Focal update: v5.4.9 upstream stable release

Bug #1860125 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-5.4 (Ubuntu)
Fix Released
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.9 upstream stable release
       from git://git.kernel.org/

Linux 5.4.9
mm/hugetlb: defer freeing of huge pages if in non-task context
hsr: fix a race condition in node list insertion and deletion
hsr: fix error handling routine in hsr_dev_finalize()
hsr: avoid debugfs warning message when module is remove
net: annotate lockless accesses to sk->sk_pacing_shift
perf/x86/intel/bts: Fix the use of page_private()
efi: Don't attempt to map RCI2 config table if it doesn't exist
lib/ubsan: don't serialize UBSAN report
xen/blkback: Avoid unmapping unmapped grant pages
mm/sparse.c: mark populate_section_memmap as __meminit
s390/smp: fix physical to logical CPU map for SMT
Btrfs: only associate the locked page with one async_chunk struct
btrfs: get rid of unique workqueue helper functions
ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps
net: add annotations on hh->hh_len lockless accesses
xfs: periodically yield scrub threads to the scheduler
drm/i915/execlists: Fix annotation for decoupling virtual request
ath9k_htc: Discard undersized packets
ath9k_htc: Modify byte order for an error message
fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP
fs: cifs: Fix atime update check vs mtime
cifs: Fix lookup of root ses in DFS referral cache
tty: serial: msm_serial: Fix lockup for sysrq and oops
phy: renesas: rcar-gen3-usb2: Use platform_get_irq_optional() for optional irq
arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning
dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example
media: usb: fix memory leak in af9005_identify_state
regulator: ab8500: Remove AB8505 USB regulator
media: flexcop-usb: ensure -EIO is returned on error condition
arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
arm64: dts: meson-gxl-s905x-khadas-vim: fix uart_A bluetooth node
Bluetooth: Fix memory leak in hci_connect_le_scan
Bluetooth: delete a stray unlock
Bluetooth: btusb: fix PM leak in error case of setup
powerpc/mm: Mark get_slice_psize() & slice_addr_is_low() as notrace
regulator: axp20x: Fix AXP22x ELDO2 regulator enable bitmask
spi: uniphier: Fix FIFO threshold
regulator: bd70528: Remove .set_ramp_delay for bd70528_ldo_ops
regulator: axp20x: Fix axp20x_set_ramp_delay
watchdog: tqmx86_wdt: Fix build error
net, sysctl: Fix compiler warning when only cBPF is present
netfilter: nf_queue: enqueue skbs with NULL dst
platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table
xfs: don't check for AG deadlock for realtime files in bunmapi
firmware: arm_scmi: Avoid double free in error flow
cifs: Fix potential softlockups while refreshing DFS cache
of: overlay: add_changeset_property() memory leak
iommu/vt-d: Remove incorrect PSI capability check
perf callchain: Fix segfault in thread__resolve_callchain_sample()
ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100
kernel/module.c: wakeup processes in module_wq on module unload
net/sched: annotate lockless accesses to qdisc->empty
HID: i2c-hid: Reset ALPS touchpads on resume
powerpc: Chunk calls to flush_dcache_range in arch_*_memory
nfsd4: fix up replay_matches_cache()
arm64: dts: qcom: msm8998-clamshell: Remove retention idle state
sunrpc: fix crash when cache_head become valid before update
PM / devfreq: Check NULL governor in available_governors_show
drm/msm: include linux/sched/task.h
spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode
ftrace: Avoid potential division by zero in function profiler
arm64: Revert support for execute-only user mappings
exit: panic before exit_mm() on global init exit
scsi: lpfc: Fix rpi release when deleting vport
ALSA: firewire-motu: Correct a typo in the clock proc string
ALSA: pcm: Yet another missing check of non-cached buffer type
ALSA: cs4236: fix error return comparison of an unsigned integer
gen_initramfs_list.sh: fix 'bad variable name' error
dmaengine: virt-dma: Fix access after free in vchan_complete()
apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
mm/gup: fix memory leak in __gup_benchmark_ioctl
io_uring: use current task creds instead of allocating a new one
samples/trace_printk: Wait for IRQ work to finish
tracing: Fix endianness bug in histogram trigger
tracing: Have the histogram compare functions convert to u64 first
tracing: Avoid memory leak in process_system_preds()
tracing: Fix lock inversion in trace_event_enable_tgid_record()
rseq/selftests: Fix: Namespace gettid() for compatibility with glibc 2.30
riscv: ftrace: correct the condition logic in function graph tracer
clocksource: riscv: add notrace to riscv_sched_clock
gpiolib: fix up emulated open drain outputs
gpio: xtensa: fix driver build
libata: Fix retrieving of active qcs
ata: ahci_brcm: BCM7425 AHCI requires AHCI_HFLAG_DELAY_ENGINE
ata: ahci_brcm: Add missing clock management during recovery
ata: ahci_brcm: Fix AHCI resources management
ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys()
bpf: Fix precision tracking for unbounded scalars
compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES
compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
compat_ioctl: block: handle Persistent Reservations
Btrfs: fix infinite loop during nocow writeback due to race
dmaengine: dma-jz4780: Also break descriptor chains on JZ4725B
