Eoan update: v5.3.4 upstream stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Eoan |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.3.4 upstream stable release
from git://git.
Linux 5.3.4
platform/chrome: cros_ec_rpmsg: Fix race with host command when probe failed
mt76: mt7615: fix mt7615 firmware path definitions
mt76: mt7615: always release sem in mt7615_load_patch
md/raid0: avoid RAID0 data corruption due to layout confusion.
drm/amdgpu/display: fix 64 bit divide
drm/amd/display: Add missing HBM support and raise Vega20's uclk.
drm/amd/display: dce11.x /dce12 update formula input
drm/amd/display: Restore backlight brightness after system resume
CIFS: Fix oplock handling for SMB 2.1+ protocols
CIFS: fix max ea value size
i2c: riic: Clear NACK in tend isr
hwrng: core - don't wait on add_early_
quota: fix wrong condition in is_quota_
ext4: fix punch hole for inline_data file systems
ext4: fix warning inside ext4_convert_
mtd: rawnand: stm32_fmc2: avoid warnings when building with W=1 option
ipmi: move message error checking to avoid deadlock
xfs: Fix stale data exposure when readahead races with hole punch
mm: Handle MADV_WILLNEED through vfs_fadvise()
fs: Export generic_fadvise()
/dev/mem: Bail out upon SIGKILL.
cfg80211: Purge frame registrations on iftype change
md: only call set_in_sync() when it is expected to succeed.
md: don't report active array_state until after revalidate_disk() completes.
md/raid6: Set R5_ReadError when there is read failure on parity disk
ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint
SUNRPC: Fix buffer handling of GSS MIC without slack
SUNRPC: Dequeue the request from the receive queue while we're re-encoding
btrfs: Fix a regression which we can't convert to SINGLE profile
Btrfs: fix race setting up and completing qgroup rescan workers
btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls
btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
btrfs: adjust dirty_metadata_
btrfs: Relinquish CPUs in btrfs_compare_trees
Btrfs: fix use-after-free when using the tree modification log
btrfs: fix allocation of free space cache v1 bitmap pages
ovl: filter of trusted xattr results in audit
ovl: Fix dereferencing possible ERR_PTR()
smb3: fix leak in "open on server" perf counter
smb3: fix unmount hang in open_shroot
smb3: allow disabling requesting leases
block: fix null pointer dereference in blk_mq_
block: mq-deadline: Fix queue restart handling
i40e: check __I40E_VF_DISABLE bit in i40e_sync_
ath10k: fix channel info parsing for non tlv target
rtw88: pci: Use DMA sync instead of remapping in RX ISR
rtw88: pci: Rearrange the memory usage for skb in RX ISR
KEYS: trusted: correctly initialize digests and fix locking issue
mt76: round up length on mt76_wr_copy
lib/lzo/
memcg, kmem: do not fail __GFP_NOFAIL charges
memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
mm/compaction.c: clear total_{
z3fold: fix memory leak in kmem cache
z3fold: fix retry mechanism in page reclaim
gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
efifb: BGRT: Improve efifb_bgrt_
regulator: Defer init completion for a while after late_initcall
iommu/vt-d: Fix wrong analysis whether devices share the same bus
alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
iommu/arm-smmu-v3: Disable detection of ATS and PRI
arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
arm64: tlb: Ensure we execute an ISB following walk cache invalidation
ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
ARM: samsung: Fix system restart on S3C6410
staging: erofs: cannot set EROFS_V_
ASoC: Intel: Fix use of potentially uninitialized variable
ASoC: Intel: Skylake: Use correct function to access iomem space
ASoC: Intel: NHLT: Fix debug print format
binfmt_elf: Do not move brk for INTERP-less ET_EXEC
spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
spi: ep93xx: Repair SPI CS lookup tables
media: vivid: fix device init when no_error_inj=1 and fb disabled
media: don't drop front-end reference count for ->detach
media: hantro: Set DMA max segment size
media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
media: videobuf-core.c: poll_wait needs a non-NULL buf pointer
KVM: x86/mmu: Use fast invalidate mechanism to zap MMIO sptes
kvm: x86: Add "significant index" flag to a few CPUID leaves
KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes
KVM: x86: Manually calculate reserved bits when loading PDPTRS
KVM: x86: set ctxt->have_
KVM: x86: always stop emulation on page fault
