This bug was fixed in the package linux - 5.19.0-38.39 --------------- linux (5.19.0-38.39) kinetic; urgency=medium * kinetic/linux: 5.19.0-38.39 -proposed tracker (LP: #2012088) * NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325) - NFS: Correct timing for assigning access cache timestamp linux (5.19.0-37.38) kinetic; urgency=medium * kinetic/linux: 5.19.0-37.38 -proposed tracker (LP: #2008305) * XPS 9320 screen flicker on UHD panel 3840x2400 (LP: #2007516) - SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457 * Fix speaker mute hotkey doesn't work on Dell G16 series (LP: #2003161) - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table * net:cmsg_ipv6.sh from ubuntu_kernel_selftests failed with K-5.19 (LP: #2000709) - selftest: net: Improve IPV6_TCLASS/IPV6_HOPLIMIT tests apparmor compatibility * rtcpie in timers from ubuntu_kernel_selftests randomly failing (LP: #1814234) - SAUCE: selftest: rtcpie: Force passing unreliable subtest * CVE-2023-0469 - io_uring/filetable: fix file reference underflow * Improve arp_ndisc_evict_nocarrier.sh test result processing (LP: #2006546) - selftests: net: return non-zero for failures reported in arp_ndisc_evict_nocarrier * Make cm32181 sensor work after system suspend (LP: #1981773) - iio: light: cm32181: Add PM support * Fix Thunderbolt device hotplug fail when connect via thunderbolt dock (LP: #1991366) - PCI: Fix used_buses calculation in pci_scan_child_bus_extend() - PCI: Pass available buses even if the bridge is already configured - PCI: Move pci_assign_unassigned_root_bus_resources() - PCI: Fix whitespace and indentation - PCI: Fix typo in pci_scan_child_bus_extend() * arp_ndisc_evict_nocarrier.sh in net from ubuntu_kernel_selftests failed on J-oem-5.17 / K (LP: #1968310) - selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier * Screen freeze after resuming from suspend (nvme0: I/O timeout) (LP: #1996048) - PCI: vmd: Disable MSI remapping after suspend * RaptorLake: Fix the Screen is shaking by onboard HDMI port in mirror mode (LP: #1993561) - drm/i915/display: Drop check for doublescan mode in modevalid - drm/i915/display: Prune Interlace modes for Display >=12 * udpgro_frglist.sh in net from ubuntu_kernel_selftests failed with K-5.19 (Missing nat6to4 helper) (LP: #2000708) - selftests/net: mv bpf/nat6to4.c to net folder * selftests/.../nat6to4 breaks the selftests build (LP: #1996536) - selftests: net: Add cross-compilation support for BPF programs - selftests: net: Fix O=dir builds * CVE-2023-0266 // CVE-2023-0266 was assigned for this issue. - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF * CVE-2022-4382 - USB: gadgetfs: Fix race between mounting and unmounting * CVE-2022-2196 - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS * ubuntu_kernel_selftests: net:udpgso_bench.sh failed (LP: #1951447) - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs * Kinetic update: upstream stable patchset 2023-02-02 (LP: #2004602) - clk: generalize devm_clk_get() a bit - clk: Provide new devm_clk helpers for prepared and enabled clocks - mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse() - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series - arm: dts: rockchip: fix node name for hym8563 rtc - arm: dts: rockchip: remove clock-frequency from rtc - ARM: dts: rockchip: fix ir-receiver node names - arm64: dts: rockchip: fix ir-receiver node names - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name - fs: use acquire ordering in __fget_light() - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation - ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register - spi: mediatek: Fix DEVAPC Violation at KO Remove - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 - ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions - 9p/fd: Use P9_HDRSZ for header size - regulator: slg51000: Wait after asserting CS pin - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event - btrfs: send: avoid unaligned encoded writes when attempting to clone range - ASoC: soc-pcm: Add NULL check in BE reparenting - regulator: twl6030: fix get status of twl6032 regulators - fbcon: Use kzalloc() in fbcon_prepare_logo() - usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer - 9p/xen: check logical size for buffer size - net: usb: qmi_wwan: add u-blox 0x1342 composition - mm/khugepaged: take the right locks for page table retraction - mm/khugepaged: fix GUP-fast interaction by sending IPI - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths - cifs: fix use-after-free caused by invalid pointer `hostname` - xen/netback: do some code cleanup - xen/netback: don't call kfree_skb() with interrupts disabled - media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area() - soundwire: intel: Initialize clock stop timeout - media: v4l2-dv-timings.c: fix too strict blanking sanity checks - memcg: fix possible use-after-free in memcg_write_event_control() - mm/gup: fix gup_pud_range() for dax - Bluetooth: btusb: Add debug message for CSR controllers - Bluetooth: Fix crash when replugging CSR fake controllers - net: mana: Fix race on per-CQ variable napi work_done - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field - drm/vmwgfx: Don't use screen objects when SEV is active - drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend - drm/shmem-helper: Remove errant put in error path - drm/shmem-helper: Avoid vm_open error paths - net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() - HID: usbhid: Add ALWAYS_POLL quirk for some mice - HID: hid-lg4ff: Add check for empty lbuf - HID: core: fix shift-out-of-bounds in hid_report_raw_event - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 - can: af_can: fix NULL pointer dereference in can_rcv_filter - clk: Fix pointer casting to prevent oops in devm_clk_release() - gpiolib: fix memory leak in gpiochip_setup_dev() - netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one - drm/vmwgfx: Fix race issue calling pin_user_pages - ieee802154: cc2520: Fix error return code in cc2520_hw_init() - ca8210: Fix crash by zero initializing data - netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug - gpio: amd8111: Fix PCI device reference count leak - e1000e: Fix TX dispatch condition - igb: Allocate MSI-X vector when testing - net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under ARCH_BCM2835 - drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). - vmxnet3: correctly report encapsulated LRO packet - vmxnet3: use correct intrConf reference when using extended queues - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() - Bluetooth: Fix not cleanup led when bt_init fails - net: dsa: ksz: Check return value - net: dsa: hellcreek: Check return value - net: dsa: sja1105: Check return value - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() - net: encx24j600: Add parentheses to fix precedence - net: encx24j600: Fix invalid logic in reading of MISTAT register - net: mdiobus: fwnode_mdiobus_register_phy() rework error handling - net: mdiobus: fix double put fwnode in the error path - octeontx2-pf: Fix potential memory leak in otx2_init_tc() - xen-netfront: Fix NULL sring after live migration - net: mvneta: Prevent out of bounds read in mvneta_config_rss() - i40e: Fix not setting default xps_cpus after reset - i40e: Fix for VF MAC address 0 - i40e: Disallow ip4 and ip6 l4_4_bytes - NFC: nci: Bounds check struct nfc_target arrays - nvme initialize core quirks before calling nvme_init_subsystem - gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() - net: stmmac: fix "snps,axi-config" node property parsing - ip_gre: do not report erspan version on GRE interface - net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() - tipc: Fix potential OOB in tipc_link_proto_rcv() - ipv4: Fix incorrect route flushing when source address is deleted - ipv4: Fix incorrect route flushing when table ID 0 is used - net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() - tipc: call tipc_lxc_xmit without holding node_read_lock - ethernet: aeroflex: fix potential skb leak in greth_init_rings() - dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove() - net: phy: mxl-gpy: fix version reporting - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() - ipv6: avoid use-after-free in ip6_fragment() - net: thunderbolt: fix memory leak in tbnet_open() - net: mvneta: Fix an out of bounds check - macsec: add missing attribute validation for offload - s390/qeth: fix use-after-free in hsci - can: esd_usb: Allow REC and TEC to return to zero - io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() - madvise: use zap_page_range_single for madvise dontneed - drm/i915: Remove non-existent pipes from bigjoiner pipe mask - arm64: dts: rockchip: Fix gmac failure of rgmii-id from rk3566-roc-pc - arm64: dts: rockchip: Fix i2c3 pinctrl on rk3566-roc-pc - arm64: dts: rockchip: remove i2c5 from rk3566-roc-pc - arm64: dts: rockchip: fix node name for hym8563 rtc - ARM: dts: rockchip: fix adc-keys sub node names - arm64: dts: rockchip: fix adc-keys sub node names - LoongArch: Makefile: Use "grep -E" instead of "egrep" - LoongArch: Combine acpi_boot_table_init() and acpi_boot_init() - LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite() - net/mlx5: Lag, avoid lockdep warnings - hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing - crypto: ccp - Add a quirk to firmware update - soundwire: dmi-quirks: add remapping for HP Omen 16-k0005TX - platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum - platform/x86: asus-wmi: Add support for ROG X13 tablet mode - fscache: Fix oops due to race with cookie_lru and use_cookie - tmpfs: fix data loss from failed fallocate - selftests/tls: Fix tls selftests dependency to correct algorithm - drm/amd/display: fix array index out of bound error in DCN32 DML - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk - ARM: 9278/1: kfence: only handle translation faults - netfilter: conntrack: fix using __this_cpu_add in preemptible - net: ethernet: ti: am65-cpsw: Fix RGMII configuration at SPEED_10 - inet: ping: use hlist_nulls rcu iterator during lookup - Bluetooth: Remove codec id field in vendor codec definition - Bluetooth: Fix support for Read Local Supported Codecs V2 - nfp: correct desc type when header dma len is 4096 - net: microchip: sparx5: correctly free skb in xmit - net: wwan: iosm: fix memory leak in ipc_mux_init() - ravb: Fix potential use-after-free in ravb_rx_gbeth() - bonding: get correct NA dest address - net: dsa: mv88e6xxx: accept phy-mode = "internal" for internal PHY ports - drm/amdgpu/vcn: update vcn4 fw shared data structure - x86/vdso: Conditionally export __vdso_sgx_enter_enclave() - ASoC: fsl_micfil: explicitly clear software reset bit - ASoC: fsl_micfil: explicitly clear CHnF flags - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() - libbpf: Use page size as max_entries when probing ring buffer map - pinctrl: meditatek: Startup with the IRQs disabled - can: sja1000: fix size of OCR_MODE_MASK define - can: mcba_usb: Fix termination command argument - net: fec: don't reset irq coalesce settings to defaults on "ip link up" - ASoC: cs42l51: Correct PGA Volume minimum value - perf: Fix perf_pending_task() UaF - nvme-pci: clear the prp2 field when not used - ASoC: ops: Correct bounds check for second channel on SX controls - net: fec: properly guard irq coalesce setup - libbpf: Fix uninitialized warning in btf_dump_dump_type_data - udf: Discard preallocation before extending file with a hole - udf: Fix preallocation discarding at indirect extent boundary - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size - udf: Fix extending file within last block - usb: gadget: uvc: Prevent buffer overflow in setup handler - USB: serial: option: add Quectel EM05-G modem - USB: serial: cp210x: add Kamstrup RF sniffer PIDs - USB: serial: f81232: fix division by zero on line-speed change - USB: serial: f81534: fix division by zero on line-speed change - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N - igb: Initialize mailbox message for VF reset - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake - selftests: net: Use "grep -E" instead of "egrep" - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type - PCI: mt7621: Add sentinel to quirks table - kallsyms: Make module_kallsyms_on_each_symbol generally available - ftrace: Add support to resolve module symbols in ftrace_lookup_symbols - bpf: Rename __bpf_kprobe_multi_cookie_cmp to bpf_kprobe_multi_addrs_cmp - bpf: Take module reference on kprobe_multi link - selftests/bpf: Add load_kallsyms_refresh function - selftests/bpf: Add bpf_testmod_fentry_* functions - selftests/bpf: Add kprobe_multi check to module attach test - selftests/bpf: Add kprobe_multi kmod attach api tests - usb: typec: ucsi: Resume in separate work - KEYS: encrypted: fix key instantiation with user-provided data * Kinetic update: upstream stable patchset 2023-02-02 (LP: #2004602) // net:fcnal-test.sh 'nettest' command not found on F/K (LP: #2006391) - selftests/net: Find nettest in current directory * CVE-2023-23559 - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid * CVE-2023-0045 - x86/bugs: Flush IBP in ib_prctl_set() -- Luke Nowakowski-Krijger