4: don't allow journal inode to have encrypt flag
- hfs/hfsplus: use WARN_ON for sanity check
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
- mbcache: Avoid nesting of cache->c_list_lock under bit locks
- parisc: Align parisc MADV_XXX constants with all other architectures
- selftests: Fix kselftest O=objdir build from cluttering top level objdir
- selftests: set the BUILD variable to absolute path
- driver core: Fix bus_type.match() error handling in __driver_attach()
- net: sched: disallow noqueue for qdisc classes
- KVM: arm64: Fix S1PTW handling on RO memslots
- efi: tpm: Avoid READ_ONCE() for accessing the event log
- docs: Fix the docs build with Sphinx 6.0
- perf auxtrace: Fix address filter duplicate symbol selection
- s390/kexec: fix ipl report address for kdump
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- net/ulp: prevent ULP without clone op from entering the LISTEN status
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
- cifs: Fix uninitialized memory read for smb311 posix symlink create
- drm/msm/adreno: Make adreno quirks not overwrite each other
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during
probe
- ixgbe: fix pci device refcount leak
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- wifi: wilc1000: sdio: fix module autoloading
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- jbd2: use the correct print format
- quota: Factor out setup of quota inode
- ext4: fix bug_on in __es_tree_search caused by bad quota inode
- ext4: lost matching-pair of trace in ext4_truncate
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix uninititialized value in 'ext4_evict_inode'
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
- x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- regulator: da9211: Use irq handler when ready
- tipc: improve throughput between nodes in netns
- tipc: eliminate checking netns if node established
- tipc: fix unexpected link reset due to discovery messages
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- net/sched: act_mpls: Fix warning during failed attribute validation
- net/mlx5: Rename ptp clock info
- net/mlx5: Fix ptp max frequency adjustment range
- iommu/mediatek-v1: Add error handle for mtk_iommu_probe
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
- x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent
unnecessary IPI
- x86/resctrl: Fix task CLOSID/RMID update race
- drm/virtio: Fix GEM handle creation UAF
- arm64: atomics: format whitespace consistently
- arm64: atomics: remove LL/SC trampolines
- arm64: cmpxchg_double*: hazard against entire exchange variable
- efi: fix NULL-deref in init error path
- mm: Always release pages to the buddy allocator in memblock_free_late().
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
- tipc: fix use-after-free in tipc_disc_rcv()
- tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn't started
- tipc: Add a missing case of TIPC_DIRECT_MSG type
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown
- tipc: call tipc_lxc_xmit without holding node_read_lock
- Linux 5.4.229
* Focal update: v5.4.229 upstream stable release (LP: #2003914) //
CVE-2023-0266 was assigned for this issue.
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
* Focal update: v5.4.229 upstream stable release (LP: #2003914) //
CVE-2022-41218 is assigned to those bugs above.
- media: dvb-core: Fix UAF due to refcount races at releasing
* Focal update: v5.4.228 upstream stable release (LP: #2003904)
- x86/smpboot: Move rcu_cpu_starting() earlier
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
- block: unhash blkdev part inode when the part is deleted
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- pinctrl: meditatek: Startup with the IRQs disabled
- can: sja1000: fix size of OCR_MODE_MASK define
- can: mcba_usb: Fix termination command argument
- ASoC: ops: Correct bounds check for second channel on SX controls
- Linux 5.4.228
* Focal update: v5.4.227 upstream stable release (LP: #2003901)
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4
series
- arm: dts: rockchip: fix node name for hym8563 rtc
- ARM: dts: rockchip: fix ir-receiver node names
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
- 9p/fd: Use P9_HDRSZ for header size
- regulator: slg51000: Wait after asserting CS pin
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- btrfs: send: avoid unaligned encoded writes when attempting to clone range
- ASoC: soc-pcm: Add NULL check in BE reparenting
- regulator: twl6030: fix get status of twl6032 regulators
- fbcon: Use kzalloc() in fbcon_prepare_logo()
- 9p/xen: check logical size for buffer size
- net: usb: qmi_wwan: add u-blox 0x1342 composition
- mm/khugepaged: take the right locks for page table retraction
- mm/khugepaged: fix GUP-fast interaction by sending IPI
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- xen/netback: do some code cleanup
- xen/netback: don't call kfree_skb() with interrupts disabled
- Revert "net: dsa: b53: Fix valid setting for MDB entries"
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks
- memcg: fix possible use-after-free in memcg_write_event_control()
- mm/gup: fix gup_pud_range() for dax
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
- drm/shmem-helper: Remove errant put in error path
- HID: usbhid: Add ALWAYS_POLL quirk for some mice
- HID: hid-lg4ff: Add check for empty lbuf
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
- ca8210: Fix crash by zero initializing data
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
- gpio: amd8111: Fix PCI device reference count leak
- e1000e: Fix TX dispatch condition
- igb: Allocate MSI-X vector when testing
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
- Bluetooth: Fix not cleanup led when bt_init fails
- net: dsa: ksz: Check return value
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- net: encx24j600: Add parentheses to fix precedence
- net: encx24j600: Fix invalid logic in reading of MISTAT register
- xen-netfront: Fix NULL sring after live migration
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- i40e: Fix not setting default xps_cpus after reset
- i40e: Fix for VF MAC address 0
- i40e: Disallow ip4 and ip6 l4_4_bytes
- NFC: nci: Bounds check struct nfc_target arrays
- nvme initialize core quirks before calling nvme_init_subsystem
- net: stmmac: fix "snps,axi-config" node property parsing
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- tipc: Fix potential OOB in tipc_link_proto_rcv()
- ipv4: Fix incorrect route flushing when source address is deleted
- ipv4: Fix incorrect route flushing when table ID 0 is used
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
- ipv6: avoid use-after-free in ip6_fragment()
- net: mvneta: Fix an out of bounds check
- can: esd_usb: Allow REC and TEC to return to zero
- Linux 5.4.227
* 5.15.0-58.64 breaks xen bridge networking (pvh domU) (LP: #2002889) // Focal
update: v5.4.227 upstream stable release (LP: #2003901)
- xen/netback: fix build warning
* Focal update: v5.4.226 upstream stable release (LP: #2003896)
- wifi: mac80211: fix memory free error when registering wiphy fail
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
- audit: fix undefined behavior in bit shift for AUDIT_BIT
- wifi: mac80211: Fix ack frame idr leak when mesh has no route
- spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- arm64/syscall: Include asm/ptrace.h in syscall_wrapper header.
- RISC-V: vdso: Do not add missing symbols to version section in linker script
- MIPS: pic32: treat port as signed integer
- af_key: Fix send_acquire race with pfkey_register
- ARM: dts: am335x-pcm-953: Define fixed regulators in root node
- ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
- regulator: core: fix kobject release warning and memory leak in
regulator_register()
- regulator: core: fix UAF in destroy_regulator()
- bus: sunxi-rsb: Support atomic transfers
- tee: optee: fix possible memory leak in optee_register_device()
- ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
- net: liquidio: simplify if expression
- nfc/nci: fix race with opening and closing
- net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
- ARM: mxs: fix memory leak in mxs_machine_init()
- net/mlx4: Check retval of mlx4_bitmap_init
- net/qla3xxx: fix potential memleak in ql3xxx_send()
- net: pch_gbe: fix pci device refcount leak while module exiting
- nfp: add port from netdev validation for EEPROM access
- Drivers: hv: vmbus: fix double free in the error path of
vmbus_add_channel_work()
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
- net/mlx5: Fix FW tracer timestamp calculation
- tipc: set con sock in tipc_conn_alloc
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: check skb_linearize() return value in tipc_disc_rcv()
- xfrm: Fix ignored return value in xfrm6_init()
- NFC: nci: fix memory leak in nci_rx_data_packet()
- regulator: twl6030: re-add TWL6032_SUBCLASS
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
- s390/dasd: fix no record found for raw_track_access
- nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st-nci: fix memory leaks in EVT_TRANSACTION
- net: thunderx: Fix the ACPI memory leak
- s390/crashdump: fix TOD programmable field size
- lib/vdso: use "grep -E" instead of "egrep"
- usb: dwc3: exynos: Fix remove() function
- arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
- iio: light: apds9960: fix wrong register for gesture gain
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash
- nios2: add FORCE for vmlinuz.gz
- iio: ms5611: Simplify IO callback parameters
- iio: pressure: ms5611: fixed value compensation bug
- ceph: do not update snapshot context when there is no new snapshot
- ceph: avoid putting the realm twice when decoding snaps fails
- firmware: google: Release devices before unregistering the bus
- firmware: coreboot: Register bus in module init
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
- gcov: clang: fix the buffer overflow issue
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
- ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
- serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
- xen/platform-pci: add missing free_irq() in error path
- platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
- platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
- platform/x86: hp-wmi: Ignore Smart Experience App event
- [Config] updateconfigs for INET_TABLE_PERTURB_ORDER
- tcp: configurable source port perturb table size
- net: usb: qmi_wwan: add Telit 0x103a composition
- dm integrity: flush the journal on suspend
- binder: avoid potential data leakage when copying txn
- binder: read pre-translated fds from sender buffer
- binder: defer copies of pre-patched txn data
- binder: fix pointer cast warning
- binder: Address corner cases in deferred copy and fixup
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- btrfs: free btrfs_path before copying root refs to userspace
- btrfs: free btrfs_path before copying fspath to userspace
- btrfs: free btrfs_path before copying subvol info to userspace
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
- drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
- drm/amdgpu: always register an MMU notifier for userptr
- fuse: lock inode unconditionally in fuse_fallocate()
- btrfs: free btrfs_path before copying inodes to userspace
- spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from
btrfs_qgroup_rescan_worker
- drm/amdgpu: update drm_display_info correctly when the edid is read
- drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly
when the edid is read"
- btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- iio: health: afe4403: Fix oob read in afe4403_read_raw
- iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- iio: light: rpr0521: add missing Kconfig dependencies
- scripts/faddr2line: Fix regression in name resolution on ppc64le
- hwmon: (i5500_temp) fix missing pci_disable_device()
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- of: property: decrement node refcount in of_fwnode_get_reference_args()
- net/mlx5: Fix uninitialized variable bug in outlen_write()
- net/mlx5e: Fix use-after-free when reverting termination table
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
- can: cc770: cc770_isa_probe(): add missing free_cc770dev()
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep
- wifi: cfg80211: fix buffer overflow in elem comparison
- net: phy: fix null-ptr-deref while probe() failed
- net: net_netdev: Fix error handling in ntb_netdev_init_module()
- net/9p: Fix a potential socket leak in p9_socket_open
- net: ethernet: nixge: fix NULL dereference
- dsa: lan9303: Correct stat name
- net: hsr: Fix potential use-after-free
- afs: Fix fileserver probe RTT handling
- net: tun: Fix use-after-free in tun_detach()
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
- sctp: fix memory leak in sctp_stream_outq_migrate()
- net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
- hwmon: (coretemp) Check for null before removing sysfs attrs
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- net/mlx5: DR, Fix uninitialized var warning
- error-injection: Add prompt for function error injection
- tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
- mmc: mmc_test: Fix removal of debugfs file
- mmc: core: Fix ambiguous TRIM and DISCARD arg
- mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
- mmc: sdhci-sprd: Fix no reset data and command after voltage switch
- tracing: Free buffers when a used dynamic event is removed
- arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM
vectors
- arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
- mm: Fix '.data.once' orphan section warning
- ASoC: ops: Fix bounds check for _sx controls
- pinctrl: single: Fix potential division by zero
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- parisc: Increase size of gcc stack frame check
- xtensa: increase size of gcc stack frame check
- parisc: Increase FRAME_WARN to 2048 bytes on parisc
- Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is
enabled
- selftests: net: add delete nexthop route warning test
- selftests: net: fix nexthop warning cleanup double ip typo
- ipv4: Handle attempt to delete multipath route when fib_info contains an nh
reference
- ipv4: Fix route deletion when nexthop info is not specified
- tracing/ring-buffer: Have polling block on watermark
- nvme: restrict management ioctls to admin
- nvme: ensure subsystem reset is single threaded
- x86/tsx: Add a feature bit for TSX control MSR support
- x86/pm: Add enumeration check before spec MSRs save/restore setup
- x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
- Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
- char: tpm: Protect tpm_pm_suspend with locks
- mmc: sdhci: use FIELD_GET for preset value bit masks
- mmc: sdhci: Fix voltage switch delay
- proc: avoid integer type confusion in get_proc_long
- proc: proc_skip_spaces() shouldn't think it is working on C strings
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
- ipc/sem: Fix dangling sem_array access in semtimedop race
- Linux 5.4.226
* CVE-2022-4139
- drm/i915: fix TLB invalidation for Gen12 video and compute engines
* Focal update: v5.4.225 upstream stable release (LP: #2002347)
- xfs: preserve rmapbt swapext block reservation from freed blocks
- xfs: rename xfs_bmap_is_real_extent to is_written_extent
- xfs: redesign the reflink remap loop to fix blkres depletion crash
- xfs: use MMAPLOCK around filemap_map_pages()
- xfs: preserve inode versioning across remounts
- xfs: drain the buf delwri queue before xfsaild idles
- phy: stm32: fix an error code in probe
- wifi: cfg80211: silence a sparse RCU warning
- wifi: cfg80211: fix memory leak in query_regdb_file()
- bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
- HID: hyperv: fix possible memory leak in mousevsc_probe()
- net: gso: fix panic on frag_list with mixed head alloc types
- net: tun: Fix memory leaks of napi_get_frags
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
- net: fman: Unregister ethernet device on removal
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
- net: lapbether: fix issue of dev reference count leakage in
lapbeth_device_event()
- hamradio: fix issue of dev reference count leakage in bpq_device_event()
- drm/vc4: Fix missing platform_unregister_drivers() call in
vc4_drm_register()
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
- can: af_can: fix NULL pointer dereference in can_rx_register()
- tipc: fix the msg->req tlv len check in
tipc_nl_compat_name_table_dump_header
- dmaengine: pxa_dma: use platform_get_irq_optional
- dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- drivers: net: xgene: disable napi when register irq failed in
xgene_enet_open()
- perf stat: Fix printing os->prefix in CSV metrics output
- net: nixge: disable napi when enable interrupts failed in nixge_open()
- net/mlx5: Allow async trigger completion execution on single CPU systems
- net: cpsw: disable napi in cpsw_ndo_open()
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in
cxgb4vf_open()
- ethernet: s2io: disable napi when start nic failed in s2io_card_up()
- net: mv643xx_eth: disable napi when init rxq or txq failed in
mv643xx_eth_open()
- ethernet: tundra: free irq when alloc ring failed in tsi108_open()
- net: macvlan: fix memory leaks of macvlan_common_newlink
- riscv: process: fix kernel info leakage
- arm64: efi: Fix handling of misaligned runtime regions and drop warning
- MIPS: jump_label: Fix compat branch range check
- mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
- mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
- mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
- ALSA: hda: fix potential memleak in 'add_widget_node'
- ALSA: usb-audio: Add quirk entry for M-Audio Micro
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60
- vmlinux.lds.h: Fix placement of '.data..decrypted' section
- nilfs2: fix deadlock in nilfs_count_free_blocks()
- nilfs2: fix use-after-free bug of ns_writer on remount
- drm/i915/dmabuf: fix sg_table handling in map_dma_buf
- btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- cert host tools: Stop complaining about deprecated OpenSSL functions
- dmaengine: at_hdmac: Fix at_lli struct definition
- dmaengine: at_hdmac: Don't start transactions at tx_submit level
- dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
- dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
- dmaengine: at_hdmac: Fix impossible condition
- dmaengine: at_hdmac: Check return code of dma_async_device_register
- net: tun: call napi_schedule_prep() to ensure we own a napi
- x86/cpu: Restore AMD's DE_CFG MSR after resume
- ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in
wm5102_probe"
- ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in
wm5110_probe"
- ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in
wm8997_probe"
- ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK
- spi: intel: Fix the offset to get the 64K erase opcode
- ASoC: codecs: jz4725b: add missed Line In power control bit
- ASoC: codecs: jz4725b: fix reported volume for Master ctl
- ASoC: codecs: jz4725b: use right control for Capture Volume
- ASoC: codecs: jz4725b: fix capture selector naming
- selftests/futex: fix build for clang
- selftests/intel_pstate: fix build for ARCH=x86_64
- NFSv4: Retry LOCK on OLD_STATEID during delegation return
- i2c: i801: add lis3lv02d's I2C address for Vostro 5568
- drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
- btrfs: remove pointless and double ulist frees in error paths of qgroup
tests
- ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -> "Source", "Routee" ->
"Route"
- spi: stm32: Print summary 'callbacks suppressed' message
- ASoC: core: Fix use-after-free in snd_soc_exit()
- serial: 8250_omap: remove wait loop from Errata i202 workaround
- serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove()
- serial: 8250: omap: Flush PM QOS work on remove
- serial: imx: Add missing .thaw_noirq hook
- tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
- ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
- block: sed-opal: kmalloc the cmd/resp buffers
- siox: fix possible memory leak in siox_device_add()
- parport_pc: Avoid FIFO port location truncation
- pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
- arm64: dts: imx8mm: Fix NAND controller size-cells
- arm64: dts: imx8mn: Fix NAND controller size-cells
- ata: libata-transport: fix double ata_host_put() in ata_tport_add()
- net: bgmac: Drop free_netdev() from bgmac_enet_remove()
- mISDN: fix possible memory leak in mISDN_dsp_element_register()
- net: liquidio: release resources when liquidio driver open failed
- mISDN: fix misuse of put_device() in mISDN_register_device()
- net: macvlan: Use built-in RCU list checking
- net: caif: fix double disconnect client in chnl_net_open()
- bnxt_en: Remove debugfs when pci_register_driver failed
- xen/pcpu: fix possible memory leak in register_pcpu()
- drbd: use after free in drbd_create_device()
- platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when
virtualized
- net/x25: Fix skb leak in x25_lapb_receive_frame()
- cifs: Fix wrong return value checking when GETFLAGS
- net: thunderbolt: Fix error handling in tbnet_init()
- cifs: add check for returning value of SMB2_set_info_init
- ftrace: Fix the possible incorrect kernel message
- ftrace: Optimize the allocation for mcount entries
- ftrace: Fix null pointer dereference in ftrace_add_mod()
- ring_buffer: Do not deactivate non-existant pages
- ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
- Revert "usb: dwc3: disable USB core PHY management"
- slimbus: stream: correct presence rate frequencies
- speakup: fix a segfault caused by switching consoles
- USB: serial: option: add Sierra Wireless EM9191
- USB: serial: option: remove old LARA-R6 PID
- USB: serial: option: add u-blox LARA-R6 00B modem
- USB: serial: option: add u-blox LARA-L6 modem
- USB: serial: option: add Fibocom FM160 0x0111 composition
- usb: add NO_LPM quirk for Realforce 87U Keyboard
- usb: chipidea: fix deadlock in ci_otg_del_timer
- iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
- iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
- iio: pressure: ms5611: changed hardcoded SPI speed to value limited
- dm ioctl: fix misbehavior if list_versions races with module loading
- serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
- serial: 8250_lpss: Configure DMA also w/o DMA filter
- Input: iforce - invert valid length check when fetching device IDs
- scsi: zfcp: Fix double free of FSF request when qdio send fails
- mmc: core: properly select voltage range without power cycle
- mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce
timeout
- mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
- docs: update mediator contact information in CoC doc
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
- serial: 8250: Flush DMA Rx on RLSI
- ring-buffer: Include dropped pages in counting dirty patches
- scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
- kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
- Input: i8042 - fix leaking of platform device on module removal
- macvlan: enforce a consistent minimal mtu
- tcp: cdg: allow tcp_cdg_release() to be called multiple times
- kcm: avoid potential race in kcm_tx_work
- bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
- kcm: close race conditions on sk_receive_queue
- 9p: trans_fd/p9_conn_cancel: drop client lock earlier
- gfs2: Check sb_bsize_shift after reading superblock
- gfs2: Switch from strlcpy to strscpy
- 9p/trans_fd: always use O_NONBLOCK read/write
- mm: fs: initialize fsdata passed to write_begin/write_end interface
- ntfs: fix use-after-free in ntfs_attr_find()
- ntfs: fix out-of-bounds read in ntfs_attr_find()
- ntfs: check overflow when iterating ATTR_RECORDs
- Linux 5.4.225
* CVE-2022-47520
- wifi: wilc1000: validate pairwise and authentication suite offsets
* CVE-2022-3545
- nfp: fix use-after-free in area_cache_get()
-- Wen-chien Jesse Sung <email address hidden> Tue, 21 Mar 2023 19:22:22 +0800
-
linux-iot (5.4.0-1012.14) focal; urgency=medium
* focal/linux-iot: 5.4.0-1012.14 -proposed tracker (LP: #2003476)
[ Ubuntu: 5.4.0-139.156 ]
* focal/linux: 5.4.0-139.156 -proposed tracker (LP: #2003486)
* Revoke & rotate to new signing key (LP: #2002812)
- [Packaging] Revoke and rotate to new signing key
[ Ubuntu: 5.4.0-138.155 ]
* focal/linux: 5.4.0-138.155 -proposed tracker (LP: #2001845)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* Focal update: v5.4.224 upstream stable release (LP: #1999273)
- RDMA/cma: Use output interface for net_dev check
- IB/hfi1: Correctly move list in sc_disable()
- NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
- NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
- nfs4: Fix kmemleak when allocate slot failed
- net: dsa: Fix possible memory leaks in dsa_loop_init()
- RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
- RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
- net: fec: fix improper use of NETDEV_TX_BUSY
- ata: pata_legacy: fix pdc20230_set_piomode()
- net: sched: Fix use after free in red_enqueue()
- net: tun: fix bugs for oversize packet when napi frags enabled
- netfilter: nf_tables: release flow rule object from commit path
- ipvs: use explicitly signed chars
- ipvs: fix WARNING in __ip_vs_cleanup_batch()
- ipvs: fix WARNING in ip_vs_app_net_cleanup()
- rose: Fix NULL pointer dereference in rose_send_frame()
- mISDN: fix possible memory leak in mISDN_register_device()
- isdn: mISDN: netjet: fix wrong check of device registration
- btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
- btrfs: fix inode list leak during backref walking at find_parent_nodes()
- btrfs: fix ulist leaks in error paths of qgroup self tests
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- net: mdio: fix undefined behavior in bit shift for __mdiobus_register
- net, neigh: Fix null-ptr-deref in neigh_table_clear()
- ipv6: fix WARNING in ip6_route_net_exit_late()
- media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
- media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
- media: dvb-frontends/drxk: initialize err to 0
- media: meson: vdec: fix possible refcount leak in vdec_probe()
- scsi: core: Restrict legal sdev_state transitions via sysfs
- HID: saitek: add madcatz variant of MMO7 mouse device ID
- i2c: xiic: Add platform module alias
- xfs: don't fail verifier on empty attr3 leaf block
- xfs: use ordered buffers to initialize dquot buffers during quotacheck
- xfs: gut error handling in xfs_trans_unreserve_and_mod_sb()
- xfs: group quota should return EDQUOT when prj quota enabled
- xfs: don't fail unwritten extent conversion on writeback due to edquot
- xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster()
- Bluetooth: L2CAP: Fix attempting to access uninitialized memory
- block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
- binder: fix UAF of alloc->vma in race with munmap()
- btrfs: fix type of parameter generation in btrfs_get_dentry
- tcp/udp: Make early_demux back namespacified.
- kprobe: reverse kp->flags when arm_kprobe failed
- tools/nolibc/string: Fix memcmp() implementation
- tracing/histogram: Update document for KEYS_MAX size
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
- fuse: add file_modified() to fallocate
- efi: random: reduce seed size to 32 bytes
- perf/x86/intel: Fix pebs event constraints for ICL
- perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
- ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
- parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
- parisc: Export iosapic_serial_irq() symbol for serial port driver
- parisc: Avoid printing the hardware path twice
- ext4: fix warning in 'ext4_da_release_space'
- ext4: fix BUG_ON() when directory entry has invalid rec_len
- KVM: x86: Mask off reserved bits in CPUID.8000001AH
- KVM: x86: Mask off reserved bits in CPUID.80000008H
- KVM: x86: emulator: em_sysexit should update ctxt->mode
- KVM: x86: emulator: introduce emulator_recalc_and_set_mode
- KVM: x86: emulator: update the emulation mode after CR0 write
- mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times
- drm/rockchip: dsi: Force synchronous probe
- drm/i915/sdvo: Filter out invalid outputs more sensibly
- drm/i915/sdvo: Setup DDC fully before output init
- wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
- ipc: remove memcg accounting for sops objects in do_semtimedop()
- Linux 5.4.224
* Focal update: v5.4.223 upstream stable release (LP: #1999179)
- can: j1939: transport: j1939_session_skb_drop_old():
spin_unlock_irqrestore() before kfree_skb()
- can: kvaser_usb: Fix possible completions during init_completion
- ALSA: Use del_timer_sync() before freeing timer
- ALSA: au88x0: use explicitly signed char
- USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
- usb: dwc3: gadget: Stop processing more requests on IMI
- usb: dwc3: gadget: Don't set IMI for no_interrupt
- usb: bdc: change state when port disconnected
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96
controller
- mtd: rawnand: marvell: Use correct logic for nand-keep-config
- xhci: Remove device endpoints from bandwidth list when freeing the device
- tools: iio: iio_utils: fix digit calculation
- iio: light: tsl2583: Fix module unloading
- fbdev: smscufx: Fix several use-after-free bugs
- mac802154: Fix LQI recording
- drm/msm/dsi: fix memory corruption with too many bridges
- drm/msm/hdmi: fix memory corruption with too many bridges
- mmc: core: Fix kernel panic when remove non-standard SDIO card
- kernfs: fix use-after-free in __kernfs_remove
- perf auxtrace: Fix address filter symbol name match for modules
- s390/futex: add missing EX_TABLE entry to __futex_atomic_op()
- s390/pci: add missing EX_TABLE entries to
__pcistg_mio_inuser()/__pcilg_mio_inuser()
- xfs: finish dfops on every insert range shift iteration
- xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush
- xfs: force the log after remapping a synchronous-writes file
- Xen/gntdev: don't ignore kernel unmapping error
- xen/gntdev: Prevent leaking grants
- mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
- net: ieee802154: fix error return code in dgram_bind()
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
- arc: iounmap() arg is volatile
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
- tipc: fix a null-ptr-deref in tipc_topsrv_accept
- net: netsec: fix error handling in netsec_register_mdio()
- x86/unwind/orc: Fix unreliable stack dump with gcov
- amd-xgbe: fix the SFP compliance codes check for DAC cables
- amd-xgbe: add the bit rate quirk for Molex cables
- kcm: annotate data-races around kcm->rx_psock
- kcm: annotate data-races around kcm->rx_wait
- net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
- net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY
- tcp: fix indefinite deferral of RTO with SACK reneging
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error
path
- PM: hibernate: Allow hybrid sleep to work with s2idle
- media: vivid: s_fbuf: add more sanity checks
- media: vivid: dev->bitmap_cap wasn't freed in all cases
- media: v4l2-dv-timings: add sanity checks for blanking values
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
- i40e: Fix ethtool rx-flow-hash setting for X722
- i40e: Fix VF hang when reset is triggered on another VF
- i40e: Fix flow-type by setting GL_HASH_INSET registers
- net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
- PM: domains: Fix handling of unavailable/disabled idle states
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
- ALSA: aoa: Fix I2S device accounting
- openvswitch: switch from WARN to pr_warn
- net: ehea: fix possible memory leak in ehea_register_port()
- nh: fix scope used to find saddr when adding non gw nh
- net/mlx5e: Do not increment ESN when updating IPsec ESN state
- net/mlx5: Fix possible use-after-free in async command interface
- net: enetc: survive memory pressure without crashing
- can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global
FIFO receive
- Linux 5.4.223
* Focal update: v5.4.222 upstream stable release (LP: #1997994)
- once: fix section mismatch on clang builds
- Linux 5.4.222
* Focal update: v5.4.221 upstream stable release (LP: #1997993)
- xfs: open code insert range extent split helper
- xfs: rework insert range into an atomic operation
- xfs: rework collapse range into an atomic operation
- xfs: add a function to deal with corrupt buffers post-verifiers
- xfs: xfs_buf_corruption_error should take __this_address
- xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails
- xfs: check owner of dir3 data blocks
- xfs: check owner of dir3 blocks
- xfs: Use scnprintf() for avoiding potential buffer overflow
- xfs: remove the xfs_disk_dquot_t and xfs_dquot_t
- xfs: remove the xfs_dq_logitem_t typedef
- xfs: remove the xfs_qoff_logitem_t typedef
- xfs: Replace function declaration by actual definition
- xfs: factor out quotaoff intent AIL removal and memory free
- xfs: fix unmount hang and memory leak on shutdown during quotaoff
- xfs: preserve default grace interval during quotacheck
- xfs: Lower CIL flush limit for large logs
- xfs: Throttle commits on delayed background CIL push
- xfs: factor common AIL item deletion code
- xfs: tail updates only need to occur when LSN changes
- xfs: don't write a corrupt unmount record to force summary counter recalc
- xfs: trylock underlying buffer on dquot flush
- xfs: factor out a new xfs_log_force_inode helper
- xfs: reflink should force the log out if mounted with wsync
- xfs: move inode flush to the sync workqueue
- xfs: fix use-after-free on CIL context on shutdown
- ocfs2: clear dinode links count in case of error
- ocfs2: fix BUG when iput after ocfs2_mknod fails
- x86/microcode/AMD: Apply the patch early on every logical thread
- hwmon/coretemp: Handle large core ID value
- ata: ahci-imx: Fix MODULE_ALIAS
- ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
- KVM: arm64: vgic: Fix exit condition in scan_its_table()
- media: venus: dec: Handle the case where find_format fails
- [Config] updateconfigs for ARM64_ERRATUM_1742098
- arm64: errata: Remove AES hwcap for COMPAT tasks
- r8152: add PID for the Lenovo OneLink+ Dock
- btrfs: fix processing of delayed data refs during backref walking
- btrfs: fix processing of delayed tree block refs during backref walking
- ACPI: extlog: Handle multiple records
- tipc: Fix recognition of trial period
- tipc: fix an information leak in tipc_topsrv_kern_subscr
- HID: magicmouse: Do not set BTN_MOUSE on double report
- net/atm: fix proc_mpc_write incorrect return value
- net: phy: dp83867: Extend RX strap quirk for SGMII mode
- net: sched: cake: fix null pointer access issue when cake_init() fails
- net: hns: fix possible memory leak in hnae_ae_register()
- iommu/vt-d: Clean up si_domain in the init_dmars() error path
- arm64: topology: move store_cpu_topology() to shared code
- riscv: topology: fix default topology reporting
- ACPI: video: Force backlight native for more TongFang devices
- Makefile.debug: re-enable debug info for .S files
- hv_netvsc: Fix race between VF offering and VF association message from host
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref
- Linux 5.4.221
* Focal update: v5.4.220 upstream stable release (LP: #1996812)
- ALSA: oss: Fix potential deadlock at unregistration
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
- ALSA: usb-audio: Fix potential memory leaks
- ALSA: usb-audio: Fix NULL dererence at error path
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
- mtd: rawnand: atmel: Unmap streaming DMA mappings
- cifs: destage dirty pages before re-reading them for cache=none
- cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- iio: dac: ad5593r: Fix i2c read protocol requirements
- iio: pressure: dps310: Refactor startup procedure
- iio: pressure: dps310: Reset chip after timeout
- usb: add quirks for Lenovo OneLink+ Dock
- can: kvaser_usb: Fix use of uninitialized completion
- can: kvaser_usb_leaf: Fix overread with an invalid command
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart
- can: kvaser_usb_leaf: Fix CAN state after restart
- mmc: sdhci-sprd: Fix minimum clock limit
- fs: dlm: fix race between test_bit() and queue_work()
- fs: dlm: handle -EBUSY first in lock arg validation
- HID: multitouch: Add memory barriers
- quota: Check next/prev free block number after reading from quota file
- ASoC: wcd9335: fix order of Slimbus unprepare/disable
- regulator: qcom_rpm: Fix circular deferral regression
- RISC-V: Make port I/O string accessors actually work
- parisc: fbdev/stifb: Align graphics memory size to 4MB
- riscv: Allow PROT_WRITE-only mmap()
- riscv: Pass -mno-relax only on lld < 15.0.0
- UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
- powerpc/boot: Explicitly disable usage of SPE instructions
- fbdev: smscufx: Fix use-after-free in ufx_ops_open()
- btrfs: fix race between quota enable and quota rescan ioctl
- f2fs: increase the limit for reserve_root
- f2fs: fix to do sanity check on destination blkaddr during recovery
- f2fs: fix to do sanity check on summary info
- nilfs2: fix use-after-free bug of struct nilfs_root
- jbd2: wake up journal waiters in FIFO order, not LIFO
- ext4: avoid crash when inline data creation follows DIO write
- ext4: fix null-ptr-deref in ext4_write_info
- ext4: make ext4_lazyinit_thread freezable
- ext4: place buffer head allocation before handle start
- livepatch: fix race between fork and KLP transition
- ftrace: Properly unset FTRACE_HASH_FL_MOD
- ring-buffer: Allow splice to read previous partially read pages
- ring-buffer: Have the shortest_full queue be the shortest not longest
- ring-buffer: Check pending waiters when doing wake ups as well
- ring-buffer: Fix race between reset page and reading page
- media: cedrus: Set the platform driver data earlier
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
- KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
- KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
- gcov: support GCC 12.1 and newer compilers
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
- selinux: use "grep -E" instead of "egrep"
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
- userfaultfd: open userfaultfds with O_RDONLY
- sh: machvec: Use char[] for section boundaries
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
- nfsd: Fix a memory leak in an error handling path
- wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- wifi: mac80211: allow bw change during channel switch in mesh
- bpftool: Fix a wrong type cast in btf_dumper_int
- x86/resctrl: Fix to restore to original value when re-enabling hardware
prefetch register
- wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
- spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
- spi: qup: add missing clk_disable_unprepare on error in
spi_qup_pm_resume_runtime()
- wifi: rtl8xxxu: Fix skb misuse in TX queue selection
- bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
- wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
- net: fs_enet: Fix wrong check in do_pd_setup
- bpf: Ensure correct locking around vulnerable function find_vpid()
- x86/microcode/AMD: Track patch allocation size explicitly
- spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
- netfilter: nft_fib: Fix for rpath check with VRF devices
- spi: s3c64xx: Fix large transfers with DMA
- vhost/vsock: Use kvmalloc/kvfree for larger packets.
- sctp: handle the error returned from sctp_auth_asoc_init_active_key
- tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
- net: rds: don't hold sock lock when cancelling work from
rds_tcp_reset_callbacks()
- bnx2x: fix potential memory leak in bnx2x_tpa_stop()
- net/ieee802154: reject zero-sized raw_sendmsg()
- once: add DO_ONCE_SLOW() for sleepable contexts
- net: mvpp2: fix mvpp2 debugfs leak
- drm: bridge: adv7511: fix CEC power down control register offset
- drm/mipi-dsi: Detach devices when removing the host
- platform/chrome: fix double-free in chromeos_laptop_prepare()
- platform/chrome: fix memory corruption in ioctl
- platform/x86: msi-laptop: Fix old-ec check for backlight registering
- platform/x86: msi-laptop: Fix resource cleanup
- drm: fix drm_mipi_dbi build errors
- drm/bridge: megachips: Fix a null pointer dereference bug
- ASoC: rsnd: Add check for rsnd_mod_power_on
- ALSA: hda: beep: Simplify keep-power-at-enable behavior
- drm/omap: dss: Fix refcount leak bugs
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
- drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
- ALSA: dmaengine: increment buffer pointer atomically
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
- ALSA: hda/hdmi: Don't skip notification handling during PM operation
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
- memory: of: Fix refcount leak bug in of_get_ddr_timings()
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
- soc: qcom: smem_state: Add refcounting for the 'state->of_node'
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment
- ARM: dts: kirkwood: lsxl: fix serial line
- ARM: dts: kirkwood: lsxl: remove first ethernet port
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
- ARM: Drop CMDLINE_* dependency on ATAGS
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
- iio: inkern: only release the device node when done with it
- iio: ABI: Fix wrong format of differential capacitance channel ABI.