dmaengine: Fix access to uninitialized dma_slave_caps
selftests/seccomp: Catch garbage on SECCOMP_IOCTL_NOTIF_RECV
samples/seccomp: Zero out members based on seccomp_notif_sizes
seccomp: Check that seccomp_notif is zeroed out by the user
selftests/seccomp: Zero out seccomp_notif
locks: print unsigned ino in /proc/locks
gcc-plugins: make it possible to disable CONFIG_GCC_PLUGINS again
pstore/ram: Fix error-path memory leak in persistent_ram_new() callers
pstore/ram: Write new dumps to start of recycled zones
ocfs2: fix the crash due to call ocfs2_get_dlm_debug once less
mm/oom: fix pgtables units mismatch in Killed process message
mm: move_pages: return valid node id in status if the page is already on the target node
memcg: account security cred as well to kmemcg
mm/zsmalloc.c: fix the migrated zspage statistics.
mm/memory_hotplug: shrink zones when offlining memory
media: cec: check 'transmit_in_progress', not 'transmitting'
media: cec: avoid decrementing transmit_queue_sz if it is 0
media: cec: CEC 2.0-only bcast messages were ignored
media: pulse8-cec: fix lost cec_transmit_attempt_done() call
MIPS: Avoid VDSO ABI breakage due to global register variable
MIPS: BPF: eBPF JIT: check for MIPS ISA compliance in Kconfig
MIPS: BPF: Disable MIPS32 eBPF JIT
drm/amdgpu/smu: add metrics table lock for vega20 (v2)
drm/amdgpu/smu: add metrics table lock for navi (v2)
drm/amdgpu/smu: add metrics table lock for arcturus (v2)
drm/amdgpu/smu: add metrics table lock
drm/sun4i: hdmi: Remove duplicate cleanup calls
ALSA: hda/realtek - Add headset Mic no shutup for ALC283
ALSA: hda - Apply sync-write workaround to old Intel platforms, too
ALSA: usb-audio: set the interface format after resume on Dell WD19
ALSA: usb-audio: fix set_format altsetting sanity check
ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
mm: drop mmap_sem before calling balance_dirty_pages() in write fault
block: add bio_truncate to fix guard_bio_eod
netfilter: nft_tproxy: Fix port selector on Big Endian
ALSA: hda - Downgrade error message for single-cmd fallback
taskstats: fix data-race
shmem: pin the file in shmem_fault() if mmap_sem is dropped
tcp: fix data-race in tcp_recvmsg()
ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen
PCI: Fix missing inline for pci_pr3_present()
ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a driver
PCI: Add a helper to check Power Resource Requirements _PR3 existence
ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC
ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker
PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
xen/balloon: fix ballooned page accounting without hotplug enabled
xen-blkback: prevent premature module unload
IB/mlx5: Fix steering rule of drop and count
IB/mlx4: Follow mirror sequence of device add during device removal
RDMA/counter: Prevent auto-binding a QP which are not tracked with res
s390/cpum_sf: Avoid SBD overflow condition in irq handler
s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits
md: raid1: check rdev before reference in raid1_sync_request func
raid5: need to set STRIPE_HANDLE for batch head
afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP
afs: Fix mountpoint parsing
net: make socket read/write_iter() honor IOCB_NOWAIT
usb: gadget: fix wrong endpoint desc
drm/nouveau/kms/nv50-: fix panel scaling
drm/nouveau: Fix drm-core using atomic code-paths on pre-nv50 hardware
drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit
staging/wlan-ng: add CRC32 dependency in Kconfig
scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
scsi: libsas: stop discovering if oob mode is disconnected
scsi: iscsi: qla4xxx: fix double free in probe
scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI
scsi: qla2xxx: Don't defer relogin unconditonally
scsi: qla2xxx: Send Notify ACK after N2N PLOGI
scsi: qla2xxx: Configure local loop for N2N target
scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length
scsi: qla2xxx: Don't call qlt_async_event twice
scsi: qla2xxx: Drop superfluous INIT_WORK of del_work
scsi: qla2xxx: Use explicit LOGO in target mode
scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
rxe: correctly calculate iCRC for unaligned payloads
RDMA/cma: add missed unregister_pernet_subsys in init failure
afs: Fix SELinux setting security label on /afs
afs: Fix afs_find_server lookups for ipv4 peers
PM / devfreq: Don't fail devfreq_dev_release if not in list
PM / devfreq: Set scaling_max_freq to max on OPP notifier error
PM / devfreq: Fix devfreq_notifier_call returning errno
iio: adc: max9611: Fix too short conversion time delay
iio: st_accel: Fix unused variable warning
nvme/pci: Fix read queue count
nvme/pci: Fix write and poll queue types
drm/amd/display: update dispclk and dppclk vco frequency
drm/amd/display: Reset steer fifo before unblanking the stream
drm/amd/display: Change the delay time before enabling FEC
drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle
drm/amd/display: Map DSC resources 1-to-1 if numbers of OPPs and DSCs are equal
drm/amdgpu: add cache flush workaround to gfx8 emit_fence
drm/amdgpu: add header line for power profile on Arcturus
drm/amdgpu: add check before enabling/disabling broadcast mode
nvme-fc: fix double-free scenarios on hw queues
nvme_fc: add module to ops template to allow module references
drm/mcde: dsi: Fix invalid pointer dereference if panel cannot be found

