Focal update: v5.4.17 upstream stable release

Bug #1861784 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-5.4 (Ubuntu)
Fix Released
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.17 upstream stable release
       from git://git.kernel.org/

Linux 5.4.17
power/supply: ingenic-battery: Don't change scale if there's only one
Revert "um: Enable CONFIG_CONSTRUCTORS"
KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
crypto: pcrypt - Fix user-after-free on module unload
crypto: caam - do not reset pointer size from MCFGR register
crypto: vmx - reject xts inputs that are too short
crypto: af_alg - Use bh_lock_sock in sk_destruct
rsi: fix non-atomic allocation in completion handler
rsi: fix memory leak on failed URB submission
rsi: fix use-after-free on probe errors
rsi: fix use-after-free on failed probe and unbind
bus: ti-sysc: Fix missing force mstandby quirk handling
Bluetooth: btbcm: Use the BDADDR_PROPERTY quirk
Bluetooth: Allow combination of BDADDR_PROPERTY and INVALID_BDADDR quirks
ALSA: hda/realtek - Move some alc236 pintbls to fallback table
usb-storage: Disable UAS on JMicron SATA enclosure
bus: ti-sysc: Add module enable quirk for audio AESS
mmc: sdhci-pci: Add support for Intel JSL
mmc: sdhci-pci: Quirk for AMD SDHC Device 0x7906
ARM: OMAP2+: SmartReflex: add omap_sr_pdata definition
ARM: config: aspeed-g5: Enable 8250_DW quirks
mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs
perf/imx_ddr: Add enhanced AXI ID filter support
iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping
iommu/amd: Support multiple PCI DMA aliases in device table
spi: pxa2xx: Add support for Intel Comet Lake-H
bus: ti-sysc: Use swsup quirks also for am335x musb
bus: ti-sysc: Handle mstandby quirk and use it for musb
media: dvbsky: add support for eyeTV Geniatech T2 lite
PCI: Add DMA alias quirk for Intel VCA NTB
platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
staging: mt7621-pci: add quirks for 'E2' revision using 'soc_device_attribute'
libbpf: Fix BTF-defined map's __type macro handling of arrays
drm/amdgpu/SRIOV: add navi12 pci id for SRIOV (v2)
ASoC: Intel: cht_bsw_rt5645: Add quirk for boards using pmc_plt_clk_0
extcon-intel-cht-wc: Don't reset USB data connection at probe
HID: steam: Fix input device disappearing
atm: eni: fix uninitialized variable warning
stmmac: debugfs entry name is not be changed when udev rename device name.
drm/amd/display: Reduce HDMI pixel encoding if max clock is exceeded
iommu/dma: fix variable 'cookie' set but not used
gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
net: wan: sdla: Fix cast from pointer to integer of different size
drivers/net/b44: Change to non-atomic bit operations on pwol_mask
net: Google gve: Remove dma_wmb() before ringing doorbell
spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
can: tcan4x5x: tcan4x5x_parse_config(): reset device before register access
usb: musb: jz4740: Silence error if code is -EPROBE_DEFER
watchdog: orion: fix platform_get_irq() complaints
watchdog: rn5t618_wdt: fix module aliases
watchdog: max77620_wdt: fix potential build errors
HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID
phy: cpcap-usb: Prevent USB line glitches from waking up modem
ASoC: topology: Prevent use-after-free in snd_soc_get_pcm_runtime()
ASoC: fsl_audmix: add missed pm_runtime_disable
phy: qcom-qmp: Increase PHY ready timeout
drivers/hid/hid-multitouch.c: fix a possible null pointer access.
ASoC: SOF: Intel: hda: hda-dai: fix oops on hda_link .hw_free
ASoC: SOF: fix fault at driver unload after failed probe
HID: wacom: Recognize new MobileStudio Pro PID
HID: intel-ish-hid: ipc: add CMP device id
HID: Add quirk for incorrect input length on Lenovo Y720
HID: asus: Ignore Asus vendor-page usage-code 0xff events
HID: ite: Add USB id match for Acer SW5-012 keyboard dock
HID: Add quirk for Xin-Mo Dual Controller
arc: eznps: fix allmodconfig kconfig warning
HID: multitouch: Add LG MELF0410 I2C touchscreen support
rxrpc: Fix use-after-free in rxrpc_receive_data()
net: include struct nhmsg size in nh nlmsg size
mlxsw: minimal: Fix an error handling path in 'mlxsw_m_port_create()'
udp: segment looped gso packets correctly
net: socionext: fix xdp_result initialization in netsec_process_rx
net: socionext: fix possible user-after-free in netsec_process_rx
net_sched: walk through all child classes in tc_bind_tclass()
net_sched: fix ops->bind_class() implementations
net_sched: ematch: reject invalid TCF_EM_SIMPLE
zd1211rw: fix storage endpoint lookup
rtl8xxxu: fix interface sanity check
brcmfmac: fix interface sanity check
ath9k: fix storage endpoint lookup
cifs: Fix memory allocation in __smb2_handle_cancelled_cmd()
cifs: set correct max-buffer-size for smb2_ioctl_init()
CIFS: Fix task struct use-after-free on reconnect
crypto: chelsio - fix writing tfm flags to wrong place
driver core: Fix test_async_driver_probe if NUMA is disabled
iio: st_gyro: Correct data for LSM9DS0 gyro
iio: adc: stm32-dfsdm: fix single conversion
mei: me: add comet point (lake) H device ids
mei: hdcp: bind only with i915 on the same PCH
binder: fix log spam for existing debugfs file creation.
component: do not dereference opaque pointer in debugfs
debugfs: Return -EPERM when locked down
serial: imx: fix a race condition in receive path
serial: 8250_bcm2835aux: Fix line mismatch on driver unbind
staging: vt6656: Fix false Tx excessive retries reporting.
staging: vt6656: use NULLFUCTION stack on mac80211
staging: vt6656: correct packet types for CTS protect, mode.
staging: wlan-ng: ensure error return is actually returned
staging: most: net: fix buffer overflow
usb: typec: fusb302: fix "op-sink-microwatt" default that was in mW
usb: typec: wcove: fix "op-sink-microwatt" default that was in mW
usb: dwc3: turn off VBUS when leaving host mode
USB: serial: ir-usb: fix IrLAP framing
USB: serial: ir-usb: fix link-speed handling
USB: serial: ir-usb: add missing endpoint sanity check
usb: host: xhci-tegra: set MODULE_FIRMWARE for tegra186
usb: dwc3: pci: add ID for the Intel Comet Lake -V variant
rsi_91x_usb: fix interface sanity check
orinoco_usb: fix interface sanity check
Bluetooth: btusb: fix non-atomic allocation in completion handler