- clk: meson: Hold reference returned by of_get_parent()
- clk: oxnas: Hold reference returned by of_get_parent()
- clk: berlin: Add of_node_put() for of_get_parent()
- clk: tegra: Fix refcount leak in tegra210_clock_init
- clk: tegra: Fix refcount leak in tegra114_clock_init
- clk: tegra20: Fix refcount leak in tegra20_clock_init
- HSI: omap_ssi: Fix refcount leak in ssi_probe
- HSI: omap_ssi_port: Fix dma_map_sg error check
- media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
- tty: xilinx_uartps: Fix the ignore_status
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
- RDMA/rxe: Fix "kernel NULL pointer dereference" error
- RDMA/rxe: Fix the error caused by qp->sk
- misc: ocxl: fix possible refcount leak in afu_ioctl()
- dyndbg: fix module.dyndbg handling
- dyndbg: let query-modname override actual module name
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
- ata: fix ata_id_has_devslp()
- ata: fix ata_id_has_ncq_autosense()
- ata: fix ata_id_has_dipm()
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
- md/raid5: Ensure stripe_fill happens on non-read IO with journal
- xhci: Don't show warning for reinit on known broken suspend
- usb: gadget: function: fix dangling pnp_string in f_printer.c
- drivers: serial: jsm: fix some leaks in probe
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
- phy: qualcomm: call clk_disable_unprepare in the error handling
- staging: vt6655: fix some erroneous memory clean-up loops
- firmware: google: Test spinlock on panic path to avoid lockups
- serial: 8250: Fix restoring termios speed after suspend
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
- fsi: core: Check error number after calling ida_simple_get
- mfd: intel_soc_pmic: Fix an error handling path in
intel_soc_pmic_i2c_probe()
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
- mfd: lp8788: Fix an error handling path in lp8788_probe()
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
lp8788_irq_init()
- mfd: fsl-imx25: Fix check for platform_get_irq() errors
- mfd: sm501: Add check for platform_driver_register()
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in
__cleanup()
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
- clk: ast2600: BCLK comes from EPLL
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
- powerpc/math_emu/efp: Include module.h
- powerpc/sysdev/fsl_msi: Add missing of_node_put()
- powerpc/pci_dn: Add missing of_node_put()
- powerpc/powernv: add missing of_node_put() in opal_export_attrs()
- x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
- powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
- powerpc: Fix SPE Power ISA properties for e500v1 platforms
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
- iommu/omap: Fix buffer overflow in debugfs
- crypto: akcipher - default implementation for setting a private key
- crypto: ccp - Release dma channels before dmaengine unrgister
- iommu/iova: Fix module config properly
- kbuild: remove the target in signal traps when interrupted
- crypto: cavium - prevent integer overflow loading firmware
- f2fs: fix race condition on setting FI_NO_EXTENT flag
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
- MIPS: BCM47XX: Cast memcmp() of function to (void *)
- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to
avoid crash
- NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level
- bpftool: Clear errno after libcap's checks
- openvswitch: Fix double reporting of drops in dropwatch
- openvswitch: Fix overreporting of drops in dropwatch
- tcp: annotate data-race around tcp_md5sig_pool_populated
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
- xfrm: Update ipcomp_scratches with NULL when freed
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
- can: bcm: check the result of can_send() in bcm_can_tx()
- wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
- wifi: rt2x00: set VGC gain for both chains of MT7620
- wifi: rt2x00: set SoC wmac clock register
- wifi: rt2x00: correctly set BBP register 86 for MT7620
- net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
- Bluetooth: L2CAP: Fix user-after-free
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
- drm: Use size_t type for len variable in drm_copy_field()
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- drm/amd/display: fix overflow on MIN_I64 definition
- drm/vc4: vec: Fix timings for VEC modes
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module
autoloading
- drm/amdgpu: fix initial connector audio value
- mmc: sdhci-msm: add compatible string check for sdm670
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046
- ARM: dts: imx6q: add missing properties for sram
- ARM: dts: imx6dl: add missing properties for sram
- ARM: dts: imx6qp: add missing properties for sram
- ARM: dts: imx6sl: add missing properties for sram
- ARM: dts: imx6sll: add missing properties for sram
- ARM: dts: imx6sx: add missing properties for sram
- btrfs: scrub: try to fix super block errors
- clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
- scsi: 3w-9xxx: Avoid disabling device if failing to enable it
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
- staging: vt6655: fix potential memory leak
- ata: libahci_platform: Sanity check the DT child nodes number
- bcache: fix set_at_max_writeback_rate() for multiple attached devices
- HID: roccat: Fix use-after-free in roccat_read()
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
- usb: musb: Fix musb_gadget.c rxstate overflow bug
- Revert "usb: storage: Add quirk for Samsung Fit flash"
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
- nvme: copy firmware_rev on each init
- nvmet-tcp: add bounds check on Transfer Tag
- usb: idmouse: fix an uninit-value in idmouse_open
- clk: bcm2835: Make peripheral PLLC critical
- perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
- net: ieee802154: return -EINVAL for unknown addr type
- Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
- net/ieee802154: don't warn zero-sized raw_sendmsg()
- ext4: continue to expand file system when the target size doesn't reach
- efi: libstub: drop pointless get_memory_map() call
- inet: fully convert sk->sk_rx_dst to RCU rules
- thermal: intel_powerclamp: Use first online CPU as control_cpu
- Linux 5.4.220
* Focal update: v5.4.219 upstream stable release (LP: #1996804)
- Linux 5.4.219
linux-iot (5.4.0-1011.13) focal; urgency=medium
* focal/linux-iot: 5.4.0-1011.13 -proposed tracker (LP: #2001955)
[ Ubuntu: 5.4.0-137.154 ]
* focal/linux: 5.4.0-137.154 -proposed tracker (LP: #2001969)
* CVE-2022-3643
- xen/netback: Ensure protocol headers don't fall in the non-linear area
* CVE-2022-43945
- NFSD: Cap rsize_bop result based on send buffer size
* CVE-2022-45934
- Bluetooth: L2CAP: Fix u8 overflow
* CVE-2022-42896
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
-- Stefan Bader <email address hidden> Wed, 25 Jan 2023 16:05:37 +0100
-
linux-iot (5.4.0-1011.13) focal; urgency=medium
* focal/linux-iot: 5.4.0-1011.13 -proposed tracker (LP: #2001955)
[ Ubuntu: 5.4.0-137.154 ]
* focal/linux: 5.4.0-137.154 -proposed tracker (LP: #2001969)
* CVE-2022-3643
- xen/netback: Ensure protocol headers don't fall in the non-linear area
* CVE-2022-43945
- NFSD: Cap rsize_bop result based on send buffer size
* CVE-2022-45934
- Bluetooth: L2CAP: Fix u8 overflow
* CVE-2022-42896
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
-- Thadeu Lima de Souza Cascardo <email address hidden> Tue, 10 Jan 2023 18:07:44 -0300
-
linux-iot (5.4.0-1010.12) focal; urgency=medium
* focal/linux-iot: 5.4.0-1010.12 -proposed tracker (LP: #1997820)
[ Ubuntu: 5.4.0-136.153 ]
* focal/linux: 5.4.0-136.153 -proposed tracker (LP: #1997835)
* Expose built-in trusted and revoked certificates (LP: #1996892)
- [Packaging] Expose built-in trusted and revoked certificates
* [UBUNTU 20.04] KVM: PV: ext call delivered twice when receiver in PSW wait
(LP: #1995941)
- KVM: s390: pv: don't present the ecall interrupt twice
* [UBUNTU 20.04] boot: Add s390x secure boot trailer (LP: #1996071)
- s390/boot: add secure boot trailer
* Fix rfkill causing soft blocked wifi (LP: #1996198)
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
* md: Replace snprintf with scnprintf (LP: #1993315)
- md: Replace snprintf with scnprintf
* input/keyboard: the keyboard on some Asus laptops can't work (LP: #1992266)
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA
- ACPI: resource: Add ASUS model S5402ZA to quirks
* Focal update: v5.4.218 upstream stable release (LP: #1995530)
- mm: pagewalk: Fix race between unmap and page walker
- perf tools: Fixup get_current_dir_name() compilation
- firmware: arm_scmi: Add SCMI PM driver remove routine
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API
failure
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- arch: um: Mark the stack non-executable to fix a binutils warning
- usb: mon: make mmapped memory read only
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Replace with already defined values for readability
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- nilfs2: fix leak of nilfs_root in case of writer thread creation failure
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ceph: don't truncate file in atomic_open
- random: clamp credited irq bits to maximum mixed
- ALSA: hda: Fix position reporting on Poulsbo
- efi: Correct Macmini DMI match in uefi cert quirk
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- random: restore O_NONBLOCK support
- random: avoid reading two cache lines on irq randomness
- random: use expired timer rather than wq for mixing fast pool
- Input: xpad - add supported devices as contributed on github
- Input: xpad - fix wireless 360 controller breaking after suspend
- Linux 5.4.218
* Focal update: v5.4.217 upstream stable release (LP: #1995528)
- xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag
- xfs: introduce XFS_MAX_FILEOFF
- xfs: truncate should remove all blocks, not just to the end of the page
cache
- xfs: fix s_maxbytes computation on 32-bit kernels
- xfs: fix IOCB_NOWAIT handling in xfs_file_dio_aio_read
- xfs: refactor remote attr value buffer invalidation
- xfs: fix memory corruption during remote attr value buffer invalidation
- xfs: move incore structures out of xfs_da_format.h
- xfs: streamline xfs_attr3_leaf_inactive
- xfs: fix uninitialized variable in xfs_attr3_leaf_inactive
- xfs: remove unused variable 'done'
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- docs: update mediator information in CoC docs
- Linux 5.4.217
* Focal update: v5.4.216 upstream stable release (LP: #1995526)
- uas: add no-uas quirk for Hiksemi usb_disk
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: ignore UAS for Thinkplus chips
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- clk: ingenic-tcu: Properly enable registers before accessing timers
- ARM: dts: integrator: Tag PCI host with device_type
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- mm/page_alloc: fix race condition between build_all_zonelists and page
allocation
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/migrate_device.c: flush TLB while holding PTL
- mm: fix madivse_pageout mishandling on non-LRU page
- media: dvb_vb2: fix possible out of bound access
- ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- soc: sunxi: sram: Actually claim SRAM regions
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi_sram: Make use of the helper function
devm_platform_ioremap_resource()
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in
suspend/resume time"
- Input: melfas_mip4 - fix return value check in mip4_probe()
- usbnet: Fix memory leak in usbnet_disconnect()
- nvme: add new line after variable declatation
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- selftests: Fix the if conditions of in test_extra_filter()
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- clk: iproc: Do not rely on node name for correct PLL setup
- Linux 5.4.216
* Focal update: v5.4.215 upstream stable release (LP: #1993203)
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- drm/meson: Correct OSD1 global alpha value
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
- task_stack, x86/cea: Force-inline stack helpers
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- cifs: revalidate mapping when doing direct writes
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- MAINTAINERS: add Chandan as xfs maintainer for 5.4.y
- iomap: iomap that extends beyond EOF should be marked dirty
- ASoC: nau8824: Fix semaphore unbalance at error paths
- regulator: pfuze100: Fix the global-out-of-bounds access in
pfuze100_regulator_probe()
- rxrpc: Fix local destruction being repeated
- rxrpc: Fix calc of resend age
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- net: usb: qmi_wwan: add Quectel RM520N
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- tty/serial: atmel: RS485 & ISO7816: wait for TXRDY before sending data
- serial: atmel: remove redundant assignment in rs485_config
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- usb: add quirks for Lenovo OneLink+ Dock
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- USB: core: Fix RST error in hub.c
- USB: serial: option: add Quectel BG95 0x0203 composition
- USB: serial: option: add Quectel RM520N
- ALSA: hda/tegra: set depop delay for tegra
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- efi: libstub: check Shim mode using MokSBStateRT
- mm/slub: fix to return errno if kmalloc() fails
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- netfilter: nf_conntrack_irc: Tighten matching on DCC message
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
- net: team: Unsync device addresses on ndo_stop
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- iavf: Fix bad page state
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- net/sched: taprio: avoid disabling offload when it was never enabled
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child
qdiscs
- netfilter: ebtables: fix memory leak when blob is malformed
- can: gs_usb: gs_can_open(): fix race dev->can.state condition
- perf jit: Include program header in ELF files
- perf kcore_copy: Do not check /proc/modules is unchanged
- net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
- net: sched: fix possible refcount leak in tc_new_tfilter()
- serial: Create uart_xmit_advance()
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- usb: xhci-mtk: fix issue of out-of-bounds array access
- cifs: always initialize struct msghdr smb_msg completely
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer
memory region
- drm/amd/display: Limit user regamma to a valid value
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
- xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata
- xfs: slightly tweak an assert in xfs_fs_map_blocks
- xfs: add missing assert in xfs_fsmap_owner_from_rmap
- xfs: range check ri_cnt when recovering log items
- xfs: attach dquots and reserve quota blocks during unwritten conversion
- xfs: convert EIO to EFSCORRUPTED when log contents are invalid
- xfs: constify the buffer pointer arguments to error functions
- xfs: always log corruption errors
- xfs: fix some memory leaks in log recovery
- xfs: stabilize insert range start boundary to avoid COW writeback race
- xfs: use bitops interface for buf log item AIL flag check
- xfs: refactor agfl length computation function
- xfs: split the sunit parameter update into two parts
- xfs: don't commit sunit/swidth updates to disk if that would cause repair
failures
- xfs: fix an ABBA deadlock in xfs_rename
- xfs: fix use-after-free when aborting corrupt attr inactivation
- ext4: make directory inode spreading reflect flexbg size
- Linux 5.4.215
* Focal update: v5.4.214 upstream stable release (LP: #1993196)
- drm/msm/rd: Fix FIFO-full deadlock
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- ieee802154: cc2520: add rc code in cc2520_tx()
- Input: iforce - add support for Boeder Force Feedback Wheel
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- net: dp83822: disable rx error interrupt
- soc: fsl: select FSL_GUTS driver for DPIO
- tracefs: Only clobber mode/uid/gid on remount if asked
- Linux 5.4.214
* Focal update: v5.4.213 upstream stable release (LP: #1992211)
- efi: capsule-loader: Fix use-after-free in efi_capsule_write
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- fs: only do a memory barrier for the first set_buffer_uptodate()
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- net: dp83822: disable false carrier interrupt
- drm/msm/dsi: fix the inconsistent indenting
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- iio: adc: mcp3911: make use of the sign bit
- ieee802154/adf7242: defer destroy_workqueue call
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- Revert "xhci: turn off port power in shutdown"
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- kcm: fix strp_init() order and cleanup
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- tcp: annotate data-race around challenge_timestamp
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- net/smc: Remove redundant refcount increase
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- staging: rtl8712: fix use after free bugs
- powerpc: align syscall table for ppc32
- vt: Clear selection before changing the font
- tty: serial: lpuart: disable flow control while waiting for the transmit
engine to complete
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- iio: adc: mcp3911: use correct formula for AD conversion
- misc: fastrpc: fix memory corruption on probe
- misc: fastrpc: fix memory corruption on open
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- binder: fix UAF of ref->proc caused by race condition
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Input: rk805-pwrkey - fix module autoloading
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- hwmon: (gpio-fan) Fix array out of bounds access
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- thunderbolt: Use the actual buffer in tb_async_error()
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- USB: serial: cp210x: add Decagon UCA device id
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- s390: fix nospec table alignments
- USB: core: Prevent nested device-reset calls
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- driver core: Don't probe devices after bus_type.match() probe deferral
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- net: mac802154: Fix a condition in the receive path
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: seq: Fix data-race at module auto-loading
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- btrfs: harden identification of a stale device
- usb: dwc3: fix PHY disable sequence
- usb: dwc3: disable USB core PHY management
- USB: serial: ch341: fix lost character on LCR updates
- USB: serial: ch341: fix disabled rx timer on older devices
- scsi: megaraid_sas: Fix double kfree()
- drm/gem: Fix GEM handle release errors
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/radeon: add a force flush to delay work when radeon
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned
fw_level
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: usb-audio: Fix an out-of-bounds bug in
__snd_usb_parse_audio_interface()
- kprobes: Prohibit probes in gate area
- debugfs: add debugfs_lookup_and_remove()
- nvmet: fix a use-after-free
- scsi: mpt3sas: Fix use-after-free warning
- scsi: lpfc: Add missing destroy_workqueue() in error path
- cgroup: Optimize single thread migration
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an
empty subtree
- cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
- smb3: missing inode locks in punch hole
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- regulator: core: Clean up on enable failure
- RDMA/cma: Fix arguments order in net device validation
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/hns: Fix supported page size
- netfilter: br_netfilter: Drop dst references before setting.
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- afs: Use the operation issue time instead of the reply time for callbacks
- sch_sfb: Don't assume the skb is still around after enqueueing to child
- tipc: fix shift wrapping bug in map_get()
- i40e: Fix kernel crash during module removal
- RDMA/siw: Pass a pointer to virt_to_page()
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/mlx5: Set local port to one when accessing counters
- nvme-tcp: fix UAF when detecting digest errors
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- sch_sfb: Also store skb len before calling child enqueue
- x86/nospec: Fix i386 RSB stuffing
- MIPS: loongson32: ls1c: Fix hang during startup
- Linux 5.4.213
* CVE-2022-2663
- netfilter: nf_conntrack_irc: Fix forged IP logic
* CVE-2022-3061
- video: fbdev: i740fb: Error out if 'pixclock' equals zero
-- Wen-chien Jesse Sung <email address hidden> Tue, 06 Dec 2022 20:19:59 +0800
-
linux-iot (5.4.0-1009.11) focal; urgency=medium
* focal/linux-iot: 5.4.0-1009.11 -proposed tracker (LP: #1997398)
[ Ubuntu: 5.4.0-135.152 ]
* focal/linux: 5.4.0-135.152 -proposed tracker (LP: #1997412)
* containerd sporadic timeouts (LP: #1996678)
- epoll: call final ep_events_available() check under the lock
- epoll: check for events when removing a timed out thread from the wait queue
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
* CVE-2022-3621
- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
* CVE-2022-3565
- mISDN: fix use-after-free bugs in l1oip timer handlers
* CVE-2022-3566
- tcp: Fix data races around icsk->icsk_af_ops.
* CVE-2022-3567
- ipv6: annotate some data-races around sk->sk_prot
- ipv6: Fix data races around sk->sk_prot.
* CVE-2022-3564
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
* CVE-2022-3524
- tcp/udp: Fix memory leak in ipv6_renew_options().
* CVE-2022-3594
- r8152: Rate limit overflow messages
* CVE-2022-42703
- mm/rmap.c: don't reuse anon_vma if we just want a copy
-- Thadeu Lima de Souza Cascardo <email address hidden> Thu, 24 Nov 2022 23:13:26 -0300
-
linux-iot (5.4.0-1007.9) focal; urgency=medium
* focal/linux-iot: 5.4.0-1007.9 -proposed tracker (LP: #1996371)
[ Ubuntu: 5.4.0-133.149 ]
* focal/linux: 5.4.0-133.149 -proposed tracker (LP: #1996385)
* CVE-2022-42703
- mm/rmap.c: don't reuse anon_vma if we just want a copy
* [UBUNTU 20.04] KVM: PV: ext call delivered twice when receiver in PSW wait
(LP: #1995941)
- KVM: s390: pv: don't present the ecall interrupt twice
* [UBUNTU 20.04] boot: Add s390x secure boot trailer (LP: #1996071)
- s390/boot: add secure boot trailer
* Fix rfkill causing soft blocked wifi (LP: #1996198)
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
* md: Replace snprintf with scnprintf (LP: #1993315)
- md: Replace snprintf with scnprintf
* input/keyboard: the keyboard on some Asus laptops can't work (LP: #1992266)
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA
- ACPI: resource: Add ASUS model S5402ZA to quirks
* Focal update: v5.4.218 upstream stable release (LP: #1995530)
- mm: pagewalk: Fix race between unmap and page walker
- perf tools: Fixup get_current_dir_name() compilation
- firmware: arm_scmi: Add SCMI PM driver remove routine
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API
failure
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- arch: um: Mark the stack non-executable to fix a binutils warning
- usb: mon: make mmapped memory read only
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- mmc: core: Replace with already defined values for readability
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
- nilfs2: fix leak of nilfs_root in case of writer thread creation failure
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ceph: don't truncate file in atomic_open
- random: clamp credited irq bits to maximum mixed
- ALSA: hda: Fix position reporting on Poulsbo
- efi: Correct Macmini DMI match in uefi cert quirk
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- random: restore O_NONBLOCK support
- random: avoid reading two cache lines on irq randomness
- random: use expired timer rather than wq for mixing fast pool
- Input: xpad - add supported devices as contributed on github
- Input: xpad - fix wireless 360 controller breaking after suspend
- Linux 5.4.218
* Focal update: v5.4.217 upstream stable release (LP: #1995528)
- xfs: fix misuse of the XFS_ATTR_INCOMPLETE flag
- xfs: introduce XFS_MAX_FILEOFF
- xfs: truncate should remove all blocks, not just to the end of the page
cache
- xfs: fix s_maxbytes computation on 32-bit kernels
- xfs: fix IOCB_NOWAIT handling in xfs_file_dio_aio_read
- xfs: refactor remote attr value buffer invalidation
- xfs: fix memory corruption during remote attr value buffer invalidation
- xfs: move incore structures out of xfs_da_format.h
- xfs: streamline xfs_attr3_leaf_inactive
- xfs: fix uninitialized variable in xfs_attr3_leaf_inactive
- xfs: remove unused variable 'done'
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- docs: update mediator information in CoC docs
- Linux 5.4.217
* Focal update: v5.4.216 upstream stable release (LP: #1995526)
- uas: add no-uas quirk for Hiksemi usb_disk
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: ignore UAS for Thinkplus chips
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- clk: ingenic-tcu: Properly enable registers before accessing timers
- ARM: dts: integrator: Tag PCI host with device_type
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- mm/page_alloc: fix race condition between build_all_zonelists and page
allocation
- mm: prevent page_frag_alloc() from corrupting the memory
- mm/migrate_device.c: flush TLB while holding PTL
- mm: fix madivse_pageout mishandling on non-LRU page
- media: dvb_vb2: fix possible out of bound access
- ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- soc: sunxi: sram: Actually claim SRAM regions
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi_sram: Make use of the helper function
devm_platform_ioremap_resource()
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in
suspend/resume time"
- Input: melfas_mip4 - fix return value check in mip4_probe()
- usbnet: Fix memory leak in usbnet_disconnect()
- nvme: add new line after variable declatation
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- selftests: Fix the if conditions of in test_extra_filter()
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- clk: iproc: Do not rely on node name for correct PLL setup
- Linux 5.4.216
* Focal update: v5.4.215 upstream stable release (LP: #1993203)
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- drm/meson: Correct OSD1 global alpha value
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
- task_stack, x86/cea: Force-inline stack helpers
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- cifs: revalidate mapping when doing direct writes
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- MAINTAINERS: add Chandan as xfs maintainer for 5.4.y
- iomap: iomap that extends beyond EOF should be marked dirty
- ASoC: nau8824: Fix semaphore unbalance at error paths
- regulator: pfuze100: Fix the global-out-of-bounds access in
pfuze100_regulator_probe()
- rxrpc: Fix local destruction being repeated
- rxrpc: Fix calc of resend age
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- net: usb: qmi_wwan: add Quectel RM520N
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: xhci-mtk: get the microframe boundary for ESIT
- usb: xhci-mtk: add only one extra CS for FS/LS INTR
- usb: xhci-mtk: use @sch_tt to check whether need do TT schedule
- usb: xhci-mtk: add a function to (un)load bandwidth info
- usb: xhci-mtk: add some schedule error number
- usb: xhci-mtk: allow multiple Start-Split in a microframe
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- tty/serial: atmel: RS485 & ISO7816: wait for TXRDY before sending data
- serial: atmel: remove redundant assignment in rs485_config
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- usb: add quirks for Lenovo OneLink+ Dock
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- USB: core: Fix RST error in hub.c
- USB: serial: option: add Quectel BG95 0x0203 composition
- USB: serial: option: add Quectel RM520N
- ALSA: hda/tegra: set depop delay for tegra
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- efi: libstub: check Shim mode using MokSBStateRT
- mm/slub: fix to return errno if kmalloc() fails
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- netfilter: nf_conntrack_irc: Tighten matching on DCC message
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
- net: team: Unsync device addresses on ndo_stop
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- iavf: Fix bad page state
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- net/sched: taprio: avoid disabling offload when it was never enabled
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child
qdiscs
- netfilter: ebtables: fix memory leak when blob is malformed
- can: gs_usb: gs_can_open(): fix race dev->can.state condition
- perf jit: Include program header in ELF files
- perf kcore_copy: Do not check /proc/modules is unchanged
- net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
- net: sched: fix possible refcount leak in tc_new_tfilter()
- serial: Create uart_xmit_advance()
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- usb: xhci-mtk: fix issue of out-of-bounds array access
- cifs: always initialize struct msghdr smb_msg completely
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer
memory region
- drm/amd/display: Limit user regamma to a valid value
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
- xfs: replace -EIO with -EFSCORRUPTED for corrupt metadata
- xfs: slightly tweak an assert in xfs_fs_map_blocks
- xfs: add missing assert in xfs_fsmap_owner_from_rmap
- xfs: range check ri_cnt when recovering log items
- xfs: attach dquots and reserve quota blocks during unwritten conversion
- xfs: convert EIO to EFSCORRUPTED when log contents are invalid
- xfs: constify the buffer pointer arguments to error functions
- xfs: always log corruption errors
- xfs: fix some memory leaks in log recovery
- xfs: stabilize insert range start boundary to avoid COW writeback race
- xfs: use bitops interface for buf log item AIL flag check
- xfs: refactor agfl length computation function
- xfs: split the sunit parameter update into two parts
- xfs: don't commit sunit/swidth updates to disk if that would cause repair
failures
- xfs: fix an ABBA deadlock in xfs_rename
- xfs: fix use-after-free when aborting corrupt attr inactivation
- ext4: make directory inode spreading reflect flexbg size
- Linux 5.4.215
* Focal update: v5.4.214 upstream stable release (LP: #1993196)
- drm/msm/rd: Fix FIFO-full deadlock
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- ieee802154: cc2520: add rc code in cc2520_tx()
- Input: iforce - add support for Boeder Force Feedback Wheel
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- net: dp83822: disable rx error interrupt
- soc: fsl: select FSL_GUTS driver for DPIO
- tracefs: Only clobber mode/uid/gid on remount if asked
- Linux 5.4.214
* Focal update: v5.4.213 upstream stable release (LP: #1992211)
- efi: capsule-loader: Fix use-after-free in efi_capsule_write
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- fs: only do a memory barrier for the first set_buffer_uptodate()
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- net: dp83822: disable false carrier interrupt
- drm/msm/dsi: fix the inconsistent indenting
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- iio: adc: mcp3911: make use of the sign bit
- ieee802154/adf7242: defer destroy_workqueue call
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- Revert "xhci: turn off port power in shutdown"
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- kcm: fix strp_init() order and cleanup
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- tcp: annotate data-race around challenge_timestamp
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- net/smc: Remove redundant refcount increase
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- staging: rtl8712: fix use after free bugs
- powerpc: align syscall table for ppc32
- vt: Clear selection before changing the font
- tty: serial: lpuart: disable flow control while waiting for the transmit
engine to complete
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- iio: adc: mcp3911: use correct formula for AD conversion
- misc: fastrpc: fix memory corruption on probe
- misc: fastrpc: fix memory corruption on open
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- binder: fix UAF of ref->proc caused by race condition
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Input: rk805-pwrkey - fix module autoloading
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- hwmon: (gpio-fan) Fix array out of bounds access
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- thunderbolt: Use the actual buffer in tb_async_error()
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- USB: serial: cp210x: add Decagon UCA device id
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- s390: fix nospec table alignments
- USB: core: Prevent nested device-reset calls
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- driver core: Don't probe devices after bus_type.match() probe deferral
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- net: mac802154: Fix a condition in the receive path
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: seq: Fix data-race at module auto-loading
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- btrfs: harden identification of a stale device
- usb: dwc3: fix PHY disable sequence
- usb: dwc3: disable USB core PHY management
- USB: serial: ch341: fix lost character on LCR updates
- USB: serial: ch341: fix disabled rx timer on older devices
- scsi: megaraid_sas: Fix double kfree()
- drm/gem: Fix GEM handle release errors
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/radeon: add a force flush to delay work when radeon
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned
fw_level
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: usb-audio: Fix an out-of-bounds bug in
__snd_usb_parse_audio_interface()
- kprobes: Prohibit probes in gate area
- debugfs: add debugfs_lookup_and_remove()
- nvmet: fix a use-after-free
- scsi: mpt3sas: Fix use-after-free warning
- scsi: lpfc: Add missing destroy_workqueue() in error path
- cgroup: Optimize single thread migration
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an
empty subtree
- cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
- smb3: missing inode locks in punch hole
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- regulator: core: Clean up on enable failure
- RDMA/cma: Fix arguments order in net device validation
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/hns: Fix supported page size
- netfilter: br_netfilter: Drop dst references before setting.
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- afs: Use the operation issue time instead of the reply time for callbacks
- sch_sfb: Don't assume the skb is still around after enqueueing to child
- tipc: fix shift wrapping bug in map_get()
- i40e: Fix kernel crash during module removal
- RDMA/siw: Pass a pointer to virt_to_page()
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- RDMA/mlx5: Set local port to one when accessing counters
- nvme-tcp: fix UAF when detecting digest errors
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- sch_sfb: Also store skb len before calling child enqueue
- x86/nospec: Fix i386 RSB stuffing
- MIPS: loongson32: ls1c: Fix hang during startup
- Linux 5.4.213
* CVE-2022-2663
- netfilter: nf_conntrack_irc: Fix forged IP logic
* CVE-2022-3061
- video: fbdev: i740fb: Error out if 'pixclock' equals zero
-- Wen-chien Jesse Sung <email address hidden> Mon, 21 Nov 2022 11:30:12 +0800
-
linux-iot (5.4.0-1006.8) focal; urgency=medium
* focal/linux-iot: 5.4.0-1006.8 -proposed tracker (LP: #1992050)
[ Ubuntu: 5.4.0-132.148 ]
* CVE-2022-42719
- mac80211: mlme: find auth challenge directly
- wifi: mac80211: don't parse mbssid in assoc response
- wifi: mac80211: fix MBSSID parsing use-after-free
* iavf: SR-IOV VFs error with no traffic flow when MTU greater than 1500
(LP: #1983656)
- iavf: Fix set max MTU size with port VLAN and jumbo frames
- i40e: Fix VF set max MTU size
* fib_nexthop_nongw.sh from ubuntu_kernel_selftests failed on B-5.4
(LP: #1990800)
- SAUCE: selftests/net: skipping tests for older ip command releases
* CVE-2022-29901
- Revert "x86/speculation: Add RSB VM Exit protections"
- Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
- x86/devicetable: Move x86 specific macro out of generic code
- x86/cpu: Add consistent CPU match macros
- x86/cpu: Add a steppings field to struct x86_cpu_id
- x86/kvm/vmx: Make noinstr clean
- x86/cpufeatures: Move RETPOLINE flags to word 11
- x86/bugs: Report AMD retbleed vulnerability
- x86/bugs: Add AMD retbleed= boot parameter
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
- x86/entry: Remove skip_r11rcx
- x86/entry: Add kernel IBRS implementation
- x86/bugs: Optimize SPEC_CTRL MSR writes
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
- x86/bugs: Split spectre_v2_select_mitigation() and
spectre_v2_user_select_mitigation()
- x86/bugs: Report Intel retbleed vulnerability
- intel_idle: Disable IBRS during long idle
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
- x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
- x86/speculation: Fix firmware entry SPEC_CTRL handling
- x86/speculation: Fix SPEC_CTRL write on SMT state change
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
- x86/speculation: Remove x86_spec_ctrl_mask
- KVM/VMX: Use TEST %REG,%REG instead of CMP $0,%REG in vmenter.S
- KVM/nVMX: Use __vmx_vcpu_run in nested_vmx_check_vmentry_hw
- KVM: VMX: Flatten __vmx_vcpu_run()
- KVM: VMX: Convert launched argument to flags
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
- KVM: VMX: Fix IBRS handling after vmexit
- x86/speculation: Fill RSB on vmexit for IBRS
- x86/common: Stamp out the stepping madness
- x86/cpu/amd: Enumerate BTC_NO
- x86/bugs: Add Cannon lake to RETBleed affected CPU list
- x86/speculation: Disable RRSBA behavior
- x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
- x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
- x86/speculation: Add RSB VM Exit protections
* ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems (LP: #1990985)
- ACPI: processor_idle: Skip dummy wait if kernel is in guest
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel
systems
* cgroup: all controllers mounted when using 'cgroup_no_v1=' (LP: #1988584)
- cgroup-v1: add disabled controller check in cgroup1_parse_param()
* Focal update: v5.4.212 upstream stable release (LP: #1991156)
- audit: fix potential double free on error path from fsnotify_add_inode_mark
- parisc: Fix exception handler for fldw and fstw instructions
- kernel/sys_ni: add compat entry for fadvise64_64
- usb: cdns3: Fix issue for clear halt endpoint
- pinctrl: amd: Don't save/restore interrupt status and wake status bits
- sched/deadline: Unthrottle PI boosted threads while enqueuing
- sched/deadline: Fix stale throttling on de-/boosted tasks
- sched/deadline: Fix priority inheritance with multiple scheduling classes
- kernel/sched: Remove dl_boosted flag comment
- xfrm: fix refcount leak in __xfrm_policy_check()
- SUNRPC: RPC level errors should set task->tk_rpc_status
- rose: check NULL rose_loopback_neigh->loopback
- net/mlx5e: Properly disable vlan strip on non-UL reps
- net: moxa: get rid of asymmetry in DMA mapping/unmapping
- bonding: 802.3ad: fix no transmission of LACPDUs
- net: ipvtap - add __init/__exit annotations to module init/exit funcs
- netfilter: ebtables: reject blobs that don't provide all entry points
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
- netfilter: nft_payload: report ERANGE for too long offset and length
- netfilter: nft_payload: do not truncate csum_offset and csum_type
- netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
- netfilter: nft_tunnel: restrict it to netdev family
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
- net: Fix data-races around netdev_tstamp_prequeue.
- ratelimit: Fix data-races in ___ratelimit().
- net: Fix a data-race around sysctl_tstamp_allow_data.
- net: Fix a data-race around sysctl_net_busy_poll.
- net: Fix a data-race around sysctl_net_busy_read.
- net: Fix a data-race around netdev_budget.
- net: Fix a data-race around netdev_budget_usecs.
- net: Fix a data-race around sysctl_somaxconn.
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
- btrfs: fix silent failure when deleting root reference
- btrfs: replace: drop assert for suspended replace
- btrfs: add info when mount fails due to stale replace target
- btrfs: check if root is readonly while setting security xattr
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
- loop: Check for overflow while configuring loop
- asm-generic: sections: refactor memory_intersects
- s390: fix double free of GS and RI CBs on fork() failure
- ACPI: processor: Remove freq Qos request for all CPUs
- mm/hugetlb: fix hugetlb not supporting softdirty tracking
- md: call __md_stop_writes in md_stop
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE
- x86/bugs: Add "unknown" reporting for MMIO Stale Data
- kbuild: Fix include path in scripts/Makefile.modpost
- Bluetooth: L2CAP: Fix build errors in some archs
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- media: pvrusb2: fix memory leak in pvr_probe
- HID: hidraw: fix memory leak in hidraw_release()
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is
dead
- bpf: Don't redirect packets with invalid pkt_len
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
- btrfs: introduce btrfs_lookup_match_dir
- btrfs: do not pin logs too early during renames
- btrfs: unify lookup return value when dir entry is missing
- drm/amd/display: Avoid MPC infinite loop
- drm/amd/display: clear optc underflow before turn off odm clock
- neigh: fix possible DoS due to net iface start/stop loop
- s390/hypfs: avoid error message under KVM
- drm/amd/display: Fix pixel clock programming
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- btrfs: tree-checker: check for overlapping extent items
- lib/vdso: Let do_coarse() return 0 to simplify the callsite
- lib/vdso: Mark do_hres() and do_coarse() as __always_inline
- kprobes: don't call disarm_kprobe() for disabled kprobes
- net/af_packet: check len when min_header_len equals to 0
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- Linux 5.4.212
* Focal update: v5.4.211 upstream stable release (LP: #1990190)
- Makefile: link with -z noexecstack --no-warn-rwx-segments
- x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
- scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover"
- ALSA: bcd2000: Fix a UAF bug on the error path of probing
- igc: Remove _I_PHY_ID checking
- wifi: mac80211_hwsim: fix race condition in pending packet
- wifi: mac80211_hwsim: add back erroneously removed cast
- wifi: mac80211_hwsim: use 32-bit skb cookie
- add barriers to buffer_uptodate and set_buffer_uptodate
- HID: wacom: Only report rotation for art pen
- HID: wacom: Don't register pad_input for touch switch
- KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case
- KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case
- KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
- KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value
- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
- mm/mremap: hold the rmap lock in write mode when moving page table entries.
- ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
- ALSA: hda/cirrus - support for iMac 12,1 model
- ALSA: hda/realtek: Add quirk for another Asus K42JZ model
- tty: vt: initialize unicode screen buffer
- vfs: Check the truncate maximum size in inode_newsize_ok()
- fs: Add missing umask strip in vfs_tmpfile
- thermal: sysfs: Fix cooling_device_stats_setup() error code path
- fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
- usbnet: Fix linkwatch use-after-free on disconnect
- ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()
- parisc: Fix device names in /proc/iomem
- parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode
- drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error
- drm/nouveau: fix another off-by-one in nvbios_addr
- drm/amdgpu: Check BO's requested pinning domains against its
preferred_domains
- iio: light: isl29028: Fix the warning in isl29028_remove()
- fuse: limit nsec
- serial: mvebu-uart: uart2 error bits clearing
- md-raid10: fix KASAN warning
- ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
- PCI: Add defines for normal and subtractive PCI bridges
- powerpc/fsl-pci: Fix Class Code of PCIe Root Port
- powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
- powerpc/powernv: Avoid crashing if rng is NULL
- MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- coresight: Clear the connection field properly
- USB: HCD: Fix URB giveback issue in tasklet function
- ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC
- arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC
- netfilter: nf_tables: fix null deref due to zeroed list head
- epoll: autoremove wakers even more aggressively
- x86: Handle idle=nomwait cmdline properly for x86_idle
- arm64: Do not forget syscall when starting a new thread.
- arm64: fix oops in concurrently setting insn_emulation sysctls
- ext2: Add more validity checks for inode counts
- genirq: Don't return error on missing optional irq_request_resources()
- wait: Fix __wait_event_hrtimeout for RT/DL tasks
- ARM: dts: imx6ul: add missing properties for sram
- ARM: dts: imx6ul: change operating-points to uint32-matrix
- ARM: dts: imx6ul: fix csi node compatible
- ARM: dts: imx6ul: fix lcdif node compatible
- ARM: dts: imx6ul: fix qspi node compatible
- spi: synquacer: Add missing clk_disable_unprepare()
- ARM: OMAP2+: display: Fix refcount leak bug
- ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks
- ACPI: PM: save NVS memory for Lenovo G40-45
- ACPI: LPSS: Fix missing check in register_device_clock()
- arm64: dts: qcom: ipq8074: fix NAND node name
- arm64: dts: allwinner: a64: orangepi-win: Fix LED node name
- ARM: shmobile: rcar-gen2: Increase refcount for new reference
- PM: hibernate: defer device probing when resuming from hibernation
- selinux: Add boundary check in put_entry()
- spi: spi-rspi: Fix PIO fallback on RZ platforms
- ARM: findbit: fix overflowing offset
- meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
- ARM: bcm: Fix refcount leak in bcm_kona_smc_init
- x86/pmem: Fix platform-device leak in error path
- ARM: dts: ast2500-evb: fix board compatible
- ARM: dts: ast2600-evb: fix board compatible
- soc: fsl: guts: machine variable might be unset
- ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg
- ARM: OMAP2+: Fix refcount leak in omapdss_init_of
- ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
- cpufreq: zynq: Fix refcount leak in zynq_get_revision
- soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register
- ARM: dts: qcom: pm8841: add required thermal-sensor-cells
- bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
- arm64: dts: mt7622: fix BPI-R64 WPS button
- erofs: avoid consecutive detection for Highmem memory
- blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created
- regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
- nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
- thermal/tools/tmon: Include pthread and time headers in tmon.h
- dm: return early from dm_pr_call() if DM device is suspended
- ath10k: do not enforce interrupt trigger type
- wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
- drm/mipi-dbi: align max_chunk to 2 in spi_transfer
- drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
- drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
- drm: adv7511: override i2c address of cec before accessing it
- i2c: Fix a potential use after free
- media: tw686x: Register the irq at the end of probe
- wifi: iwlegacy: 4965: fix potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- drm: bridge: adv7511: Add check for mipi_dsi_driver_register
- drm/mcde: Fix refcount leak in mcde_dsi_bind
- media: hdpvr: fix error value returns in hdpvr_read
- drm/vc4: plane: Remove subpixel positioning check
- drm/vc4: plane: Fix margin calculations for the right/bottom edges
- drm/vc4: dsi: Correct DSI divider calculations
- crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE
- drm/rockchip: vop: Don't crash for invalid duplicate_state()
- drm/rockchip: Fix an error handling path rockchip_dp_probe()
- drm/mediatek: dpi: Remove output format of YUV
- drm/mediatek: dpi: Only enable dpi after the bridge is enabled
- drm: bridge: sii8620: fix possible off-by-one
- drm/msm/mdp5: Fix global state lock backoff
- crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq
- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
- mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
- drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed.
- tcp: make retransmitted SKB fit into the send window
- libbpf: Fix the name of a reused map
- selftests: timers: valid-adjtimex: build fix for newer toolchains
- selftests: timers: clocksource-switch: fix passing errors from child
- fs: check FMODE_LSEEK to control internal pipe splicing
- wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
- wifi: p54: Fix an error handling path in p54spi_probe()
- wifi: p54: add missing parentheses in p54_flush()
- selftests/bpf: fix a test for snprintf() overflow
- can: pch_can: do not report txerr and rxerr during bus-off
- can: rcar_can: do not report txerr and rxerr during bus-off
- can: sja1000: do not report txerr and rxerr during bus-off
- can: hi311x: do not report txerr and rxerr during bus-off
- can: sun4i_can: do not report txerr and rxerr during bus-off
- can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
- can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
- can: usb_8dev: do not report txerr and rxerr during bus-off
- can: error: specify the values of data[5..7] of CAN error frames
- can: pch_can: pch_can_error(): initialize errc before using it
- Bluetooth: hci_intel: Add check for platform_driver_register
- i2c: cadence: Support PEC for SMBus block read
- i2c: mux-gpmux: Add of_node_put() when breaking out of loop
- wifi: wil6210: debugfs: fix uninitialized variable use in
`wil_write_file_wmi()`
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue
- wifi: libertas: Fix possible refcount leak in if_usb_probe()
- net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS
- crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of
- iavf: Fix max_rate limiting
- netdevsim: Avoid allocation warnings triggered from user space
- net: rose: fix netdev reference changes
- dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
- clk: renesas: r9a06g032: Fix UART clkgrp bitsel
- mtd: maps: Fix refcount leak in of_flash_probe_versatile
- mtd: maps: Fix refcount leak in ap_flash_init
- mtd: rawnand: meson: Fix a potential double free issue
- HID: cp2112: prevent a buffer overflow in cp2112_xfer()
- mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
- mtd: partitions: Fix refcount leak in parse_redboot_of
- mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
- fpga: altera-pr-ip: fix unsigned comparison with less than zero
- usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
- usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
- usb: xhci: tegra: Fix error check
- clk: mediatek: reset: Fix written reset bit offset
- misc: rtsx: Fix an error handling path in rtsx_pci_probe()
- driver core: fix potential deadlock in __driver_attach
- clk: qcom: clk-krait: unlock spin after mux completion
- usb: host: xhci: use snprintf() in xhci_decode_trb()
- clk: qcom: ipq8074: fix NSS port frequency tables
- clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
- clk: qcom: camcc-sdm845: Fix topology around titan_top power domain
- soundwire: bus_type: fix remove and shutdown support
- intel_th: Fix a resource leak in an error handling path
- intel_th: msu-sink: Potential dereference of null pointer
- intel_th: msu: Fix vmalloced buffers
- staging: rtl8192u: Fix sleep in atomic context bug in
dm_fsync_timer_callback
- mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
- memstick/ms_block: Fix some incorrect memory allocation
- memstick/ms_block: Fix a memory leak
- mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
- scsi: smartpqi: Fix DMA direction for RAID requests
- usb: gadget: udc: amd5536 depends on HAS_DMA
- RDMA/hns: Fix incorrect clearing of interrupt status register
- RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event
- RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
- gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
- mmc: cavium-octeon: Add of_node_put() when breaking out of loop
- mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
- HID: alps: Declare U1_UNICORN_LEGACY support
- PCI: tegra194: Fix Root Port interrupt handling
- PCI: tegra194: Fix link up retry sequence
- USB: serial: fix tty-port initialized comments
- platform/olpc: Fix uninitialized data in debugfs write
- mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
- RDMA/rxe: Fix error unwind in rxe_create_qp()
- null_blk: fix ida error handling in null_add_dev()
- jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction()
- ext4: recover csum seed of tmp_inode after migrating to extents
- jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
- opp: Fix error check in dev_pm_opp_attach_genpd()
- ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
- ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe
- ASoC: codecs: da7210: add check for i2c_add_driver
- ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
- serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
- ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV
- ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV
- profiling: fix shift too large makes kernel panic
- tty: n_gsm: fix non flow control frames during mux flow off
- tty: n_gsm: fix packet re-transmission without open control channel
- tty: n_gsm: fix race condition in gsmld_write()
- remoteproc: qcom: wcnss: Fix handling of IRQs
- vfio/ccw: Do not change FSM state in subchannel event
- tty: n_gsm: fix wrong T1 retry count handling
- tty: n_gsm: fix DM command
- tty: n_gsm: fix missing corner cases in gsmld_poll()
- iommu/exynos: Handle failed IOMMU device registration properly
- rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
- kfifo: fix kfifo_to_user() return type
- mfd: t7l66xb: Drop platform disable callback
- mfd: max77620: Fix refcount leak in max77620_initialise_fps
- iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
- s390/zcore: fix race when reading from hardware system area
- ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()
- fuse: Remove the control interface for virtio-fs
- ASoC: audio-graph-card: Add of_node_put() in fail path
- watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in
armada_37xx_wdt_probe()
- video: fbdev: amba-clcd: Fix refcount leak bugs
- video: fbdev: sis: fix typos in SiS_GetModeID()
- powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32
- powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and
alias
- powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
- powerpc/xive: Fix refcount leak in xive_get_max_prio
- powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
- perf symbol: Fail to read phdr workaround
- kprobes: Forbid probing on trampoline and BPF code areas
- powerpc/pci: Fix PHB numbering when using opal-phbid
- genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
- scripts/faddr2line: Fix vmlinux detection on arm64
- x86/numa: Use cpumask_available instead of hardcoded NULL check
- video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
- tools/thermal: Fix possible path truncations
- video: fbdev: vt8623fb: Check the size of screen before memset_io()
- video: fbdev: arkfb: Check the size of screen before memset_io()
- video: fbdev: s3fb: Check the size of screen before memset_io()
- scsi: zfcp: Fix missing auto port scan and thus missing target ports
- scsi: qla2xxx: Fix discovery issues in FC-AL topology
- scsi: qla2xxx: Turn off multi-queue for 8G adapters
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection
- x86/olpc: fix 'logical not is only applied to the left hand side'
- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
- kexec, KEYS, s390: Make use of built-in and secondary keyring for signature
verification
- tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH
- btrfs: reset block group chunk force if we have to wait
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
- ext4: make sure ext4_append() always allocates new block
- ext4: fix use-after-free in ext4_xattr_set_entry
- ext4: update s_overhead_clusters in the superblock during an on-line resize
- ext4: fix extent status tree race in writeback error recovery path
- ext4: correct max_inline_xattr_value_size computing
- ext4: correct the misjudgment in ext4_iget_extra_inode
- intel_th: pci: Add Raptor Lake-S CPU support
- intel_th: pci: Add Raptor Lake-S PCH support
- intel_th: pci: Add Meteor Lake-P support
- dm raid: fix address sanitizer warning in raid_resume
- dm raid: fix address sanitizer warning in raid_status
- dm thin: fix use-after-free crash in dm_sm_register_threshold_callback
- dm writecache: set a default MAX_WRITEBACK_JOBS
- ACPI: CPPC: Do not prevent CPPC from working in the future
- timekeeping: contribute wall clock to rng on time change
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
- btrfs: reject log replay if there is unsupported RO compat flag
- KVM: Add infrastructure and macro to mark VM as bugged
- KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
- KVM: x86: Avoid theoretical NULL pointer dereference in
kvm_irq_delivery_to_apic_fast()
- tcp: fix over estimation in sk_forced_mem_schedule()
- scsi: sg: Allow waiting for commands to complete on removed device
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
- net/9p: Initialize the iounit field during fid creation
- net_sched: cls_route: disallow handle of 0
- ALSA: info: Fix llseek return value when using callback
- rds: add missing barrier to release_refill
- ata: libata-eh: Add missing command name
- mmc: pxamci: Fix another error handling path in pxamci_probe()
- mmc: pxamci: Fix an error handling path in pxamci_probe()
- btrfs: fix lost error handling when looking up extended ref on log replay
- tracing: Have filter accept "common_cpu" to be consistent
- can: ems_usb: fix clang's -Wunaligned-access warning
- apparmor: fix quiet_denied for file rules
- apparmor: fix absroot causing audited secids to begin with =
- apparmor: Fix failed mount permission check error message
- apparmor: fix aa_label_asxprint return check
- apparmor: fix overlapping attachment computation
- apparmor: fix reference count leak in aa_pivotroot()
- apparmor: Fix memleak in aa_simple_write_to_buffer()
- Documentation: ACPI: EINJ: Fix obsolete example
- NFSv4.1: Don't decrease the value of seq_nr_highest_sent
- NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly
- NFSv4: Fix races in the legacy idmapper upcall
- NFSv4.1: RECLAIM_COMPLETE must handle EACCES
- NFSv4/pnfs: Fix a use-after-free bug in open
- can: mcp251x: Fix race condition on receive interrupt
- sunrpc: fix expiry of auth creds
- SUNRPC: Reinitialise the backchannel request buffers before reuse
- devlink: Fix use-after-free after a failed reload
- net: bgmac: Fix a BUG triggered by wrong bytes_compl
- pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
- pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
- pinctrl: sunxi: Add I/O bias setting for H6 R-PIO
- ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
- geneve: do not use RT_TOS for IPv6 flowlabel
- plip: avoid rcu debug splat
- vsock: Fix memory leak in vsock_connect()
- vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
- dt-bindings: arm: qcom: fix MSM8916 MTP compatibles
- tools/vm/slabinfo: use alphabetic order when two values are equal
- tools build: Switch to new openssl API for test-libcrypto
- NTB: ntb_tool: uninitialized heap data in tool_fn_write()
- nfp: ethtool: fix the display error of `ethtool -m DEVNAME`
- xen/xenbus: fix return type in xenbus_file_read()
- atm: idt77252: fix use-after-free bugs caused by tst_timer
- dpaa2-eth: trace the allocated address instead of page struct
- tee: add overflow check in register_shm_helper()
- nios2: page fault et.al. are *not* restartable syscalls...
- nios2: don't leave NULLs in sys_call_table[]
- nios2: traced syscall does need to check the syscall number
- nios2: fix syscall restart checks
- nios2: restarts apply only to the first sigframe we build...
- nios2: add force_successful_syscall_return()
- iavf: Fix adminq error handling
- clk: rockchip: add sclk_mac_lbtest to rk3188_critical_clocks
- netfilter: nf_tables: really skip inactive sets when allocating name
- powerpc/pci: Fix get_phb_number() locking
- net: dsa: mv88e6060: prevent crash on an unused port
- net: moxa: pass pdev instead of ndev to DMA functions
- net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry
- ice: Ignore EEXIST when setting promisc mode
- i40e: Fix to stop tx_timeout recovery if GLOBR fails
- fec: Fix timer capture timing in `fec_ptp_enable_pps()`
- igb: Add lock to avoid data race
- gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
- locking/atomic: Make test_and_*_bit() ordered on failure
- drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
- PCI: Add ACS quirk for Broadcom BCM5750x NICs
- usb: cdns3 fix use-after-free at workaround 2
- usb: gadget: uvc: call uvc uvcg_warn on completed status instead of
uvcg_info
- irqchip/tegra: Fix overflow implicit truncation warnings
- drm/meson: Fix overflow implicit truncation warnings
- usb: host: ohci-ppc-of: Fix refcount leak bug
- usb: renesas: Fix refcount leak bug
- vboxguest: Do not use devm for irq
- clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user
input
- gadgetfs: ep_io - wait until IRQ finishes
- cxl: Fix a memory leak in an error handling path
- PCI/ACPI: Guard ARM64-specific mcfg_quirks
- um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups
- selftests/kprobe: Do not test for GRP/ without event failures
- dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed
- nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown
- drivers:md:fix a potential use-after-free bug
- ext4: avoid remove directory when directory is corrupted
- ext4: avoid resizing to a partial cluster size
- lib/list_debug.c: Detect uninitialized lists
- tty: serial: Fix refcount leak bug in ucc_uart.c
- vfio: Clear the caps->buf to NULL after free
- mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
- riscv: mmap with PROT_WRITE but no PROT_READ is invalid
- RISC-V: Add fast call path of crash_kexec()
- watchdog: export lockup_detector_reconfigure
- powerpc/32: Don't always pass -mcpu=powerpc to the compiler
- ALSA: core: Add async signal helpers
- ALSA: timer: Use deferred fasync helper
- f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()
- smb3: check xattr value length earlier
- powerpc/64: Init jump labels before parse_early_param()
- video: fbdev: i740fb: Check the argument of i740_calc_vclk()
- MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
- tracing/probes: Have kprobes and uprobes use $COMM too
- can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with
netdev_warn_once()
- can: j1939: j1939_session_destroy(): fix memory leak of skbs
- btrfs: only write the sectors in the vertical stripe which has data stripes
- btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
- Linux 5.4.211
* CVE-2022-3028
- af_key: Do not call xfrm_probe_algs in parallel
* CVE-2022-2978
- fs: fix UAF/GPF bug in nilfs_mdt_destroy
* CVE-2022-40768
- scsi: stex: Properly zero out the passthrough command structure
[ Ubuntu: 5.4.0-131.147 ]
* CVE-2022-2602
- SAUCE: io_uring/af_unix: defer registered files gc to io_uring release
- SAUCE: io_uring/af_unix: fix memleak during unix GC
* CVE-2022-41674
- SAUCE: wifi: cfg80211: fix u8 overflow in
cfg80211_update_notlisted_nontrans()
- SAUCE: wifi: cfg80211/mac80211: reject bad MBSSID elements
- SAUCE: wifi: cfg80211: ensure length byte is present before access
- SAUCE: wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
- SAUCE: wifi: cfg80211: update hidden BSSes to avoid WARN_ON
* CVE-2022-42721
- SAUCE: wifi: cfg80211: avoid nontransmitted BSS list corruption
* CVE-2022-42720
- SAUCE: wifi: cfg80211: fix BSS refcounting bugs
-- Wen-chien Jesse Sung <email address hidden> Tue, 08 Nov 2022 19:24:50 +0800
-
linux-iot (5.4.0-1005.7) focal; urgency=medium
* focal/linux-iot: 5.4.0-1005.7 -proposed tracker (LP: #1989878)
* Focal update: v5.4.208 upstream stable release (LP: #1988225)
- [Config] updateconfigs for IMA_TEMPLATE
- [Config] updateconfigs for REFCOUNT_FULL
[ Ubuntu: 5.4.0-128.144 ]
* focal/linux: 5.4.0-128.144 -proposed tracker (LP: #1990152)
* CVE-2022-3176
- io_uring: disable polling pollfree files
* ip/nexthop: fix default address selection for connected nexthop
(LP: #1988809)
- selftests/net: test nexthop without gw
* ip/nexthop: fix default address selection for connected nexthop
(LP: #1988809) // icmp_redirect.sh in ubuntu_kernel_selftests failed on
Jammy 5.15.0-49.55 (LP: #1990124)
- ip: fix triggering of 'icmp redirect'
[ Ubuntu: 5.4.0-127.143 ]
* focal/linux: 5.4.0-127.143 -proposed tracker (LP: #1989892)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.09.19)
* [UBUNTU 20.04] mlx5 driver crashes on accessing device attributes during
recovery (LP: #1987287)
- net/mlx5: Avoid processing commands before cmdif is ready
* Focal update: v5.4.210 upstream stable release (LP: #1989230)
- thermal: Fix NULL pointer dereferences in of_thermal_ functions
- ACPI: video: Force backlight native for some TongFang devices
- ACPI: video: Shortening quirk list by identifying Clevo by board_name only
- ACPI: APEI: Better fix to avoid spamming the console with old error logs
- bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
- selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads
- bpf: Test_verifier, #70 error message updates for 32-bit right shift
- KVM: Don't null dereference ops->destroy
- selftests: KVM: Handle compiler optimizations in ucall
- media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
- macintosh/adb: fix oob read in do_adb_query() function
- x86/speculation: Add RSB VM Exit protections
- x86/speculation: Add LFENCE to RSB fill sequence
- Linux 5.4.210
* Focal update: v5.4.209 upstream stable release (LP: #1989228)
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
- ntfs: fix use-after-free in ntfs_ucsncmp()
- s390/archrandom: prevent CPACF trng invocations in interrupt context
- tcp: Fix data-races around sysctl_tcp_dsack.
- tcp: Fix a data-race around sysctl_tcp_app_win.
- tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
- tcp: Fix a data-race around sysctl_tcp_frto.
- tcp: Fix a data-race around sysctl_tcp_nometrics_save.
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS)
- ice: do not setup vlan for loopback VSI
- scsi: ufs: host: Hold reference returned by of_parse_phandle()
- tcp: Fix a data-race around sysctl_tcp_limit_output_bytes.
- tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
- net: ping6: Fix memleak in ipv6_renew_options().
- ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
- igmp: Fix data-races around sysctl_igmp_qrv.
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()
- tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
- tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
- tcp: Fix a data-race around sysctl_tcp_autocorking.
- tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
- Documentation: fix sctp_wmem in ip-sysctl.rst
- tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns.
- tcp: Fix a data-race around sysctl_tcp_comp_sack_nr.
- i40e: Fix interface init with MSI interrupts (no MSI-X)
- sctp: fix sleep in atomic context bug in timer handlers
- virtio-net: fix the race between refill work and close
- perf symbol: Correct address for bss symbols
- sfc: disable softirqs for ptp TX
- sctp: leave the err path free in sctp_stream_init to sctp_stream_free
- ARM: crypto: comment out gcc warning that breaks clang builds
- mt7601u: add USB device ID for some versions of XiaoDu WiFi Dongle.
- scsi: core: Fix race between handling STS_RESOURCE and completion
- Linux 5.4.209
* Focal update: v5.4.208 upstream stable release (LP: #1988225)
- pinctrl: stm32: fix optional IRQ support to gpios
- riscv: add as-options for modules with assembly compontents
- mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication
- lockdown: Fix kexec lockdown bypass with ima policy
- xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
- PCI: hv: Fix interrupt mapping for multi-MSI
- serial: mvebu-uart: correctly report configured baudrate value
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in
xfrm_bundle_lookup()
- power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe
- pinctrl: ralink: Check for null return of devm_kcalloc
- perf/core: Fix data race between perf_event_set_output() and
perf_mmap_close()
- igc: Reinstate IGC_REMOVED logic and implement it properly
- ip: Fix data-races around sysctl_ip_no_pmtu_disc.
- ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
- ip: Fix data-races around sysctl_ip_nonlocal_bind.
- ip: Fix a data-race around sysctl_fwmark_reflect.
- tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
- tcp: Fix data-races around sysctl_tcp_mtu_probing.
- tcp: Fix data-races around sysctl_tcp_base_mss.
- tcp: Fix data-races around sysctl_tcp_min_snd_mss.
- tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.
- tcp: Fix a data-race around sysctl_tcp_probe_threshold.
- tcp: Fix a data-race around sysctl_tcp_probe_interval.
- i2c: cadence: Change large transfer count reset logic to be unconditional
- net: stmmac: fix dma queue left shift overflow issue
- net/tls: Fix race in TLS device down flow
- igmp: Fix data-races around sysctl_igmp_llm_reports.
- igmp: Fix a data-race around sysctl_igmp_max_memberships.
- tcp: Fix data-races around sysctl_tcp_syncookies.
- tcp: Fix data-races around sysctl_tcp_reordering.
- tcp: Fix data-races around some timeout sysctl knobs.
- tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
- tcp: Fix a data-race around sysctl_tcp_tw_reuse.
- tcp: Fix data-races around sysctl_max_syn_backlog.
- tcp: Fix data-races around sysctl_tcp_fastopen.
- iavf: Fix handling of dummy receive descriptors
- i40e: Fix erroneous adapter reinitialization during recovery process
- ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero
- gpio: pca953x: only use single read/write for No AI mode
- be2net: Fix buffer overflow in be_get_module_eeprom
- ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.
- udp: Fix a data-race around sysctl_udp_l3mdev_accept.
- tcp: Fix data-races around sysctl knobs related to SYN option.
- tcp: Fix a data-race around sysctl_tcp_early_retrans.
- tcp: Fix data-races around sysctl_tcp_recovery.
- tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
- tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
- tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
- tcp: Fix a data-race around sysctl_tcp_stdurg.
- tcp: Fix a data-race around sysctl_tcp_rfc1337.
- tcp: Fix data-races around sysctl_tcp_max_reordering.
- spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA
transfers
- mm/mempolicy: fix uninit-value in mpol_rebind_policy()
- bpf: Make sure mac_header was set before using it
- dlm: fix pending remove if msg allocation fails
- ima: remove the IMA_TEMPLATE Kconfig option
- [Config] updateconfigs for IMA_TEMPLATE
- locking/refcount: Define constants for saturation and max refcount values
- locking/refcount: Ensure integer operands are treated as signed
- locking/refcount: Remove unused refcount_*_checked() variants
- locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the
<linux/refcount.h> header
- locking/refcount: Improve performance of generic REFCOUNT_FULL code
- locking/refcount: Move saturation warnings out of line
- locking/refcount: Consolidate REFCOUNT_{MAX,SATURATED} definitions
- locking/refcount: Consolidate implementations of refcount_t
- [Config] updateconfigs for REFCOUNT_FULL
- x86: get rid of small constant size cases in raw_copy_{to,from}_user()
- x86/uaccess: Implement macros for CMPXCHG on user addresses
- mmap locking API: initial implementation as rwsem wrappers
- x86/mce: Deduplicate exception handling
- bitfield.h: Fix "type of reg too small for mask" test
- ALSA: memalloc: Align buffer allocations in page size
- Bluetooth: Add bt_skb_sendmsg helper
- Bluetooth: Add bt_skb_sendmmsg helper
- Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg
- Bluetooth: Fix passing NULL to PTR_ERR
- Bluetooth: SCO: Fix sco_send_frame returning skb->len
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
- tty: drivers/tty/, stop using tty_schedule_flip()
- tty: the rest, stop using tty_schedule_flip()
- tty: drop tty_schedule_flip()
- tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
- tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
- x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
- Linux 5.4.208
* Focal update: v5.4.207 upstream stable release (LP: #1988219)
- ALSA: hda - Add fixup for Dell Latitidue E5430
- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
- tracing/histograms: Fix memory leak problem
- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale
pointer
- ip: fix dflt addr selection for connected nexthop
- ARM: 9213/1: Print message about disabled Spectre workarounds only once
- ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction
- wifi: mac80211: fix queue selection for mesh/OCB interfaces
- cgroup: Use separate src/dst nodes when preloading css_sets for migration
- drm/panfrost: Fix shrinker list corruption by madvise IOCTL
- nilfs2: fix incorrect masking of permission flags for symlinks
- Revert "evm: Fix memleak in init_desc"
- sched/rt: Disable RT_RUNTIME_SHARE by default
- ext4: fix race condition between ext4_write and ext4_convert_inline_data
- ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count
- ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle
- ARM: 9210/1: Mark the FDT_FIXED sections as shareable
- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector()
- ima: Fix a potential integer overflow in ima_appraise_measurement
- ASoC: sgtl5000: Fix noise on shutdown/remove
- net: stmmac: dwc-qos: Disable split header for Tegra194
- inetpeer: Fix data-races around sysctl.
- net: Fix data-races around sysctl_mem.
- cipso: Fix data-races around sysctl.
- icmp: Fix data-races around sysctl.
- ipv4: Fix a data-race around sysctl_fib_sync_mem.
- ARM: dts: at91: sama5d2: Fix typo in i2s1 node
- ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero
- drm/i915/gt: Serialize TLB invalidates with GT resets
- icmp: Fix a data-race around sysctl_icmp_ratelimit.
- icmp: Fix a data-race around sysctl_icmp_ratemask.
- raw: Fix a data-race around sysctl_raw_l3mdev_accept.
- ipv4: Fix data-races around sysctl_ip_dynaddr.
- net: ftgmac100: Hold reference returned by of_get_child_by_name()
- sfc: fix use after free when disabling sriov
- seg6: fix skb checksum evaluation in SRH encapsulation/insertion
- seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
- seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
- sfc: fix kernel panic when creating VF
- mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE
- virtio_mmio: Add missing PM calls to freeze/restore
- virtio_mmio: Restore guest page size on resume
- netfilter: br_netfilter: do not skip all hooks with 0 priority
- cpufreq: pmac32-cpufreq: Fix refcount leak bug
- platform/x86: hp-wmi: Ignore Sanitization Mode event
- net: tipc: fix possible refcount leak in tipc_sk_create()
- NFC: nxp-nci: don't print header length mismatch on i2c error
- nvme: fix regression when disconnect a recovering ctrl
- net: sfp: fix memory leak in sfp_probe()
- ASoC: ops: Fix off by one in range control validation
- ASoC: wm5110: Fix DRE control
- ASoC: cs47l15: Fix event generation for low power mux control
- ASoC: madera: Fix event generation for OUT1 demux
- ASoC: madera: Fix event generation for rate controls
- irqchip: or1k-pic: Undefine mask_ack for level triggered hardware
- x86: Clear .brk area at early boot
- soc: ixp4xx/npe: Fix unused match warning
- ARM: dts: stm32: use the correct clock source for CEC on stm32mp151
- signal handling: don't use BUG_ON() for debugging
- USB: serial: ftdi_sio: add Belimo device ids
- usb: typec: add missing uevent when partner support PD
- usb: dwc3: gadget: Fix event pending check
- tty: serial: samsung_tty: set dma burst_size to 1
- serial: 8250: fix return error code in serial8250_request_std_resource()
- serial: stm32: Clear prev values before setting RTS delays
- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
- can: m_can: m_can_tx_handler(): fix use after free of skb
- Linux 5.4.207
* Focal update: v5.4.206 upstream stable release (LP: #1988215)
- Linux 5.4.206
* Focal update: v5.4.205 upstream stable release (LP: #1988214)
- esp: limit skb_page_frag_refill use to a single page
- mm/slub: add missing TID updates on slab deactivation
- can: bcm: use call_rcu() instead of costly synchronize_rcu()
- can: grcan: grcan_probe(): remove extra of_node_get()
- can: gs_usb: gs_usb_open/close(): fix memory leak
- usbnet: fix memory leak in error case
- net: rose: fix UAF bug caused by rose_t0timer_expiry
- iommu/vt-d: Fix PCI bus rescan device hot add
- fbdev: fbmem: Fix logo center image dx issue
- video: of_display_timing.h: include errno.h
- powerpc/powernv: delay rng platform device creation until later in boot
- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
- xfs: remove incorrect ASSERT in xfs_rename
- ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
- pinctrl: sunxi: a83t: Fix NAND function name for some pins
- pinctrl: sunxi: sunxi_pconf_set: use correct offset
- ARM: at91: pm: use proper compatible for sama5d2's rtc
- ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt
- ibmvnic: Properly dispose of all skbs during a failover.
- selftests: forwarding: fix flood_unicast_test when h2 supports
IFF_UNICAST_FLT
- selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
- selftests: forwarding: fix error message in learning_test
- i2c: cadence: Unregister the clk notifier in error path
- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
- misc: rtsx_usb: use separate command and response buffers
- misc: rtsx_usb: set return value in rsp_buf alloc err path
- dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo
- ida: don't use BUG_ON() for debugging
- dmaengine: pl330: Fix lockdep warning about non-static key
- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
- Linux 5.4.205
* Focal update: v5.4.204 upstream stable release (LP: #1988212)
- ipv6: take care of disable_policy when restoring routes
- nvdimm: Fix badblocks clear off-by-one error
- powerpc/prom_init: Fix kernel config grep
- powerpc/bpf: Fix use of user_pt_regs in uapi
- dm raid: fix accesses beyond end of raid member array
- dm raid: fix KASAN warning in raid5_add_disks
- s390/archrandom: simplify back to earlier design and initialize earlier
- SUNRPC: Fix READ_PLUS crasher
- net: rose: fix UAF bugs caused by timer handler
- net: usb: ax88179_178a: Fix packet receiving
- virtio-net: fix race between ndo_open() and virtio_device_ready()
- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test
- net: tun: unlink NAPI from device on destruction
- net: tun: stop NAPI when detaching queues
- RDMA/qedr: Fix reporting QP timeout attribute
- linux/dim: Fix divide by 0 in RDMA DIM
- usbnet: fix memory allocation in helpers
- net: ipv6: unexport __init-annotated seg6_hmac_net_init()
- caif_virtio: fix race between virtio_device_ready() and ndo_open()
- PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events
- s390: remove unneeded 'select BUILD_BIN2C'
- netfilter: nft_dynset: restore set element counter when failing to update
- net/sched: act_api: Notify user space if any actions were flushed before
error
- net: bonding: fix possible NULL deref in rlb code
- net: bonding: fix use-after-free after 802.3ad slave unbind
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value
- NFC: nxp-nci: Don't issue a zero length i2c_master_read()
- net: tun: avoid disabling NAPI twice
- xen/gntdev: Avoid blocking in unmap_grant_pages()
- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add()
fails
- net: dsa: bcm_sf2: force pause link settings
- sit: use min
- ipv6/sit: fix ipip6_tunnel_get_prl return value
- rseq/selftests,x86_64: Add rseq_offset_deref_addv()
- selftests/rseq: remove ARRAY_SIZE define from individual tests
- selftests/rseq: introduce own copy of rseq uapi header
- selftests/rseq: Remove useless assignment to cpu variable
- selftests/rseq: Remove volatile from __rseq_abi
- selftests/rseq: Introduce rseq_get_abi() helper
- selftests/rseq: Introduce thread pointer getters
- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35
- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian
- selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for
load/store
- selftests/rseq: Fix ppc32 offsets by using long rather than off_t
- selftests/rseq: Fix warnings about #if checks of undefined tokens
- selftests/rseq: Remove arm/mips asm goto compiler work-around
- selftests/rseq: Fix: work-around asm goto compiler bugs
- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread
area
- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread
area
- selftests/rseq: Change type of rseq_offset to ptrdiff_t
- xen/blkfront: fix leaking data in shared pages
- xen/netfront: fix leaking data in shared pages
- xen/netfront: force data bouncing when backend is untrusted
- xen/blkfront: force data bouncing when backend is untrusted
- xen/arm: Fix race in RB-tree based P2M accounting
- net: usb: qmi_wwan: add Telit 0x1060 composition
- net: usb: qmi_wwan: add Telit 0x1070 composition
- clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from
ixp4xx_timer_setup()
- Linux 5.4.204
-- Wen-chien Jesse Sung <email address hidden> Thu, 06 Oct 2022 13:56:02 +0800
-
linux-iot (5.4.0-1004.6) focal; urgency=medium
* focal/linux-iot: 5.4.0-1004.6 -proposed tracker (LP: #1987805)
[ Ubuntu: 5.4.0-126.142 ]
* focal/linux: 5.4.0-126.142 -proposed tracker (LP: #1987819)
* [SRU] fnic driver on needs to be updated to 1.6.0.53 on Focal (LP: #1984011)
- scsi: fnic: Change shost_printk() to FNIC_FCS_DBG()
- scsi: fnic: Avoid looping in TRANS ETH on unload
- scsi: fnic: Change shost_printk() to FNIC_MAIN_DBG()
- scsi: fnic: Set scsi_set_resid() only for underflow
- scsi: fnic: Validate io_req before others
* Focal update: v5.4.203 upstream stable release (LP: #1986999)
- drm: remove drm_fb_helper_modinit
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete
- kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
- net: mscc: ocelot: allow unregistered IP multicast flooding
- ARM: 8989/1: use .fpu assembler directives instead of assembler arguments
- ARM: 8990/1: use VFP assembler mnemonics in register load/store macros
- ARM: 8971/1: replace the sole use of a symbol with its definition
- crypto: arm/sha256-neon - avoid ADRL pseudo instruction
- crypto: arm/sha512-neon - avoid ADRL pseudo instruction
- ARM: 8933/1: replace Sun/Solaris style flag on section directive
- ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand
- ARM: OMAP2+: drop unnecessary adrl
- ARM: 9029/1: Make iwmmxt.S support Clang's integrated assembler
- crypto: arm - use Kconfig based compiler checks for crypto opcodes
- crypto: arm/ghash-ce - define fpu before fpu registers are referenced
- Linux 5.4.203
* Focal update: v5.4.202 upstream stable release (LP: #1986995)
- random: schedule mix_interrupt_randomness() less often
- ALSA: hda/via: Fix missing beep setup
- ALSA: hda/conexant: Fix missing beep setup
- ALSA: hda/realtek - ALC897 headset MIC no sound
- ALSA: hda/realtek: Add quirk for Clevo PD70PNT
- net: openvswitch: fix parsing of nw_proto for IPv6 fragments
- mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
- ata: libata: add qc->flags in ata_qc_complete_template tracepoint
- dm era: commit metadata in postsuspend after worker stops
- dm mirror log: clear log bits up to BITS_PER_LONG boundary
- random: quiet urandom warning ratelimit suppression message
- USB: serial: option: add Telit LE910Cx 0x1250 composition
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: option: add Quectel RM500K module support
- bpf: Fix request_sock leak in sk lookup helpers
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
- erspan: do not assume transport header is always set
- net/tls: fix tls_sk_proto_close executed repeatedly
- udmabuf: add back sanity check
- x86/xen: Remove undefined behavior in setup_features()
- MIPS: Remove repetitive increase irq_err_count
- afs: Fix dynamic root getattr
- ice: ethtool: advertise 1000M speeds properly
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
- igb: Make DMA faster when CPU is active on the PCIe link
- virtio_net: fix xdp_rxq_info bug after suspend/resume
- Revert "net/tls: fix tls_sk_proto_close executed repeatedly"
- gpio: winbond: Fix error code in winbond_gpio_get()
- s390/cpumf: Handle events cycles and instructions identical
- iio: adc: vf610: fix conversion mode sysfs node name
- xhci: turn off port power in shutdown
- usb: chipidea: udc: check request status before setting device address
- iio:chemical:ccs811: rearrange iio trigger get and register
- iio:accel:bma180: rearrange iio trigger get and register
- iio:accel:mxc4005: rearrange iio trigger get and register
- iio: accel: mma8452: ignore the return value of reset operation
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
- iio: trigger: sysfs: fix use-after-free on remove
- iio: adc: stm32: fix maximum clock rate for stm32mp15x
- iio: adc: axp288: Override TS pin bias current for some models
- xtensa: xtfpga: Fix refcount leak bug in setup
- xtensa: Fix refcount leak bug in time.c
- parisc: Enable ARCH_HAS_STRICT_MODULE_RWX
- powerpc: Enable execve syscall exit tracepoint
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
- powerpc/powernv: wire up rng during setup_arch
- ARM: dts: imx6qdl: correct PU regulator ramp delay
- ARM: exynos: Fix refcount leak in exynos_map_pmu
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
- ARM: Fix refcount leak in axxia_boot_secondary
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init
- modpost: fix section mismatch check for exported init/exit sections
- random: update comment from copy_to_user() -> copy_to_iter()
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)
- powerpc/pseries: wire up rng during setup_arch()
- Linux 5.4.202
* Focal update: v5.4.201 upstream stable release (LP: #1986993)
- dm: remove special-casing of bio-based immutable singleton target on NVMe
- usb: gadget: u_ether: fix regression in setting fixed MAC address
- tcp: add some entropy in __inet_hash_connect()
- tcp: use different parts of the port_offset for index and offset
- tcp: add small random increments to the source port
- tcp: dynamically allocate the perturb table used by source ports
- tcp: increase source port perturb table to 2^16
- tcp: drop the hash_32() part from the index calculation
- arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
- Linux 5.4.201
* Focal update: v5.4.200 upstream stable release (LP: #1983152)
- Revert "UBUNTU: SAUCE: random: Make getrandom() ready earlier"
- 9p: missing chunk of "fs/9p: Don't update file type when updating file
attributes"
- bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()
- nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION
- crypto: blake2s - generic C library implementation and selftest
- lib/crypto: blake2s: move hmac construction into wireguard
- lib/crypto: sha1: re-roll loops to reduce code size
- compat_ioctl: remove /dev/random commands
- random: don't forget compat_ioctl on urandom
- random: Don't wake crng_init_wait when crng_init == 1
- random: Add a urandom_read_nowait() for random APIs that don't warn
- random: add GRND_INSECURE to return best-effort non-cryptographic bytes
- random: ignore GRND_RANDOM in getentropy(2)
- random: make /dev/random be almost like /dev/urandom
- random: remove the blocking pool
- random: delete code to pull data into pools
- random: remove kernel.random.read_wakeup_threshold
- random: remove unnecessary unlikely()
- random: convert to ENTROPY_BITS for better code readability
- random: Add and use pr_fmt()
- random: fix typo in add_timer_randomness()
- random: remove some dead code of poolinfo
- random: split primary/secondary crng init paths
- random: avoid warnings for !CONFIG_NUMA builds
- x86: Remove arch_has_random, arch_has_random_seed
- powerpc: Remove arch_has_random, arch_has_random_seed
- s390: Remove arch_has_random, arch_has_random_seed
- linux/random.h: Remove arch_has_random, arch_has_random_seed
- linux/random.h: Use false with bool
- linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
- powerpc: Use bool in archrandom.h
- random: add arch_get_random_*long_early()
- random: avoid arch_get_random_seed_long() when collecting IRQ randomness
- random: remove dead code left over from blocking pool
- MAINTAINERS: co-maintain random.c
- crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
- crypto: blake2s - adjust include guard naming
- random: document add_hwgenerator_randomness() with other input functions
- random: remove unused irq_flags argument from add_interrupt_randomness()
- random: use BLAKE2s instead of SHA1 in extraction
- random: do not sign extend bytes for rotation when mixing
- random: do not re-init if crng_reseed completes before primary init
- random: mix bootloader randomness into pool
- random: harmonize "crng init done" messages
- random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
- random: initialize ChaCha20 constants with correct endianness
- random: early initialization of ChaCha constants
- random: avoid superfluous call to RDRAND in CRNG extraction
- random: don't reset crng_init_cnt on urandom_read()
- random: fix typo in comments
- random: cleanup poolinfo abstraction
- random: cleanup integer types
- random: remove incomplete last_data logic
- random: remove unused extract_entropy() reserved argument
- random: rather than entropy_store abstraction, use global
- random: remove unused OUTPUT_POOL constants
- random: de-duplicate INPUT_POOL constants
- random: prepend remaining pool constants with POOL_
- random: cleanup fractional entropy shift constants
- random: access input_pool_data directly rather than through pointer
- random: selectively clang-format where it makes sense
- random: simplify arithmetic function flow in account()
- random: continually use hwgenerator randomness
- random: access primary_pool directly rather than through pointer
- random: only call crng_finalize_init() for primary_crng
- random: use computational hash for entropy extraction
- random: simplify entropy debiting
- random: use linear min-entropy accumulation crediting
- random: always wake up entropy writers after extraction
- random: make credit_entropy_bits() always safe
- random: remove use_input_pool parameter from crng_reseed()
- random: remove batched entropy locking
- random: fix locking in crng_fast_load()
- random: use RDSEED instead of RDRAND in entropy extraction
- random: get rid of secondary crngs
- random: inline leaves of rand_initialize()
- random: ensure early RDSEED goes through mixer on init
- random: do not xor RDRAND when writing into /dev/random
- random: absorb fast pool into input pool after fast load
- random: use simpler fast key erasure flow on per-cpu keys
- random: use hash function for crng_slow_load()
- random: make more consistent use of integer types
- random: remove outdated INT_MAX >> 6 check in urandom_read()
- random: zero buffer after reading entropy from userspace
- random: fix locking for crng_init in crng_reseed()
- random: tie batched entropy generation to base_crng generation
- random: remove ifdef'd out interrupt bench
- random: remove unused tracepoints
- random: add proper SPDX header
- random: deobfuscate irq u32/u64 contributions
- random: introduce drain_entropy() helper to declutter crng_reseed()
- random: remove useless header comment
- random: remove whitespace and reorder includes
- random: group initialization wait functions
- random: group crng functions
- random: group entropy extraction functions
- random: group entropy collection functions
- random: group userspace read/write functions
- random: group sysctl functions
- random: rewrite header introductory comment
- random: defer fast pool mixing to worker
- random: do not take pool spinlock at boot
- random: unify early init crng load accounting
- random: check for crng_init == 0 in add_device_randomness()
- random: pull add_hwgenerator_randomness() declaration into random.h
- random: clear fast pool, crng, and batches in cpuhp bring up
- random: round-robin registers as ulong, not u32
- random: only wake up writers after zap if threshold was passed
- random: cleanup UUID handling
- random: unify cycles_t and jiffies usage and types
- random: do crng pre-init loading in worker rather than irq
- random: give sysctl_random_min_urandom_seed a more sensible value
- random: don't let 644 read-only sysctls be written to
- random: replace custom notifier chain with standard one
- random: use SipHash as interrupt entropy accumulator
- random: make consistent usage of crng_ready()
- random: reseed more often immediately after booting
- random: check for signal and try earlier when generating entropy
- random: skip fast_init if hwrng provides large chunk of entropy
- random: treat bootloader trust toggle the same way as cpu trust toggle
- random: re-add removed comment about get_random_{u32,u64} reseeding
- random: mix build-time latent entropy into pool at init
- random: do not split fast init input in add_hwgenerator_randomness()
- random: do not allow user to keep crng key around on stack
- random: check for signal_pending() outside of need_resched() check
- random: check for signals every PAGE_SIZE chunk of /dev/[u]random
- random: allow partial reads if later user copies fail
- random: make random_get_entropy() return an unsigned long
- random: document crng_fast_key_erasure() destination possibility
- random: fix sysctl documentation nits
- init: call time_init() before rand_initialize()
- ia64: define get_cycles macro for arch-override
- s390: define get_cycles macro for arch-override
- parisc: define get_cycles macro for arch-override
- alpha: define get_cycles macro for arch-override
- powerpc: define get_cycles macro for arch-override
- timekeeping: Add raw clock fallback for random_get_entropy()
- m68k: use fallback for random_get_entropy() instead of zero
- mips: use fallback for random_get_entropy() instead of just c0 random
- arm: use fallback for random_get_entropy() instead of zero
- nios2: use fallback for random_get_entropy() instead of zero
- x86/tsc: Use fallback for random_get_entropy() instead of zero
- um: use fallback for random_get_entropy() instead of zero
- sparc: use fallback for random_get_entropy() instead of zero
- xtensa: use fallback for random_get_entropy() instead of zero
- random: insist on random_get_entropy() existing in order to simplify
- random: do not use batches when !crng_ready()
- random: use first 128 bits of input as fast init
- random: do not pretend to handle premature next security model
- random: order timer entropy functions below interrupt functions
- random: do not use input pool from hard IRQs
- random: help compiler out with fast_mix() by using simpler arguments
- siphash: use one source of truth for siphash permutations
- random: use symbolic constants for crng_init states
- random: avoid initializing twice in credit race
- random: move initialization out of reseeding hot path
- random: remove ratelimiting for in-kernel unseeded randomness
- random: use proper jiffies comparison macro
- random: handle latent entropy and command line from random_init()
- random: credit architectural init the exact amount
- random: use static branch for crng_ready()
- random: remove extern from functions in header
- random: use proper return types on get_random_{int,long}_wait()
- random: make consistent use of buf and len
- random: move initialization functions out of hot pages
- random: move randomize_page() into mm where it belongs
- random: unify batched entropy implementations
- random: convert to using fops->read_iter()
- random: convert to using fops->write_iter()
- random: wire up fops->splice_{read,write}_iter()
- random: check for signals after page of pool writes
- Revert "random: use static branch for crng_ready()"
- crypto: drbg - always seeded with SP800-90B compliant noise source
- crypto: drbg - prepare for more fine-grained tracking of seeding state
- crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
- crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
- crypto: drbg - always try to free Jitter RNG instance
- crypto: drbg - make reseeding from get_random_bytes() synchronous
- random: avoid checking crng_ready() twice in random_init()
- random: mark bootloader randomness code as __init
- random: account for arch randomness in bits
- powerpc/kasan: Silence KASAN warnings in __get_wchan()
- ASoC: nau8822: Add operation for internal PLL off and on
- dma-debug: make things less spammy under memory pressure
- ASoC: cs42l52: Fix TLV scales for mixer controls
- ASoC: cs35l36: Update digital volume TLV
- ASoC: cs53l30: Correct number of volume levels on SX controls
- ASoC: cs42l52: Correct TLV for Bypass Volume
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
- ASoC: wm8962: Fix suspend while playing music
- ASoC: es8328: Fix event generation for deemphasis control
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
- scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
- scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd
completion
- scsi: ipr: Fix missing/incorrect resource cleanup in error case
- scsi: pmcraid: Fix missing resource cleanup in error case
- ALSA: hda/realtek - Add HW8326 support
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration
failed
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
- ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
- net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface
netdev[napi]_alloc_frag
- random: credit cpu and bootloader seeds by default
- pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
- clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
- i40e: Fix adding ADQ filter to TC0
- i40e: Fix calculating the number of queue pairs
- i40e: Fix call trace in setup_tx_descriptors
- tty: goldfish: Fix free_irq() on remove
- misc: atmel-ssc: Fix IRQ check in ssc_probe
- mlxsw: spectrum_cnt: Reorder counter pools
- net: bgmac: Fix an erroneous kfree() in bgmac_remove()
- arm64: ftrace: fix branch range checks
- certs/blacklist_hashes.c: fix const confusion in certs blacklist
- faddr2line: Fix overlapping text section failures, the sequel
- irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
- irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions
- irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
- i2c: designware: Use standard optional ref clock implementation
- comedi: vmk80xx: fix expression for tx buffer size
- USB: serial: option: add support for Cinterion MV31 with new baseline
- USB: serial: io_ti: add Agilent E5805A support
- usb: dwc2: Fix memory leak in dwc2_hcd_init
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
- serial: 8250: Store to lsr_save_flags after lsr read
- dm mirror log: round up region bitmap size to BITS_PER_LONG
- ext4: fix bug_on ext4_mb_use_inode_pa
- ext4: make variable "count" signed
- ext4: add reserved GDT blocks check
- ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine
- virtio-pci: Remove wrong address verification in vp_del_vqs()
- net/sched: act_police: more accurate MTU policing
- net: openvswitch: fix leak of nested actions
- arm64: kprobes: Use BRK instead of single-step when executing instructions
out-of-line
- RISC-V: fix barrier() use in <vdso/processor.h>
- riscv: Less inefficient gcc tishift helpers (and export their symbols)
- powerpc/mm: Switch obsolete dssall to .long
- Linux 5.4.200
* Focal update: v5.4.199 upstream stable release (LP: #1983150)
- Linux 5.4.199
* Focal update: v5.4.198 upstream stable release (LP: #1982409)
- binfmt_flat: do not stop relocating GOT entries prematurely on riscv
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
- USB: serial: option: add Quectel BG95 modem
- USB: new quirk for Dell Gen 2 devices
- perf/x86/intel: Fix event constraints for ICL
- ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
- ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
- ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
- btrfs: add "0x" prefix for unsupported optional features
- btrfs: repair super block num_devices automatically
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
- b43legacy: Fix assigning negative value to unsigned variable
- b43: Fix assigning negative value to unsigned variable
- ipw2x00: Fix potential NULL dereference in libipw_xmit()
- ipv6: fix locking issues with loops over idev->addr_list
- fbcon: Consistently protect deferred_takeover with console_lock()
- ACPICA: Avoid cache flush inside virtual machines
- drm/komeda: return early if drm_universal_plane_init() fails.
