Focal update: v5.4.259 upstream stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Medium
|
Manuel Diewald |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.259 upstream stable release
from git://git.
RDMA/cxgb4: Check skb value for failure to allocate
lib/test_meminit: fix off-by-one error in test_pages()
pwm: hibvt: Explicitly set .polarity in .get_state()
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
quota: Fix slow quotaoff
net: prevent address rewrite in kernel_bind()
drm: etvnaviv: fix bad backport leading to warning
drm/msm/dsi: skip the wait for video mode done if not applicable
ravb: Fix up dma_free_coherent() call in ravb_remove()
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
mlxsw: fix mlxsw_sp2_
xen-netback: use default TX queue size for vifs
drm/vmwgfx: fix typo of sizeof argument
ixgbe: fix crash with empty VF macvlan list
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_
nfc: nci: assert requested protocol is valid
workqueue: Override implicit ordered attribute in workqueue_
dmaengine: stm32-mdma: abort resume if no ongoing transfer
usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
usb: dwc3: Soft reset phy on probe for host
usb: musb: Get the musb_qh poniter after musb_giveback
usb: musb: Modify the "HWVers" register address
iio: pressure: bmp280: Fix NULL pointer exception
iio: pressure: dps310: Adjust Timeout Settings
iio: pressure: ms5611: ms5611_
mcb: remove is_added flag from mcb_device struct
libceph: use kernel_connect()
ceph: fix incorrect revoked caps assert in ceph_fill_
Input: powermate - fix use-after-free in powermate_
Input: psmouse - fix fast_reconnect function for PS/2 mode
Input: xpad - add PXN V900 support
cgroup: Remove duplicates in cgroup v1 tasks file
pinctrl: avoid unsafe code pattern in find_pinctrl()
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
powerpc/8xx: Fix pte_access_
powerpc/64e: Fix wrong test in __ptep_
ravb: Fix use-after-free issue in ravb_tx_
Documentation: sysctl: align cells in second content column
usb: hub: Guard against accesses to uninitialized BOS descriptors
Bluetooth: hci_event: Ignore NULL link key
Bluetooth: Reject connection with the device which has same BD_ADDR
Bluetooth: Fix a refcnt underflow problem for hci_conn
Bluetooth: vhci: Fix race when opening vhci device
Bluetooth: hci_event: Fix coding style
Bluetooth: avoid memcmp() out of bounds warning
ice: fix over-shifted variable
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
regmap: fix NULL deref on lookup
KVM: x86: Mask LVTPC when handling a PMI
netfilter: nft_payload: fix wrong mac header matching
qed: fix LL2 RX buffer allocation
xfrm: fix a data-race in xfrm_gen_index()
xfrm: interface: use DEV_STATS_INC()
net: ipv4: fix return value check in esp_remove_trailer
net: ipv6: fix return value check in esp_remove_trailer
net: rfkill: gpio: prevent value glitch during probe
tcp: fix excessive TLP and RACK timeouts from HZ rounding
tcp: tsq: relax tcp_small_
tun: prevent negative ifindex
ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
i40e: prevent crash on probe if hw registers have invalid values
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
netfilter: nft_set_rbtree: .deactivate fails if element has expired
net: pktgen: Fix interface flags printing
resource: Add irqresource_
ACPI: Drop acpi_dev_
ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
btrfs: initialize start_slot in btrfs_log_
i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
overlayfs: set ctime when setting mtime and atime
gpio: timberdale: Fix potential deadlock on &tgpio->lock
ata: libata-eh: Fix compilation warning in ata_eh_
tracing: relax trace_event_
HID: holtek: fix slab-out-of-bounds Write in holtek_
Bluetooth: Avoid redundant authentication
Bluetooth: hci_core: Fix build warnings
wifi: mac80211: allow transmitting EAPOL frames with tainted key
wifi: cfg80211: avoid leaking stack data into trace
regulator/core: Revert "fix kobject release warning and memory leak in regulator_
sky2: Make sure there is at least one frag_addr available
drm: panel-orientati
btrfs: fix some -Wmaybe-
HID: multitouch: Add required quirk for Synaptics 0xcd7e device
Bluetooth: hci_event: Fix using memcmp when comparing keys
mtd: rawnand: qcom: Unmap the right resource upon probe failure