platform/x86: intel_int0002_
parisc: Disable HP HSC-PCI Cards to prevent kernel crash
fuse: fix beyond-end-of-page access in fuse_parse_cache()
fuse: fix missing unlock_page in fuse_writepage()
fuse: fix deadlock with aio poll and fuse_iqueue:
tpm: Wrap the buffer from the caller to tpm_buf in tpm_send()
tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts
tpm_tis_core: Turn on the TPM before probing IRQ's
powerpc/imc: Dont create debugfs files for cpu-less nodes
scsi: implement .cleanup_rq callback
blk-mq: add callback of .cleanup_rq
ALSA: hda/realtek - PCI quirk for Medion E4254
rcu/tree: Fix SCHED_FIFO params
ARM: dts: am3517-evm: Fix missing video
randstruct: Check member structs in is_pure_
RDMA: Fix double-free in srq creation error flow
IB/hfi1: Do not update hcrc for a KDETH packet during fault injection
IB/hfi1: Define variables as unsigned long to fix KASAN warning
IB/mlx5: Free mpi in mp_slave mode
printk: Do not lose last line in kmsg buffer dump
scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag
scsi: scsi_dh_rdac: zero cdb in send_mode_select()
ALSA: firewire-tascam: check intermediate state of clock status and retry
ALSA: firewire-tascam: handle error code when getting current source of clock
iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
ARM: omap2plus_
ARM: dts: logicpd-
PM / devfreq: passive: fix compiler warning
media: omap3isp: Set device on omap3isp subdevs
kvm: Nested KVM MMUs need PAE root too
btrfs: Detect unbalanced tree with empty leaf before crashing btree operations
btrfs: tree-checker: Add ROOT_ITEM check
btrfs: extent-tree: Make sure we only allocate extents from block groups with the same type
btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_
zd1211rw: remove false assertion from zd_mac_clear()
iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems
ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
drm: fix module name in edid_firmware log message
media: ttusb-dec: Fix info-leak in ttusb_dec_
drm/amd/
ALSA: hda - Drop unsol event handler for Intel HDMI codecs
ALSA: hda - Add a quirk model for fixing Huawei Matebook X right speaker
e1000e: add workaround for possible stalled packet
libertas: Add missing sentinel at end of if_usb.c fw_table
mmc: mtk-sd: Re-store SDIO IRQs mask at system resume
raid5: don't increment read_errors on EILSEQ return
mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
mmc: core: Add helper function to indicate if SDIO IRQs is enabled
mmc: sdhci: Fix incorrect switch to HS mode
sched/psi: Correct overly pessimistic size calculation
mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_
raid5: don't set STRIPE_HANDLE to stripe which is in batch list
block: make rq sector size accessible for block stats
io_uring: fix wrong sequence setting logic
spi: bcm2835: Work around DONE bit erratum
tools/power/
ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
platform/x86: intel_pmc_
platform/x86: intel_pmc_core: Do not ioremap RAM
x86/cpu: Add Tiger Lake to Intel family
irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
irqchip/
x86/mm: Fix cpumask_of_node() error condition
kprobes: Prohibit probing on BUG() and WARN() address
dmaengine: ti: edma: Do not reset reserved paRAM slots
md/raid1: fail run raid1 array when active disk less than one
hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs
closures: fix a race on wakeup from closure_sync
ACPI / PCI: fix acpi_pci_
ACPI: custom_method: fix memory leaks
x86/amd_nb: Add PCI device IDs for family 17h, model 70h
ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
ASoC: dt-bindings: sun4i-spdif: Fix dma-names warning
libtraceevent: Change users plugin directory
iommu/iova: Avoid false sharing on fq_timer_on
libata/ahci: Drop PCS quirk for Denverton and beyond
ASoC: Intel: Haswell: Adjust machine device private context
iommu/amd: Silence warnings under memory pressure
ALSA: firewire-motu: add support for MOTU 4pre
nvme-multipath: fix ana log nsid lookup when nsid is not found
nvmet: fix data units read and written counters in SMART log
x86/mm/pti: Handle unaligned address gracefully in pti_clone_
ASoC: fsl_ssi: Fix clock control issue in master mode
x86/mm/pti: Do not invoke PTI functions when PTI is disabled
jump_label: Don't warn on __exit jump entries
arm64: Use correct ll/sc atomic constraints
perf evlist: Use unshare(CLONE_FS) in sb threads to let setns(CLONE_NEWNS) work
arm64: kpti: ensure patched kernel text is fetched from PoU
x86/apic/vector: Warn when vector space exhaustion breaks affinity
