Focal update: v5.4.12 upstream stable release

Bug #1860131 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-5.4 (Ubuntu)
Fix Released
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.12 upstream stable release
       from git://git.kernel.org/

Linux 5.4.12
drm/i915/gen9: Clear residual context state on context switch
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
netfilter: conntrack: dccp, sctp: handle null timeout argument
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
phy: cpcap-usb: Fix flakey host idling and enumerating of devices
phy: cpcap-usb: Fix error path when no host driver is loaded
USB: Fix: Don't skip endpoint descriptors with maxpacket=0
HID: hiddev: fix mess in hiddev_open()
ath10k: fix memory leak
rtl8xxxu: prevent leaking urb
scsi: bfa: release allocated memory in case of error
rpmsg: char: release allocated memory
mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
staging: vt6656: remove bool from vnt_radio_power_on ret
um: Implement copy_thread_tls
clone3: ensure copy_thread_tls is implemented
xtensa: Implement copy_thread_tls
riscv: Implement copy_thread_tls
parisc: Implement copy_thread_tls
arm: Implement copy_thread_tls
arm64: Implement copy_thread_tls
arm64: Move __ARCH_WANT_SYS_CLONE3 definition to uapi headers
tty: always relink the port
tty: link tty and port before configuring it as console
iommu/vt-d: Fix adding non-PCI devices to Intel IOMMU
serdev: Don't claim unsupported ACPI serial devices
staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
staging: vt6656: limit reg output to block size
staging: vt6656: correct return of vnt_init_registers.
staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
usb: musb: dma: Correct parameter passed to IRQ handler
usb: musb: Disable pullup at init
usb: musb: fix idling for suspend after disconnect interrupt
USB: serial: option: add ZLP support for 0x1bc7/0x9010
USB-PD tcpm: bad warning+size, PPS adapters
usb: ohci-da8xx: ensure error return on variable error is set
usb: cdns3: should not use the same dev_id for shared interrupt handler
staging: vt6656: Fix non zero logical return of, usb_control_msg
staging: vt6656: set usb_set_intfdata on driver fail.
pstore/ram: Regularize prz label allocation lifetime
gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode
can: tcan4x5x: tcan4x5x_can_probe(): get the device out of standby before register access
can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
can: kvaser_usb: fix interface sanity check
IB/hfi1: Adjust flow PSN with the correct resync_psn
drm/i915/gt: Mark up virtual engine uabi_instance
drm/i915: Add Wa_1407352427:icl,ehl
drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
drm/fb-helper: Round up bits_per_pixel if possible
drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
Revert "drm/amdgpu: Set no-retry as default."
drm/i915: Add Wa_1408615072 and Wa_1407596294 to icl,ehl
Input: input_event - fix struct padding on sparc64
Input: add safety guards to input_set_keycode()
HID: hid-input: clear unmapped usages
HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
HID: Fix slab-out-of-bounds read in hid_field_extract
tracing: Change offset type to s32 in preempt/irq tracepoints
tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
rtc: sun6i: Add support for RTC clocks on R40
tpm: Handle negative priv->response_len in tpm_common_read()
tpm: Revert "tpm_tis_core: Turn on the TPM before probing IRQ's"
tpm: Revert "tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts"
tpm: Revert "tpm_tis: reserve chip for duration of tpm_tis_core_init"
ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
ALSA: hda/realtek - Set EAPD control to default for ALC222
ALSA: hda/realtek - Add new codec supported for ALCS1200A
ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
usb: chipidea: host: Disable port power only if previously enabled
powercap: intel_rapl: add NULL pointer check to rapl_mmio_cpu_online()
i2c: fix bus recovery stop mode timing
chardev: Avoid potential use-after-free in 'chrdev_open()'

CVE References

Paolo Pisati (p-pisati)
Changed in linux-5.4 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (82.1 KiB)

This bug was fixed in the package linux-5.4 - 5.4.0-14.17

---------------
linux-5.4 (5.4.0-14.17) focal; urgency=medium

  * focal/linux-5.4: 5.4.0-14.17 -proposed tracker (LP: #1862255)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Boot log is swamped with "debugfs: Directory 'imc' with parent 'powerpc'
    already present" messages on kernel 5.4 (LP: #1861379)
    - powerpc/powernv: Avoid re-registration of imc debugfs directory

  * CVE-2019-3016
    - SAUCE: x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
    - SAUCE: x86/kvm: Introduce kvm_(un)map_gfn()
    - SAUCE: x86/kvm: Cache gfn to pfn translation
    - SAUCE: x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
    - SAUCE: x86/KVM: Clean up host's steal time structure

  * installing linux-modules-nvidia does not remove nvidia-dkms, and the kernel
    prioritizes the wrong version of the module from disk (LP: #1856414)
    - Revert "UBUNTU: [Packaging] dkms -- switch basic provides to *-modules"
    - Revert "UBUNTU: [Packaging] dkms -- add Provides: specifiers for existing
      zfs/nvidia/vbox"
    - Revert "UBUNTU: [packaging] dkms-build -- include versioned provides"
    - [Packaging] wireguard -- drop provides

  * Focal update: v5.4.18 upstream stable release (LP: #1862203)
    - vfs: fix do_last() regression
    - cifs: fix soft mounts hanging in the reconnect code
    - x86/resctrl: Fix a deadlock due to inaccurate reference
    - x86/resctrl: Fix use-after-free when deleting resource groups
    - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
    - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
    - e1000e: Revert "e1000e: Make watchdog use delayed work"
    - gfs2: Another gfs2_find_jhead fix
    - perf c2c: Fix return type for histogram sorting comparision functions
    - PM / devfreq: Add new name attribute for sysfs
    - tools lib: Fix builds when glibc contains strlcpy()
    - arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
    - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
    - reiserfs: Fix memory leak of journal device string
    - media: digitv: don't continue if remote control state can't be read
    - media: af9005: uninitialized variable printked
    - media: vp7045: do not read uninitialized values if usb transfer fails
    - media: gspca: zero usb_buf
    - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
    - tomoyo: Use atomic_t for statistics counter
    - ttyprintk: fix a potential deadlock in interrupt context issue
    - Bluetooth: Fix race condition in hci_release_sock()
    - cgroup: Prevent double killing of css when enabling threaded cgroup
    - clk: sunxi-ng: v3s: Fix incorrect number of hw_clks.
    - arm64: dts: meson-sm1-sei610: add gpio bluetooth interrupt
    - ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
    - ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
    - ARM: dts: beagle-x15-common: Model 5V0 regulator
    - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
    - tools lib traceevent: Fix memory leakage in filter_event
    - rseq: Unregister rseq for clone CLONE_...

Changed in linux-5.4 (Ubuntu Focal):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.