CVE References

Paolo Pisati (p-pisati)
Changed in linux-5.4 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (82.1 KiB)

This bug was fixed in the package linux-5.4 - 5.4.0-14.17

---------------
linux-5.4 (5.4.0-14.17) focal; urgency=medium

  * focal/linux-5.4: 5.4.0-14.17 -proposed tracker (LP: #1862255)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Boot log is swamped with "debugfs: Directory 'imc' with parent 'powerpc'
    already present" messages on kernel 5.4 (LP: #1861379)
    - powerpc/powernv: Avoid re-registration of imc debugfs directory

  * CVE-2019-3016
    - SAUCE: x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
    - SAUCE: x86/kvm: Introduce kvm_(un)map_gfn()
    - SAUCE: x86/kvm: Cache gfn to pfn translation
    - SAUCE: x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
    - SAUCE: x86/KVM: Clean up host's steal time structure

  * installing linux-modules-nvidia does not remove nvidia-dkms, and the kernel
    prioritizes the wrong version of the module from disk (LP: #1856414)
    - Revert "UBUNTU: [Packaging] dkms -- switch basic provides to *-modules"
    - Revert "UBUNTU: [Packaging] dkms -- add Provides: specifiers for existing
      zfs/nvidia/vbox"
    - Revert "UBUNTU: [packaging] dkms-build -- include versioned provides"
    - [Packaging] wireguard -- drop provides

  * Focal update: v5.4.18 upstream stable release (LP: #1862203)
    - vfs: fix do_last() regression
    - cifs: fix soft mounts hanging in the reconnect code
    - x86/resctrl: Fix a deadlock due to inaccurate reference
    - x86/resctrl: Fix use-after-free when deleting resource groups
    - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
    - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
    - e1000e: Revert "e1000e: Make watchdog use delayed work"
    - gfs2: Another gfs2_find_jhead fix
    - perf c2c: Fix return type for histogram sorting comparision functions
    - PM / devfreq: Add new name attribute for sysfs
    - tools lib: Fix builds when glibc contains strlcpy()
    - arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
    - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
    - reiserfs: Fix memory leak of journal device string
    - media: digitv: don't continue if remote control state can't be read
    - media: af9005: uninitialized variable printked
    - media: vp7045: do not read uninitialized values if usb transfer fails
    - media: gspca: zero usb_buf
    - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
    - tomoyo: Use atomic_t for statistics counter
    - ttyprintk: fix a potential deadlock in interrupt context issue
    - Bluetooth: Fix race condition in hci_release_sock()
    - cgroup: Prevent double killing of css when enabling threaded cgroup
    - clk: sunxi-ng: v3s: Fix incorrect number of hw_clks.
    - arm64: dts: meson-sm1-sei610: add gpio bluetooth interrupt
    - ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
    - ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
    - ARM: dts: beagle-x15-common: Model 5V0 regulator
    - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
    - tools lib traceevent: Fix memory leakage in filter_event
    - rseq: Unregister rseq for clone CLONE_...

Changed in linux-5.4 (Ubuntu Focal):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.