arm64: dts: meson: fix boards regulators states format
sched/cpufreq: Align trace event behavior of fast switching
ACPI / CPPC: do not require the _PSD method
ASoC: es8316: fix headphone mixer volume table
leds: lm3532: Fixes for the driver for stability
media: ov9650: add a sanity check
media: aspeed-video: address a protential usage of an unitialized var
perf script: Fix memory leaks in list_scripts()
perf report: Fix --ns time sort key output
perf trace beauty ioctl: Fix off-by-one error in cmd->string table
media: saa7134: fix terminology around saa7134_
media: cpia2_usb: fix memory leaks
media: saa7146: add cleanup in hexium_attach()
media: cec-notifier: clear cec_adap in cec_notifier_
PM / devfreq: exynos-bus: Correct clock enable sequence
PM / devfreq: passive: Use non-devm notifiers
ARM: OMAP2+: move platform-specific asm-offset.h to arch/arm/mach-omap2
PM / devfreq: Fix kernel oops on governor module load
soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9
soc: renesas: rmobile-sysc: Set GENPD_FLAG_
ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91
EDAC/amd64: Decode syndrome before translating address
EDAC/amd64: Recognize DRAM device type ECC capability
libperf: Fix alignment trap with xyarray contents in 'perf stat'
cpufreq: imx-cpufreq-dt: Add i.MX8MN support
EDAC/amd64: Support more than two controllers for chip selects handling
media: dvb-core: fix a memory leak bug
posix-cpu-timers: Sanitize bogus WARNONS
media: dvb-frontends: use ida for pll number
media: mceusb: fix (eliminate) TX IR signal length limit
s390/kasan: provide uninstrumented __strlen
arm64: entry: Move ct_user_exit before any other exception
ACPI / APEI: Release resources if gen_pool_add() fails
nbd: add missing config put
ASoC: mchp-i2s-mcc: Fix unprepare of GCLK
led: triggers: Fix a memory leak bug
ASoC: mchp-i2s-mcc: Wait for RX/TX RDY only if controller is running
ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
tools headers: Fixup bitsperlong per arch includes
powerpc/Makefile: Always pass --synthetic to nm if supported
ASoC: uniphier: Fix double reset assersion when transitioning to suspend state
media: hdpvr: add terminating 0 at end of string
media: radio/si470x: kill urb on error
x86/platform/
ARM: dts: imx7-colibri: disable HS400
arm64: dts: qcom: qcs404-evb: Mark WCSS clocks protected
ARM: dts: imx7d: cl-som-imx7: make ethernet work again
m68k: Prevent some compiler warnings in Coldfire builds
net: lpc-enet: fix printk format strings
kasan/arm64: fix CONFIG_
media: imx: mipi csi-2: Don't fail if initial state times-out
media: omap3isp: Don't set streaming state on random subdevs
media: i2c: ov5645: Fix power sequence
media: vsp1: fix memory leak of dl on error return path
perf record: Support aarch64 random socket_id assignment
ARM: xscale: fix multi-cpu compilation
dmaengine: iop-adma: use correct printk format strings
media: rc: imon: Allow iMON RC protocol for ffdc 7e device
perf unwind: Fix libunwind when tid != pid
arm64/efi: Move variable assignments after SECTIONS
media: em28xx: modules workqueue not inited for 2nd device
media: fdp1: Reduce FCP not found message level to debug
media: i2c: tda1997x: prevent potential NULL pointer access
media: mtk-mdp: fix reference count on old device tree
perf test vfs_getname: Disable ~/.perfconfig to get default output
perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
media: gspca: zero usb_buf on error
blk-mq: Fix memory leak in blk_mq_
idle: Prevent late-arriving interrupts from disrupting offline
sched/fair: Use rq_lock/unlock in online_
firmware: arm_scmi: Check if platform has released shmem before using
efi: cper: print AER info of PCIe fatal error
EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
perf tools: Fix paths in include statements
loop: Add LOOP_SET_DIRECT_IO to compat ioctl
ACPI / processor: don't print errors for processorIDs == 0xff
ASoC: hdac_hda: fix page fault issue by removing race
RAS: Build debugfs.o only when enabled in Kconfig
media: staging: tegra-vde: Fix build error
media: media/platform: fsl-viu.c: fix build for MICROBLAZE
md: don't set In_sync if array is frozen
md: don't call spare_active in md_reap_sync_thread if all member devices can't work
md/raid1: end bio when the device faulty
arm64/prefetch: fix a -Wtype-limits warning
ASoC: rsnd: don't call clk_get_rate() under atomic context
EDAC/altera: Use the proper type for the IRQ status bits
ia64:unwind: fix double free for mod->arch.
ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
base: soc: Export soc_device_
soc: amlogic: meson-clk-measure: protect measure with a mutex
arm64: mm: free the initrd reserved memblock in a aligned manner
gpio: madera: Add support for Cirrus Logic CS47L92
gpio: madera: Add support for Cirrus Logic CS47L15
cpuidle: teo: Allow tick to be stopped if PM QoS is used
media: iguanair: add sanity checks
arm64: dts: imx8mq: Correct OPP table according to latest datasheet
EDAC/mc: Fix grain_bits calculation
rcu: Add destroy_
ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_
ALSA: hda - Show the fatal CORB/RIRB error more clearly
x86/apic: Soft disable APIC before initializing it
rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic region
x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI fails
sched/deadline: Fix bandwidth accounting at all levels after offline migration
x86/apic: Make apic_pending_
sched/core: Fix CPU controller for !RT_GROUP_SCHED
sched/fair: Fix imbalance due to CPU affinity
time/tick-
media: i2c: ov5640: Check for devm_gpiod_
media: hdpvr: Add device num check and handling
media: vivid: work around high stack usage with clang
media: vb2: reorder checks in vb2_poll()
media: vivid:add sanity check to avoid divide error and set value to 1 if 0.
media: exynos4-is: fix leaked of_node references
ASoC: SOF: pci: mark last_busy value at runtime PM init
media: mtk-cir: lower de-glitch counter for rc-mm protocol
media: dib0700: fix link error for dibx000_
ASoC: SOF: reset DMA state in prepare
leds: leds-lp5562 allow firmware files up to the maximum length
dmaengine: bcm2835: Print error in case setting DMA mask fails
firmware: qcom_scm: Use proper types for dma mappings
ASoC: sgtl5000: Fix charge pump source assignment
ASoC: sgtl5000: Fix of unmute outputs on probe
ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER
spi: dw-mmio: Clock should be shut when error occurs
regulator: lm363x: Fix n_voltages setting for lm36274
regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
ALSA: hda/hdmi - Don't report spurious jack state changes
cpufreq: ap806: Add NULL check after kcalloc
ASoC: SOF: Intel: hda: Make hdac_device device-managed
ALSA: hda: Flush interrupts on disabling
nfc: enforce CAP_NET_RAW for raw sockets
ieee802154: enforce CAP_NET_RAW for raw sockets
ax25: enforce CAP_NET_RAW for raw sockets
appletalk: enforce CAP_NET_RAW for raw sockets
mISDN: enforce CAP_NET_RAW for raw sockets
net/mlx5: Add device ID of upcoming BlueField-2
tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state
net: sched: fix possible crash in tcf_action_
net/mlx5e: Fix traffic duplication in ethtool steering
vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled
net_sched: add policy validation for action attributes
ipv4: Revert removal of rt_uses_gateway
net/sched: cbs: Fix not adding cbs instance to list
net: phy: micrel: add Asym Pause workaround for KSZ9021
selftests: Update fib_nexthop_
ipv6: fix a typo in fib6_rule_lookup()
net/mlx5e: Fix matching on tunnel addresses type
net/rds: Check laddr_check before calling it
usbnet: sanity checking of packet sizes and device mtu
usbnet: ignore endpoints with invalid wMaxPacketSize
tcp_bbr: fix quantization code to not raise cwnd if not probing bandwidth
skge: fix checksum byte order
selftests: Update fib_tests to handle missing ping6
sch_netem: fix a divide by zero in tabledist()
ppp: Fix memory leak in ppp_write
openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
nfp: flower: prevent memory leak in nfp_flower_
nfp: flower: fix memory leak in nfp_flower_
net: stmmac: Fix page pool size
net_sched: add max len check for TCA_KIND
net/sched: act_sample: don't push mac header on ip6gre ingress
net: qrtr: Stop rx_worker before freeing node
net/phy: fix DP83865 10 Mbps HDX loopback disable function
macsec: drop skb sk before calling gro_cells_receive
ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule
cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
arcnet: provide a buffer big enough to actually receive packets
CVE References
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
The following patch has already been applied for bug #1847478:
ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule