Focal update: 5.10.62 upstream stable release

Bug #1944969 reported by AceLan Kao
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-5.10 (Ubuntu)
Invalid
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       5.10.62 upstream stable release
       from git://git.kernel.org/

Linux 5.10.62
bpf: Fix potentially incorrect results with bpf_get_local_storage()
audit: move put_tree() to avoid trim_trees refcount underflow and UAF
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat"
Revert "floppy: reintroduce O_NDELAY fix"
kthread: Fix PF_KTHREAD vs to_kthread() race
btrfs: fix NULL pointer dereference when deleting device by invalid id
arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
lkdtm: Enable DOUBLE_FAULT on all architectures
net: dsa: mt7530: fix VLAN traffic leaks again
usb: typec: ucsi: Clear pending after acking connector change
usb: typec: ucsi: Work around PPM losing change information
usb: typec: ucsi: acpi: Always decode connector change information
tracepoint: Use rcu get state and cond sync for static call updates
srcu: Provide polling interfaces for Tiny SRCU grace periods
srcu: Make Tiny SRCU use multi-bit grace-period counter
srcu: Provide internal interface to start a Tiny SRCU grace period
srcu: Provide polling interfaces for Tree SRCU grace periods
srcu: Provide internal interface to start a Tree SRCU grace period
powerpc/perf: Invoke per-CPU variable access with disabled interrupts
perf annotate: Fix jump parsing for C++ code.
perf tools: Fix arm64 build error with gcc-11
perf record: Fix memory leak in vDSO found using ASAN
perf symbol-elf: Fix memory leak by freeing sdt_note.args
perf env: Fix memory leak of bpf_prog_info_linear member
riscv: Fixup patch_text panic in ftrace
riscv: Fixup wrong ftrace remove cflag
Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
vt_kdsetmode: extend console locking
tipc: call tipc_wait_for_connect only when dlen is not 0
mtd: spinand: Fix incorrect parameters for on-die ECC
pipe: do FASYNC notifications for every pipe IO, not just state changes
pipe: avoid unnecessary EPOLLET wakeups under normal loads
btrfs: fix race between marking inode needs to be logged and log syncing
net/rds: dma_map_sg is entitled to merge entries
drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences
drm/nouveau/disp: power down unused DP links during init
drm: Copy drm_wait_vblank to user before returning
blk-mq: don't grab rq's refcount in blk_mq_check_expired()
drm/amd/pm: change the workload type for some cards
Revert "drm/amd/pm: fix workload mismatch on vega10"
qed: Fix null-pointer dereference in qed_rdma_create_qp()
qed: qed ll2 race condition fixes
tools/virtio: fix build
vringh: Use wiov->used to check for read/write desc order
virtio_vdpa: reject invalid vq indices
virtio_pci: Support surprise removal of virtio pci device
virtio: Improve vq->broken access to avoid any compiler optimization
cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev
opp: remove WARN when no valid OPPs remain
iwlwifi: pnvm: accept multiple HW-type TLVs
clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference
perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
dt-bindings: sifive-l2-cache: Fix 'select' matching
usb: gadget: u_audio: fix race condition on endpoint stop
drm/i915: Fix syncmap memory leak
net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est
net: stmmac: add mutex lock to protect est parameters
Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711"
net: hns3: fix get wrong pfc_en when query PFC configuration
net: hns3: fix duplicate node in VLAN list
net: hns3: add waiting time before cmdq memory is released
net: hns3: clear hardware resource when loading driver
rtnetlink: Return correct error on changing device netns
cxgb4: dont touch blocked freelist bitmap after free
ipv4: use siphash instead of Jenkins in fnhe_hashfun()
ipv6: use siphash in rt6_exception_hash()
net/sched: ets: fix crash when flipping from 'strict' to 'quantum'
ucounts: Increase ucounts reference counter before the security hook
net: marvell: fix MVNETA_TX_IN_PRGRS bit number
xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
ip_gre: add validation for csum_start
RDMA/efa: Free IRQ vectors on error flow
e1000e: Do not take care about recovery NVM checksum
e1000e: Fix the max snoop/no-snoop latency for 10M
igc: Use num_tx_queues when iterating over tx_ring queue
igc: fix page fault when thunderbolt is unplugged
net: usb: pegasus: fixes of set_register(s) return value evaluation;
ice: do not abort devlink info if board identifier can't be found
RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init()
IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
RDMA/bnxt_re: Add missing spin lock initialization
scsi: core: Fix hang of freezing queue between blocking and running device
usb: dwc3: gadget: Stop EP0 transfers during pullup disable
usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
usb: renesas-xhci: Prefer firmware loading on unknown ROM state
USB: serial: option: add new VID/PID to support Fibocom FG150
Revert "USB: serial: ch341: fix character loss at high transfer rates"
drm/amdgpu: Cancel delayed work when GFXOFF is disabled
Revert "btrfs: compression: don't try to compress if we don't have enough pages"
riscv: Ensure the value of FP registers in the core dump file is up to date
ceph: correctly handle releasing an embedded cap flush
can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
net: mscc: Fix non-GPL export of regmap APIs
ovl: fix uninitialized pointer read in ovl_lookup_real_one()
blk-iocost: fix lockdep warning on blkcg->lock
once: Fix panic when module unload
netfilter: conntrack: collect all entries in one cycle
ARC: Fix CONFIG_STACKDEPOT
ASoC: component: Remove misplaced prefix handling in pin control functions
ASoC: rt5682: Adjust headset volume button threshold
bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper
bpf: Fix ringbuf helper function compatibility
net: qrtr: fix another OOB Read in qrtr_endpoint_post

CVE References

AceLan Kao (acelankao)
Changed in linux-oem-5.10 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
AceLan Kao (acelankao)
Changed in linux-oem-5.10 (Ubuntu Focal):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (98.0 KiB)

This bug was fixed in the package linux-oem-5.10 - 5.10.0-1050.52

---------------
linux-oem-5.10 (5.10.0-1050.52) focal; urgency=medium

  * focal/linux-oem-5.10: 5.10.0-1050.52 -proposed tracker (LP: #1944904)

  * Fix A yellow screen pops up in an instant (< 1 second) and then disappears
    before loading the system (LP: #1945932)
    - SAUCE: drm/i915: Stop force enabling pipe bottom color gammma/csc

  * CVE-2021-3759
    - memcg: enable accounting of ipc resources

  * Fix i915 warnings on skl_dram_get_channel_info() (LP: #1943923)
    - drm/i915: Nuke not needed members of dram_info
    - drm/i915/gen11+: Only load DRAM information from pcode
    - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed

  * Focal update: 5.10.68 upstream stable release (LP: #1944975)
    - drm/bridge: lt9611: Fix handling of 4k panels
    - btrfs: fix upper limit for max_inline for page size 64K
    - xen: reset legacy rtc flag for PV domU
    - bnx2x: Fix enabling network interfaces without VFs
    - arm64/sve: Use correct size when reinitialising SVE state
    - PM: base: power: don't try to use non-existing RTC for storing data
    - PCI: Add AMD GPU multi-function power dependencies
    - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
    - drm/etnaviv: return context from etnaviv_iommu_context_get
    - drm/etnaviv: put submit prev MMU context when it exists
    - drm/etnaviv: stop abusing mmu_context as FE running marker
    - drm/etnaviv: keep MMU context across runtime suspend/resume
    - drm/etnaviv: exec and MMU state is lost when resetting the GPU
    - drm/etnaviv: fix MMU context leak on GPU reset
    - drm/etnaviv: reference MMU context when setting up hardware state
    - drm/etnaviv: add missing MMU context put when reaping MMU mapping
    - s390/sclp: fix Secure-IPL facility detection
    - x86/pat: Pass valid address to sanitize_phys()
    - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
    - tipc: fix an use-after-free issue in tipc_recvmsg
    - ethtool: Fix rxnfc copy to user buffer overflow
    - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
    - net-caif: avoid user-triggerable WARN_ON(1)
    - ptp: dp83640: don't define PAGE0
    - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
    - r6040: Restore MDIO clock frequency after MAC reset
    - tipc: increase timeout in tipc_sk_enqueue()
    - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
    - perf machine: Initialize srcline string member in add_location struct
    - net/mlx5: FWTrace, cancel work on alloc pd error flow
    - net/mlx5: Fix potential sleeping in atomic context
    - nvme-tcp: fix io_work priority inversion
    - events: Reuse value read using READ_ONCE instead of re-reading it
    - net: ipa: initialize all filter table slots
    - gen_compile_commands: fix missing 'sys' package
    - vhost_net: fix OoB on sendmsg() failure.
    - net/af_unix: fix a data-race in unix_dgram_poll
    - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
    - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y
    - tcp: fix tp->undo_retrans accounting in tcp_sack...

Changed in linux-oem-5.10 (Ubuntu Focal):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux-oem-5.10 (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.