- ALSA: jack: Access input_dev under mutex
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA
direction
- tools/power turbostat: fix ICX DRAM power numbers
- drm/amd/pm: fix double free in si_parse_power_table()
- ath9k: fix QCA9561 PA bias level
- media: venus: hfi: avoid null dereference in deinit
- media: pci: cx23885: Fix the error handling in cx23885_initdev()
- media: cx25821: Fix the warning when removing the module
- md/bitmap: don't set sb values if can't pass sanity check
- mmc: jz4740: Apply DMA engine limits to maximum segment size
- scsi: megaraid: Fix error check return value of register_chrdev()
- drm/plane: Move range check for format_count earlier
- drm/amd/pm: fix the compile warning
- arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
- drm: msm: fix error check return value of irq_of_parse_and_map()
- ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
- net/mlx5: fs, delete the FTE when there are no rules attached to it
- ASoC: dapm: Don't fold register value changes into notifications
- mlxsw: spectrum_dcb: Do not warn about priority changes
- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver
- s390/preempt: disable __preempt_count_add() optimization for
PROFILE_ALL_BRANCHES
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode
- dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
- ipmi:ssif: Check for NULL msg when handling events and messages
- ipmi: Fix pr_fmt to avoid compilation issues
- rtlwifi: Use pr_warn instead of WARN_ONCE
- media: coda: limit frame interval enumeration to supported encoder frame
sizes
- media: cec-adap.c: fix is_configuring state
- openrisc: start CPU timer early in boot
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
- ASoC: rt5645: Fix errorenous cleanup order
- nbd: Fix hung on disconnect request if socket is closed before
- net: phy: micrel: Allow probing without .driver_data
- media: exynos4-is: Fix compile warning
- ASoC: max98357a: remove dependency on GPIOLIB
- rxrpc: Return an error to sendmsg if call failed
- eth: tg3: silence the GCC 12 array-bounds warning
- selftests/bpf: fix btf_dump/btf_dump due to recent clang change
- IB/rdmavt: add missing locks in rvt_ruc_loopback
- ARM: dts: ox820: align interrupt controller node name with dtschema
- PM / devfreq: rk3399_dmc: Disable edev on remove()
- fs: jfs: fix possible NULL pointer dereference in dbFree()
- ARM: OMAP1: clock: Fix UART rate reporting algorithm
- powerpc/fadump: Fix fadump to work with a different endian capture kernel
- fat: add ratelimit to fat*_ent_bread()
- ARM: versatile: Add missing of_node_put in dcscb_init
- ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
- ARM: hisi: Add missing of_node_put after of_find_compatible_node
- PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
- powerpc/xics: fix refcount leak in icp_opal_init()
- powerpc/powernv: fix missing of_node_put in uv_init()
- macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
- RDMA/hfi1: Prevent panic when SDMA is disabled
- drm: fix EDID struct for old ARM OABI format
- ath9k: fix ar9003_get_eepmisc
- drm/edid: fix invalid EDID extension block filtering
- drm/bridge: adv7511: clean up CEC adapter when probe fails
- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
- x86/delay: Fix the wrong asm constraint in delay_loop()
- drm/mediatek: Fix mtk_cec_mask()
- drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
- drm/vc4: txp: Force alpha to be 0xff if it's disabled
- bpf: Fix excessive memory allocation in stack_map_alloc()
- nl80211: show SSID for P2P_GO interfaces
- drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
- drm: mali-dp: potential dereference of null pointer
- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
- NFC: NULL out the dev->rfkill to prevent UAF
- efi: Add missing prototype for efi_capsule_setup_info
- drbd: fix duplicate array initializer
- HID: hid-led: fix maximum brightness for Dream Cheeky
- HID: elan: Fix potential double free in elan_input_configured
- drm/bridge: Fix error handling in analogix_dp_probe
- sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
- spi: img-spfi: Fix pm_runtime_get_sync() error checking
- cpufreq: Fix possible race in cpufreq online error path
- ath9k_htc: fix potential out of bounds access with invalid
rxstatus->rs_keyix
- inotify: show inotify mask flags in proc fdinfo
- fsnotify: fix wrong lockdep annotations
- of: overlay: do not break notify on NOTIFY_{OK|STOP}
- scsi: ufs: core: Exclude UECxx from SFR dump list
- x86/pm: Fix false positive kmemleak report in msr_build_context()
- x86/speculation: Add missing prototype for unpriv_ebpf_notify()
- ASoC: rk3328: fix disabling mclk on pclk probe failure
- perf tools: Add missing headers needed by util/data.h
- drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free
during pm runtime resume
- drm/msm/dsi: fix error checks and return values for DSI xmit functions
- drm/msm/hdmi: check return value after calling
platform_get_resource_byname()
- drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
- virtio_blk: fix the discard_granularity and discard_alignment queue limits
- x86: Fix return value of __setup handlers
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler
- regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
- drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is
detected
- drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is
detected
- drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
- media: uvcvideo: Fix missing check to determine if element is found in list
- iomap: iomap_write_failed fix
- Revert "cpufreq: Fix possible race in cpufreq online error path"
- perf/amd/ibs: Use interrupt regs ip for stack unwinding
- ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
- scripts/faddr2line: Fix overlapping text section failures
- media: aspeed: Fix an error handling path in aspeed_video_probe()
- media: st-delta: Fix PM disable depth imbalance in delta_probe
- media: exynos4-is: Change clk_disable to clk_disable_unprepare
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
- media: vsp1: Fix offset calculation for plane cropping
- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
- m68k: math-emu: Fix dependencies of math emulation support
- sctp: read sk->sk_bound_dev_if once in sctp_rcv()
- media: ov7670: remove ov7670_power_off from ov7670_remove
- ext4: reject the 'commit' option on ext2 filesystems
- drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
- thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
- ASoC: wm2000: fix missing clk_disable_unprepare() on error in
wm2000_anc_transition()
- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
- rxrpc: Fix listen() setting the bar too high for the prealloc rings
- rxrpc: Don't try to resend the request if we're receiving the reply
- rxrpc: Fix overlapping ACK accounting
- rxrpc: Don't let ack.previousPacket regress
- rxrpc: Fix decision on when to generate an IDLE ACK
- net/smc: postpone sk_refcnt increment in connect()
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
- ARM: dts: suniv: F1C100: fix watchdog compatible
- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
- PCI: cadence: Fix find_first_zero_bit() limit
- PCI: rockchip: Fix find_first_zero_bit() limit
- KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
- can: xilinx_can: mark bit timing constants as const
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names
- misc: ocxl: fix possible double free in ocxl_file_register_afu
- crypto: marvell/cesa - ECB does not IV
- arm: mediatek: select arch timer for mt7629
- powerpc/fadump: fix PT_LOAD segment for boot memory area
- mfd: ipaq-micro: Fix error check return value of platform_get_irq()
- scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
- firmware: arm_scmi: Fix list protocols enumeration in the base protocol
- nvdimm: Allow overwrite in the presence of disabled dimms
- pinctrl: mvebu: Fix irq_of_parse_and_map() return value
- drivers/base/node.c: fix compaction sysfs file leak
- dax: fix cache flush on PMD-mapped pages
- powerpc/8xx: export 'cpm_setbrg' for modules
- powerpc/idle: Fix return value of __setup() handler
- powerpc/4xx/cpm: Fix return value of __setup() handler
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net
- ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
- PCI: imx6: Fix PERST# start-up sequence
- tty: fix deadlock caused by calling printk() under tty_port->lock
- crypto: cryptd - Protect per-CPU resource by disabling BH.
- Input: sparcspkr - fix refcount leak in bbc_beep_probe
- powerpc/64: Only WARN if __pa()/__va() called with bad addresses
- powerpc/perf: Fix the threshold compare group constraint for power9
- macintosh: via-pmu and via-cuda need RTC_LIB
- powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
- mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
- mailbox: forward the hrtimer if not queued and under a lock
- RDMA/hfi1: Prevent use of lock before it is initialized
- Input: stmfts - do not leave device disabled in stmfts_input_open
- f2fs: fix dereference of stale list iterator after loop body
- iommu/mediatek: Add list_del in mtk_iommu_remove
- i2c: at91: use dma safe buffers
- i2c: at91: Initialize dma_buf in at91_twi_xfer()
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors
- NFS: Do not report flush errors in nfs_write_end()
- NFS: Don't report errors from nfs_pageio_complete() more than once
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
- dmaengine: stm32-mdma: remove GISR1 register
- iommu/amd: Increase timeout waiting for GA log enablement
- perf c2c: Use stdio interface if slang is not supported
- perf jevents: Fix event syntax error caused by ExtSel
- f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
- f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
- f2fs: fix to clear dirty inode in f2fs_evict_inode()
- f2fs: fix deadloop in foreground GC
- f2fs: don't need inode lock for system hidden quota
- f2fs: fix fallocate to use file_modified to update permissions consistently
- wifi: mac80211: fix use-after-free in chanctx code
- iwlwifi: mvm: fix assert 1F04 upon reconfig
- fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped
pages
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs
- bfq: Split shared queues on move between cgroups
- bfq: Update cgroup information before merging bio
- bfq: Track whether bfq_group is still online
- ext4: fix use-after-free in ext4_rename_dir_prepare
- ext4: fix warning in ext4_handle_inode_extension
- ext4: fix bug_on in ext4_writepages
- ext4: verify dir block before splitting it
- ext4: avoid cycles in directory h-tree
- ACPI: property: Release subnode properties with data nodes
- tracing: Fix potential double free in create_var_ref()
- PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
- PCI: qcom: Fix runtime PM imbalance on probe errors
- PCI: qcom: Fix unbalanced PHY init on probe errors
- mm, compaction: fast_find_migrateblock() should return pfn in the target
zone
- dlm: fix plock invalid read
- dlm: fix missing lkb refcount handling
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
- scsi: dc395x: Fix a missing check on list iterator
- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
- drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
- drm/nouveau/clk: Fix an incorrect NULL check on list iterator
- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
- md: fix an incorrect NULL check in does_sb_need_changing
- md: fix an incorrect NULL check in md_reload_sb
- mtd: cfi_cmdset_0002: Move and rename
chip_check/chip_ready/chip_good_for_write
- media: coda: Fix reported H264 profile
- media: coda: Add more H264 levels for CODA960
- Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
- RDMA/hfi1: Fix potential integer multiplication overflow errors
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
A38x, A39x
- irqchip: irq-xtensa-mx: fix initial IRQ affinity
- mac80211: upgrade passive scan to active scan on DFS channels after beacon
rx
- um: chan_user: Fix winch_tramp() return value
- um: Fix out-of-bounds read in LDT setup
- iommu/msm: Fix an incorrect NULL check on list iterator
- nodemask.h: fix compilation error with GCC12
- hugetlb: fix huge_pmd_unshare address update
- rtl818x: Prevent using not initialized queues
- ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
- carl9170: tx: fix an incorrect use of list iterator
- serial: pch: don't overwrite xmit->buf[0] by x_char
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
- gma500: fix an incorrect NULL check on list iterator
- arm64: dts: qcom: ipq8074: fix the sleep clock frequency
- phy: qcom-qmp: fix struct clk leak on probe errors
- ARM: pxa: maybe fix gpio lookup tables
- docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
- dt-bindings: gpio: altera: correct interrupt-cells
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline
- phy: qcom-qmp: fix reset-controller leak on probe errors
- Kconfig: add config option for asm goto w/ outputs
- RDMA/rxe: Generate a completion for unsupported/invalid opcode
- MIPS: IP27: Remove incorrect `cpu_has_fpu' override
- bfq: Avoid merging queues with different parents
- bfq: Drop pointless unlock-lock pair
- bfq: Remove pointless bfq_init_rq() calls
- bfq: Get rid of __bio_blkcg() usage
- bfq: Make sure bfqg for which we are queueing requests is online
- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
- md: bcache: check the return value of kzalloc() in detached_dev_do_request()
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
- staging: greybus: codecs: fix type confusion of list iterator variable
- iio: adc: ad7124: Remove shift from scan_type
- tty: goldfish: Use tty_port_destroy() to destroy port
- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
and ida_simple_get
- usb: usbip: fix a refcount leak in stub_probe()
- usb: usbip: add missing device lock on tweak configuration cmd
- USB: storage: karma: fix rio_karma_init return
- usb: musb: Fix missing of_node_put() in omap2430_probe
- staging: fieldbus: Fix the error handling path in
anybuss_host_common_probe()
- pwm: lp3943: Fix duty calculation in case period was clamped
- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
- firmware: stratix10-svc: fix a missing check on list iterator
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
- iio: adc: sc27xx: fix read big scale voltage not right
- iio: adc: sc27xx: Fine tune the scale calibration values
- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
- serial: sifive: Report actual baud base rather than fixed 115200
- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
- soc: rockchip: Fix refcount leak in rockchip_grf_init
- clocksource/drivers/riscv: Events are stopped during CPU suspend
- rtc: mt6397: check return value after calling platform_get_resource()
- serial: meson: acquire port->lock in startup()
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
- serial: digicolor-usart: Don't allow CS5-6
- serial: rda-uart: Don't allow CS5-6
- serial: txx9: Don't allow CS5-6
- serial: sh-sci: Don't allow CS5-6
- serial: sifive: Sanitize CSIZE and c_iflag
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
- serial: stm32-usart: Correct CSIZE, bits, and parity
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
- bus: ti-sysc: Fix warnings for unbind for serial
- driver: base: fix UAF when driver_attach failed
- driver core: fix deadlock in __device_attach
- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
- modpost: fix removing numeric suffixes
- jffs2: fix memory leak in jffs2_do_fill_super
- ubi: ubi_create_volume: Fix use-after-free when volume creation failed
- nfp: only report pause frame configuration for physical device
- net/mlx5: Don't use already freed action pointer
- net/mlx5e: Update netdev features after changing XDP state
- net: sched: add barrier to fix packet stuck problem for lockless qdisc
- tcp: tcp_rtx_synack() can be called from process context
- afs: Fix infinite loop found by xfstest generic/676
- tipc: check attribute length for bearer name
- perf c2c: Fix sorting in percent_rmt_hitm_cmp()
- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
- tracing: Fix sleeping function called from invalid context on RT kernel
- tracing: Avoid adding tracer option before update_tracer_options
- f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
- i2c: cadence: Increase timeout per message if necessary
- m68knommu: set ZERO_PAGE() to the allocated zeroed page
- m68knommu: fix undefined reference to `_init_sp'
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
- NFSv4: Don't hold the layoutget locks across multiple RPC calls
- video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
- xprtrdma: treat all calls not a bcall when bc_serv is NULL
- netfilter: nat: really support inet nat without l3 address
- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
- netfilter: nf_tables: memleak flow rule from commit path
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
- af_unix: Fix a data-race in unix_dgram_peer_wake_me().
- bpf, arm64: Clear prog->jited_len along prog->jited
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
- SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
- net: mdio: unexport __init-annotated mdio_bus_init()
- net: xfrm: unexport __init-annotated xfrm4_protocol_init()
- net: ipv6: unexport __init-annotated seg6_hmac_init()
- net/mlx5: Rearm the FW tracer after each tracer event
- net/mlx5: fs, fail conflicting actions
- ip_gre: test csum_start instead of transport header
- net: altera: Fix refcount leak in altera_tse_mdio_create
- drm: imx: fix compiler warning with gcc-12
- iio: dummy: iio_simple_dummy: check the return value of kstrdup()
- iio: st_sensors: Add a local lock for protecting odr
- lkdtm/usercopy: Expand size of "out of frame" object
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
- tty: Fix a possible resource leak in icom_probe
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
- USB: host: isp116x: check return value after calling platform_get_resource()
- drivers: tty: serial: Fix deadlock in sa1100_set_termios()
- drivers: usb: host: Fix deadlock in oxu_bus_suspend()
- USB: hcd-pci: Fully suspend across freeze/thaw cycle
- usb: dwc2: gadget: don't reset gadget's driver->bus
- misc: rtsx: set NULL intfdata when probe fails
- extcon: Modify extcon device to be created after driver data is set
- clocksource/drivers/sp804: Avoid error on multiple instances
- staging: rtl8712: fix uninit-value in usb_read8() and friends
- staging: rtl8712: fix uninit-value in r871xu_drv_init()
- serial: msm_serial: disable interrupts in __msm_console_write()
- kernfs: Separate kernfs_pr_cont_buf and rename_lock.
- watchdog: wdat_wdt: Stop watchdog when rebooting the system
- md: protect md_unregister_thread from reentrancy
- scsi: myrb: Fix up null pointer access on myrb_cleanup()
- ceph: allow ceph.dir.rctime xattr to be updatable
- drm/radeon: fix a possible null pointer dereference
- modpost: fix undefined behavior of is_arm_mapping_symbol()
- x86/cpu: Elide KCSAN for cpu_has() and friends
- nbd: call genl_unregister_family() first in nbd_cleanup()
- nbd: fix race between nbd_alloc_config() and module removal
- cifs: version operations for smb20 unneeded when legacy support disabled
- nodemask: Fix return values to be unsigned
- vringh: Fix loop descriptors check in the indirect cases
- scripts/gdb: change kernel config dumping method
- ALSA: hda/conexant - Fix loopback issue with CX20632
- cifs: return errors during session setup during reconnects
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
- mmc: block: Fix CQE recovery reset success
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
- ixgbe: fix bcast packets Rx on VF after promisc removal
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace
- md/raid0: Ignore RAID0 layout if the second zone has only one device
- mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
- Linux 5.4.198
* Focal update: v5.4.197 upstream stable release (LP: #1981758)
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
- staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
- Input: goodix - fix spurious key release events
- tcp: change source port randomizarion at connect() time
- secure_seq: use the 64 bits of the siphash for port offset calculation
- media: vim2m: Register video device after setting up internals
- media: vim2m: initialize the media device earlier
- ACPI: sysfs: Make sparse happy about address space in use
- ACPI: sysfs: Fix BERT error region memory mapping
- pinctrl: sunxi: fix f1c100s uart2 function
- net: af_key: check encryption module availability consistency
- net: ftgmac100: Disable hardware checksum on AST2600
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI
controllers
- assoc_array: Fix BUG_ON during garbage collect
- cfg80211: set custom regdomain after wiphy registration
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
- exec: Force single empty string when argv is empty
- netfilter: conntrack: re-fetch conntrack after insertion
- crypto: ecrdsa - Fix incorrect use of vli_cmp
- zsmalloc: fix races between asynchronous zspage free and page migration
- dm integrity: fix error code in dm_integrity_ctr()
- dm crypt: make printing of the key constant-time
- dm stats: add cond_resched when looping over entries
- dm verity: set DM_TARGET_IMMUTABLE feature flag
- raid5: introduce MD_BROKEN
- HID: multitouch: Add support for Google Whiskers Touchpad
- tpm: Fix buffer access in tpm2_get_tpm_pt()
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
- docs: submitting-patches: Fix crossref to 'The canonical patch format'
- NFS: Memory allocation failures are not server fatal errors
- NFSD: Fix possible sleep during nfsd4_release_lockowner()
- bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
- Linux 5.4.197
* Focal update: v5.4.196 upstream stable release (LP: #1981111)
- x86/xen: Make the boot CPU idle task reliable
- x86/xen: Make the secondary CPU idle tasks reliable
- rtc: fix use-after-free on device removal
- um: Cleanup syscall_handler_t definition/cast, fix warning
- Input: add bounds checking to input_set_capability()
- Input: stmfts - fix reference leak in stmfts_input_open
- crypto: stm32 - fix reference leak in stm32_crc_remove
- crypto: x86/chacha20 - Avoid spurious jumps to other functions
- ALSA: hda/realtek: Enable headset mic on Lenovo P360
- nvme-multipath: fix hang when disk goes live over reconnect
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms
- MIPS: lantiq: check the return value of kzalloc()
- drbd: remove usage of list iterator variable after loop
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
- nilfs2: fix lockdep warnings in page operations for btree nodes
- nilfs2: fix lockdep warnings during disk space reclamation
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
- SUNRPC: Clean up scheduling of autoclose
- SUNRPC: Prevent immediate close+reconnect
- SUNRPC: Don't call connect() more than once on a TCP socket
- ALSA: wavefront: Proper check of get_user() error
- perf: Fix sys_perf_event_open() race against self
- Fix double fget() in vhost_net_set_backend()
- PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
- KVM: x86/mmu: Update number of zapped pages even if page list is stable
- crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
- ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi
- ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group
- net: macb: Increment rx bd head after allocating skb and buffer
- net/sched: act_pedit: sanitize shift argument before usage
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
- ice: fix possible under reporting of ethtool Tx and Rx statistics
- clk: at91: generated: consider range when calculating best rate
- net/qla3xxx: Fix a test in ql_reset_work()
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
- net/mlx5e: Properly block LRO when XDP is enabled
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
- igb: skip phy status check where unavailable
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
- gpio: gpio-vf610: do not touch other bits when set the target bit
- gpio: mvebu/pwm: Refuse requests with inverted polarity
- perf bench numa: Address compiler error on s390
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands
- mac80211: fix rx reordering with non explicit / psmp ack policy
- selftests: add ping test with ping_group_range tuned
- ethernet: tulip: fix missing pci_disable_device() on error in
tulip_init_one()
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
- net: atlantic: verify hw_head_ lies within TX buffer ring
- Input: ili210x - fix reset timing
- block: return ELEVATOR_DISCARD_MERGE if possible
- net: stmmac: disable Split Header (SPH) for Intel platforms
- firmware_loader: use kernel credentials when reading firmware
- ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk
- Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
- x86/xen: fix booting 32-bit pv guest
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe()
- afs: Fix afs_getattr() to refetch file status if callback break occurred
- Linux 5.4.196
* CVE-2022-36946
- netfilter: nf_queue: do not allow packet truncation below transport header
offset
* CVE-2021-33655
- fbcon: Disallow setting font bigger than screen size
- fbcon: Prevent that screen size is smaller than font size
- fbmem: Check virtual screen sizes in fb_set_var()
[ Ubuntu: 5.4.0-125.141 ]
* focal/linux: 5.4.0-125.141 -proposed tracker (LP: #1983947)
* nbd: requests can become stuck when disconnecting from server with qemu-nbd
(LP: #1896350)
- blk-mq: blk-mq: provide forced completion method
- blk-mq: move failure injection out of blk_mq_complete_request
- nbd: don't handle response without a corresponding request message
- nbd: make sure request completion won't concurrent
- nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
- nbd: fix io hung while disconnecting device
* CVE-2021-33656
- vt: drop old FONT ioctls
* CVE-2021-33061
- ixgbe: add the ability for the PF to disable VF link state
- ixgbe: add improvement for MDD response functionality
- ixgbevf: add disable link state
[ Ubuntu: 5.4.0-124.140 ]
* CVE-2022-2586
- SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
- SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
* CVE-2022-2588
- SAUCE: net_sched: cls_route: remove from list when handle is 0
* CVE-2022-34918
- netfilter: nf_tables: stricter validation of element data
[ Ubuntu: 5.4.0-123.139 ]
* focal/linux: 5.4.0-123.139 -proposed tracker (LP: #1981284)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.07.11)
* Hairpin traffic does not work with centralized NAT gw (LP: #1967856)
- net: openvswitch: fix misuse of the cached connection on tuple changes
* [UBUNTU 20.04] Include patches to avoid self-detected stall with Secure
Execution (LP: #1979296)
- KVM: s390: pv: add macros for UVC CC values
- KVM: s390: pv: avoid stalls when making pages secure
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
* Focal update: v5.4.195 upstream stable release (LP: #1980407)
- batman-adv: Don't skb_split skbuffs with frag_list
- hwmon: (tmp401) Add OF device ID table
- mac80211: Reset MBSSID parameters upon connection
- net: Fix features skip in for_each_netdev_feature()
- ipv4: drop dst in multicast routing path
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name()
- netlink: do not reset transport header in netlink_recvmsg()
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
- dim: initialize all struct fields
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY
- s390/ctcm: fix variable dereferenced before check
- s390/ctcm: fix potential memory leak
- s390/lcs: fix variable dereferenced before check
- net/sched: act_pedit: really ensure the skb is writable
- net/smc: non blocking recvmsg() return -EAGAIN when no data and
signal_pending
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
- gfs2: Fix filesystem block deallocation for short writes
- hwmon: (f71882fg) Fix negative temperature
- ASoC: max98090: Reject invalid values in custom control put()
- ASoC: max98090: Generate notifications on changes for custom control
- ASoC: ops: Validate input values in snd_soc_put_volsw_range()
- s390: disable -Warray-bounds
- net: emaclite: Don't advertise 1000BASE-T and do auto negotiation
- tcp: resalt the secret every 10 seconds
- tty: n_gsm: fix mux activation issues in gsm_config()
- usb: cdc-wdm: fix reading stuck on device close
- usb: typec: tcpci: Don't skip cleanup in .remove() on error
- USB: serial: pl2303: add device id for HP LM930 Display
- USB: serial: qcserial: add support for Sierra Wireless EM7590
- USB: serial: option: add Fibocom L610 modem
- USB: serial: option: add Fibocom MA510 modem
- slimbus: qcom: Fix IRQ check in qcom_slim_probe
- serial: 8250_mtk: Fix UART_EFR register address
- serial: 8250_mtk: Fix register address for XON/XOFF character
- drm/nouveau/tegra: Stop using iommu_present()
- i40e: i40e_main: fix a missing check on list iterator
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
- drm/vmwgfx: Initialize drm_mode_fb_cmd2
- MIPS: fix build with gcc-12
- net: phy: Fix race condition on link status change
- arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map
- ping: fix address binding wrt vrf
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
- Linux 5.4.195
* Focal update: v5.4.194 upstream stable release (LP: #1980399)
- MIPS: Use address-of operator on section symbols
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version,
environment} types
- drm/i915: Cast remain to unsigned long in eb_relocate_vma
- nfp: bpf: silence bitwise vs. logical OR warning
- can: grcan: grcan_probe(): fix broken system id check for errata workaround
needs
- can: grcan: only use the NAPI poll budget for RX
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL
- [Config] updateconfigs for ARCH_HAS_HOLES_MEMORYMODEL
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
- x86/asm: Allow to pass macros to __ASM_FORM()
- x86: xen: kvm: Gather the definition of emulate prefixes
- x86: xen: insn: Decode Xen and KVM emulate-prefix signature
- x86: kprobes: Prohibit probing on instruction which has emulate prefix
- KVM: x86/svm: Account for family 17h event renumberings in
amd_pmc_perf_hw_id
- Bluetooth: Fix the creation of hdev->name
- mm: fix missing cache flush for all tail pages of compound page
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
__mcopy_atomic()
- Linux 5.4.194
* Focal update: v5.4.193 upstream stable release (LP: #1979566)
- MIPS: Fix CP0 counter erratum detection for R4k CPUs
- parisc: Merge model and model name into one line in /proc/cpuinfo
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
- Revert "SUNRPC: attempt AF_LOCAL connect on setup"
- firewire: fix potential uaf in outbound_phy_packet_callback()
- firewire: remove check of list iterator against head past the loop body
- firewire: core: extend card->lock in fw_core_handle_bus_reset
- ACPICA: Always create namespace nodes using acpi_ns_create_node()
- genirq: Synchronize interrupt thread startup
- ASoC: da7219: Fix change notifications for tone generator frequency
- ASoC: wm8958: Fix change notifications for DSP controls
- ASoC: meson: Fix event generation for G12A tohdmi mux
- s390/dasd: fix data corruption for ESE devices
- s390/dasd: prevent double format of tracks for ESE devices
- s390/dasd: Fix read for ESE with blksize < 4k
- s390/dasd: Fix read inconsistency for ESE DASD devices
- can: grcan: grcan_close(): fix deadlock
- can: grcan: use ofdev->dev when allocating DMA memory
- nfc: replace improper check device_is_registered() in netlink related
functions
- NFC: netlink: fix sleep in atomic bug when firmware download timeout
- hwmon: (adt7470) Fix warning on module removal
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback
- RDMA/siw: Fix a condition race issue in MPA request processing
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()
- net: stmmac: dwmac-sun8i: add missing of_node_put() in
sun8i_dwmac_register_mdio_mux()
- net: emaclite: Add error handling for of_address_to_resource()
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is
operational
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
- smsc911x: allow using IRQ0
- btrfs: always log symlinks in full mode
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
- drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu
- NFSv4: Don't invalidate inode attributes on delegation return
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised
- net: ipv6: ensure we call ipv6_mc_down() at most once
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
- mm: fix unexpected zeroed page mapping with zram swap
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
- ALSA: pcm: Fix races among concurrent read/write and buffer changes
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
- ALSA: pcm: Fix races among concurrent prealloc proc writes
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- tcp: make sure treq->af_specific is initialized
- dm: fix mempool NULL pointer race when completing IO
- dm: interlock pending dm_io and dm_wait_for_bios_completion
- PCI: aardvark: Clear all MSIs at setup
- PCI: aardvark: Fix reading MSI interrupt number
- mmc: rtsx: add 74 Clocks in power on flow
- Linux 5.4.193
* CVE-2022-1679
- SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
* CVE-2022-28893
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
- SUNRPC: Don't leak sockets in xs_local_connect()
* CVE-2022-1734
- nfc: nfcmrvl: main: reorder destructive operations in
nfcmrvl_nci_unregister_dev to avoid bugs
* CVE-2022-1652
- floppy: use a statically allocated error counter
-- Wen-chien Jesse Sung <email address hidden> Tue, 06 Sep 2022 12:19:55 +0800
-
linux-iot (5.4.0-1003.5) focal; urgency=medium
* focal/linux-iot: 5.4.0-1003.5 -proposed tracker (LP: #1981441)
* Focal update: upstream stable patchset v5.4.192 (LP: #1979014)
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- [Config] updateconfigs for NVM, NVM_PBLK
* Enable Ethernet controller : Aquantia Corp. Device [1d6a:14c0]
(LP: #1980371)
- net: aquantia: PTP skeleton declarations and callbacks
- net: aquantia: add support for Phy access
- net: atlantic: update company name in the driver description
- net: atlantic: add A2 device IDs
- net: atlantic: add defines for 10M and EEE 100M link mode
- net: atlantic: add hw_soft_reset, hw_prepare to hw_ops
- net: atlantic: move IS_CHIP_FEATURE to aq_hw.h
- net: atlantic: A2 driver-firmware interface
- net: atlantic: minimal A2 HW bindings required for fw_ops
- net: atlantic: minimal A2 fw_ops
- net: atlantic: A2 hw_ops skeleton
- net: atlantic: HW bindings for A2 RFP
- net: atlantic: add A2 RPF hw_ops
- net: atlantic: HW bindings for basic A2 init/deinit hw_ops
- net: atlantic: common functions needed for basic A2 init/deinit hw_ops
- net: aquantia: add basic ptp_clock callbacks
- net: aquantia: add PTP rings infrastructure
- net: atlantic: basic A2 init/deinit hw_ops
- net: atlantic: A2 ingress / egress hw configuration
- atlantic: Increase delay for fw transactions
[ Ubuntu: 5.4.0-122.138 ]
* focal/linux: 5.4.0-122.138 -proposed tracker (LP: #1979489)
* Remove SAUCE patches from test_vxlan_under_vrf.sh in net of
ubuntu_kernel_selftests (LP: #1975691)
- Revert "UBUNTU: SAUCE: selftests: net: Don't fail test_vxlan_under_vrf on
xfail"
- Revert "UBUNTU: SAUCE: selftests: net: Make test for VXLAN underlay in non-
default VRF an expected failure"
* Enable Asus USB-BT500 Bluetooth dongle(0b05:190e) (LP: #1976613)
- Bluetooth: btusb: Add flag to define wideband speech capability
- Bluetooth: btrtl: Add support for RTL8761B
- Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
* [UBUNTU 20.04] rcu stalls with many storage key guests (LP: #1975582)
- s390/gmap: voluntarily schedule during key setting
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
* Ubuntu 5.4.0-117.132-generic 5.4.189 has BUG: kernel NULL pointer
dereference, address: 0000000000000034 (LP: #1978719)
- mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
* Focal update: upstream stable patchset v5.4.192 (LP: #1979014)
- floppy: disable FDRAWCMD by default
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- hamradio: defer 6pack kfree after unregister_netdev
- hamradio: remove needs_free_netdev to avoid UAF
- lightnvm: disable the subsystem
- [Config] updateconfigs for NVM, NVM_PBLK
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host
- USB: quirks: add a Realtek card reader
- USB: quirks: add STRING quirk for VCOM device
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
- xhci: stop polling roothubs after shutdown
- xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
- iio: dac: ad5592r: Fix the missing return value.
- iio: dac: ad5446: Fix read_raw not returning set value
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
- usb: misc: fix improper handling of refcount in uss720_probe()
- usb: typec: ucsi: Fix role swapping
- usb: gadget: uvc: Fix crash when encoding data for usb request
- usb: gadget: configfs: clear deactivation flag in
configfs_composite_unbind()
- usb: dwc3: core: Fix tx/rx threshold settings
- usb: dwc3: gadget: Return proper request status
- serial: imx: fix overrun interrupts in DMA mode
- serial: 8250: Also set sticky MCR bits in console restoration
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
- arch_topology: Do not set llc_sibling if llc_id is invalid
- hex2bin: make the function hex_to_bin constant-time
- hex2bin: fix access beyond string end
- video: fbdev: udlfb: properly check endpoint type
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
- mtd: rawnand: fix ecc parameters for mt7622
- USB: Fix xhci event ring dequeue pointer ERDP update issue
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
- ARM: dts: Fix mmc order for omap3-gta04
- ARM: dts: am3517-evm: Fix misc pinmuxing
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
- ipvs: correctly print the memory size of ip_vs_conn_tab
- mtd: rawnand: Fix return value check of wait_for_completion_timeout
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt
hook
- tcp: md5: incorrect tcp_header_len for incoming connections
- tcp: ensure to use the most recently sent skb when filling the rate sample
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event
- ARM: dts: imx6ull-colibri: fix vqmmc regulator
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
- pinctrl: pistachio: fix use of irq_of_parse_and_map()
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
- net: hns3: add validity check for message data length
- net/smc: sync err code when tcp connection was refused
- ip_gre: Make o_seqno start from 0 in native mode
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
- clk: sunxi: sun9i-mmc: check return value after calling
platform_get_resource()
- net: bcmgenet: hide status block before TX timestamping
- net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
- drm/amd/display: Fix memory leak in dcn21_clock_source_create
- tls: Skip tls_append_frag on zero copy size
- bnx2x: fix napi API usage sequence
- ixgbe: ensure IPsec VF<->PF compatibility
- tcp: fix F-RTO may not work correctly when receiving DSACK
- ASoC: wm8731: Disable the regulator when probing fails
- ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
- cifs: destage any unwritten data to the server before calling
copychunk_write
- drivers: net: hippi: Fix deadlock in rr_close()
- net: ethernet: stmmac: fix write to sgmii_adapter_base
- x86/cpu: Load microcode during restore_processor_state()
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
- tty: n_gsm: fix malformed counter for out of frame data
- netfilter: nft_socket: only do sk lookups when indev is available
- tty: n_gsm: fix insufficient txframe size
- tty: n_gsm: fix missing explicit ldisc flush
- tty: n_gsm: fix wrong command retry handling
- tty: n_gsm: fix wrong command frame length field encoding
- tty: n_gsm: fix incorrect UA handling
- hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs
- mm, hugetlb: allow for "high" userspace addresses
- Linux 5.4.192
* CVE-2022-1789
- KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
* Focal update: v5.4.191 upstream stable release (LP: #1976116)
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
- mm: page_alloc: fix building error on -Werror=array-compare
- tracing: Dump stacktrace trigger to the corresponding instance
- gfs2: assign rgrp glock before compute_bitstructs
- tcp: fix race condition when creating child sockets from syncookies
- tcp: Fix potential use-after-free due to double kfree()
- ALSA: usb-audio: Clear MIDI port active flag after draining
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap
- dmaengine: mediatek:Fix PM usage reference leak of
mtk_uart_apdma_alloc_chan_resources
- igc: Fix infinite loop in release_swfw_sync
- igc: Fix BUG: scheduling while atomic
- rxrpc: Restore removed timer deletion
- net/smc: Fix sock leak when release after smc_shutdown()
- net/packet: fix packet_sock xmit return value checking
- net/sched: cls_u32: fix possible leak in u32_init_knode()
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using
netdev_master_upper_dev_get_rcu
- netlink: reset network and mac headers in netlink_dump()
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
- ARM: vexpress/spc: Avoid negative array index when !SMP
- reset: tegra-bpmp: Restore Handle errors in BPMP response
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be
negative
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the
constant
- vxlan: fix error return code in vxlan_fdb_append
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT
- mt76: Fix undefined behavior due to shift overflowing the constant
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
- drm/msm/mdp5: check the return of kzalloc()
- net: macb: Restart tx only if queue pointer is lagging
- scsi: qedi: Fix failed disconnect handling
- stat: fix inconsistency between struct stat and struct compat_stat
- EDAC/synopsys: Read the error count from the correct register
- oom_kill.c: futex: delay the OOM reaper to allow time for proper futex
cleanup
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading
- dma: at_xdmac: fix a missing check on list iterator
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
- KVM: PPC: Fix TCE handling for VFIO
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- powerpc/perf: Fix power9 event alternatives
- xtensa: patch_text: Fixup last cpu should be master
- xtensa: fix a7 clobbering in coprocessor context load/store
- openvswitch: fix OOB access in reserve_sfa_size()
- ASoC: soc-dapm: fix two incorrect uses of list iterator
- e1000e: Fix possible overflow in LTR decoding
- ARC: entry: fix syscall_trace_exit argument
- arm_pmu: Validate single/group leader events
- ext4: fix symlink file size not match to file content
- ext4: fix use-after-free in ext4_search_dir
- ext4, doc: fix incorrect h_reserved size
- ext4: fix overhead calculation to account for the reserved gdt blocks
- ext4: force overhead calculation if the s_overhead_cluster makes no sense
- jbd2: fix a potential race while discarding reserved buffers after an abort
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and
controller
- staging: ion: Prevent incorrect reference counting behavour
- block/compat_ioctl: fix range check in BLKGETSIZE
- Linux 5.4.191
* Focal update: v5.4.190 upstream stable release (LP: #1973085)
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
- net/sched: flower: fix parsing of ethertype following VLAN header
- veth: Ensure eth header is in skb's linear part
- gpiolib: acpi: use correct format characters
- mlxsw: i2c: Fix initialization error flow
- net/sched: fix initialization order when updating chain 0 head
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
- net/sched: taprio: Check if socket flags are valid
- cfg80211: hold bss_lock while updating nontrans_list
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
- sctp: Initialize daddr on peeled off socket
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
- nfc: nci: add flush_workqueue to prevent uaf
- cifs: potential buffer overflow in handling symlinks
- drm/amd: Add USBC connector ID
- drm/amd/display: fix audio format not updated after edid updated
- drm/amd/display: Update VTEM Infopacket definition
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS
- drm/amdkfd: Check for potential null return of kmalloc_array()
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
- scsi: target: tcmu: Fix possible page UAF
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
- gpu: ipu-v3: Fix dev_dbg frequency output
- regulator: wm8994: Add an off-on delay for WM8994 variant
- arm64: alternatives: mark patch_alternative() as `noinstr`
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
- drm/amd/display: Fix allocate_mst_payload assert on resume
- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
- scsi: mvsas: Add PCI ID of RocketRaid 2640
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
- drivers: net: slip: fix NPD bug in sl_tx_timeout()
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant
- mm, page_alloc: fix build_zonerefs_node()
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
- gcc-plugins: latent_entropy: use /dev/urandom
- ath9k: Properly clear TX status area before reporting to mac80211
- ath9k: Fix usage of driver-private space in tx_info
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
- btrfs: mark resumed async balance as writing
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
- ipv6: fix panic when forwarding a pkt with no in6 dev
- drm/amd/display: don't ignore alpha property on pre-multiplied mode
- genirq/affinity: Consider that CPUs on nodes can be unbalanced
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
- ARM: davinci: da850-evm: Avoid NULL pointer dereference
- dm integrity: fix memory corruption when tag_size is less than digest size
- smp: Fix offline cpu check in flush_smp_call_function_queue()
- i2c: pasemi: Wait for write xfers to finish
- dma-direct: avoid redundant memory sync for swiotlb
- ax25: add refcount in ax25_dev to avoid UAF bugs
- ax25: fix reference count leaks of ax25_dev
- ax25: fix UAF bugs of net_device caused by rebinding operation
- ax25: Fix refcount leaks caused by ax25_cb_del()
- ax25: fix UAF bug in ax25_send_control()
- ax25: fix NPD bug in ax25_disconnect
- ax25: Fix NULL pointer dereferences in ax25 timers
- ax25: Fix UAF bugs in ax25 timers
- Linux 5.4.190
[ Ubuntu: 5.4.0-121.137 ]
* focal/linux: 5.4.0-121.137 -proposed tracker (LP: #1978666)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.05.30)
* CVE-2022-28388
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
path
* test_vxlan_under_vrf.sh in net from ubuntu_kernel_selftests failed (Check VM
connectivity through VXLAN (underlay in the default VRF) [FAIL])
(LP: #1871015)
- selftests: net: test_vxlan_under_vrf: fix HV connectivity test
* [UBUNTU 20.04] CPU-MF: add extended counter set definitions for new IBM z16
(LP: #1974433)
- s390/cpumf: add new extended counter set for IBM z16
* [UBUNTU 20.04] KVM nesting support leaks too much memory, might result in
stalls during cleanup (LP: #1974017)
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead
* [UBUNTU 20.04] Null Pointer issue in nfs code running Ubuntu on IBM Z
(LP: #1968096)
- NFS: Fix up nfs_ctx_key_to_expire()
[ Ubuntu: 5.4.0-120.136 ]
* CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166
- cpu/speculation: Add prototype for cpu_show_srbds()
- x86/cpu: Add Jasper Lake to Intel family
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel
CPU family
- x86/cpu: Add another Alder Lake CPU to the Intel family
- Documentation: Add documentation for Processor MMIO Stale Data
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
- x86/speculation: Add a common function for MD_CLEAR mitigation update
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
- x86/speculation/srbds: Update SRBDS mitigation selection
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
- KVM: x86/speculation: Disable Fill buffer clear within guests
- x86/speculation/mmio: Print SMT warning
[ Ubuntu: 5.4.0-117.132 ]
* CVE-2022-1966
- netfilter: nf_tables: add nft_set_elem_expr_alloc()
- netfilter: nf_tables: disallow non-stateful expression in sets earlier
-- Wen-chien Jesse Sung <email address hidden> Tue, 12 Jul 2022 22:26:05 +0800
-
linux-iot (5.4.0-1002.4) focal; urgency=medium
* focal/linux-iot: 5.4.0-1002.4 -proposed tracker (LP: #1975448)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
[ Ubuntu: 5.4.0-115.129 ]
* CVE-2022-21499
- SAUCE: debug: Lock down kgdb
[ Ubuntu: 5.4.0-114.128 ]
* focal/linux: 5.4.0-114.128 -proposed tracker (LP: #1974391)
* 32 GT/s PCI link speeds reporting "Unknown speed" in sysfs (LP: #1970798)
- PCI: Add 32 GT/s decoding in some macros
- PCI: Add pci_speed_string()
- PCI: Use pci_speed_string() for all PCI/PCI-X/PCIe strings
- PCI: Add PCIE_LNKCAP2_SLS2SPEED() macro
* issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480)
- vsock: remove ratelimit unknown ioctl message
* config CONFIG_HISI_PMU for kunpeng920 (LP: #1956086)
- drivers/perf: hisi: Permit modular builds of HiSilicon uncore drivers
- [Config] CONFIG_HISI_PMU=m
* Focal update: v5.4.189 upstream stable release (LP: #1971497)
- swiotlb: fix info leak with DMA_FROM_DEVICE
- USB: serial: pl2303: add IBM device IDs
- USB: serial: simple: add Nokia phone driver
- netdevice: add the case if dev is NULL
- HID: logitech-dj: add new lightspeed receiver id
- xfrm: fix tunnel model fragmentation behavior
- virtio_console: break out of buf poll on remove
- ethernet: sun: Free the coherent when failing in probing
- spi: Fix invalid sgs value
- net:mcf8390: Use platform_get_irq() to get the interrupt
- spi: Fix erroneous sgs value with min_t()
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function
pfkey_register
- net: dsa: microchip: add spi_device_id tables
- iommu/iova: Improve 32-bit free space estimate
- tpm: fix reference counting for struct tpm_chip
- block: Add a helper to validate the block size
- virtio-blk: Use blk_validate_block_size() to validate block size
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
- xhci: fix runtime PM imbalance in USB2 resume
- xhci: make xhci_handshake timeout for xhci_reset() adjustable
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
- coresight: Fix TRCCONFIGR.QE sysfs interface
- iio: afe: rescale: use s64 for temporary scale calculations
- iio: inkern: apply consumer scale on IIO_VAL_INT cases
- iio: inkern: apply consumer scale when no channel scale is available
- iio: inkern: make a best effort on offset calculation
- greybus: svc: fix an error handling bug in gb_svc_hello()
- clk: uniphier: Fix fixed-rate initialization
- KEYS: fix length validation in keyctl_pkey_params_get_2()
- Documentation: add link to stable release candidate tree
- Documentation: update stable tree link
- HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
- SUNRPC: avoid race between mod_timer() and del_timer_sync()
- NFSD: prevent underflow in nfssvc_decode_writeargs()
- NFSD: prevent integer overflow on 32 bit systems
- f2fs: fix to unlock page correctly in error path of is_alive()
- f2fs: quota: fix loop condition at f2fs_quota_sync()
- f2fs: fix to do sanity check on .cp_pack_total_block_count
- pinctrl: samsung: drop pin banks references on error paths
- spi: mxic: Fix the transmit path
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
- jffs2: fix memory leak in jffs2_do_mount_fs
- jffs2: fix memory leak in jffs2_scan_medium
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
- mm: invalidate hwpoison page cache page in fault path
- mempolicy: mbind_range() set_policy() after vma_merge()
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
- qed: display VF trust config
- qed: validate and restrict untrusted VFs vlan promisc mode
- riscv: Fix fill_callchain return value
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
- ALSA: cs4236: fix an incorrect NULL check on list iterator
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
- mm,hwpoison: unmap poisoned page before invalidation
- mm/kmemleak: reset tag when compare object pointer
- drbd: fix potential silent data corruption
- powerpc/kvm: Fix kvm_use_magic_page
- udp: call udp_encap_enable for v6 sockets when enabling encap
- ACPI: properties: Consistently return -ENOENT if there are no more
references
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
- mailbox: tegra-hsp: Flush whole channel
- block: don't merge across cgroup boundaries if blkcg is enabled
- drm/edid: check basic audio support on CEA extension block
- video: fbdev: sm712fb: Fix crash in smtcfb_read()
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420
- carl9170: fix missing bit-wise or operator for tx_params
- thermal: int340x: Increase bitmap size
- lib/raid6/test: fix multiple definition linking error
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
- crypto: rsa-pkcs1pad - restore signature length check
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
- DEC: Limit PMAX memory probing to R3k systems
- media: davinci: vpif: fix unbalanced runtime PM get
- xtensa: fix stop_machine_cpuslocked call in patch_text
- xtensa: fix xtensa_wsr always writing 0
- brcmfmac: firmware: Allocate space for default boardrev in nvram
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
- brcmfmac: pcie: Fix crashes due to early IRQs
- PCI: pciehp: Clear cmd_busy bit in polling mode
- regulator: qcom_smd: fix for_each_child.cocci warnings
- crypto: authenc - Fix sleep in atomic context in decrypt_tail
- crypto: mxs-dcp - Fix scatterlist processing
- spi: tegra114: Add missing IRQ check in tegra_spi_probe
- selftests/x86: Add validity check and allow field splitting
- audit: log AUDIT_TIME_* records only from rules
- crypto: ccree - don't attempt 0 len DMA mappings
- spi: pxa2xx-pci: Balance reference count for PCI DMA device
- hwmon: (pmbus) Add mutex to regulator ops
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
- block: don't delete queue kobject before its children
- PM: hibernate: fix __setup handler error handling
- PM: suspend: fix return value of __setup handler
- hwrng: atmel - disable trng on failure path
- crypto: vmx - add missing dependencies
- clocksource/drivers/timer-of: Check return value of of_iomap in
timer_of_base_init()
- ACPI: APEI: fix return value of __setup handlers
- crypto: ccp - ccp_dmaengine_unregister release dma channels
- hwmon: (pmbus) Add Vin unit off handling
- clocksource: acpi_pm: fix return value of __setup handler
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
- perf/core: Fix address filter parser for multiple filters
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel
- f2fs: fix missing free nid in f2fs_handle_failed_inode
- f2fs: fix to avoid potential deadlock
- media: bttv: fix WARNING regression on tunerless devices
- media: coda: Fix missing put_device() call in coda_get_vdoa_data
- media: hantro: Fix overfill bottom register field name
- media: aspeed: Correct value for h-total-pixels
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
- video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
- ARM: dts: qcom: ipq4019: fix sleep clock
- soc: qcom: rpmpd: Check for null return of devm_kcalloc
- soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
- arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo
- media: video/hdmi: handle short reads of hdmi info frame.
- media: em28xx: initialize refcount before kref_get
- media: usb: go7007: s2250-board: fix leak in probe()
- uaccess: fix nios2 and microblaze get_user_8()
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
- ASoC: ti: davinci-i2s: Add check for clk_enable()
- ALSA: spi: Add check for clk_enable()
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property
- arm64: dts: broadcom: Fix sata nodename
- printk: fix return value of printk.devkmsg __setup handler
- ASoC: mxs-saif: Handle errors for clk_enable
- ASoC: atmel_ssc_dai: Handle errors for clk_enable
- ASoC: soc-compress: prevent the potentially use of null pointer
- memory: emif: Add check for setup_interrupts
- memory: emif: check the pointer temp in get_device_details()
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
- media: stk1160: If start stream fails, return buffers with
VB2_BUF_STATE_QUEUED
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
- ASoC: wm8350: Handle error for wm8350_register_irq
- ASoC: fsi: Add check for clk_enable
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
- ivtv: fix incorrect device_caps for ivtvfb
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in
msm8916_wcd_digital_probe
- mmc: davinci_mmc: Handle error for clk_enable
- ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
- drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
- udmabuf: validate ubuf->pagecount
- Bluetooth: hci_serdev: call init_rwsem() before p->open()
- mtd: onenand: Check for error irq
- mtd: rawnand: gpmi: fix controller timings setting
- drm/edid: Don't clear formats if using deep color
- drm/amd/display: Fix a NULL pointer dereference in
amdgpu_dm_connector_add_common_modes()
- ath9k_htc: fix uninit value bugs
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
- ray_cs: Check ioremap return value
- powerpc/perf: Don't use perf_hw_context for trace IMC PMU
- mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
- mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
- net: dsa: mv88e6xxx: Enable port policy support on 6097
- PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
- iommu/ipmmu-vmsa: Check for error num after setting mask
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
- IB/cma: Allow XRC INI QPs to set their local ACK timeout
- dax: make sure inodes are flushed before destroy cache
- iwlwifi: Fix -EIO error code that is never returned
- iwlwifi: mvm: Fix an error code in iwl_mvm_up()
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
- scsi: pm8001: Fix abort all task initialization
- drm/amd/display: Remove vupdate_int_entry definition
- TOMOYO: fix __setup handlers return values
- ext2: correct max file size computing
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false
return
- scsi: hisi_sas: Change permission of parameter prot_mask
- drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
- bpf, arm64: Call build_prologue() first in first JIT pass
- bpf, arm64: Feed byte-offset into bpf line info
- libbpf: Skip forward declaration when counting duplicated type names
- powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
- KVM: x86: Fix emulation in writing cr8
- KVM: x86/emulator: Defer not-present segment check in
__load_segment_descriptor()
- hv_balloon: rate-limit "Unhandled message" warning
- i2c: xiic: Make bus names unique
- power: supply: wm8350-power: Handle error for wm8350_register_irq
- power: supply: wm8350-power: Add missing free in free_charger_irq
- PCI: Reduce warnings on possible RW1C corruption
- mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
- powerpc/sysdev: fix incorrect use to determine if list is empty
- mfd: mc13xxx: Add check for mc13xxx_irq_request
- selftests/bpf: Make test_lwt_ip_encap more stable and faster
- powerpc: 8xx: fix a return value error in mpc8xx_pic_init
- vxcan: enable local echo for sent CAN frames
- MIPS: RB532: fix return value of __setup handler
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
- bpf, sockmap: Fix more uncharged while msg has more_data
- bpf, sockmap: Fix double uncharge the mem of sk_msg
- USB: storage: ums-realtek: fix error code in rts51x_read_mem()
- Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
- af_netlink: Fix shift out of bounds in group mask calculation
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active
- selftests/bpf/test_lirc_mode2.sh: Exit with proper code
- tcp: ensure PMTU updates are processed during fastopen
- openvswitch: always update flow key after nat
- tipc: fix the timer expires after interval 100ms
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
- mxser: fix xmit_buf leak in activate when LSR == 0xff
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
- misc: alcor_pci: Fix an error handling path
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
- pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
- clk: qcom: ipq8074: Use floor ops for SDCC1 clock
- phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
- serial: 8250_mid: Balance reference count for PCI DMA device
- serial: 8250: Fix race condition in RTS-after-send handling
- iio: adc: Add check for devm_request_threaded_irq
- NFS: Return valid errors from nfs2/3_decode_dirent()
- dma-debug: fix return value of __setup handlers
- clk: imx7d: Remove audio_mclk_root_clk
- clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
- clk: qcom: clk-rcg2: Update the frac table for pixel clock
- remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
- remoteproc: qcom_wcnss: Add missing of_node_put() in
wcnss_alloc_memory_region
- clk: actions: Terminate clk_div_table with sentinel element
- clk: loongson1: Terminate clk_div_table with sentinel element
- clk: clps711x: Terminate clk_div_table with sentinel element
- clk: tegra: tegra124-emc: Fix missing put_device() call in
emc_ensure_emc_driver
- NFS: remove unneeded check in decode_devicenotify_args()
- staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
- pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
- pinctrl: mediatek: paris: Fix pingroup pin config state readback
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
- tty: hvc: fix return value of __setup handler
- kgdboc: fix return value of __setup handler
- kgdbts: fix return value of __setup handler
- firmware: google: Properly state IOMEM dependency
- driver core: dd: fix return value of __setup handler
- jfs: fix divide error in dbNextAG
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
- clk: qcom: gcc-msm8994: Fix gpll4 width
- clk: Initialize orphan req_rate
- xen: fix is_xen_pmu()
- net: phy: broadcom: Fix brcm_fet_config_init()
- selftests: test_vxlan_under_vrf: Fix broken test case
- qlcnic: dcb: default to returning -EOPNOTSUPP
- net/x25: Fix null-ptr-deref caused by x25_disconnect
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
- lib/test: use after free in register_test_dev_kmod()
- LSM: general protection fault in legacy_parse_param
- gcc-plugins/stackleak: Exactly match strings instead of prefixes
- pinctrl: npcm: Fix broken references to chip->parent_device
- block, bfq: don't move oom_bfqq
- selinux: use correct type for context length
- loop: use sysfs_emit() in the sysfs xxx show()
- Fix incorrect type in assignment of ipv6 port for audit
- irqchip/qcom-pdc: Fix broken locking
- irqchip/nvic: Release nvic_base upon failure
- bfq: fix use-after-free in bfq_dispatch_request
- ACPICA: Avoid walking the ACPI Namespace if it is not there
- lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
- Revert "Revert "block, bfq: honor already-setup queue merges""
- ACPI/APEI: Limit printable size of BERT table data
- PM: core: keep irq flags in device_pm_check_callbacks()
- spi: tegra20: Use of_device_get_match_data()
- ext4: don't BUG if someone dirty pages without asking ext4 first
- ntfs: add sanity check on allocation size
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
- video: fbdev: w100fb: Reset global state
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
- ARM: dts: bcm2837: Add the missing L1/L2 cache information
- ASoC: madera: Add dependencies on MFD
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of
snprintf()
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
- ASoC: soc-core: skip zero num_dai component in searching dai name
- media: cx88-mpeg: clear interrupt status register before streaming video
- ARM: tegra: tamonten: Fix I2C3 pad setting
- ARM: mmp: Fix failure to remove sram device
- video: fbdev: sm712fb: Fix crash in smtcfb_write()
- media: Revert "media: em28xx: add missing em28xx_close_extension"
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup
- powerpc/lib/sstep: Fix 'sthcx' instruction
- powerpc/lib/sstep: Fix build errors with newer binutils
- powerpc: Fix build errors with newer binutils
- scsi: qla2xxx: Fix stuck session in gpdb
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
- scsi: qla2xxx: Fix warning for missing error code
- scsi: qla2xxx: Fix device reconnect in loop topology
- scsi: qla2xxx: Add devids and conditionals for 28xx
- scsi: qla2xxx: Check for firmware dump already collected
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- scsi: qla2xxx: Fix disk failure to rediscover
- scsi: qla2xxx: Fix incorrect reporting of task management failure
- scsi: qla2xxx: Fix hang due to session stuck
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
- scsi: qla2xxx: Fix N2N inconsistent PLOGI
- scsi: qla2xxx: Reduce false trigger to login
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing
- KVM: Prevent module exit until all VMs are freed
- KVM: x86: fix sending PV IPI
- ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- ubifs: rename_whiteout: correct old_dir size computing
- XArray: Fix xas_create_range() when multi-order entry present
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
- can: mcba_usb: properly check endpoint type
- XArray: Update the LRU list in xas_split()
- rtc: check if __rtc_read_time was successful
- gfs2: Make sure FITRIM minlen is rounded up to fs block size
- net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
- pinctrl: pinconf-generic: Print arguments for bias-pull-*
- pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
- pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
- ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- ARM: iop32x: offset IRQ numbers by 1
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- powerpc/kasan: Fix early region not updated correctly
- ASoC: soc-compress: Change the check for codec_dai
- mm/mmap: return 1 from stack_guard_gap __setup() handler
- mm/memcontrol: return 1 from cgroup.memory __setup() handler
- mm/usercopy: return 1 from hardened_usercopy __setup() handler
- bpf: Fix comment for helper bpf_current_task_under_cgroup()
- dt-bindings: mtd: nand-controller: Fix the reg property description
- dt-bindings: mtd: nand-controller: Fix a comment in the examples
- dt-bindings: spi: mxic: The interrupt property is not mandatory
- ubi: fastmap: Return error code if memory allocation fails in add_aeb()
- ASoC: topology: Allow TLV control to be either read or write
- ARM: dts: spear1340: Update serial node properties
- ARM: dts: spear13xx: Update SPI dma properties
- um: Fix uml_mconsole stop/go
- openvswitch: Fixed nd target mask field in the flow dump.
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
- ubifs: Rectify space amount budget for mkdir/tmpfile operations
- rtc: wm8350: Handle error for wm8350_register_irq
- riscv module: remove (NOLOAD)
- ARM: 9187/1: JIVE: fix return value of __setup handler
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
- drm: Add orientation quirk for GPD Win Max
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
- ptp: replace snprintf with sysfs_emit
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
- bpf: Make dst_port field in struct bpf_sock 16-bit wide
- scsi: mvsas: Replace snprintf() with sysfs_emit()
- scsi: bfa: Replace snprintf() with sysfs_emit()
- power: supply: axp20x_battery: properly report current when discharging
- ipv6: make mc_forwarding atomic
- powerpc: Set crashkernel offset to mid of RMA region
- drm/amdgpu: Fix recursive locking warning
- PCI: aardvark: Fix support for MSI interrupts
- iommu/arm-smmu-v3: fix event handling soft lockup
- usb: ehci: add pci device support for Aspeed platforms
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- power: supply: axp288-charger: Set Vhold to 4.4V
- ipv4: Invalidate neighbour for broadcast address upon address addition
- dm ioctl: prevent potential spectre v1 gadget
- drm/amdkfd: make CRAT table missing message informational only
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
- scsi: aha152x: Fix aha152x_setup() __setup handler return value
- net/smc: correct settings of RMB window update limit
- mips: ralink: fix a refcount leak in ill_acc_of_setup()
- macvtap: advertise link netns via netlink
- tuntap: add sanity checks about msg_controllen in sendmsg
- bnxt_en: Eliminate unintended link toggle during FW reset
- MIPS: fix fortify panic when copying asm exception handlers
- scsi: libfc: Fix use after free in fc_exch_abts_resp()
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
- xtensa: fix DTC warning unit_address_format
- Bluetooth: Fix use after free in hci_send_acl
- netlabel: fix out-of-bounds memory accesses
- init/main.c: return 1 from handled __setup() functions
- minix: fix bug when opening a file with O_DIRECT
- clk: si5341: fix reported clk_rate when output divider is 2
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors
- NFSv4: Protect the state recovery thread against direct reclaim
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
- clk: Enforce that disjoints limits are invalid
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory
- NFS: swap IO handling is slightly different for O_DIRECT IO
- NFS: swap-out must always use STABLE writes.
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
- virtio_console: eliminate anonymous module_init & module_exit
- jfs: prevent NULL deref in diFree
- SUNRPC: Fix socket waits for write buffer space
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips
- parisc: Fix patch code locking and flushing
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
- Drivers: hv: vmbus: Fix potential crash on module unload
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
- net/tls: fix slab-out-of-bounds bug in decrypt_internal
- net: ipv4: fix route with nexthop object delete warning
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
- drm/imx: Fix memory leak in imx_pd_connector_get_modes
- bnxt_en: reserve space inside receive page for skb_shared_info
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
- ipv6: Fix stats accounting in ip6_pkt_drop
- net: openvswitch: don't send internal clone attribute to the userspace.
- rxrpc: fix a race in rxrpc_exit_net()
- qede: confirm skb is allocated before using
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
- drbd: Fix five use after free bugs in get_initial_state
- SUNRPC: Handle ENOMEM in call_transmit_status()
- SUNRPC: Handle low memory situations in call_status()
- perf tools: Fix perf's libperf_print callback
- perf session: Remap buf if there is no space for event
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
- mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is
complete
- lz4: fix LZ4_decompress_safe_partial read out of bound
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace
- x86/pm: Save the MSR validity status at context setup
- x86/speculation: Restore speculation related MSRs during S3 resume
- btrfs: fix qgroup reserve overflow the qgroup limit
- arm64: patch_text: Fixup last cpu should be master
- ata: sata_dwc_460ex: Fix crash due to OOB write
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling
- tools build: Filter out options and warnings not supported by clang
- tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros
- mmc: mmci: stm32: correctly check all elements of sg list
- mm: don't skip swap entry even if zap_details specified
- arm64: module: remove (NOLOAD) from linker script
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
- drm/amdkfd: add missing void argument to function kgd2kfd_init
- drm/amdkfd: Fix -Wstrict-prototypes from
amdgpu_amdkfd_gfx_10_0_get_functions()
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
- selftests: cgroup: Test open-time credential usage for migration checks
- selftests: cgroup: Test open-time cgroup namespace usage for migration
checks
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function
- ACPI: processor idle: Check for architectural support for LPI
- Linux 5.4.189
* Focal update: v5.4.188 upstream stable release (LP: #1971496)
- nfsd: cleanup nfsd_file_lru_dispose()
- nfsd: Containerise filecache laundrette
- net: ipv6: fix skb_over_panic in __ip6_append_data
- tpm: Fix error handling in async work
- staging: fbtft: fb_st7789v: reset display before initialization
- thermal: int340x: fix memory leak in int3400_notify()
- llc: fix netdevice reference leaks in llc_ui_bind()
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- drivers: net: xgene: Fix regression in CRC stripping
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
- ALSA: oss: Fix PCM OSS buffer allocation overflow
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
- ALSA: hda/realtek: Add quirk for ASUS GA402
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- crypto: qat - disable registration of algorithms
- rcu: Don't deboost before reporting expedited quiescent state
- mac80211: fix potential double free on mesh join
- tpm: use try_get_ops() in tpm-space.c
- nds32: fix access_ok() checks in get/put_user
- llc: only change llc->dev when bind() succeeds
- Linux 5.4.188
* Focal update: v5.4.187 upstream stable release (LP: #1971493)
- crypto: qcom-rng - ensure buffer for generate is completely filled
- ocfs2: fix crash when initialize filecheck kobj fails
- efi: fix return value of __setup handlers
- net: phy: marvell: Fix invalid comparison in the resume and suspend
functions
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- hv_netvsc: Add check for kvmalloc_array
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- net: dsa: Add missing of_node_put() in dsa_port_parse_of
- arm64: fix clang warning about TRAMP_VALIAS
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- usb: usbtmc: Fix bug in pipe direction for control transfers
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- Linux 5.4.187
* Focal update: v5.4.186 upstream stable release (LP: #1969678)
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
- sctp: fix the processing for INIT chunk
- xfrm: Check if_id in xfrm_migrate
- xfrm: Fix xfrm migrate issues when address family changes
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
- arm64: dts: rockchip: reorder rk3399 hdmi clocks
- arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg"
- ARM: dts: rockchip: reorder rk322x hmdi clocks
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
- mac80211: refuse aggregations sessions before authorized
- MIPS: smp: fill in sibling and core maps earlier
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when
fully ready
- atm: firestream: check the return value of ioremap() in fs_init()
- iwlwifi: don't advertise TWT support
- drm/vrr: Set VRR capable prop only if it is attached to connector
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- tcp: make tcp_read_sock() more robust
- sfc: extend the locking on mcdi->seqno
- kselftest/vm: fix tests build with old libc
- fixup for "arm64 entry: Add macro for reading symbol address from the
trampoline"
- Linux 5.4.186
* Focal update: v5.4.185 upstream stable release (LP: #1969672)
- clk: qcom: gdsc: Add support to update GDSC transition delay
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
- net: qlogic: check the return value of dma_alloc_coherent() in
qed_vf_hw_prepare()
- qed: return status of qed_iov_get_link
- drm/sun4i: mixer: Fix P010 and P210 format numbers
- ARM: dts: aspeed: Fix AST2600 quad spi group
- ethernet: Fix error handling in xemaclite_of_probe
- net: ethernet: ti: cpts: Handle error for clk_enable
- net: ethernet: lpc_eth: Handle error for clk_enable
- ax25: Fix NULL pointer dereference in ax25_kill_by_device
- net/mlx5: Fix size field in bufferx_reg struct
- net/mlx5: Fix a race on command flush flow
- NFC: port100: fix use-after-free in port100_send_complete
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell.
- gpio: ts4900: Do not set DAT and OE together
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
- net: phy: DP83822: clear MISR2 register to disable interrupts
- sctp: fix kernel-infoleak for SCTP sockets
- net: bcmgenet: Don't claim WOL when its not available
- net-sysfs: add check for netdevice being present to speed_show
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
- Revert "xen-netback: Check for hotplug-status existence before watching"
- ipv6: prevent a possible race condition with lifetimes
- tracing: Ensure trace buffer is at least 4096 bytes large
- selftest/vm: fix map_fixed_noreplace test failure
- selftests/memfd: clean up mapping in mfd_fail_write
- ARM: Spectre-BHB: provide empty stub for non-config
- fuse: fix pipe buffer lifetime for direct_io
- staging: gdm724x: fix use after free in gdm_lte_rx()
- net: macb: Fix lost RX packet wakeup race in NAPI receive
- mmc: meson: Fix usage of meson_mmc_post_req()
- riscv: Fix auipc+jalr relocation range checks
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0
- virtio: unexport virtio_finalize_features
- virtio: acknowledge all features before access
- ARM: fix Thumb2 regression with Spectre BHB
- ext4: add check to prevent attempting to resize an fs with sparse_super2
- x86/cpufeatures: Mark two free bits in word 3
- x86/cpu: Add hardware-enforced cache coherency as a CPUID feature
- x86/mm/pat: Don't flush cache if hardware enforces cache coherency across
encryption domnains
- KVM: SVM: Don't flush cache if hardware enforces cache coherency across
encryption domains
- Linux 5.4.185
* Focal update: v5.4.184 upstream stable release (LP: #1969242)
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()
- ARM: report Spectre v2 status through sysfs
- ARM: early traps initialisation
- ARM: use LOADADDR() to get load address of sections
- [Config] updateconfigs for HARDEN_BRANCH_HISTORY
- ARM: Spectre-BHB workaround
- ARM: include unprivileged BPF status in Spectre V2 reporting
- ARM: fix build error when BPF_SYSCALL is disabled
- ARM: fix co-processor register typo
- ARM: Do not use NOCROSSREFS directive with ld.lld
- ARM: fix build warning in proc-v7-bugs.c
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
- xen/grant-table: add gnttab_try_end_foreign_access()
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
- xen/gntalloc: don't use gnttab_query_foreign_access()
- xen: remove gnttab_query_foreign_access()
- xen/9p: use alloc/free_pages_exact()
- xen/pvcalls: use alloc/free_pages_exact()
- xen/gnttab: fix gnttab_end_foreign_access() without page specified
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
- Linux 5.4.184
* Focal update: v5.4.183 upstream stable release (LP: #1969239)
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- i2c: bcm2835: Avoid clock stretching timeouts
- ASoC: rt5668: do not block workqueue if card is unbound
- ASoC: rt5682: do not block workqueue if card is unbound
- Input: clear BTN_RIGHT/MIDDLE on buttonpads
- cifs: fix double free race when mount fails in cifs_get_root()
- dmaengine: shdma: Fix runtime PM imbalance on error
- i2c: cadence: allow COMPILE_TEST
- i2c: qup: allow COMPILE_TEST
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- usb: gadget: don't release an existing dev->buf
- usb: gadget: clear related members when goto fail
- ata: pata_hpt37x: fix PCI clock detection
- ALSA: intel_hdmi: Fix reference to PCM buffer address
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- xfrm: enforce validity of offload input flags
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- block: Fix fsync always failed if once failed
- xen/netfront: destroy queues before real_num_tx_queues is zeroed
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
- ia64: ensure proper NUMA distance and possible map initialization
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- iavf: Fix missing check for running netdev
- net: sxgbe: fix return value of __setup handler
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
- efivars: Respect "block" flag in efivar_entry_set_safe()
- firmware: arm_scmi: Remove space in MODULE_ALIAS name
- ASoC: cs4265: Fix the duplicated control name
- can: gs_usb: change active_channels's type from atomic_t to u8
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
- igc: igc_read_phy_reg_gpy: drop premature return
- ARM: Fix kgdb breakpoint for Thumb2
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
- igc: igc_write_phy_reg_gpy: drop premature return
- ibmvnic: free reset-work-item when flushing
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- soc: fsl: qe: Check of ioremap return value
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- nl80211: Handle nla_memdup failures in handle_nan_filter
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
- HID: add mapping for KEY_DICTATE
- HID: add mapping for KEY_ALL_APPLICATIONS
- tracing/histogram: Fix sorting on old "cpu" value
- tracing: Fix return value of __setup handlers
- btrfs: fix lost prealloc extents beyond eof after full fsync
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
- btrfs: add missing run of delayed items after unlink during log replay
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
- net: dcb: disable softirqs in dcbnl_flush_dev()
- hamradio: fix macro redefine warning
- Linux 5.4.183
* Focal update: v5.4.182 upstream stable release (LP: #1969236)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
- clk: jz4725b: fix mmc0 clock gating
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
- parisc/unaligned: Fix ldw() and stw() unalignment handlers
- drm/amdgpu: disable MMHUB PG for Picasso
- sr9700: sanity check for packet length
- USB: zaurus: support another broken Zaurus
- x86/fpu: Correct pkru/xstate inconsistency
- tee: export teedev_open() and teedev_close_context()
- optee: use driver internal tee_context for some rpc
- lan743x: fix deadlock in lan743x_phy_link_status_change()
- ping: remove pr_err from ping_lookup
- perf data: Fix double free in perf_session__delete()
- bpf: Do not try bpf_msg_push_data with len 0
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
- tipc: Fix end of loop tests for list_for_each_entry()
- gso: do not skip outer ip header in case of ipip and net_failover
- openvswitch: Fix setting ipv6 fields causing hw csum failure
- drm/edid: Always set RGB444
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
- net: ll_temac: check the return value of devm_kmalloc()
- net: Force inlining of checksum functions in net/checksum.h
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
- netfilter: nf_tables: fix memory leak during stateful obj update
- net/mlx5: Fix possible deadlock on rule deletion
- net/mlx5: Fix wrong limitation of metadata match on ecpf
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in
zynq_qspi_exec_mem_op()
- configfs: fix a race in configfs_{,un}register_subsystem()
- RDMA/ib_srp: Fix a deadlock
- tracing: Have traceon and traceoff trigger honor the instance
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
- iio: Fix error handling for PM
- ata: pata_hpt37x: disable primary channel on HPT371
- Revert "USB: serial: ch341: add new Product ID for CH341A"
- usb: gadget: rndis: add spinlock for rndis response list
- tracefs: Set the group ownership in apply_options() not parse_options()
- USB: serial: option: add support for DW5829e
- USB: serial: option: add Telit LE910R1 compositions
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
- xhci: re-initialize the HC during resume if HCE was set
- xhci: Prevent futile URB re-submissions due to incorrect return value.
- tty: n_gsm: fix encoding of control signal octet bit DV
- tty: n_gsm: fix proper link termination after failed open
- tty: n_gsm: fix NULL pointer access due to DLCI release
- gpio: tegra186: Fix chip_data type confusion
- Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of
DEVINIT/PREOS/ACR"
- memblock: use kfree() to release kmalloced memblock regions
- fget: clarify and improve __fget_files() implementation
- Linux 5.4.182
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
[ Ubuntu: 5.4.0-113.127 ]
* focal/linux: 5.4.0-113.127 -proposed tracker (LP: #1973980)
* CVE-2022-29581
- net/sched: cls_u32: fix netns refcount changes in u32_change()
* CVE-2022-1116
- io_uring: fix fs->users overflow
* ext4: limit length to bitmap_maxbytes (LP: #1972281)
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
option (LP: #1972740)
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
[ Ubuntu: 5.4.0-110.124 ]
* focal/linux: 5.4.0-110.124 -proposed tracker (LP: #1969053)
* net/mlx5e: Fix page DMA map/unmap attributes (LP: #1967292)
- net/mlx5e: Fix page DMA map/unmap attributes
* xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()
(LP: #1966803)
- xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()
* LRMv6: add multi-architecture support (LP: #1968774)
- [Packaging] resync dkms-build{,--nvidia-N}
* xfrm interface cannot be changed anymore (LP: #1968591)
- xfrm: fix the if_id check in changelink
* Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
- [Debian] Use kernel-testing repo from launchpad
* vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
selector (got 50)) (LP: #1956315)
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
* [SRU][Regression] Revert "PM: ACPI: reboot: Use S5 for reboot" which causes
Bus Fatal Error when rebooting system with BCM5720 NIC (LP: #1917471)
- Revert "PM: ACPI: reboot: Use S5 for reboot"
* Focal update: v5.4.181 upstream stable release (LP: #1967582)
- Makefile.extrawarn: Move -Wunaligned-access to W=1
- HID:Add support for UGTABLET WP5540
- Revert "svm: Add warning message for AVIC IPI invalid target"
- serial: parisc: GSC: fix build when IOSAPIC is not set
- parisc: Drop __init from map_pages declaration
- parisc: Fix data TLB miss in sba_unmap_sg
- parisc: Fix sglist access in ccio-dma.c
- btrfs: send: in case of IO error log it
- platform/x86: ISST: Fix possible circular locking dependency detected
- selftests: rtc: Increase test timeout so that all tests run
- net: ieee802154: at86rf230: Stop leaking skb's
- selftests/zram: Skip max_comp_streams interface on newer kernel
- selftests/zram01.sh: Fix compression ratio calculation
- selftests/zram: Adapt the situation that /dev/zram0 is being used
- ax25: improve the incomplete fix to avoid UAF and NPD bugs
- vfs: make freeze_super abort when sync_filesystem returns error
- quota: make dquot_quota_sync return errors from ->sync_fs
- nvme: fix a possible use-after-free in controller reset during load
- nvme-tcp: fix possible use-after-free in transport error_recovery work
- nvme-rdma: fix possible use-after-free in transport error_recovery work
- drm/amdgpu: fix logic inversion in check
- Revert "module, async: async_synchronize_full() on module init iff async is
used"
- ftrace: add ftrace_init_nop()
- module/ftrace: handle patchable-function-entry
- arm64: module: rework special section handling
- arm64: module/ftrace: intialize PLT at load time
- iwlwifi: fix use-after-free
- drm/radeon: Fix backlight control on iMac 12,1
- ext4: check for out-of-order index extents in ext4_valid_extent_entries()
- ext4: check for inconsistent extents between index and leaf block
- ext4: prevent partial update of the extent blocks
- taskstats: Cleanup the use of task->exit_code
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
- vsock: remove vsock from connected table when connect is interrupted by a
signal
- mmc: block: fix read single on recovery logic
- iwlwifi: pcie: fix locking when "HW not ready"
- iwlwifi: pcie: gen2: fix locking when "HW not ready"
- netfilter: nft_synproxy: unregister hooks on init error path
- net: dsa: lan9303: fix reset on probe
- net: ieee802154: ca8210: Fix lifs/sifs periods
- ping: fix the dif and sdif check in ping_lookup
- bonding: force carrier update when releasing slave
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
- bonding: fix data-races around agg_select_timer
- libsubcmd: Fix use-after-free for realloc(..., 0)
- ALSA: hda: Fix regression on forced probe mask option
- ALSA: hda: Fix missing codec probe on Shenker Dock 15
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
- powerpc/lib/sstep: fix 'ptesync' build error
- mtd: rawnand: gpmi: don't leak PM reference in error path
- block/wbt: fix negative inflight counter when remove scsi device
- NFS: LOOKUP_DIRECTORY is also ok with symlinks
- NFS: Do not report writeback errors in nfs_getattr()
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
- EDAC: Fix calculation of returned address and next offset in
edac_align_ptr()
- net: sched: limit TC_ACT_REPEAT loops
- dmaengine: sh: rcar-dmac: Check for error num after setting mask
- copy_process(): Move fd_install() out of sighand->siglock critical section
- i2c: brcmstb: fix support for DSL and CM variants
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
- ARM: OMAP2+: hwmod: Add of_node_put() before break
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
- irqchip/sifive-plic: Add missing thead,c900-plic match string
- netfilter: conntrack: don't refresh sctp entries in closed state
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
- kconfig: let 'shell' return enough output for deep path names
- ata: libata-core: Disable TRIM on M88V29
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot
- net: usb: qmi_wwan: Add support for Dell DW5829e
- net: macb: Align the dma and coherent dma masks
- kconfig: fix failing to generate auto.conf
- Linux 5.4.181
* Focal update: v5.4.180 upstream stable release (LP: #1966118)
- integrity: check the return value of audit_log_start()
- ima: Remove ima_policy file before directory
- ima: Allow template selection with ima_template[_fmt]= after ima_hash=
- ima: Do not print policy rule with inactive LSM labels
- mmc: sdhci-of-esdhc: Check for error num after setting mask
- net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
- net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
- NFS: Fix initialisation of nfs_client cl_flags field
- NFSD: Clamp WRITE offsets
- NFSD: Fix offset type in I/O trace points
- NFSv4 only print the label when its queried
- nfs: nfs4clinet: check the return value of kstrdup()
- NFSv4.1: Fix uninitialised variable in devicenotify
- NFSv4 remove zero number of fs_locations entries error check
- NFSv4 expose nfs_parse_server_name function
- drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
- net: sched: Clarify error message when qdisc kind is unknown
- scsi: target: iscsi: Make sure the np under each tpg is unique
- scsi: qedf: Fix refcount issue when LOGO is received during TMF
- scsi: myrs: Fix crash in error case
- PM: hibernate: Remove register_nosave_region_late()
- usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
- riscv: fix build with binutils 2.38
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
- ARM: socfpga: fix missing RESET_CONTROLLER
- nvme-tcp: fix bogus request completion when failing to send AER
- ACPI/IORT: Check node revision for PMCG resources
- PM: s2idle: ACPI: Fix wakeup interrupts handling
- net: bridge: fix stale eth hdr pointer in br_dev_xmit
- perf probe: Fix ppc64 'perf probe add events failed' case
- ARM: dts: meson: Fix the UART compatible strings
- staging: fbtft: Fix error path in fbtft_driver_module_init()
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
- usb: f_fs: Fix use-after-free for epfile
- misc: fastrpc: avoid double fput() on failed usercopy
- ixgbevf: Require large buffers for build_skb on 82599VF
- bonding: pair enable_port with slave_arr_updates
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- nfp: flower: fix ida_idx not being released
- net: do not keep the dst cache when uncloning an skb dst and its metadata
- net: fix a memleak when uncloning an skb dst and its metadata
- veth: fix races around rq->rx_notify_masked
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
- tipc: rate limit warning for received illegal binding update
- net: amd-xgbe: disable interrupts during pci removal
- vt_ioctl: fix array_index_nospec in vt_setactivate
- vt_ioctl: add array_index_nospec to VT_ACTIVATE
- n_tty: wake up poll(POLLRDNORM) on receiving data
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- usb: ulpi: Move of_node_put to ulpi_dev_release
- usb: ulpi: Call of_node_put correctly
- usb: dwc3: gadget: Prevent core from processing stale TRBs
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
- USB: gadget: validate interface OS descriptor requests
- usb: gadget: rndis: check size of RNDIS_MSG_SET command
- usb: gadget: f_uac2: Define specific wTerminalType
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
- USB: serial: option: add ZTE MF286D modem
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
- USB: serial: cp210x: add NCR Retail IO box id
- USB: serial: cp210x: add CPI Bulk Coin Recycler id
- seccomp: Invalidate seccomp mode to catch death failures
- hwmon: (dell-smm) Speed up setting of fan speed
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
- perf: Fix list corruption in perf_cgroup_switch()
- Linux 5.4.180
* Focal update: v5.4.179 upstream stable release (LP: #1965591)
- moxart: fix potential use-after-free on remove path
- Linux 5.4.179
* CVE-2020-27820
- drm/nouveau: Add a dedicated mutex for the clients list
- drm/nouveau: clean up all clients on device removal
* CVE-2022-1016
- netfilter: nf_tables: initialize registers in nft_do_chain()
* CVE-2022-27223
- USB: gadget: validate endpoint index for xilinx udc
* CVE-2022-26490
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
* CVE-2021-26401
- x86/speculation: Use generic retpoline by default on AMD
- x86/speculation: Update link to AMD speculation whitepaper
- x86/speculation: Warn about Spectre v2 LFENCE mitigation
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
* CVE-2022-0001
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
reporting
[ Ubuntu: 5.4.0-109.123 ]
* focal/linux: 5.4.0-109.123 -proposed tracker (LP: #1968290)
* USB devices not detected during boot on USB 3.0 hubs (LP: #1968210)
- SAUCE: Revert "Revert "xhci: Set HCD flag to defer primary roothub
registration""
- SAUCE: Revert "Revert "usb: core: hcd: Add support for deferring roothub
registration""
[ Ubuntu: 5.4.0-108.122 ]
* focal/linux: 5.4.0-108.122 -proposed tracker (LP: #1966740)
* Packaging resync (LP: #1786013)
- [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
- debian/dkms-versions -- update from kernel-versions (main/2022.03.21)
* Low RX performance for 40G Solarflare NICs (LP: #1964512)
- SAUCE: sfc: The size of the RX recycle ring should be more flexible
* [UBUNTU 20.04] KVM: Enable storage key checking for intercepted instruction
(LP: #1962831)
- selftests: kvm: add _vm_ioctl
- selftests: kvm: Introduce the TEST_FAIL macro
- KVM: selftests: Add GUEST_ASSERT variants to pass values to host
- KVM: s390: gaccess: Refactor gpa and length calculation
- KVM: s390: gaccess: Refactor access address range check
- KVM: s390: gaccess: Cleanup access to guest pages
- s390/uaccess: introduce bit field for OAC specifier
- s390/uaccess: fix compile error
- s390/uaccess: Add copy_from/to_user_key functions
- KVM: s390: Honor storage keys when accessing guest memory
- KVM: s390: handle_tprot: Honor storage keys
- KVM: s390: selftests: Test TEST PROTECTION emulation
- KVM: s390: Add optional storage key checking to MEMOP IOCTL
- KVM: s390: Add vm IOCTL for key checked guest absolute memory access
- KVM: s390: Rename existing vcpu memop functions
- KVM: s390: Add capability for storage key extension of MEM_OP IOCTL
- KVM: s390: Update api documentation for memop ioctl
- KVM: s390: Clarify key argument for MEM_OP in api docs
- KVM: s390: Add missing vm MEM_OP size check
* 【sec-0911】 fail to reset sec module (LP: #1943301)
- crypto: hisilicon/sec2 - Add workqueue for SEC driver.
- crypto: hisilicon/sec2 - update SEC initialization and reset
* Lots of hisi_qm zombie task slow down system after stress test
(LP: #1932117)
- crypto: hisilicon - Use one workqueue per qm instead of per qp
* Lots of hisi_qm zombie task slow down system after stress test
(LP: #1932117) // 【sec-0911】 fail to reset sec module (LP: #1943301)
- crypto: hisilicon - Unify hardware error init/uninit into QM
* [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
- KVM: s390: Simplify SIGP Set Arch handling
- KVM: s390: Add a routine for setting userspace CPU state
* Move virtual graphics drivers from linux-modules-extra to linux-modules
(LP: #1960633)
- [Packaging] Move VM DRM drivers into modules
* Focal update: v5.4.178 upstream stable release (LP: #1964634)
- audit: improve audit queue handling when "audit=1" on cmdline
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- ALSA: usb-audio: Simplify quirk entries with a macro
- ALSA: hda/realtek: Add quirk for ASUS GU603
- ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
quirks
- ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
chipset)
- ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
reboot from Windows
- btrfs: fix deadlock between quota disable and qgroup rescan worker
- drm/nouveau: fix off by one in BIOS boundary checking
- mm/kmemleak: avoid scanning potential huge holes
- block: bio-integrity: Advance seed correctly for larger interval sizes
- memcg: charge fs_context and legacy_fs_context
- IB/rdmavt: Validate remote_addr during loopback atomic tests
- RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
- RDMA/mlx4: Don't continue event handler after memory allocation failure
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
- spi: bcm-qspi: check for valid cs before applying chip select
- spi: mediatek: Avoid NULL pointer crash in interrupt
- spi: meson-spicc: add IRQ check in meson_spicc_probe
- net: ieee802154: hwsim: Ensure proper channel selection at probe time
- net: ieee802154: mcr20a: Fix lifs/sifs periods
- net: ieee802154: ca8210: Stop leaking skb's
- net: ieee802154: Return meaningful error codes from the netlink helpers
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly
- net: stmmac: dump gmac4 DMA registers correctly
- net: stmmac: ensure PTP time register reads are consistent
- drm/i915/overlay: Prevent divide by zero bugs in scaling
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
- ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
- ASoC: max9759: fix underflow in speaker_gain_control_put()
- pinctrl: bcm2835: Fix a few error paths
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
- selftests: futex: Use variable MAKE instead of make
- rtc: cmos: Evaluate century appropriate
- EDAC/altera: Fix deferred probing
- EDAC/xgene: Fix deferred probing
- ext4: fix error handling in ext4_restore_inline_data()
- cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
- Linux 5.4.178
* Focal update: v5.4.177 upstream stable release (LP: #1964628)
- PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
- psi: Fix uaf issue when psi trigger is destroyed while being polled
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- net: amd-xgbe: ensure to reset the tx_timer_active flag
- net: amd-xgbe: Fix skb data length underflow
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- Linux 5.4.177
* Focal update: v5.4.176 upstream stable release (LP: #1962345)
- s390/hypfs: include z/VM guests with access control group set
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
devices
- udf: Restore i_lenAlloc when inode expansion fails
- udf: Fix NULL ptr deref when converting from inline format
- PM: wakeup: simplify the output logic of pm_show_wakelocks()
- tracing/histogram: Fix a potential memory leak for kstrdup()
- tracing: Don't inc err_log entry count if entry allocation fails
- fsnotify: fix fsnotify hooks in pseudo filesystems
- drm/etnaviv: relax submit size limits
- arm64: errata: Fix exec handling in erratum 1418040 workaround
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: 8250: of: Fix mapped region size when using reg-offset property
- serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- ucsi_ccg: Check DEV_INT bit only when starting CCG4
- net: sfp: ignore disabled SFP node
- powerpc/32: Fix boot failure with GCC latent entropy plugin
- i40e: Increase delay to 1 s after global EMP reset
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- i40e: fix unsigned stat widths
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- ipv6_tunnel: Rate limit warning messages
- net: fix information leakage in /proc/net/ptype
- hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
- hwmon: (lm90) Mark alert as broken for MAX6680
- ping: fix the sk_bound_dev_if match in ping_lookup
- ipv4: avoid using shared IP generator for connected sockets
- hwmon: (lm90) Reduce maximum conversion rate for G781
- NFSv4: Handle case where the lookup of a directory fails
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file
- net-procfs: show net devices bound packet types
- drm/msm: Fix wrong size calculation
- drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- ipv6: annotate accesses to fn->fn_sernum
- NFS: Ensure the server has an up to date ctime before hardlinking
- NFS: Ensure the server has an up to date ctime before renaming
- netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- net: phy: broadcom: hook up soft_reset for BCM54616S
- phylib: fix potential use-after-free
- rxrpc: Adjust retransmission backoff
- hwmon: (lm90) Mark alert as broken for MAX6654
- ibmvnic: init ->running_cap_crqs early
- ibmvnic: don't spin in tasklet
- drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
- yam: fix a memory leak in yam_siocdevprivate()
- net: hns3: handle empty unknown interrupt for VF
- ipv4: raw: lock the socket in raw_bind()
- ipv4: tcp: send zero IPID in SYNACK messages
- ipv4: remove sparse error in ip_neigh_gw4()
- dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
- fsnotify: invalidate dcache before IN_DELETE event
- block: Fix wrong offset in bio_truncate()
- mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
- Linux 5.4.176
* Focal update: v5.4.175 upstream stable release (LP: #1962330)
- rcu: Tighten rcu_advance_cbs_nowake() checks
- pinctrl: bcm2835: Drop unused define
- pinctrl: bcm2835: Refactor platform data
- pinctrl: bcm2835: Add support for all GPIOs on BCM2711
- pinctrl: bcm2835: Match BCM7211 compatible string
- pinctrl: bcm2835: Add support for wake-up interrupts
- pinctrl: bcm2835: Change init order for gpio hogs
- ARM: dts: gpio-ranges property is now required
- mmc: sdhci-esdhc-imx: disable CMDQ support
- select: Fix indefinitely sleeping task in poll_schedule_timeout()
- Linux 5.4.175
[ Ubuntu: 5.4.0-107.121 ]
* focal/linux: 5.4.0-107.121 -proposed tracker (LP: #1966275)
* CVE-2022-27666
- esp: Fix possible buffer overflow in ESP transformation
* CVE-2022-1055
- net: sched: fix use-after-free in tc_new_tfilter()
* Pick fixup from v5.4.176 upstream stable release to address cert
failure with clock jitter test in NUC7i3DNHE (LP: #1964204)
- Bluetooth: refactor malicious adv data check
-- Nathan Sweetman <email address hidden> Mon, 30 May 2022 15:34:21 +0930
-
linux-iot (5.4.0-1001.3) focal; urgency=medium
* focal/linux-iot: 5.4.0-1001.3 -proposed tracker (LP: #1963957)
* Disable unprivileged BPF by default (LP: #1961338)
- [Config] CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
* Support builtin revoked certificates (LP: #1932029)
- [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
- [Config] add i386 to CONFIG_SYSTEM_REVOCATION_KEYS annotation
* Re-enable DEBUG_INFO_BTF where it was disabled (LP: #1945632)
- [Config] Enable CONFIG_DEBUG_INFO_BTF on all arches
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 5.4.0-105.119 ]
* CVE-2022-0847
- lib/iov_iter: initialize "flags" in new pipe_buffer
* Broken network on some AWS instances with focal/impish kernels
(LP: #1961968)
- SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
* [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
(LP: #1960182)
- s390/cpumf: Support for CPU Measurement Facility CSVN 7
- s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
* Hipersocket page allocation failure on Ubuntu 20.04 based SSC environments
(LP: #1959529)
- s390/qeth: use memory reserves to back RX buffers
* CVE-2022-0516
- KVM: s390: Return error on SIDA memop on normal guest
* CVE-2022-0435
- tipc: improve size validations for received domain records
* CVE-2022-0492
- cgroup-v1: Require capabilities to set release_agent
* Recalled NFSv4 files delegations overwhelm server (LP: #1957986)
- NFSv4: Fix delegation handling in update_open_stateid()
- NFSv4: nfs4_callback_getattr() should ignore revoked delegations
- NFSv4: Delegation recalls should not find revoked delegations
- NFSv4: fail nfs4_refresh_delegation_stateid() when the delegation was
revoked
- NFS: Rename nfs_inode_return_delegation_noreclaim()
- NFSv4: Don't remove the delegation from the super_list more than once
- NFSv4: Hold the delegation spinlock when updating the seqid
- NFSv4: Clear the NFS_DELEGATION_REVOKED flag in
nfs_update_inplace_delegation()
- NFSv4: Update the stateid seqid in nfs_revoke_delegation()
- NFSv4: Revoke the delegation on success in nfs4_delegreturn_done()
- NFSv4: Ignore requests to return the delegation if it was revoked
- NFSv4: Don't reclaim delegations that have been returned or revoked
- NFSv4: nfs4_return_incompatible_delegation() should check delegation
validity
- NFSv4: Fix nfs4_inode_make_writeable()
- NFS: nfs_inode_find_state_and_recover() fix stateid matching
- NFSv4: Fix races between open and delegreturn
- NFSv4: Handle NFS4ERR_OLD_STATEID in delegreturn
- NFSv4: Don't retry the GETATTR on old stateid in nfs4_delegreturn_done()
- NFSv4: nfs_inode_evict_delegation() should set NFS_DELEGATION_RETURNING
- NFS: Clear NFS_DELEGATION_RETURN_IF_CLOSED when the delegation is returned
- NFSv4: Try to return the delegation immediately when marked for return on
close
- NFSv4: Add accounting for the number of active delegations held
- NFSv4: Limit the total number of cached delegations
- NFSv4: Ensure the delegation is pinned in nfs_do_return_delegation()
- NFSv4: Ensure the delegation cred is pinned when we call delegreturn
* Focal update: v5.4.174 upstream stable release (LP: #1960566)
- HID: uhid: Fix worker destroying device without any protection
- HID: wacom: Reset expected and received contact counts at the same time
- HID: wacom: Ignore the confidence flag when a touch is removed
- HID: wacom: Avoid using stale array indicies to read contact count
- f2fs: fix to do sanity check in is_alive()
- nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
bind()
- mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
- mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
- x86/gpu: Reserve stolen memory for first integrated Intel GPU
- tools/nolibc: x86-64: Fix startup code bug
- tools/nolibc: i386: fix initial stack alignment
- tools/nolibc: fix incorrect truncation of exit code
- rtc: cmos: take rtc_lock while reading from CMOS
- media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
- media: flexcop-usb: fix control-message timeouts
- media: mceusb: fix control-message timeouts
- media: em28xx: fix control-message timeouts
- media: cpia2: fix control-message timeouts
- media: s2255: fix control-message timeouts
- media: dib0700: fix undefined behavior in tuner shutdown
- media: redrat3: fix control-message timeouts
- media: pvrusb2: fix control-message timeouts
- media: stk1160: fix control-message timeouts
- can: softing_cs: softingcs_probe(): fix memleak on registration failure
- lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
- iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
- dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
- mm_zone: add function to check if managed dma zone exists
- mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
pages
- shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
- drm/rockchip: dsi: Hold pm-runtime across bind/unbind
- drm/rockchip: dsi: Reconfigure hardware on resume()
- drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
- drm/panel: innolux-p079zca: Delete panel on attach() failure
- drm/rockchip: dsi: Fix unbalanced clock on probe error
- Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
- clk: bcm-2835: Pick the closest clock rate
- clk: bcm-2835: Remove rounding up the dividers
- wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
- wcn36xx: Release DMA channel descriptor allocations
- media: videobuf2: Fix the size printk format
- media: aspeed: fix mode-detect always time out at 2nd run
- media: em28xx: fix memory leak in em28xx_init_dev
- media: aspeed: Update signal status immediately to ensure sane hw state
- arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
- arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
- Bluetooth: stop proccessing malicious adv data
- tee: fix put order in teedev_close_context()
- media: dmxdev: fix UAF when dvb_register_device() fails
- crypto: qce - fix uaf on qce_ahash_register_one
- arm64: dts: ti: k3-j721e: correct cache-sets info
- tty: serial: atmel: Check return code of dmaengine_submit()
- tty: serial: atmel: Call dma_async_issue_pending()
- media: rcar-csi2: Correct the selection of hsfreqrange
- media: imx-pxp: Initialize the spinlock prior to using it
- media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
- media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
- media: venus: core: Fix a resource leak in the error handling path of
'venus_probe()'
- netfilter: bridge: add support for pppoe filtering
- arm64: dts: qcom: msm8916: fix MMC controller aliases
- ACPI: EC: Rework flushing of EC work while suspended to idle
- drm/amdgpu: Fix a NULL pointer dereference in
amdgpu_connector_lcd_native_mode()
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in
radeon_driver_open_kms()
- arm64: dts: ti: k3-j721e: Fix the L2 cache sets
- tty: serial: uartlite: allow 64 bit address
- serial: amba-pl011: do not request memory region twice
- floppy: Fix hang in watchdog when disk is ejected
- staging: rtl8192e: return error code from rtllib_softmac_init()
- staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
- Bluetooth: btmtksdio: fix resume failure
- media: dib8000: Fix a memleak in dib8000_init()
- media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
- media: si2157: Fix "warm" tuner state detection
- sched/rt: Try to restart rt period timer when rt runtime exceeded
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
- mwifiex: Fix possible ABBA deadlock
- xfrm: fix a small bug in xfrm_sa_len()
- crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
- crypto: stm32/cryp - fix double pm exit
- crypto: stm32/cryp - fix lrw chaining mode
- ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
- media: dw2102: Fix use after free
- media: msi001: fix possible null-ptr-deref in msi001_probe()
- media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
- drm/msm/dpu: fix safe status debugfs file
- drm/bridge: ti-sn65dsi86: Set max register for regmap
- media: hantro: Fix probe func error path
- xfrm: interface with if_id 0 should return error
- xfrm: state and policy should fail if XFRMA_IF_ID 0
- ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
- usb: ftdi-elan: fix memory leak on device disconnect
- ARM: dts: armada-38x: Add generic compatible to UART nodes
- mmc: meson-mx-sdio: add IRQ check
- selinux: fix potential memleak in selinux_add_opt()
- bpftool: Enable line buffering for stdout
- x86/mce/inject: Avoid out-of-bounds write when setting flags
- ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
__nonstatic_find_io_region()
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
nonstatic_find_mem_region()
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
- ppp: ensure minimum packet size in ppp_write()
- rocker: fix a sleeping in atomic bug
- staging: greybus: audio: Check null pointer
- fsl/fman: Check for null pointer after calling devm_ioremap
- Bluetooth: hci_bcm: Check for error irq
- HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_get_str_desc
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_huion_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_frame_init_v1_buttonpad
- debugfs: lockdown: Allow reading debugfs files that are not world readable
- net/mlx5e: Don't block routes with nexthop objects in SW
- Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
- net/mlx5: Set command entry semaphore up once got index free
- spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
- tpm: add request_locality before write TPM_INT_ENABLE
- can: softing: softing_startstop(): fix set but not used variable warning
- can: xilinx_can: xcan_probe(): check for error irq
- pcmcia: fix setting of kthread task states
- net: mcs7830: handle usb read errors properly
- ext4: avoid trim error on fs with small groups
- ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
- ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
- ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
- RDMA/hns: Validate the pkey index
- clk: imx8mn: Fix imx8mn_clko1_sels
- powerpc/prom_init: Fix improper check of prom_getprop()
- ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
- ALSA: oss: fix compile error when OSS_DEBUG is enabled
- char/mwave: Adjust io port register size
- binder: fix handling of error during copy
- iommu/io-pgtable-arm: Fix table descriptor paddr formatting
- scsi: ufs: Fix race conditions related to driver data
- PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
- powerpc/powermac: Add additional missing lockdep_register_key()
- RDMA/core: Let ib_find_gid() continue search even after empty entry
- RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
- ASoC: rt5663: Handle device_property_read_u32_array error codes
- clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system
enter shell
- dmaengine: pxa/mmp: stop referencing config->slave_id
- iommu/iova: Fix race between FQ timeout and teardown
- phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
- ASoC: samsung: idma: Check of ioremap return value
- misc: lattice-ecp3-config: Fix task hung when firmware load failed
- mips: lantiq: add support for clk_set_parent()
- mips: bcm63xx: add support for clk_set_parent()
- RDMA/cxgb4: Set queue pair state when being queried
- of: base: Fix phandle argument length mismatch error message
- Bluetooth: Fix debugfs entry leak in hci_register_dev()
- fs: dlm: filter user dlm messages for kernel locks
- drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
- ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
- drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
- ARM: shmobile: rcar-gen2: Add missing of_node_put()
- batman-adv: allow netlink usage in unprivileged containers
- usb: gadget: f_fs: Use stream_open() for endpoint files
- drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
- HID: apple: Do not reset quirks when the Fn key is not found
- media: b2c2: Add missing check in flexcop_pci_isr:
- EDAC/synopsys: Use the quirk for version instead of ddr version
- mlxsw: pci: Add shutdown method in PCI driver
- drm/bridge: megachips: Ensure both bridges are probed before registration
- gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
- HSI: core: Fix return freed object in hsi_new_client
- mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
- rsi: Fix use-after-free in rsi_rx_done_handler()
- rsi: Fix out-of-bounds read in rsi_read_pkt()
- usb: uhci: add aspeed ast2600 uhci support
- floppy: Add max size check for user space request
- x86/mm: Flush global TLB when switching to trampoline page-table
- media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
- media: saa7146: hexium_orion: Fix a NULL pointer dereference in
hexium_attach()
- media: m920x: don't use stack on USB reads
- iwlwifi: mvm: synchronize with FW after multicast commands
- ath10k: Fix tx hanging
- net-sysfs: update the queue counts in the unregistration path
- net: phy: prefer 1000baseT over 1000baseKX
- gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
- x86/mce: Mark mce_panic() noinstr
- x86/mce: Mark mce_end() noinstr
- x86/mce: Mark mce_read_aux() noinstr
- net: bonding: debug: avoid printing debug logs when bond is not notifying
peers
- bpf: Do not WARN in bpf_warn_invalid_xdp_action()
- HID: quirks: Allow inverting the absolute X/Y values
- media: igorplugusb: receiver overflow should be reported
- media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
hexium_attach()
- mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
- audit: ensure userspace is penalized the same as the kernel when under
pressure
- arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
- arm64: tegra: Adjust length of CCPLEX cluster MMIO region
- cpufreq: Fix initialization of min and max frequency QoS requests
- usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
- ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
- iwlwifi: fix leaks/bad data after failed firmware load
- iwlwifi: remove module loading failure message
- iwlwifi: mvm: Fix calculation of frame length
- um: registers: Rename function names to avoid conflicts and build problems
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
- ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
- ACPICA: Utilities: Avoid deleting the same object twice in a row
- ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
- ACPICA: Fix wrong interpretation of PCC address
- ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
- drm/amdgpu: fixup bad vram size on gmc v8
- ACPI: battery: Add the ThinkPad "Not Charging" quirk
- btrfs: remove BUG_ON() in find_parent_nodes()
- btrfs: remove BUG_ON(!eie) in find_parent_nodes
- net: mdio: Demote probed message to debug print
- mac80211: allow non-standard VHT MCS-10/11
- dm btree: add a defensive bounds check to insert_at()
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
- net: phy: marvell: configure RGMII delays for 88E1118
- net: gemini: allow any RGMII interface mode
- regulator: qcom_smd: Align probe function with rpmh-regulator
- serial: pl010: Drop CR register reset on set_termios
- serial: core: Keep mctrl register state and cached copy in sync
- random: do not throw away excess input to crng_fast_load
- parisc: Avoid calling faulthandler_disabled() twice
- powerpc/6xx: add missing of_node_put
- powerpc/powernv: add missing of_node_put
- powerpc/cell: add missing of_node_put
- powerpc/btext: add missing of_node_put
- powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
- i2c: i801: Don't silently correct invalid transfer size
- powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
- i2c: mpc: Correct I2C reset procedure
- clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
- powerpc/powermac: Add missing lockdep_register_key()
- KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
- w1: Misuse of get_user()/put_user() reported by sparse
- scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
- ALSA: seq: Set upper limit of processed events
- powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
- MIPS: OCTEON: add put_device() after of_find_device_by_node()
- i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
- MIPS: Octeon: Fix build errors using clang
- scsi: sr: Don't use GFP_DMA
- ASoC: mediatek: mt8173: fix device_node leak
- power: bq25890: Enable continuous conversion for ADC at charging
- rpmsg: core: Clean up resources on announce_create failure.
- crypto: omap-aes - Fix broken pm_runtime_and_get() usage
- crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
- crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
- fuse: Pass correct lend value to filemap_write_and_wait_range()
- serial: Fix incorrect rs485 polarity on uart open
- cputime, cpuacct: Include guest time in user time in cpuacct.stat
- tracing/kprobes: 'nmissed' not showed correctly for kretprobe
- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
- s390/mm: fix 2KB pgtable release race
- drm/etnaviv: limit submit sizes
- drm/nouveau/kms/nv04: use vzalloc for nv04_display
- drm/bridge: analogix_dp: Make PSR-exit block less
- PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
- PCI: pci-bridge-emul: Correctly set PCIe capabilities
- PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
- xfrm: fix policy lookup for ipv6 gre packets
- btrfs: fix deadlock between quota enable and other quota operations
- btrfs: check the root node for uptodate before returning it
- btrfs: respect the max size in the header when activating swap file
- ext4: make sure to reset inode lockdep class when quota enabling fails
- ext4: make sure quota gets properly shutdown on error
- ext4: set csum seed in tmp inode while migrating to extents
- ext4: Fix BUG_ON in ext4_bread when write quota data
- ext4: don't use the orphan list when migrating an inode
- drm/radeon: fix error handling in radeon_driver_open_kms
- of: base: Improve argument length mismatch error
- firmware: Update Kconfig help text for Google firmware
- media: rcar-csi2: Optimize the selection PHTW register
- Documentation: dmaengine: Correctly describe dmatest with channel unset
- Documentation: ACPI: Fix data node reference documentation
- Documentation: refer to config RANDOMIZE_BASE for kernel address-space
randomization
- Documentation: fix firewire.rst ABI file path error
- scsi: core: Show SCMD_LAST in text form
- RDMA/hns: Modify the mapping attribute of doorbell to device
- RDMA/rxe: Fix a typo in opcode name
- dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
- Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
- powerpc/cell: Fix clang -Wimplicit-fallthrough warning
- powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
- bpftool: Remove inclusion of utilities.mak from Makefiles
- ipv4: avoid quadratic behavior in netns dismantle
- net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
- parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
- f2fs: fix to reserve space for IO align feature
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
- clk: si5341: Fix clock HW provider cleanup
- net: axienet: limit minimum TX ring size
- net: axienet: fix number of TX ring slots for available check
- net: axienet: increase default TX ring size to 128
- rtc: pxa: fix null pointer dereference
- inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
- netns: add schedule point in ops_exit_list()
- xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
- gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
- libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
- perf script: Fix hex dump character output
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
- dmaengine: at_xdmac: Print debug message after realeasing the lock
- dmaengine: at_xdmac: Fix concurrency over xfers_list
- dmaengine: at_xdmac: Fix lld view setting
- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
- arm64: dts: qcom: msm8996: drop not documented adreno properties
- net_sched: restore "mpu xxx" handling
- bcmgenet: add WOL IRQ check
- net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
- dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
- dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
- scripts/dtc: dtx_diff: remove broken example from help text
- lib82596: Fix IRQ check in sni_82596_probe
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
- mtd: nand: bbt: Fix corner case in bad block table handling
- Revert "ia64: kprobes: Use generic kretprobe trampoline handler"
- Linux 5.4.174
* Focal update: v5.4.173 upstream stable release (LP: #1959701)
- kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test
- devtmpfs regression fix: reconfigure on each mount
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- perf: Protect perf_guest_cbs with RCU
- KVM: s390: Clarify SIGP orders versus STOP/RESTART
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- firmware: qemu_fw_cfg: fix sysfs information leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- mtd: fixup CFI on ixp4xx
- ARM: 9025/1: Kconfig: CPU_BIG_ENDIAN depends on !LD_IS_LLD
- Linux 5.4.173
* Focal update: v5.4.172 upstream stable release (LP: #1959698)
- workqueue: Fix unbind_workers() VS wq_worker_running() race
- Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
- Bluetooth: bfusb: fix division by zero in send path
- USB: core: Fix bug in resuming hub's handling of wakeup requests
- USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
- mmc: sdhci-pci: Add PCI ID for Intel ADL
- veth: Do not record rx queue hint in veth_xmit
- mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
- drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...)
functions
- can: gs_usb: fix use of uninitialized variable, detach device on reception
of invalid USB data
- can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
- random: fix data race on crng_node_pool
- random: fix data race on crng init time
- random: fix crash on multiple early calls to add_bootloader_randomness()
- media: Revert "media: uvcvideo: Set unique vdev name based in type"
- staging: wlan-ng: Avoid bitwise vs logical OR warning in
hfa384x_usb_throttlefn()
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
- staging: greybus: fix stack size warning with UBSAN
- Linux 5.4.172
* Focal update: v5.4.171 upstream stable release (LP: #1959437)
- f2fs: quota: fix potential deadlock
- Input: touchscreen - Fix backport of
a02dcde595f7cbd240ccd64de96034ad91cffc40
- selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
- tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
- tracing: Tag trace_percpu_buffer as a percpu pointer
- ieee802154: atusb: fix uninit value in atusb_set_extended_addr
- iavf: Fix limit of total number of queues to active queues of VF
- RDMA/core: Don't infoleak GRH fields
- RDMA/uverbs: Check for null return of kmalloc_array
- mac80211: initialize variable have_higher_than_11mbit
- i40e: fix use-after-free in i40e_sync_filters_subtask()
- i40e: Fix for displaying message regarding NVM version
- i40e: Fix incorrect netdev's real number of RX/TX queues
- ipv4: Check attribute length for RTA_GATEWAY in multipath route
- ipv4: Check attribute length for RTA_FLOW in multipath route
- ipv6: Check attribute length for RTA_GATEWAY in multipath route
- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
- lwtunnel: Validate RTA_ENCAP_TYPE attribute length
- batman-adv: mcast: don't send link-local multicast to mcast routers
- sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
- net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
- power: supply: core: Break capacity loop
- power: reset: ltc2952: Fix use of floating point literals
- rndis_host: support Hytera digital radios
- phonet: refcount leak in pep_sock_accep
- ipv6: Continue processing multipath route even if gateway attribute is
invalid
- ipv6: Do cleanup if attribute validation fails in multipath route
- usb: mtu3: fix interval value for intr and isoc
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
- ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
- net: udp: fix alignment problem in udp4_seq_show()
- atlantic: Fix buff_ring OOB in aq_ring_rx_clean
- mISDN: change function names to avoid conflicts
- Linux 5.4.171
* Focal update: v5.4.170 upstream stable release (LP: #1958898)
- tee: handle lookup of shm with reference count 0
- Input: i8042 - add deferred probe support
- Input: i8042 - enable deferred probe quirk for ASUS UM325UA
- tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- platform/x86: apple-gmux: use resource_size() with res
- memblock: fix memblock_phys_alloc() section mismatch error
- recordmcount.pl: fix typo in s390 mcount regex
- selinux: initialize proto variable in selinux_ip_postroute_compat()
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
- net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
- sctp: use call_rcu to free endpoint
- net: usb: pegasus: Do not drop long Ethernet frames
- net: lantiq_xrx200: fix statistics of received bytes
- NFC: st21nfca: Fix memory leak in device probe and remove
- ionic: Initialize the 'lif->dbid_inuse' bitmap
- net/mlx5e: Fix wrong features assignment in case of error
- selftests/net: udpgso_bench_tx: fix dst ip argument
- net/ncsi: check for error return from call to nla_put_u32
- fsl/fman: Fix missing put_device() call in fman_port_probe
- i2c: validate user data in compat ioctl
- nfc: uapi: use kernel size_t to fix user-space builds
- uapi: fix linux/nfc.h userspace compilation errors
- xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
- usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- usb: mtu3: add memory barrier before set GPD's HWO
- usb: mtu3: fix list_head check warning
- usb: mtu3: set interval of FS intr and isoc endpoint
- binder: fix async_free_space accounting for empty parcels
- scsi: vmw_pvscsi: Set residual data length conditionally
- Input: appletouch - initialize work before device registration
- Input: spaceball - fix parsing of movement data packets
- net: fix use-after-free in tw_timer_handler
- perf script: Fix CPU filtering of a script's switch events
- Linux 5.4.170
* Focal update: v5.4.170 upstream stable release (LP: #1958898) // HID_ASUS
should depend on USB_HID in stable v4.15 backports (LP: #1959762)
- HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option
* Focal update: v5.4.169 upstream stable release (LP: #1958557)
- net: usb: lan78xx: add Allied Telesis AT29M2-AF
- serial: 8250_fintek: Fix garbled text for console
- arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
- spi: change clk_disable_unprepare to clk_unprepare
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- netfilter: fix regression in looped (broad|multi)cast's MAC handling
- qlcnic: potential dereference null pointer of rx_queue->page_ring
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
- net: skip virtio_net_hdr_set_proto if protocol already set
- ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
- bonding: fix ad_actor_system option setting to default
- fjes: Check for error irq
- drivers: net: smc911x: Check for error irq
- sfc: falcon: Check null pointer of rx_queue->page_ring
- Input: elantech - fix stack out of bound access in
elantech_change_report_id()
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
- hwmon: (lm90) Add max6654 support to lm90 driver
- hwmon: (lm90) Add basic support for TI TMP461
- hwmon: (lm90) Introduce flag indicating extended temperature support
- hwmon: (lm90) Drop critical attribute support for MAX6654
- ALSA: jack: Check the return value of kstrdup()
- ALSA: drivers: opl3: Fix incorrect use of vp->state
- ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
- ipmi: bail out if init_srcu_struct fails
- ipmi: ssif: initialize ssif_info->client early
- ipmi: fix initialization when workqueue allocation fails
- parisc: Correct completer in lws start
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
- pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
- mmc: sdhci-tegra: Fix switch to HS400ES mode
- mmc: core: Disable card detect during shutdown
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
- tee: optee: Fix incorrect page free bug
- f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
- usb: gadget: u_ether: fix race in setting MAC address in setup phase
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
- mm: mempolicy: fix THP allocations escaping mempolicy restrictions
- pinctrl: mediatek: fix global-out-of-bounds issue
- hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
- hwmon: (lm90) Do not report 'busy' status bit as alarm
- ax25: NPD bug when detaching AX25 device
- hamradio: defer ax25 kfree after unregister_netdev
- hamradio: improve the incomplete fix to avoid NPD
- phonet/pep: refuse to enable an unbound pipe
- Linux 5.4.169
* Focal update: v5.4.168 upstream stable release (LP: #1957991)
- KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
- mac80211: mark TX-during-stop for TX in in_reconfig
- mac80211: send ADDBA requests using the tid/queue of the aggregation session
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
- virtio_ring: Fix querying of maximum DMA mapping size for virtio device
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390
- dm btree remove: fix use after free in rebalance_children()
- audit: improve robustness of the audit queue handling
- iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
- nfsd: fix use-after-free due to delegation race
- arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
edge
- arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
- arm64: dts: rockchip: fix audio-supply for Rock Pi 4
- mac80211: track only QoS data frames for admission control
- ARM: socfpga: dts: fix qspi node compatible
- clk: Don't parent clks until the parent is fully registered
- selftests: net: Correct ping6 expected rc from 2 to 1
- s390/kexec_file: fix error handling when applying relocations
- sch_cake: do not call cake_destroy() from cake_init()
- inet_diag: use jiffies_delta_to_msecs()
- inet_diag: fix kernel-infoleak for UDP sockets
- selftests: Fix raw socket bind tests with VRF
- selftests: Fix IPv6 address bind tests
- dmaengine: st_fdma: fix MODULE_ALIAS
- selftest/net/forwarding: declare NETIFS p9 p10
- mac80211: agg-tx: refactor sending addba
- mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
- mac80211: accept aggregation sessions on 6 GHz
- mac80211: fix lookup when adding AddBA extension element
- net: sched: lock action when translating it to flow_action infra
- flow_offload: return EOPNOTSUPP for the unsupported mpls action type
- rds: memory leak in __rds_conn_create()
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
- igb: Fix removal of unicast MAC filters of VFs
- igbvf: fix double free in `igbvf_probe`
- ixgbe: set X550 MDIO speed before talking to PHY
- netdevsim: Zero-initialize memory for new map's value in function
nsim_bpf_map_alloc
- net: Fix double 0x prefix print in SKB dump
- net/smc: Prevent smc_release() from long blocking
- net: systemport: Add global locking for descriptor lifecycle
- sit: do not call ipip6_dev_free() from sit_init_net()
- USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
- PCI/MSI: Mask MSI-X vectors only on success
- usb: xhci: Extend support for runtime power management for AMD's Yellow
carp.