mtd: spinand: micron: correct bitmask for ecc status
mtd: physmap-core: Restore map_rom fallback
mmc: core: sdio: hold retuning if sdio in 1-bit mode
mmc: core: Capture correct oemid-bits for eMMC cards
Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
ACPI: irq: Fix incorrect return value in acpi_register_gsi()
USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
USB: serial: option: add entry for Sierra EM9191 with new firmware
USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
s390/pci: fix iommu bitmap allocation
gpio: vf610: set value before the direction to avoid a glitch
ASoC: pxa: fix a memory leak in probe()
phy: mapphone-mdm6600: Fix runtime disable on probe
phy: mapphone-mdm6600: Fix runtime PM for remove
phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
Bluetooth: hci_sock: fix slab oob read in create_
Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
xfrm6: fix inet6_dev refcount underflow problem
Linux 5.4.259
UBUNTU: Upstream stable to v5.4.259
CVE References
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
description: | updated |
Changed in linux (Ubuntu): | |
status: | Confirmed → Invalid |
Changed in linux (Ubuntu Focal): | |
assignee: | nobody → Manuel Diewald (diewald) |
importance: | Undecided → Medium |
status: | New → In Progress |
description: | updated |
Changed in linux (Ubuntu Focal): | |
status: | In Progress → Fix Committed |
This bug was fixed in the package linux - 5.4.0-171.189
---------------
linux (5.4.0-171.189) focal; urgency=medium
* focal/linux: 5.4.0-171.189 -proposed tracker (LP: #2048282)
* Packaging resync (LP: #1786013) dkms-versions -- update from kernel-versions (main/2024.01.08)
- [Packaging] remove helper scripts
- [Packaging] update annotations scripts
- debian/
* Page fault in RDMA ODP triggers BUG_ON during MMU notifier registration
(LP: #2046534)
- RDMA/odp: Ensure the mm is still alive before creating an implicit child
* Hotplugging SCSI disk in QEMU VM fails (LP: #2047382)
- Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
* CVE-2023-6040
- netfilter: nf_tables: Reject tables of unsupported family
* kernel_selftests failures on kernel- P10d-LPAR10. ppc64el. 10
(LP: #2032641)
- selftests: Skip TM tests on synthetic TM implementations
* [Debian] autoreconstruct - Do not generate chmod -x for deleted files
(LP: #2045562)
- [Debian] autoreconstruct - Do not generate chmod -x for deleted files
* CVE-2023-6931 validate_ size() validate_ size() lockdep splat
- perf/core: Add a new read format to get a number of lost samples
- perf: Fix perf_event_
- perf: Fix perf_event_
* CVE-2023-6932
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
* CVE-2023-6606
- smb: client: fix OOB in smbCalcSize()
* CVE-2023-45863
- kobject: Fix slab-out-of-bounds in fill_kobj_path()
* Focal update: v5.4.259 upstream stable release (LP: #2043724) nve_vxlan_ learning_ set() return type sock_get_ sn() _apply_ unbound_ cpumask( ) prom_is_ valid false negative bug
- RDMA/cxgb4: Check skb value for failure to allocate
- lib/test_meminit: fix off-by-one error in test_pages()
- pwm: hibvt: Explicitly set .polarity in .get_state()
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
- quota: Fix slow quotaoff
- net: prevent address rewrite in kernel_bind()
- drm: etvnaviv: fix bad backport leading to warning
- drm/msm/dsi: skip the wait for video mode done if not applicable
- ravb: Fix up dma_free_coherent() call in ravb_remove()
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- mlxsw: fix mlxsw_sp2_
- xen-netback: use default TX queue size for vifs
- drm/vmwgfx: fix typo of sizeof argument
- ixgbe: fix crash with empty VF macvlan list
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_
- nfc: nci: assert requested protocol is valid
- workqueue: Override implicit ordered attribute in
workqueue
- dmaengine: stm32-mdma: abort resume if no ongoing transfer
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
- usb: dwc3: Soft reset phy on probe for host
- usb: musb: Get the musb_qh poniter after musb_giveback
- usb: musb: Modify the "HWVers" register address
- iio: pressure: bmp280: Fix NULL pointer exception
- iio: pressure: dps310: Adjust Timeout Settings
- iio: pressure: ms5611: ms5611_
- mcb: remove is_added flag from mcb_device struct
...