CVE References

Paolo Pisati (p-pisati)
Changed in linux-5.4 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (82.1 KiB)

This bug was fixed in the package linux-5.4 - 5.4.0-14.17

---------------
linux-5.4 (5.4.0-14.17) focal; urgency=medium

  * focal/linux-5.4: 5.4.0-14.17 -proposed tracker (LP: #1862255)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Boot log is swamped with "debugfs: Directory 'imc' with parent 'powerpc'
    already present" messages on kernel 5.4 (LP: #1861379)
    - powerpc/powernv: Avoid re-registration of imc debugfs directory

  * CVE-2019-3016
    - SAUCE: x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
    - SAUCE: x86/kvm: Introduce kvm_(un)map_gfn()
    - SAUCE: x86/kvm: Cache gfn to pfn translation
    - SAUCE: x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
    - SAUCE: x86/KVM: Clean up host's steal time structure

  * installing linux-modules-nvidia does not remove nvidia-dkms, and the kernel
    prioritizes the wrong version of the module from disk (LP: #1856414)
    - Revert "UBUNTU: [Packaging] dkms -- switch basic provides to *-modules"
    - Revert "UBUNTU: [Packaging] dkms -- add Provides: specifiers for existing
      zfs/nvidia/vbox"
    - Revert "UBUNTU: [packaging] dkms-build -- include versioned provides"
    - [Packaging] wireguard -- drop provides

  * Focal update: v5.4.18 upstream stable release (LP: #1862203)
    - vfs: fix do_last() regression
    - cifs: fix soft mounts hanging in the reconnect code
    - x86/resctrl: Fix a deadlock due to inaccurate reference
    - x86/resctrl: Fix use-after-free when deleting resource groups
    - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
    - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
    - e1000e: Revert "e1000e: Make watchdog use delayed work"
    - gfs2: Another gfs2_find_jhead fix
    - perf c2c: Fix return type for histogram sorting comparision functions
    - PM / devfreq: Add new name attribute for sysfs
    - tools lib: Fix builds when glibc contains strlcpy()
    - arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
    - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
    - reiserfs: Fix memory leak of journal device string
    - media: digitv: don't continue if remote control state can't be read
    - media: af9005: uninitialized variable printked
    - media: vp7045: do not read uninitialized values if usb transfer fails
    - media: gspca: zero usb_buf
    - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
    - tomoyo: Use atomic_t for statistics counter
    - ttyprintk: fix a potential deadlock in interrupt context issue
    - Bluetooth: Fix race condition in hci_release_sock()
    - cgroup: Prevent double killing of css when enabling threaded cgroup
    - clk: sunxi-ng: v3s: Fix incorrect number of hw_clks.
    - arm64: dts: meson-sm1-sei610: add gpio bluetooth interrupt
    - ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
    - ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
    - ARM: dts: beagle-x15-common: Model 5V0 regulator
    - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
    - tools lib traceevent: Fix memory leakage in filter_event
    - rseq: Unregister rseq for clone CLONE_...

Changed in linux-5.4 (Ubuntu Focal):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.