- USB: serial: cp210x: fix CP2105 GPIO registration
- USB: serial: option: add Telit FN990 compositions
- timekeeping: Really make sure wall_to_monotonic isn't positive
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
- mac80211: validate extended element ID is present
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO
- Input: touchscreen - avoid bitwise vs logical OR warning
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
- xsk: Do not sleep in poll() when need_wakeup set
- media: mxl111sf: change mutex_init() location
- fuse: annotate lock in fuse_reverse_inval_entry()
- ovl: fix warning in ovl_create_real()
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
- rcu: Mark accesses to rcu_state.n_force_qs
- mac80211: fix regression in SSN handling of addba tx
- net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info
- Revert "xsk: Do not sleep in poll() when need_wakeup set"
- xen/blkfront: harden blkfront against event channel storms
- xen/netfront: harden netfront against event channel storms
- xen/console: harden hvc_xen against event channel storms
- xen/netback: fix rx queue stall detection
- xen/netback: don't queue unlimited number of packages
- Linux 5.4.168
* Focal update: v5.4.167 upstream stable release (LP: #1957987)
- nfc: fix segfault in nfc_genl_dump_devices_done
- drm/msm/dsi: set default num_data_lanes
- net/mlx4_en: Update reported link modes for 1/10G
- parisc/agp: Annotate parisc agp init functions with __init
- i2c: rk3x: Handle a spurious start completion interrupt flag
- net: netlink: af_netlink: Prevent empty skb by adding a check on len.
- drm/amd/display: Fix for the no Audio bug with Tiled Displays
- drm/amd/display: add connector type check for CRC source set
- tracing: Fix a kmemleak false positive in tracing_map
- KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
- selinux: fix race condition when computing ocontext SIDs
- bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc
- hwmon: (dell-smm) Fix warning on /proc/i8k creation error
- memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
- memblock: align freed memory map on pageblock boundaries with SPARSEMEM
- memblock: ensure there is no overflow in memblock_overlaps_region()
- arm: extend pfn_valid to take into account freed memory map alignment
- arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
- Linux 5.4.167
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
[ Ubuntu: 5.4.0-104.118 ]
* CVE-2022-23960
- SAUCE: kvm: arm: fix build on 32-bit
[ Ubuntu: 5.4.0-103.117 ]
* CVE-2022-23960
- arm64: Add part number for Arm Cortex-A77
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
- arm64: Add Cortex-X2 CPU part definition
- arm64: add ID_AA64ISAR2_EL1 sys register
- SAUCE: arm64: entry.S: Add ventry overflow sanity checks
- SAUCE: arm64: entry: Make the trampoline cleanup optional
- SAUCE: arm64: entry: Free up another register on kpti's tramp_exit path
- SAUCE: arm64: entry: Move the trampoline data page before the text page
- SAUCE: arm64: entry: Allow tramp_alias to access symbols after the 4K
boundary
- SAUCE: arm64: entry: Don't assume tramp_vectors is the start of the vectors
- SAUCE: arm64: entry: Move trampoline macros out of ifdef'd section
- SAUCE: arm64: entry: Make the kpti trampoline's kpti sequence optional
- SAUCE: arm64: entry: Allow the trampoline text to occupy multiple pages
- SAUCE: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
- SAUCE: arm64: entry: Add vectors that have the bhb mitigation sequences
- SAUCE: arm64: entry: Add macro for reading symbol addresses from the
trampoline
- SAUCE: arm64: Add percpu vectors for EL1
- SAUCE: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of
Spectre-v2
- SAUCE: KVM: arm64: Add templates for BHB mitigation sequences
- SAUCE: arm64: Mitigate spectre style branch history side channels
- SAUCE: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
migrated
- SAUCE: arm64: Use the clearbhb instruction in mitigations
- [Config]: set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y
* CVE-2022-25636
- netfilter: nf_tables_offload: incorrect flow offload action array size
* CVE-2022-0001
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation()
- x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
- SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
- SAUCE: x86/speculation: Add eIBRS + Retpoline options
- SAUCE: Documentation/hw-vuln: Update spectre doc
* Disable unprivileged BPF by default (LP: #1961338)
- bpf: Add kconfig knob for disabling unpriv bpf by default
- [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
[ Ubuntu: 5.4.0-100.113 ]
* focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900)
* CVE-2022-22942
- SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
* CVE-2022-0330
- drm/i915: Flush TLBs before releasing backing store
* Focal update: v5.4.166 upstream stable release (LP: #1957008)
- netfilter: selftest: conntrack_vrf.sh: fix file permission
- Linux 5.4.166
- net/packet: rx_owner_map depends on pg_vec
- USB: gadget: bRequestType is a bitfield, not a enum
- HID: holtek: fix mouse probing
- udp: using datalen to cap ipv6 udp max gso segments
- selftests: Calculate udpgso segment count without header adjustment
* Focal update: v5.4.165 upstream stable release (LP: #1957007)
- serial: tegra: Change lower tolerance baud rate limit for tegra20 and
tegra30
- ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type
- HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
- HID: google: add eel USB id
- HID: add hid_is_usb() function to make it simpler for USB detection
- HID: add USB_HID dependancy to hid-prodikeys
- HID: add USB_HID dependancy to hid-chicony
- HID: add USB_HID dependancy on some USB HID drivers
- HID: bigbenff: prevent null pointer dereference
- HID: wacom: fix problems when device is not a valid USB device
- HID: check for valid USB device for many HID drivers
- can: kvaser_usb: get CAN clock frequency from device
- can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
stats->{rx,tx}_errors counter
- can: sja1000: fix use after free in ems_pcmcia_add_card()
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
- selftests: netfilter: add a vrf+conntrack testcase
- vrf: don't run conntrack on vrf with !dflt qdisc
- bpf: Fix the off-by-two error in range markings
- ice: ignore dropped packets during init
- bonding: make tx_rebalance_counter an atomic
- nfp: Fix memory leak in nfp_cpp_area_cache_add()
- seg6: fix the iif in the IPv6 socket control block
- udp: using datalen to cap max gso segments
- iavf: restore MSI state on reset
- iavf: Fix reporting when setting descriptor count
- IB/hfi1: Correct guard on eager buffer deallocation
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered
- ALSA: ctl: Fix copy of updated id with element read/write
- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
- ALSA: pcm: oss: Fix negative period/buffer sizes
- ALSA: pcm: oss: Limit the period size to 16MB
- ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
- btrfs: clear extent buffer uptodate when we fail to write it
- btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
- nfsd: Fix nsfd startup race (again)
- tracefs: Have new files inherit the ownership of their parent
- clk: qcom: regmap-mux: fix parent clock lookup
- drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
- can: pch_can: pch_can_rx_normal: fix use after free
- can: m_can: Disable and ignore ELO interrupt
- x86/sme: Explicitly map new EFI memmap table as encrypted
- libata: add horkage for ASMedia 1092
- wait: add wake_up_pollfree()
- SAUCE: binder: export __wake_up_pollfree for binder module
- binder: use wake_up_pollfree()
- signalfd: use wake_up_pollfree()
- aio: keep poll requests on waitqueue until completed
- aio: fix use-after-free due to missing POLLFREE handling
- tracefs: Set all files to the same group ownership as the mount option
- block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
- qede: validate non LSO skb length
- ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
- i40e: Fix failed opcode appearing if handling messages from VF
- i40e: Fix pre-set max number of queues for VF
- mtd: rawnand: fsmc: Take instruction delay into account
- mtd: rawnand: fsmc: Fix timing computation
- dt-bindings: net: Reintroduce PHY no lane swap binding
- tools build: Remove needless libpython-version feature check that breaks
test-all fast path
- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
- net: altera: set a couple error code in probe()
- net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
- net, neigh: clear whole pneigh_entry at alloc time
- net/qla3xxx: fix an error code in ql_adapter_up()
- Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
rp_filter tests"
- selftests/fib_tests: Rework fib_rp_filter_test()
- USB: gadget: detect too-big endpoint 0 requests
- USB: gadget: zero allocate endpoint 0 buffers
- usb: core: config: fix validation of wMaxPacketValue entries
- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
suspending
- usb: core: config: using bit mask instead of individual bits
- xhci: avoid race between disable slot command and host runtime suspend
- iio: trigger: Fix reference counting
- iio: trigger: stm32-timer: fix MODULE_ALIAS
- iio: stk3310: Don't return error code in interrupt handler
- iio: mma8452: Fix trigger reference couting
- iio: ltr501: Don't return error code in trigger handler
- iio: kxsd9: Don't return error code in trigger handler
- iio: itg3200: Call iio_trigger_notify_done() on error
- iio: dln2-adc: Fix lockdep complaint
- iio: dln2: Check return value of devm_iio_trigger_register()
- iio: at91-sama5d2: Fix incorrect sign extension
- iio: adc: axp20x_adc: fix charging current reporting on AXP22x
- iio: ad7768-1: Call iio_trigger_notify_done() on error
- iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
- irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
- irqchip: nvic: Fix offset for Interrupt Priority Offsets
- misc: fastrpc: fix improper packet size calculation
- bpf: Add selftests to cover packet access corner cases
- Linux 5.4.165
* Focal update: v5.4.164 upstream stable release (LP: #1956381)
- NFSv42: Fix pagecache invalidation after COPY/CLONE
- of: clk: Make <linux/of_clk.h> self-contained
- arm64: dts: mcbin: support 2W SFP modules
- can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
- gfs2: Fix length of holes reported at end-of-file
- drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
- mac80211: do not access the IV when it was stripped
- net/smc: Transfer remaining wait queue entries during fallback
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
- net: return correct error code
- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
- s390/setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
hns_dsaf_ge_srst_by_port()
- net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
bound
- net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
- perf hist: Fix memory leak of a perf_hpp_fmt
- perf report: Fix memory leaks around perf_tip()
- net/smc: Avoid warning of possible recursive locking
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- rt2x00: do not mark device gone on EPROTO errors during start
- cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
- s390/pci: move pseudo-MMIO to prevent MIO overlap
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
- i2c: stm32f7: flush TX FIFO upon transfer errors
- i2c: stm32f7: recover the bus on access timeout
- i2c: stm32f7: stop dma transfer in case of NACK
- i2c: cbus-gpio: set atomic transfer callback
- natsemi: xtensa: fix section mismatch warnings
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- selftests: net: Correct case name
- rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
is available
- net: marvell: mvpp2: Fix the computation of shared CPUs
- net: annotate data-races on txq->xmit_lock_owner
- ipv4: convert fib_num_tclassid_users to atomic_t
- net/rds: correct socket tunable error in rds_tcp_tune()
- net/smc: Keep smc_close_final rc during active close
- drm/msm: Do hw_init() before capturing GPU state
- ipv6: fix memory leak in fib6_rule_suppress
- KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
- sched/uclamp: Fix rq->uclamp_max not set on first enqueue
- parisc: Fix KBUILD_IMAGE for self-extracting kernel
- parisc: Fix "make install" on newer debian releases
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- x86/tsc: Add a timer to make sure TSC_adjust is always checked
- x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
- x86/64/mm: Map all kernel memory into trampoline_pgd
- tty: serial: msm_serial: Deactivate RX DMA for polling support
- serial: pl011: Add ACPI SBSA UART match id
- serial: core: fix transmit-buffer reset and memleak
- serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
- serial: 8250_pci: rewrite pericom_do_set_divisor()
- iwlwifi: mvm: retry init flow if failed
- parisc: Mark cr16 CPU clocksource unstable on all SMP machines
- net/tls: Fix authentication failure in CCM mode
- Linux 5.4.164
* Focal update: v5.4.163 upstream stable release (LP: #1956380)
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- usb: dwc2: gadget: Fix ISOC flow for elapsed frames
- usb: dwc2: hcd_queue: Fix use of floating point literal
- net: nexthop: fix null pointer dereference when IPv6 is not enabled
- usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- media: cec: copy sequence field for the reply
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- staging/fbtft: Fix backlight
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
- tracing/uprobe: Fix uprobe_perf_open probes iteration
- tracing: Fix pid filtering when triggers are attached
- mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
- mdio: aspeed: Fix "Link is Down" issue
- PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
- PCI: aardvark: Wait for endpoint to be ready before training link
- PCI: aardvark: Fix big endian support
- PCI: aardvark: Train link immediately after enabling training
- PCI: aardvark: Improve link training
- PCI: aardvark: Issue PERST via GPIO
- PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros
- PCI: aardvark: Don't touch PCIe registers if no card connected
- PCI: aardvark: Fix compilation on s390
- PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()
- PCI: aardvark: Update comment about disabling link training
- PCI: pci-bridge-emul: Fix array overruns, improve safety
- PCI: aardvark: Configure PCIe resources from 'ranges' DT property
- PCI: aardvark: Fix PCIe Max Payload Size setting
- PCI: aardvark: Implement re-issuing config requests on CRS response
- PCI: aardvark: Simplify initialization of rootcap on virtual bridge
- PCI: aardvark: Fix link training
- PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
bridge
- PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
- PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
- pinctrl: armada-37xx: Correct PWM pins definitions
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- netfilter: ipvs: Fix reuse connection if RS weight is 0
- ARM: dts: BCM5301X: Fix I2C controller interrupt
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node
- ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
- net: ieee802154: handle iftypes as u32
- firmware: arm_scmi: pm: Propagate return value to caller
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- drm/vc4: fix error code in vc4_create_object()
- iavf: Prevent changing static ITR values if adaptive moderation is on
- ipv6: fix typos in __ip6_finish_output()
- nfp: checking parameter process for rx-usecs/tx-usecs is invalid
- net: ipv6: add fib6_nh_release_dsts stub
- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
- net/smc: Ensure the active closing peer first closes clcsock
- nvmet-tcp: fix incomplete data digest send
- net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
- PM: hibernate: use correct mode for swsusp_close()
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
flows
- nvmet: use IOCB_NOWAIT only if the filesystem supports it
- igb: fix netpoll exit with traffic
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
- net: vlan: fix underflow for the real_dev refcnt
- net/smc: Don't call clcsock shutdown twice when smc shutdown
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs
- net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
- f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
- smb3: do not error on fsync when readonly
- vhost/vsock: fix incorrect used length reported to the guest
- tracing: Check pid filtering when creating events
- s390/mm: validate VMA in PGSTE manipulation functions
- shm: extend forced shm destroy to support objects from several IPC nses
- NFC: add NCI_UNREG flag to eliminate the race
- fuse: release pipe buf after last use
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- xen/blkfront: read response from backend only once
- xen/blkfront: don't take local copy of a request from the ring page
- xen/blkfront: don't trust the backend response data blindly
- xen/netfront: read response from backend only once
- xen/netfront: don't read data from request on the ring page
- xen/netfront: disentangle tx_skb_freelist
- xen/netfront: don't trust the backend response data blindly
- tty: hvc: replace BUG_ON() with negative return value
- Linux 5.4.163
* net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
- net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
* CVE-2021-4083
- fget: check that the fd still exists after getting a ref to it
* CVE-2021-4155
- xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
[ Ubuntu: 5.4.0-99.112 ]
* focal/linux: 5.4.0-99.112 -proposed tracker (LP: #1959817)
* linux-image-5.4.0-97.110 freezes by accessing cifs shares (LP: #1959665)
- Revert "cifs: To match file servers, make sure the server hostname matches"
- Revert "cifs: set a minimum of 120s for next dns resolution"
- Revert "cifs: use the expiry output of dns_query to schedule next
resolution"
[ Ubuntu: 5.4.0-97.110 ]
* icmp_redirect from selftests fails on F/kvm (unary operator expected)
(LP: #1938964)
- selftests: icmp_redirect: pass xfail=0 to log_test()
* Focal: CIFS stable updates (LP: #1954926)
- cifs: use the expiry output of dns_query to schedule next resolution
- cifs: set a minimum of 120s for next dns resolution
- cifs: To match file servers, make sure the server hostname matches
* seccomp_bpf in seccomp from ubuntu_kernel_selftests failed to build on B-5.4
(LP: #1896420)
- SAUCE: selftests/seccomp: fix "storage size of 'md' isn't known" build issue
- SAUCE: selftests/seccomp: Fix s390x regs not defined issue
* system crash when removing ipmi_msghandler module (LP: #1950666)
- ipmi: Move remove_work to dedicated workqueue
- ipmi: msghandler: Make symbol 'remove_work_wq' static
* zcrypt DD: Toleration for new IBM Z Crypto Hardware - (Backport to Ubuntu
20.04) (LP: #1954680)
- s390/AP: support new dynamic AP bus size limit
* [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
kernel part (LP: #1953334)
- s390/setup: diag 318: refactor struct
- s390/kvm: diagnose 0x318 sync and reset
- KVM: s390: remove diag318 reset code
- KVM: s390: add debug statement for diag 318 CPNC data
* Updates to ib_peer_memory requested by Nvidia (LP: #1947206)
- SAUCE: RDMA/core: Updated ib_peer_memory
* Include Infiniband Peer Memory interface (LP: #1923104)
- IB: Allow calls to ib_umem_get from kernel ULPs
- SAUCE: RDMA/core: Introduce peer memory interface
* Focal update: v5.4.162 upstream stable release (LP: #1954834)
- arm64: zynqmp: Do not duplicate flash partition label property
- arm64: zynqmp: Fix serial compatible string
- ARM: dts: NSP: Fix mpcore, mmc node names
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- arm64: dts: hisilicon: fix arm,sp805 compatible string
- RDMA/bnxt_re: Check if the vlan is valid before reporting
- usb: musb: tusb6010: check return value after calling
platform_get_resource()
- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
- arm64: dts: freescale: fix arm,sp805 compatible string
- ASoC: SOF: Intel: hda-dai: fix potential locking issue
- clk: imx: imx6ul: Move csi_sel mux to correct base register
- ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- firmware_loader: fix pre-allocated buf built-in firmware use
- ARM: dts: omap: fix gpmc,mux-add-data type
- usb: host: ohci-tmio: check return value after calling
platform_get_resource()
- ARM: dts: ls1021a: move thermal-zones node out of soc/
- ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
- ALSA: ISA: not for M68K
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- MIPS: sni: Fix the build
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
- powerpc/5200: dts: fix memory node unit name
- ALSA: gus: fix null pointer dereference on pointer block
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli
- sh: check return code of request_irq
- maple: fix wrong return value of maple_bus_init().
- f2fs: fix up f2fs_lookup tracepoints
- sh: fix kconfig unmet dependency warning for FRAME_POINTER
- sh: math-emu: drop unused functions
- sh: define __BIG_ENDIAN for math-emu
- clk: ingenic: Fix bugs with divided dividers
- clk/ast2600: Fix soc revision for AHB
- clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- tracing: Save normal string variables
- tracing/histogram: Do not copy the fixed-size char array field over the
field size
- RDMA/netlink: Add __maybe_unused to static inline in C file
- perf bpf: Avoid memory leak from perf_env__insert_btf()
- perf bench futex: Fix memory leak of perf_cpu_map__new()
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh
- net: bnx2x: fix variable dereferenced before check
- iavf: check for null in iavf_fix_features
- iavf: free q_vectors before queues in iavf_disable_vf
- iavf: Fix failure to exit out from last all-multicast mode
- iavf: prevent accidental free of filter structure
- iavf: validate pointers
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- MIPS: generic/yamon-dt: fix uninitialized variable error
- mips: bcm63xx: add support for clk_get_parent()
- mips: lantiq: add support for clk_get_parent()
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
- scsi: core: sysfs: Fix hang when device state is set via sysfs
- net: sched: act_mirred: drop dst for the direction from egress to ingress
- net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix ping is lost after configuring ADq on VF
- i40e: Fix creation of first queue by omitting it if is not power of two
- i40e: Fix display error code in dmesg
- NFC: reorganize the functions in nci_request
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- NFC: reorder the logic in nfc_{un,}register_device
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- s390/kexec: fix return code handling
- arm64: vdso32: suppress error message for 'make mrproper'
- tun: fix bonding active backup with arp monitoring
- hexagon: export raw I/O routines for modules
- ipc: WARN if trying to remove ipc object which is absent
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
- s390/kexec: fix memory leak of ipl report buffer
- udf: Fix crash after seekdir
- btrfs: fix memory ordering between normal and ordered work functions
- parisc/sticon: fix reverse colors
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/udl: fix control-message timeout
- drm/nouveau: use drm_dev_unplug() during device removal
- drm/i915/dp: Ensure sink rate values are always valid
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- Revert "net: mvpp2: disable force link UP during port init procedure"
- perf/core: Avoid put_page() when GUP fails
- batman-adv: Consider fragmentation for needed_headroom
- batman-adv: Reserve needed_*room for fragments
- batman-adv: Don't always reallocate the fragmentation skb head
- ASoC: DAPM: Cover regression by kctl change notification fix
- usb: max-3421: Use driver data instead of maintaining a list of bound
devices
- ice: Delete always true check of PF pointer
- ALSA: hda: hdac_ext_stream: fix potential locking issues
- ALSA: hda: hdac_stream: fix potential locking issue in
snd_hdac_stream_assign()
- Linux 5.4.162
* Focal update: v5.4.161 upstream stable release (LP: #1954828)
- scsi: ufs: Fix interrupt error message for shared interrupts
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- scsi: ufs: Fix tm request when non-fatal error happens
- fortify: Explicitly disable Clang support
- parisc/entry: fix trace test in syscall exit path
- PCI/MSI: Destroy sysfs before freeing entries
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
- erofs: fix unsafe pagevec reuse of hooked pclusters
- Linux 5.4.161
* Focal update: v5.4.160 upstream stable release (LP: #1953387)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
- binder: use euid from cred instead of using task
- binder: use cred instead of task for selinux checks
- binder: use cred instead of task for getsecid
- Input: iforce - fix control-message timeout
- Input: elantench - fix misreporting trackpoint coordinates
- Input: i8042 - Add quirk for Fujitsu Lifebook T725
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
- scsi: qla2xxx: Fix use after free in eh_abort path
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- parisc: Fix ptrace check on syscall return
- tpm: Check for integer overflow in tpm2_map_response_body()
- firmware/psci: fix application of sizeof to pointer
- crypto: s5p-sss - Add error handling in s5p_aes_probe()
- media: ite-cir: IR receiver stop working after receive overflow
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
- media: v4l2-ioctl: Fix check_ext_ctrls
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
- ALSA: hda/realtek: Add quirk for ASUS UX550VE
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- fuse: fix page stealing
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
- x86/irq: Ensure PI wakeup handler is unregistered before module unload
- cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- cavium: Fix return values of the probe function
- sfc: Don't use netif_info before net_device setup
- hyperv/vmbus: include linux/bitops.h
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
- reset: socfpga: add empty driver allowing consumers to probe
- mmc: winbond: don't build on M68K
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- nvmet-tcp: fix a memory leak when releasing a queue
- spi: spl022: fix Microwire full duplex mode
- net: multicast: calculate csum of looped-back and forwarded packets
- watchdog: Fix OMAP watchdog early handling
- drm: panel-orientation-quirks: Add quirk for GPD Win3
- nvmet-tcp: fix header digest verification
- r8169: Add device 10ec:8162 to driver r8169
- vmxnet3: do not stop tx queues after netif_device_detach()
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
- net/smc: Correct spelling mistake to TCPF_SYN_RECV
- btrfs: clear MISSING device status bit in btrfs_close_one_device
- btrfs: fix lost error handling when replaying directory deletes
- btrfs: call btrfs_check_rw_degradable only if there is a missing device
- ia64: kprobes: Fix to pass correct trampoline address to the handler
- hwmon: (pmbus/lm25066) Add offset coefficients
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
disabled
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- evm: mark evm_fixmode as __ro_after_init
- wcn36xx: Fix HT40 capability for 2Ghz band
- mwifiex: Read a PCI register after writing the TX ring write pointer
- libata: fix checking of DMA state
- wcn36xx: handle connection loss indication
- rsi: fix occasional initialisation failure with BT coex
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- rsi: Fix module dev_oper_mode parameter description
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
- power: supply: max17042_battery: use VFSOC for capacity when no rsns
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
- can: j1939: j1939_can_recv(): ignore messages with invalid source address
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
- serial: core: Fix initializing and restoring termios speed
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- PCI: pci-bridge-emul: Fix emulation of W1C bits
- PCI: aardvark: Do not clear status bits of masked interrupts
- PCI: aardvark: Fix checking for link up via LTSSM state
- PCI: aardvark: Do not unmask unused interrupts
- PCI: aardvark: Fix reporting Data Link Layer Link Active
- PCI: aardvark: Fix return value of MSI domain .alloc() method
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- iio: dac: ad5446: Fix ad5622_write() return value
- USB: serial: keyspan: fix memleak on probe errors
- USB: iowarrior: fix control-message timeouts
- USB: chipidea: fix interrupt deadlock
- dma-buf: WARN on dmabuf release with pending attachments
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
- Bluetooth: fix use-after-free error in lock_sock_nested()
- drm/panel-orientation-quirks: add Valve Steam Deck
- platform/x86: wmi: do not fail if disabling fails
- MIPS: lantiq: dma: add small delay after reset
- MIPS: lantiq: dma: reset correct number of channel
- locking/lockdep: Avoid RCU-induced noinstr fail
- net: sched: update default qdisc visibility after Tx queue cnt changes
- smackfs: Fix use-after-free in netlbl_catmap_walk()
- x86: Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- ath10k: high latency fixes for beacon buffer
- media: mt9p031: Fix corrupted frame after restarting stream
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
- media: uvcvideo: Set capability in s_param
- media: uvcvideo: Return -EIO for control errors
- media: uvcvideo: Set unique vdev name based in type
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
- media: s5p-mfc: Add checking to s5p_mfc_probe().
- media: imx: set a media_device bus_info string
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
- media: rcar-csi2: Add checking to rcsi2_start_receiver()
- ipmi: Disable some operations during a panic
- ACPICA: Avoid evaluating methods too early during system resume
- media: ipu3-imgu: imgu_fmt: Handle properly try
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- net-sysfs: try not to restart the syscall if it will fail eventually
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
- ACPI: battery: Accept charges over the design capacity as full
- leaking_addresses: Always print a trailing newline
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- workqueue: make sysfs of unbound kworker cpumask more clever
- tracing/cfi: Fix cmp_entries_* functions signature mismatch
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- block: remove inaccurate requeue check
- nvmet: fix use-after-free when a port is removed
- nvmet-tcp: fix use-after-free when a port is removed
- nvme: drop scan_lock and always kick requeue list when removing namespaces
- PM: hibernate: Get block device exclusively in swsusp_check()
- selftests: kvm: fix mismatched fclose() after popen()
- iwlwifi: mvm: disable RX-diversity in powersave
- smackfs: use __GFP_NOFAIL for smk_cipso_doi()
- ARM: clang: Do not rely on lr register for stacktrace
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
- vrf: run conntrack only in context of lower/physdev for locally generated
packets
- net: annotate data-race in neigh_output()
- btrfs: do not take the uuid_mutex in btrfs_rm_device
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
bcm_qspi_probe()
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
- parisc: fix warning in flush_tlb_all
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
state
- selftests/bpf: Fix strobemeta selftest regression
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
- drm/v3d: fix wait for TMU write combiner flush
- virtio-gpu: fix possible memory allocation failure
- net: net_namespace: Fix undefined member in key_remove_domain()
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- wilc1000: fix possible memory leak in cfg_scan_result()
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
- crypto: caam - disable pkc for non-E SoCs
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
- net: dsa: rtl8366rb: Fix off-by-one bug
- ath10k: Fix missing frame timestamp for beacon/probe-resp
- drm/amdgpu: fix warning for overflow check
- media: em28xx: add missing em28xx_close_extension
- media: cxd2880-spi: Fix a null pointer dereference on error handling path
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: TDA1997x: handle short reads of hdmi info frame.
- media: mtk-vpu: Fix a resource leak in the error handling path of
'mtk_vpu_probe()'
- media: radio-wl1273: Avoid card name truncation
- media: si470x: Avoid card name truncation
- media: tm6000: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- kprobes: Do not use local variable when creating debugfs file
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
- cpuidle: Fix kobject memory leaks in error paths
- media: em28xx: Don't use ops->suspend if it is NULL
- ath9k: Fix potential interrupt storm on queue reset
- EDAC/amd64: Handle three rank interleaving mode
- netfilter: nft_dynset: relax superfluous check on set updates
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
- crypto: qat - detect PFVF collision after ACK
- crypto: qat - disregard spurious PFVF interrupts
- hwrng: mtk - Force runtime pm ops for sleep ops
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
- memstick: avoid out-of-range warning
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
- hwmon: Fix possible memleak in __hwmon_device_register()
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
lm25066_coeff
- ath10k: fix max antenna gain unit
- drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- mmc: mxs-mmc: disable regulator on error and in the remove function
- block: ataflop: fix breakage introduced at blk-mq refactoring
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
- rsi: stop thread firstly in rsi_91x_init() error handling
- mwifiex: Send DELBA requests according to spec
- phy: micrel: ksz8041nl: do not use power down mode
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl
- PM: hibernate: fix sparse warnings
- clocksource/drivers/timer-ti-dm: Select TIMER_OF
- drm/msm: Fix potential NULL dereference in DPU SSPP
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
- libbpf: Fix BTF data layout checks and allow empty BTF
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
- irq: mips: avoid nested irq_enter()
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- samples/kretprobes: Fix return value if register_kretprobe() failed
- KVM: s390: Fix handle_sske page fault handling
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- wcn36xx: add proper DMA memory barriers in rx path
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
- net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- selftests/bpf: Fix fclose/pclose mismatch in test_progs
- udp6: allow SO_MARK ctrl msg to affect routing
- ibmvnic: don't stop queue in xmit
- ibmvnic: Process crqs after enabling interrupts
- RDMA/rxe: Fix wrong port_cap_flags
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
- arm64: dts: rockchip: Fix GPU register width for RK3328
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
- RDMA/bnxt_re: Fix query SRQ failure
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties
- ARM: dts: at91: tse850: the emac<->phy interface is rmii
- scsi: dc395: Fix error case unwinding
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
- JFS: fix memleak in jfs_mount
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- arm: dts: omap3-gta04a4: accelerometer irq fix
- soc/tegra: Fix an error handling path in tegra_powergate_power_up()
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
- clk: at91: check pmc node status before registering syscore ops
- video: fbdev: chipsfb: use memset_io() instead of memset()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- usb: gadget: hid: fix error code in do_config()
- power: supply: rt5033_battery: Change voltage values to µV
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
- ARM: dts: stm32: fix SAI sub nodes register range
- ASoC: cs42l42: Correct some register default values
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
- phy: qcom-qusb2: Fix a memory leak on probe
- serial: xilinx_uartps: Fix race condition causing stuck TX
- HID: u2fzero: clarify error check and length calculations
- HID: u2fzero: properly handle timeouts in usb_submit_urb
- powerpc/44x/fsp2: add missing of_node_put
- mips: cm: Convert to bitfield API to fix out-of-bounds access
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- PCI: aardvark: Don't spam about PIO Response Status
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
- opp: Fix return in _opp_add_static_v2()
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- mtd: core: don't remove debugfs directory if device is in use
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
- auxdisplay: ht16k33: Connect backlight to fbdev
- auxdisplay: ht16k33: Fix frame buffer device blanking
- soc: fsl: dpaa2-console: free buffer before returning from
dpaa2_console_read
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
- m68k: set a default value for MEMORY_RESERVE
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- ar7: fix kernel builds for compiler test
- scsi: qla2xxx: Fix gnl list corruption
- scsi: qla2xxx: Turn off target reset during issue_lip
- NFSv4: Fix a regression in nfs_set_open_stateid_locked()
- i2c: xlr: Fix a resource leak in the error handling path of
'xlr_i2c_probe()'
- xen-pciback: Fix return in pm_ctrl_init()
- net: davinci_emac: Fix interrupt pacing disable
- net: vlan: fix a UAF in vlan_dev_real_dev()
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- zram: off by one in read_block_state()
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
- net: hns3: allow configure ETS bandwidth of all TCs
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- net/smc: fix sk_refcnt underflow on linkdown and fallback
- cxgb4: fix eeprom len when diagnostics not implemented
- selftests/net: udpgso_bench_rx: fix port argument
- ARM: 9155/1: fix early early_iounmap()
- ARM: 9156/1: drop cc-option fallbacks for architecture selection
- parisc: Fix set_fixmap() on PA1.x CPUs
- irqchip/sifive-plic: Fixup EOI failed when masked
- f2fs: should use GFP_NOFS for directory inodes
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
- 9p/net: fix missing error check in p9_check_errors
- ovl: fix deadlock in splice write
- powerpc/lib: Add helper to check if offset is within conditional branch
range
- powerpc/bpf: Validate branch ranges
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
- powerpc/security: Add a helper to query stf_barrier type
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- video: backlight: Drop maximum brightness override for brightness zero
- s390/cio: check the subchannel validity for dev_busid
- s390/tape: fix timer initialization in tape_std_assign()
- s390/cio: make ccw_device_dma_* more robust
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- SUNRPC: Partial revert of commit 6f9f17287e78
- ath10k: fix invalid dma_addr_t token assignment
- selftests/bpf: Fix also no-alu32 strobemeta selftest
- Linux 5.4.160
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path
* Focal update: v5.4.159 upstream stable release (LP: #1953071)
- Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: ehci: handshake CMD_RUN instead of STS_HALT
- usb: gadget: Mark USB_FSL_QE broken on 64-bit
- usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- binder: don't detect sender/target during buffer cleanup
- printk/console: Allow to disable console output by using console="" or
console=null
- isofs: Fix out of bound access for corrupted isofs image
- comedi: dt9812: fix DMA buffers on stack
- comedi: ni_usb6501: fix NULL-deref in command paths
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- staging: rtl8192u: fix control-message timeouts
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
- rsi: fix control-message timeout
- Linux 5.4.159
* Focal update: v5.4.158 upstream stable release (LP: #1953066)
- scsi: core: Put LLD module refcnt after SCSI device is released
- vrf: Revert "Reset skb conntrack connection..."
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
- Revert "xhci: Set HCD flag to defer primary roothub registration"
- Revert "usb: core: hcd: Add support for deferring roothub registration"
- sfc: Fix reading non-legacy supported link modes
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
- Linux 5.4.158
* [Ubuntu 20.04] Problem leading IUCV service down (on s390x) (LP: #1913442)
- usercopy: mark dma-kmalloc caches as usercopy caches
[ Ubuntu: 5.4.0-96.109 ]
* Support builtin revoked certificates (LP: #1932029)
- [Config]: add i386 to CONFIG_SYSTEM_REVOCATION_KEYS annotation
* CVE-2022-0185
- SAUCE: vfs: Out-of-bounds write of heap buffer in fs_context.c
- SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
[ Ubuntu: 5.4.0-94.106 ]
* focal/linux: 5.4.0-94.106 -proposed tracker (LP: #1956628)
* [Regression] Focal kernel 5.4.0-92.103 fails to boot when Secure Encrypted
Virtualization(SEV) is enabled (LP: #1956575)
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV
[ Ubuntu: 5.4.0-92.103 ]
* focal/linux: 5.4.0-92.103 -proposed tracker (LP: #1952316)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- debian/dkms-versions -- update from kernel-versions (main/2021.11.29)
* CVE-2021-4002
- tlb: mmu_gather: add tlb_flush_*_range APIs
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare
* Re-enable DEBUG_INFO_BTF where it was disabled (LP: #1945632)
- [Config] Enable CONFIG_DEBUG_INFO_BTF on all arches
* Focal linux-azure: Vm crash on Dv5/Ev5 (LP: #1950462)
- KVM: VMX: eVMCS: make evmcs_sanitize_exec_ctrls() work again
- jump_label: Fix usage in module __init
* Support builtin revoked certificates (LP: #1932029)
- Revert "UBUNTU: SAUCE: (lockdown) Make get_cert_list() not complain about
cert lists that aren't present."
- integrity: Move import of MokListRT certs to a separate routine
- integrity: Load certs from the EFI MOK config table
- certs: Add ability to preload revocation certs
- integrity: Load mokx variables into the blacklist keyring
- certs: add 'x509_revocation_list' to gitignore
- SAUCE: Dump stack when X.509 certificates cannot be loaded
- [Packaging] build canonical-revoked-certs.pem from branch/arch certs
- [Packaging] Revoke 2012 UEFI signing certificate as built-in
- [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
* Support importing mokx keys into revocation list from the mok table
(LP: #1928679)
- efi: Support for MOK variable config table
- efi: mokvar-table: fix some issues in new code
- efi: mokvar: add missing include of asm/early_ioremap.h
- efi/mokvar: Reserve the table only if it is in boot services data
- SAUCE: integrity: add informational messages when revoking certs
* Support importing mokx keys into revocation list from the mok table
(LP: #1928679) // CVE-2020-26541 when certificates are revoked via
MokListXRT.
- SAUCE: integrity: Load mokx certs from the EFI MOK config table
* Focal update: v5.4.157 upstream stable release (LP: #1951883)
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
- ARM: 9134/1: remove duplicate memcpy() definition
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
- ARM: 9141/1: only warn about XIP address when not compile testing
- ipv6: use siphash in rt6_exception_hash()
- ipv4: use siphash instead of Jenkins in fnhe_hashfun()
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- net/tls: Fix flipped sign in tls_err_abort() calls
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
circuit
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- net: lan78xx: fix division by zero in send path
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- RDMA/mlx5: Set user priority for DCT
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- net: nxp: lpc_eth.c: avoid hang when bringing interface down
- net/tls: Fix flipped sign in async_wait.err assignment
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_start_aneg: Add an unlocked version
- sctp: use init_tag from inithdr for ABORT chunk
- sctp: fix the processing for INIT_ACK chunk
- sctp: fix the processing for COOKIE_ECHO chunk
- sctp: add vtag check in sctp_sf_violation
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
- sctp: add vtag check in sctp_sf_ootb
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT
- cfg80211: correct bridge/4addr mode check
- KVM: s390: clear kicked_mask before sleeping again
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
- perf script: Check session->header.env.arch before using it
- Linux 5.4.157
* keyboard not working on Medion notebook s17 series (LP: #1950536)
- ACPI: resources: Add one more Medion model in IRQ override quirk
* creat09 from ubuntu_ltp_syscalls and cve-2018-13405 from ubuntu_ltp/cve
failed with XFS (LP: #1950239)
- xfs: ensure that the inode uid/gid match values match the icdinode ones
- xfs: merge the projid fields in struct xfs_icdinode
- xfs: remove the icdinode di_uid/di_gid members
- xfs: fix up non-directory creation in SGID directories
* reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le
(LP: #1867570)
- selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes
* Focal update: v5.4.156 upstream stable release (LP: #1951295)
- parisc: math-emu: Fix fall-through warnings
- net: switchdev: do not propagate bridge updates across bridges
- tee: optee: Fix missing devices unregister during optee_remove
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
- xtensa: xtfpga: Try software restart before simulating CPU reset
- NFSD: Keep existing listeners on portlist error
- dma-debug: fix sg checks in debug_dma_map_sg()
- ASoC: wm8960: Fix clock configuration on slave mode
- netfilter: ipvs: make global sysctl readonly in non-init netns
- lan78xx: select CRC32
- net: dsa: lantiq_gswip: fix register definition
- NIOS2: irqflags: rename a redefined register name
- net: hns3: reset DWRR of unused tc to zero
- net: hns3: add limit ets dwrr bandwidth cannot be 0
- net: hns3: disable sriov before unload hclge layer
- net: stmmac: Fix E2E delay mechanism
- net: enetc: fix ethtool counter name for PM0_TERR
- can: rcar_can: fix suspend/resume
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
error length
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
- ceph: fix handling of "meta" errors
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- elfcore: correct reference to CONFIG_UML
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- ASoC: DAPM: Fix missing kctl change notifications
- audit: fix possible null-pointer dereference in audit_filter_rules
- powerpc64/idle: Fix SP offsets when saving GPRs
- KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
- KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to
guest
- powerpc/idle: Don't corrupt back chain when going idle
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- mm, slub: fix potential memoryleak in kmem_cache_open()
- nfc: nci: fix the UAF of rf_conn_info object
- isdn: cpai: check ctr->cnr to avoid array index out of bound
- netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
- selftests: netfilter: remove stray bash debug line
- gcc-plugins/structleak: add makefile var for disabling structleak
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- net: stmmac: add support for dwmac 3.40a
- ARM: dts: spear3xx: Fix gmac node
- isdn: mISDN: Fix sleeping function called from invalid context
- platform/x86: intel_scu_ipc: Update timeout value in comment
- ALSA: hda: avoid write to STATESTS if controller is in reset
- Input: snvs_pwrkey - add clk handling
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
- tracing: Have all levels of checks prevent recursion
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
- pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
- Linux 5.4.156
* ubuntu_ltp / finit_module02 fails on v4.15 and other kernels
(LP: #1950644) // Focal update: v5.4.156 upstream stable release
(LP: #1951295)
- vfs: check fd has read access in kernel_read_file_from_fd()
* Focal update: v5.4.155 upstream stable release (LP: #1951291)
- ovl: simplify file splice
- ALSA: usb-audio: Add quirk for VF0770
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G
- ALSA: hda/realtek - ALC236 headset MIC recording issue
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
- s390: fix strrchr() implementation
- csky: don't let sigreturn play with priveleged bits of status register
- csky: Fixup regs.sr broken in ptrace
- btrfs: unlock newly allocated extent buffer after error
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- watchdog: orion: use 0 for unset heartbeat
- x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
- mei: me: add Ice Lake-N device id.
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- usb: musb: dsps: Fix the probe error path
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- EDAC/armada-xp: Fix output of uncorrectable error counter
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
- iio: adc: aspeed: set driver data when adc probe.
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED
- iio: light: opt3001: Fixed timeout error when 0 lux
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
- iio: dac: ti-dac5571: fix an error code in probe()
- sctp: account stream padding length for reconf chunk
- gpio: pca953x: Improve bias setting
- net: arc: select CRC32
- net: korina: select CRC32
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
- net: stmmac: fix get_hw_feature() on old hardware
- net: encx24j600: check error in devm_regmap_init_encx24j600
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- pata_legacy: fix a couple uninitialized variable bugs
- ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators()
- mlxsw: thermal: Fix out-of-bounds memory accesses
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
- drm/panel: olimex-lcd-olinuxino: select CRC32
- drm/msm: Fix null pointer dereference on pointer edp
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- acpi/arm64: fix next_platform_timer() section mismatch error
- mqprio: Correct stats in mqprio_dump_class_stats().
- qed: Fix missing error code in qed_slowpath_start()
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
- ionic: don't remove netdev->dev_addr when syncing uc list
- Linux 5.4.155
* [UBUNTU 20.04] kernel: unable to read partitions on virtio-block dasd (kvm)
(LP: #1950144) // Focal update: v5.4.155 upstream stable release
(LP: #1951291)
- virtio: write back F_VERSION_1 before validate
* Focal update: v5.4.154 upstream stable release (LP: #1951288)
- net: phy: bcm7xxx: Fixed indirect MMD operations
- ext4: correct the error path of ext4_write_inline_data_end()
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- m68k: Handle arrivals of multiple signals correctly
- net: prevent user from passing illegal stab size
- mac80211: check return value of rhashtable_init
- net: sun: SUNVNET_COMMON should depend on INET
- drm/amdgpu: fix gart.bo pin_count leak
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- sched: Always inline is_percpu_thread()
- Linux 5.4.154
* Focal update: v5.4.153 upstream stable release (LP: #1950014)
- Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
- xen/privcmd: fix error handling in mmap-resource processing
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
- ovl: fix missing negative dentry check in ovl_rename()
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- xen/balloon: fix cancelled balloon action
- ARM: dts: omap3430-sdp: Fix NAND device node
- ARM: dts: qcom: apq8064: use compatible which contains chipid
- MIPS: BPF: Restore MIPS32 cBPF JIT
- bpf, mips: Validate conditional branch offsets
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
- xtensa: move XCHAL_KIO_* definitions to kmem_layout.h
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
- bpf, arm: Fix register clobbering in div/mod implementation
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
- ptp_pch: Load module automatically if ID matches
- arm64: dts: freescale: Fix SP805 clock-names
- arm64: dts: ls1028a: add missing CAN nodes
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- net/sched: sch_taprio: properly cancel timer from taprio_destroy()
- net: sfp: Fix typo in state machine debug string
- netlink: annotate data races around nlk->bound
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
- video: fbdev: gbefb: Only instantiate device when built for IP32
- drm/nouveau/debugfs: fix file release memory leak
- gve: Correct available tx qpl check
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- gve: fix gve_get_stats()
- i40e: fix endless loop under rtnl
- i40e: Fix freeing of uninitialized misc IRQ vector
- net: prefer socket bound to interface when not in VRF
- i2c: acpi: fix resource leak in reconfiguration device addition
- bpf, s390: Fix potential memory leak about jit_data
- RISC-V: Include clone3() on rv32
- x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI
- x86/hpet: Use another crystalball to evaluate HPET usability
- x86/Kconfig: Correct reference to MWINCHIP3D
- Linux 5.4.153
* Focal update: v5.4.152 upstream stable release (LP: #1950009)
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist case
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
- ext2: fix sleeping in atomic bugs on error
- scsi: sd: Free scsi_disk device via put_device()
- usb: testusb: Fix for showing the connection speed
- usb: dwc2: check return value after calling platform_get_resource()
- selftests: be sure to make khdr before other targets
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- tools/vm/page-types: remove dependency on opt_file for idle page tracking
- KVM: do not shrink halt_poll_ns below grow_start
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
- perf/x86: Reset destroy callback on event init failure
- silence nfscache allocation warnings with kvzalloc
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
- Linux 5.4.152
* linux-aws: Fix backport of RDMA/efa: Expose maximum TX doorbell batch
(LP: #1949882)
- SAUCE: aws: Fix backport of RDMA/efa: Expose maximum TX doorbell batch
[ Ubuntu: 5.4.0-91.102 ]
* focal/linux: 5.4.0-91.102 -proposed tracker (LP: #1949840)
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
- debian/dkms-versions -- update from kernel-versions (main/2021.11.08)
* KVM emulation failure when booting into VM crash kernel with multiple CPUs
(LP: #1948862)
- KVM: x86: Properly reset MMU context at vCPU RESET/INIT
* aufs: kernel bug with apparmor and fuseblk (LP: #1948470)
- SAUCE: aufs: bugfix, stop omitting path->mnt
* ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164)
- net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
* require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
- Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
* ACL updates on OCFS2 are not revalidated (LP: #1947161)
- ocfs2: fix remounting needed after setfacl command
* ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351)
- powerpc/bpf: Fix BPF_MOD when imm == 1
* Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
- Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
cachefiles_read_backing_file while vmscan is active"
* Reassign I/O Path of ConnectX-5 Port 1 before Port 2 causes NULL dereference
(LP: #1943464)
- s390/pci: fix leak of PCI device structure
- s390/pci: fix use after free of zpci_dev
- s390/pci: fix zpci_zdev_put() on reserve
* [SRU][F] USB: serial: pl2303: add support for PL2303HXN (LP: #1948377)
- USB: serial: pl2303: add support for PL2303HXN
- USB: serial: pl2303: fix line-speed handling on newer chips
* Focal update: v5.4.151 upstream stable release (LP: #1947888)
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- usb: cdns3: fix race condition before setting doorbell
- fs-verity: fix signed integer overflow with i_size near S64_MAX
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
structure field
- scsi: ufs: Fix illegal offset in UPIU event trace
- mac80211: fix use-after-free in CCMP/GCMP RX
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h
- drm/amd/display: Pass PCI deviceid into DC
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced
from sysfs
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- mac80211: mesh: fix potentially unaligned access
- mac80211-hwsim: fix late beacon hrtimer handling
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- hwmon: (tmp421) report /PVLD condition as fault
- hwmon: (tmp421) fix rounding for negative values
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
- scsi: csiostor: Add module softdep on cxgb4
- net: hns3: do not allow call hns3_nic_net_open repeatedly
- net: sched: flower: protect fl_walk() with rcu
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
- perf/x86/intel: Update event constraints for ICX
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error
- ipack: ipoctal: fix stack information leak
- ipack: ipoctal: fix tty registration race
- ipack: ipoctal: fix tty-registration error handling
- ipack: ipoctal: fix missing allocation-failure check
- ipack: ipoctal: fix module reference leak
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
- ext4: fix reserved space counter leakage
- ext4: fix potential infinite loop in ext4_dx_readdir()
- HID: u2fzero: ignore incomplete packets without data
- net: udp: annotate data race around udp_sk(sk)->corkflag
- net: stmmac: don't attach interface until resume finishes
- PCI: Fix pci_host_bridge struct device release/free handling
- libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
- hso: fix bailout in error case of probe
- usb: hso: fix error handling code of hso_create_net_device
- usb: hso: remove the bailout parameter
- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- Linux 5.4.151
* Focal update: v5.4.150 upstream stable release (LP: #1947886)
- usb: gadget: r8a66597: fix a loop in set_feature()
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
- cifs: fix incorrect check for null pointer in header_assemble
- xen/x86: fix PV trap handling on secondary processors
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
- USB: cdc-acm: fix minor-number release
- binder: make sure fd closes complete
- staging: greybus: uart: fix tty use after free
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
- USB: serial: mos7840: remove duplicated 0xac24 device ID
- USB: serial: option: add Telit LN920 compositions
- USB: serial: option: remove duplicate USB device ID
- USB: serial: option: add device id for Foxconn T99W265
- mcb: fix error handling in mcb_alloc_bus()
- erofs: fix up erofs_lookup tracepoint
- btrfs: prevent __btrfs_dump_space_info() to underflow its free space
- serial: mvebu-uart: fix driver's tx_empty callback
- net: hso: fix muxed tty registration
- afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
- enetc: Fix illegal access when reading affinity_hint
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
- net/smc: add missing error check in smc_clc_prfx_set()
- gpio: uniphier: Fix void functions to remove return value
- qed: rdma - don't wait for resources under hw error recovery flow
- net/mlx4_en: Don't allow aRFS for encapsulated packets
- scsi: iscsi: Adjust iface sysfs attr detection
- tty: synclink_gt, drop unneeded forward declarations
- tty: synclink_gt: rename a conflicting function name
- fpga: machxo2-spi: Return an error on failure
- fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
- cifs: fix a sign extension bug
- scsi: qla2xxx: Restore initiator in dual mode
- scsi: lpfc: Use correct scnprintf() limit
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
- irqchip/gic-v3-its: Fix potential VPE leak on error
- md: fix a lock order reversal in md_alloc
- blktrace: Fix uaf in blk_trace access after removing by sysfs
- net: macb: fix use after free on rmmod
- net: stmmac: allow CSR clock of 300MHz
- m68k: Double cast io functions to unsigned long
- ipv6: delay fib6_sernum increase in fib6_add
- bpf: Add oversize check before call kvcalloc()
- xen/balloon: use a kernel thread instead a workqueue
- nvme-multipath: fix ANA state updates when a namespace is not present
- sparc32: page align size in arch_dma_alloc
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
- compiler.h: Introduce absolute_pointer macro
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location
- sparc: avoid stringop-overread errors
- qnx4: avoid stringop-overread errors
- parisc: Use absolute_pointer() to define PAGE0
- arm64: Mark __stack_chk_guard as __ro_after_init
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
- net: 6pack: Fix tx timeout and slot time
- spi: Fix tegra20 build with CONFIG_PM=n
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
- xen/balloon: fix balloon kthread freezing
- qnx4: work around gcc false positive warning bug
- Linux 5.4.150
* ACL updates on OCFS2 are not revalidated (LP: #1947161) // Focal update:
v5.4.150 upstream stable release (LP: #1947886)
- ocfs2: drop acl cache for directories too
* Focal update: v5.4.149 upstream stable release (LP: #1947885)
- PCI: pci-bridge-emul: Fix big-endian support
- PCI: aardvark: Indicate error in 'val' when config read fails
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
- PCI: aardvark: Fix reporting CRS value
- PCI/ACPI: Add Ampere Altra SOC MCFG quirk
- KVM: remember position in kvm->vcpus array
- console: consume APC, DM, DCS
- s390/pci_mmio: fully validate the VMA before calling follow_pte()
- ARM: Qualify enabling of swiotlb_init()
- apparmor: remove duplicate macro list_entry_is_head()
- ARM: 9077/1: PLT: Move struct plt_entries definition to header
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
- ARM: 9079/1: ftrace: Add MODULE_PLTS support
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
- sctp: validate chunk size in __rcv_asconf_lookup
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb()
- um: virtio_uml: fix memory leak on init failures
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
- 9p/trans_virtio: Remove sysfs file on probe failure
- prctl: allow to setup brk for et_dyn executables
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
- profiling: fix shift-out-of-bounds bugs
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was
registered
- phy: avoid unnecessary link-up delay in polling mode
- net: stmmac: reset Tx desc base address before restarting Tx
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
- thermal/core: Fix thermal_cooling_device_register() prototype
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
- parisc: Move pci_dev_is_behind_card_dino to where it is used
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE
- dmaengine: ioat: depends on !UML
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
- ceph: request Fw caps before updating the mtime in ceph_write_iter
- ceph: lockdep annotations for try_nonblocking_invalidate
- btrfs: fix lockdep warning while mounting sprout fs
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
- pwm: img: Don't modify HW state in .remove() callback
- pwm: rockchip: Don't modify HW state in .remove() callback
- pwm: stm32-lp: Don't modify HW state in .remove() callback
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
- rtc: rx8010: select REGMAP_I2C
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
- Linux 5.4.149
-- Wen-chien Jesse Sung <email address hidden> Wed, 09 Mar 2022 23:13:52 +0800
-
linux-iot (5.4.0-1000.2) focal; urgency=medium
* focal/linux-iot: 5.4.0-1000.2 -proposed tracker (LP: #1948660)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update Ubuntu.md
- [Packaging] update update.conf
* [SRU][F] USB: serial: pl2303: add support for PL2303HXN (LP: #1948377)
- USB: serial: pl2303: add support for PL2303HXN
- USB: serial: pl2303: fix line-speed handling on newer chips
* Add support for Xilinx XDMA devices
- SAUCE: add xilinx dma_ip core xdma driver
[ Ubuntu: 5.4.0-90.101 ]
* focal/linux: 5.4.0-90.101 -proposed tracker (LP: #1947260)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.10.18)
* Add final-checks to check certificates (LP: #1947174)
- [Packaging] Add system trusted and revocation keys final check
* No sound on Lenovo laptop models Legion 15IMHG05, Yoga 7 14ITL5, and 13s
Gen2 (LP: #1939052)
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s
Gen2
* CVE-2020-36385
- RDMA/cma: Add missing locking to rdma_accept()
- RDMA/ucma: Fix the locking of ctx->file
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
* Focal update: v5.4.148 upstream stable release (LP: #1946802)
- rtc: tps65910: Correct driver module alias
- btrfs: wake up async_delalloc_pages waiters after submit
- btrfs: reset replace target device to allocation state on close
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
- PCI/MSI: Skip masking MSI-X on Xen PV
- powerpc/perf/hv-gpci: Fix counter value parsing
- xen: fix setting of max_pfn in shared_info
- include/linux/list.h: add a macro to test if entry is pointing to the head
- 9p/xen: Fix end of loop tests for list_for_each_entry
- tools/thermal/tmon: Add cross compiling support
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
- pinctrl: ingenic: Fix incorrect pull up/down info
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap
- arm64: head: avoid over-mapping in map_memory
- crypto: public_key: fix overflow during implicit conversion
- block: bfq: fix bfq_set_next_ioprio_data()
- power: supply: max17042: handle fails of reading status register
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
- VMCI: fix NULL pointer dereference when unmapping queue pair
- media: uvc: don't do DMA on stack
- media: rc-loopback: return number of emitters rather than error
- Revert "dmaengine: imx-sdma: refine to load context only once"
- dmaengine: imx-sdma: remove duplicated sdma_load_context
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
- ARM: 9105/1: atags_to_fdt: don't warn about stack size
- PCI/portdrv: Enable Bandwidth Notification only if port supports it
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
- PCI: xilinx-nwl: Enable the clock through CCF
- PCI: aardvark: Fix checking for PIO status
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
- HID: input: do not report stylus battery state as "full"
- f2fs: quota: fix potential deadlock
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
- IB/hfi1: Adjust pkey entry in index 0
- RDMA/iwcm: Release resources if iw_cm module initialization fails
- docs: Fix infiniband uverbs minor number
- pinctrl: samsung: Fix pinctrl bank pin count
- vfio: Use config not menuconfig for VFIO_NOIOMMU
- powerpc/stacktrace: Include linux/delay.h
- RDMA/efa: Remove double QP type assignment
- f2fs: show f2fs instance in printk_ratelimited
- f2fs: reduce the scope of setting fsck tag when de->name_len is zero
- openrisc: don't printk() unconditionally
- dma-debug: fix debugfs initialization order
- SUNRPC: Fix potential memory corruption
- scsi: fdomain: Fix error return code in fdomain_probe()
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
- scsi: smartpqi: Fix an error code in pqi_get_raid_map()
- scsi: qedi: Fix error codes in qedi_alloc_global_queues()
- scsi: qedf: Fix error codes in qedf_alloc_global_queues()
- powerpc/config: Renable MTD_PHYSMAP_OF
- scsi: target: avoid per-loop XCOPY buffer allocations
- HID: i2c-hid: Fix Elan touchpad regression
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs
are live
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
run_smbios_call
- fscache: Fix cookie key hashing
- clk: at91: sam9x60: Don't use audio PLL
- clk: at91: clk-generated: pass the id of changeable parent at registration
- clk: at91: clk-generated: Limit the requested rate to our range
- KVM: PPC: Fix clearing never mapped TCEs in realmode
- f2fs: fix to account missing .skipped_gc_rwsem
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
- f2fs: fix to unmap pages from userspace process in punch_hole()
- MIPS: Malta: fix alignment of the devicetree buffer
- kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
- userfaultfd: prevent concurrent API initialization
- drm/amdgpu: Fix amdgpu_ras_eeprom_init()
- ASoC: atmel: ATMEL drivers don't need HAS_DMA
- media: dib8000: rewrite the init prbs logic
- crypto: mxs-dcp - Use sg_mapping_iter to copy data
- PCI: Use pci_update_current_state() in pci_enable_device_flags()
- tipc: keep the skb in rcv queue until the whole data is read
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
- iavf: do not override the adapter state in the watchdog task
- iavf: fix locking of critical sections
- ARM: dts: qcom: apq8064: correct clock names
- video: fbdev: kyro: fix a DoS bug by restricting user input
- netlink: Deal with ESRCH error in nlmsg_notify()
- Smack: Fix wrong semantics in smk_access_entry()
- drm: avoid blocking in drm_clients_info's rcu section
- igc: Check if num of q_vectors is smaller than max before array access
- usb: host: fotg210: fix the endpoint's transactional opportunities
calculation
- usb: host: fotg210: fix the actual_length of an iso packet
- usb: gadget: u_ether: fix a potential null pointer dereference
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
- usb: gadget: composite: Allow bMaxPower=0 if self-powered
- staging: board: Fix uninitialized spinlock when attaching genpd
- tty: serial: jsm: hold port lock when reporting modem line changes
- drm/amd/display: Fix timer_per_pixel unit error
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
- bpf/tests: Fix copy-and-paste error in double word test
- bpf/tests: Do not PASS tests without actually testing the result
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
- video: fbdev: kyro: Error out if 'pixclock' equals zero
- video: fbdev: riva: Error out if 'pixclock' equals zero
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
- flow_dissector: Fix out-of-bounds warnings
- s390/jump_label: print real address in a case of a jump label bug
- s390: make PCI mio support a machine flag
- serial: 8250: Define RX trigger levels for OxSemi 950 devices
- xtensa: ISS: don't panic in rs_init
- hvsi: don't panic on tty_register_driver failure
- serial: 8250_pci: make setup_port() parameters explicitly unsigned
- staging: ks7010: Fix the initialization of the 'sleep_status' structure
- samples: bpf: Fix tracex7 error raised on the missing argument
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
- Bluetooth: skip invalid hci_sync_conn_complete_evt
- workqueue: Fix possible memory leaks in wq_numa_init()
- bonding: 3ad: fix the concurrency between __bond_release_one() and
bond_3ad_state_machine_handler()
- arm64: tegra: Fix Tegra194 PCIe EP compatible string
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the
matching in-/output
- media: imx258: Rectify mismatch of VTS value
- media: imx258: Limit the max analogue gain to 480
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops
- media: TDA1997x: fix tda1997x_query_dv_timings() return value
- media: tegra-cec: Handle errors of clk_prepare_enable()
- ARM: dts: imx53-ppd: Fix ACHC entry
- arm64: dts: qcom: sdm660: use reg value for memory node
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
- selftests/bpf: Fix xdp_tx.c prog section name
- Bluetooth: schedule SCO timeouts with delayed_work
- Bluetooth: avoid circular locks in sco_sock_connect
- net/mlx5: Fix variable type to match 64bit
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
access in amdgpu_i2c_router_select_ddc_port()
- drm/display: fix possible null-pointer dereference in dcn10_set_clock()
- mac80211: Fix monitor MTU limit so that A-MSDUs get through
- ARM: tegra: tamonten: Fix UART pad setting
- arm64: tegra: Fix compatible string for Tegra132 CPUs
- arm64: dts: ls1046a: fix eeprom entries
- nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
- Bluetooth: Fix handling of LE Enhanced Connection Complete
- opp: Don't print an error if required-opps is missing
- serial: sh-sci: fix break handling for sysrq
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
- rpc: fix gss_svc_init cleanup on failure
- staging: rts5208: Fix get_ms_information() heap buffer size
- gfs2: Don't call dlm after protocol is unmounted
- usb: chipidea: host: fix port index underflow and UBSAN complains
- lockd: lockd server-side shouldn't set fl_ops
- drm/exynos: Always initialize mapping in exynos_drm_register_dma()
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
- btrfs: tree-log: check btrfs_lookup_data_extent return value
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
- ASoC: Intel: Skylake: Fix passing loadable flag for module
- of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
- mmc: sdhci-of-arasan: Check return value of non-void funtions
- mmc: rtsx_pci: Fix long reads when clock is prescaled
- selftests/bpf: Enlarge select() timeout for test_maps
- mmc: core: Return correct emmc response in case of ioctl error
- cifs: fix wrong release in sess_alloc_buffer() failed path
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
quirk set"
- usb: musb: musb_dsps: request_irq() after initializing musb
- usbip: give back URBs for unsent unlink requests during cleanup
- usbip:vhci_hcd USB port can get stuck in the disabled state
- ASoC: rockchip: i2s: Fix regmap_ops hang
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
- drm/amdkfd: Account for SH/SE count when setting up cu masks.
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
- iwlwifi: mvm: avoid static queue number aliasing
- iwlwifi: mvm: fix access to BSS elements
- net/mlx5: DR, Enable QP retransmission
- parport: remove non-zero check on count
- ath9k: fix OOB read ar9300_eeprom_restore_internal
- ath9k: fix sleeping in atomic context
- net: fix NULL pointer reference in cipso_v4_doi_free
- fix array-index-out-of-bounds in taprio_change
- net: w5100: check return value after calling platform_get_resource()
- parisc: fix crash with signals and alloca
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
- scsi: BusLogic: Fix missing pr_cont() use
- scsi: qla2xxx: Changes to support kdump kernel
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx
- cpufreq: powernv: Fix init_chip_info initialization in numa=off
- s390/pv: fix the forcing of the swiotlb
- mm/hugetlb: initialize hugetlb_usage in mm_init
- mm,vmscan: fix divide by zero in get_scan_count
- memcg: enable accounting for pids in nested pid namespaces
- platform/chrome: cros_ec_proto: Send command again when timeout occurs
- lib/test_stackinit: Fix static initializer test
- net: dsa: lantiq_gswip: fix maximum frame length
- drm/msi/mdp4: populate priv->kms in mdp4_kms_init
- drm/amdgpu: Fix BUG_ON assert
- drm/panfrost: Simplify lock_region calculation
- drm/panfrost: Use u64 for size in lock_region
- drm/panfrost: Clamp lock region to Bifrost minimum
- btrfs: fix upper limit for max_inline for page size 64K
- xen: reset legacy rtc flag for PV domU
- bnx2x: Fix enabling network interfaces without VFs
- arm64/sve: Use correct size when reinitialising SVE state
- PM: base: power: don't try to use non-existing RTC for storing data
- PCI: Add AMD GPU multi-function power dependencies
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
- drm/etnaviv: return context from etnaviv_iommu_context_get
- drm/etnaviv: put submit prev MMU context when it exists
- drm/etnaviv: stop abusing mmu_context as FE running marker
- drm/etnaviv: keep MMU context across runtime suspend/resume
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
- drm/etnaviv: fix MMU context leak on GPU reset
- drm/etnaviv: reference MMU context when setting up hardware state
- drm/etnaviv: add missing MMU context put when reaping MMU mapping
- s390/sclp: fix Secure-IPL facility detection
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
- tipc: fix an use-after-free issue in tipc_recvmsg
- net-caif: avoid user-triggerable WARN_ON(1)
- ptp: dp83640: don't define PAGE0
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
- r6040: Restore MDIO clock frequency after MAC reset
- tipc: increase timeout in tipc_sk_enqueue()
- perf machine: Initialize srcline string member in add_location struct
- net/mlx5: FWTrace, cancel work on alloc pd error flow
- net/mlx5: Fix potential sleeping in atomic context
- events: Reuse value read using READ_ONCE instead of re-reading it
- vhost_net: fix OoB on sendmsg() failure.
- net/af_unix: fix a data-race in unix_dgram_poll
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
- qed: Handle management FW error
- dt-bindings: arm: Fix Toradex compatible typo
- ibmvnic: check failover_pending in login response
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing
registers
- net: hns3: pad the short tunnel frame before sending to hardware
- net: hns3: change affinity_mask to numa node range
- net: hns3: disable mac in flr process
- net: hns3: fix the timing issue of VF clearing interrupt sources
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
- mfd: db8500-prcmu: Adjust map to reality
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
- fuse: fix use after free in fuse_read_interrupt()
- mfd: Don't use irq_create_mapping() to resolve a mapping
- tracing/probes: Reject events which have the same name of existing one
- PCI: Add ACS quirks for Cavium multi-function devices
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
- PCI: ibmphp: Fix double unmap of io_mem
- ethtool: Fix an error code in cxgb2.c
- NTB: Fix an error code in ntb_msit_probe()
- NTB: perf: Fix an error code in perf_setup_inbuf()
- mfd: axp20x: Update AXP288 volatile ranges
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of
'cafe_nand_probe()'
- ARC: export clear_user_page() for modules
- perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
- net: dsa: b53: Fix calculating number of switch ports
- netfilter: socket: icmp6: fix use-after-scope
- fq_codel: reject silly quantum parameters
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
- ip_gre: validate csum_start only on pull
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
- Linux 5.4.148
* Focal update: v5.4.147 upstream stable release (LP: #1946795)
- Linux 5.4.147
- upstream stable to v5.4.147
* CVE-2021-3428
- ext4: save the error code which triggered an ext4_error() in the superblock
- ext4: simulate various I/O and checksum errors when reading metadata
- ext4: save all error info in save_error_info() and drop ext4_set_errno()
- ext4: check journal inode extents more carefully
* ip6gretap / erspan / ip6erspan in rtnetlink.sh from net of
ubuntu_kernel_selftests failed on B-5.4-aws / B-5.4-gke / B-5.4-oracle /
B-5.4-azure / B-5.4 (LP: #1896448)
- SAUCE: selftests: rtnetlink: fixes for older iproute2
* CVE-2019-19449
- f2fs: fix wrong total_sections check and fsmeta check
- f2fs: fix to do sanity check on segment/section count
* kernel bug found when disconnecting one fiber channel interface on Cisco
Chassis with fnic DRV_VERSION "1.6.0.47" (LP: #1944586)
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands
* memfd from ubuntu_kernel_selftests failed to build on B-5.4 (unknown type
name ‘__u64’) (LP: #1944613)
- SAUCE: selftests/memfd: fix __u64 not defined build issue
* Medion Notebook Keyboard not working (LP: #1909814)
- ACPI: resources: Add DMI-based legacy IRQ override quirk
* vrf: fix refcnt leak with vxlan slaves (LP: #1945180)
- ipv4: Fix device used for dst_alloc with local routes
* Check for changes relevant for security certifications (LP: #1945989)
- [Packaging] Add a new fips-checks script
- [Packaging] Add fips-checks as part of finalchecks
* Fix cold plugged USB device on certain PCIe USB cards (LP: #1945211)
- Revert "UBUNTU: SAUCE: Revert "usb: core: reduce power-on-good delay time of
root hub""
- usb: core: hcd: Add support for deferring roothub registration
- xhci: Set HCD flag to defer primary roothub registration
- usb: core: hcd: Modularize HCD stop configuration in usb_stop_hcd()
* CVE-2021-3759
- memcg: enable accounting of ipc resources
* Focal update: v5.4.146 upstream stable release (LP: #1946024)
- locking/mutex: Fix HANDOFF condition
- regmap: fix the offset of register error log
- crypto: mxs-dcp - Check for DMA mapping errors
- sched/deadline: Fix reset_on_fork reporting of DL tasks
- power: supply: axp288_fuel_gauge: Report register-address on readb / writeb
errors
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
- sched/deadline: Fix missing clock update in migrate_task_rq_dl()
- rcu/tree: Handle VM stoppage in stall detection
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
- hrtimer: Ensure timerfd notification for HIGHRES=n
- udf: Check LVID earlier
- udf: Fix iocharset=utf8 mount option
- isofs: joliet: Fix iocharset=utf8 mount option
- bcache: add proper error unwinding in bcache_device_init
- nvme-tcp: don't update queue count when failing to set io queues
- nvme-rdma: don't update queue count when failing to set io queues
- nvmet: pass back cntlid on successful completion
- power: supply: max17042_battery: fix typo in MAx17042_TOFF
- s390/cio: add dev_busid sysfs entry for each subchannel
- libata: fix ata_host_start()
- crypto: qat - do not ignore errors from enable_vf2pf_comms()
- crypto: qat - handle both source of interrupt in VF ISR
- crypto: qat - fix reuse of completion variable
- crypto: qat - fix naming for init/shutdown VF to PF notifications
- crypto: qat - do not export adf_iov_putmsg()
- fcntl: fix potential deadlock for &fasync_struct.fa_lock
- udf_get_extendedattr() had no boundary checks.
- s390/kasan: fix large PMD pages address alignment check
- s390/debug: fix debug area life cycle
- m68k: emu: Fix invalid free in nfeth_cleanup()
- sched: Fix UCLAMP_FLAG_IDLE setting
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config
- genirq/timings: Fix error return code in irq_timings_test_irqs()
- lib/mpi: use kcalloc in mpi_resize
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock
source channel
- crypto: qat - use proper type for vf_mask
- certs: Trigger creation of RSA module signing key if it's not an RSA key
- regulator: vctrl: Use locked regulator_get_voltage in probe path
- regulator: vctrl: Avoid lockdep warning in enable/disable ops
- spi: sprd: Fix the wrong WDG_LOAD_VAL
- spi: spi-zynq-qspi: use wait_for_completion_timeout to make
zynq_qspi_exec_mem_op not interruptible
- EDAC/i10nm: Fix NVDIMM detection
- drm/panfrost: Fix missing clk_disable_unprepare() on error in
panfrost_clk_init()
- media: TDA1997x: enable EDID support
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
- media: cxd2880-spi: Fix an error handling path
- bpf: Fix a typo of reuseport map in bpf.h.
- bpf: Fix potential memleak and UAF in the verifier.
- ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
- arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
- soc: qcom: rpmhpd: Use corner in power_off
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
- media: dvb-usb: Fix error handling in dvb_usb_i2c_init
- media: go7007: remove redundant initialization
- media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
- 6lowpan: iphc: Fix an off-by-one check of array index
- netns: protect netns ID lookups with RCU
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
- ARM: dts: meson8: Use a higher default GPU clock frequency
- ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
- ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
- ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
- net/mlx5e: Prohibit inner indir TIRs in IPoIB
- cgroup/cpuset: Fix a partition bug with hotplug
- net: cipso: fix warnings in netlbl_cipsov4_add_std
- i2c: highlander: add IRQ check
- leds: lt3593: Put fwnode in any case during ->probe()
- leds: trigger: audio: Add an activate callback to ensure the initial
brightness is set
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
- media: venus: venc: Fix potential null pointer dereference on pointer fmt
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
- PCI: PM: Enable PME if it can be signaled from D3cold
- soc: qcom: smsm: Fix missed interrupts if state changes while masked
- debugfs: Return error during {full/open}_proxy_open() on rmmod
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
- PM: EM: Increase energy calculation precision
- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
- counter: 104-quad-8: Return error when invalid mode during ceiling_write
- Bluetooth: fix repeated calls to sco_sock_kill
- drm/msm/dsi: Fix some reference counted resource leaks
- usb: gadget: udc: at91: add IRQ check
- usb: phy: fsl-usb: add IRQ check
- usb: phy: twl6030: add IRQ checks
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
- usb: host: ohci-tmio: add IRQ check
- usb: phy: tahvo: add IRQ check
- mac80211: Fix insufficient headroom issue for AMSDU
- lockd: Fix invalid lockowner cast after vfs_test_lock
- nfsd4: Fix forced-expiry locking
- usb: gadget: mv_u3d: request_irq() after initializing UDC
- mm/swap: consider max pages in iomap_swapfile_add_extent
- Bluetooth: add timeout sanity check to hci_inquiry
- i2c: iop3xx: fix deferred probing
- i2c: s3c2410: fix IRQ check
- rsi: fix error code in rsi_load_9116_firmware()
- rsi: fix an error code in rsi_probe()
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
- ASoC: Intel: Skylake: Fix module resource and format selection
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
- mmc: moxart: Fix issue with uninitialized dma_slave_config
- bpf: Fix possible out of bound write in narrow load handling
- CIFS: Fix a potencially linear read overflow
- i2c: mt65xx: fix IRQ check
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA
config is available
- tty: serial: fsl_lpuart: fix the wrong mapbase value
- ASoC: wcd9335: Fix a double irq free in the remove function
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe
function
- ASoC: wcd9335: Disable irq on slave ports in the remove function
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
- bcma: Fix memory leak for internally-handled cores
- brcmfmac: pcie: fix oops on failure to resume and reprobe
- ipv6: make exception cache less predictible
- ipv4: make exception cache less predictible
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
- net: qualcomm: fix QCA7000 checksum handling
- octeontx2-af: Fix loop in free and unmap counter
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4
- bpf: Fix leakage due to insufficient speculative store bypass mitigation
- bpf: verifier: Allocate idmap scratch in verifier env
- bpf: Fix pointer arithmetic mask tightening under state pruning
- tty: Fix data race between tiocsti() and flush_to_ldisc()
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error
- KVM: s390: index kvm->arch.idle_mask by vcpu_idx
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
adjusted
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
- fuse: truncate pagecache on atomic_o_trunc
- fuse: flush extending writes
- IMA: remove -Wmissing-prototypes warning
- IMA: remove the dependency on CRYPTO_MD5
- fbmem: don't allow too huge resolutions
- backlight: pwm_bl: Improve bootloader/kernel device handover
- clk: kirkwood: Fix a clocking boot regression
- Linux 5.4.146
* AMD A8-7680 (amdgpu): broken Xorg acceleration and hibernation
(LP: #1920674) // Focal update: v5.4.146 upstream stable release
(LP: #1946024)
- drm/amdgpu/acp: Make PM domain really work
* Focal update: v5.4.145 upstream stable release (LP: #1945517)
- fscrypt: add fscrypt_symlink_getattr() for computing st_size
- ext4: report correct st_size for encrypted symlinks
- f2fs: report correct st_size for encrypted symlinks
- ubifs: report correct st_size for encrypted symlinks
- kthread: Fix PF_KTHREAD vs to_kthread() race
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
- gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V
formats
- reset: reset-zynqmp: Fixed the argument data type
- qed: Fix the VF msix vectors flow
- net: macb: Add a NULL check on desc_ptp
- qede: Fix memset corruption
- perf/x86/intel/pt: Fix mask of num_address_ranges
- perf/x86/amd/ibs: Work around erratum #1197
- perf/x86/amd/power: Assign pmu.module
- cryptoloop: add a deprecation warning
- ARM: 8918/2: only build return_address() if needed
- ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
- ARC: wireup clone3 syscall
- media: stkwebcam: fix memory leak in stk_camera_probe
- igmp: Add ip_mc_list lock in ip_check_mc_rcu
- USB: serial: mos7720: improve OOM-handling in read_mos_reg()
- ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing
table (v2)
- powerpc/boot: Delete unneeded .globl _zimage_start
- net: ll_temac: Remove left-over debug message
- mm/page_alloc: speed up the iteration of max_order
- Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
ASPM"
- x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating
- Revert "btrfs: compression: don't try to compress if we don't have enough
pages"
- ALSA: usb-audio: Add registration quirk for JBL Quantum 800
- usb: host: xhci-rcar: Don't reload firmware after the completion
- usb: mtu3: use @mult for HS isoc or intr
- usb: mtu3: fix the wrong HS mult value
- xhci: fix unsafe memory usage in xhci tracing
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
- PCI: Call Max Payload Size-related fixup quirks early
- Linux 5.4.145
* Focal update: v5.4.144 upstream stable release (LP: #1944756)
- net: qrtr: fix another OOB Read in qrtr_endpoint_post
- ARC: Fix CONFIG_STACKDEPOT
- netfilter: conntrack: collect all entries in one cycle
- once: Fix panic when module unload
- ovl: fix uninitialized pointer read in ovl_lookup_real_one()
- mmc: sdhci-msm: Update the software timeout value for sdhc
- mm, oom: make the calculation of oom badness more accurate
- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX
and TX error counters
- Revert "USB: serial: ch341: fix character loss at high transfer rates"
- USB: serial: option: add new VID/PID to support Fibocom FG150
- usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
- usb: dwc3: gadget: Stop EP0 transfers during pullup disable
- scsi: core: Fix hang of freezing queue between blocking and running device
- RDMA/bnxt_re: Add missing spin lock initialization
- IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
- e1000e: Fix the max snoop/no-snoop latency for 10M
- RDMA/efa: Free IRQ vectors on error flow
- ip_gre: add validation for csum_start
- xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
- net: marvell: fix MVNETA_TX_IN_PRGRS bit number
- rtnetlink: Return correct error on changing device netns
- net: hns3: clear hardware resource when loading driver
- net: hns3: fix duplicate node in VLAN list
- net: hns3: fix get wrong pfc_en when query PFC configuration
- drm/i915: Fix syncmap memory leak
- usb: gadget: u_audio: fix race condition on endpoint stop
- perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
- opp: remove WARN when no valid OPPs remain
- virtio: Improve vq->broken access to avoid any compiler optimization
- virtio_pci: Support surprise removal of virtio pci device
- vringh: Use wiov->used to check for read/write desc order
- qed: qed ll2 race condition fixes
- qed: Fix null-pointer dereference in qed_rdma_create_qp()
- drm: Copy drm_wait_vblank to user before returning
- drm/nouveau/disp: power down unused DP links during init
- net/rds: dma_map_sg is entitled to merge entries
- btrfs: fix race between marking inode needs to be logged and log syncing
- vt_kdsetmode: extend console locking
- bpf: Track contents of read-only maps as scalars
- bpf: Fix cast to pointer from integer of different size warning
- net: dsa: mt7530: fix VLAN traffic leaks again
- KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
- arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
- btrfs: fix NULL pointer dereference when deleting device by invalid id
- Revert "floppy: reintroduce O_NDELAY fix"
- Revert "parisc: Add assembly implementations for memset, strlen, strcpy,
strncpy and strcat"
- net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
- audit: move put_tree() to avoid trim_trees refcount underflow and UAF
- Linux 5.4.144
-- Wen-chien Jesse Sung <email address hidden> Wed, 03 Nov 2021 21:21:25 +0800
