Focal update: 5.10.51 upstream stable release

Bug #1938031 reported by AceLan Kao
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-5.10 (Ubuntu)
Invalid
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       5.10.51 upstream stable release
       from git://git.kernel.org/

Linux 5.10.51
f2fs: fix to avoid racing on fsync_entry_slab by multi filesystem instances
ext4: fix memory leak in ext4_fill_super
smackfs: restrict bytes count in smk_set_cipso()
jfs: fix GPF in diFree
drm/ast: Remove reference to struct drm_device.pdev
pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq()
dm writecache: write at least 4k when committing
io_uring: fix clear IORING_SETUP_R_DISABLED in wrong function
media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K
media: gspca/sunplus: fix zero-length control requests
media: gspca/sq905: fix control-request direction
media: zr364xx: fix memory leak in zr364xx_start_readpipe
media: dtv5100: fix control-request directions
media: subdev: disallow ioctl for saa6588/davinci
PCI: aardvark: Implement workaround for the readback value of VEND_ID
PCI: aardvark: Fix checking for PIO Non-posted Request
PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
dm btree remove: assign new_root only when removal succeeds
dm writecache: flush origin device when writing and cache is full
dm zoned: check zone capacity
coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
coresight: Propagate symlink failure
ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe
tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
tracing: Simplify & fix saved_tgids logic
rq-qos: fix missed wake-ups in rq_qos_throttle try two
seq_buf: Fix overflow in seq_buf_putmem_hex()
extcon: intel-mrfld: Sync hardware and software state on init
selftests/lkdtm: Fix expected text for CR4 pinning
lkdtm/bugs: XFAIL UNALIGNED_LOAD_STORE_WRITE
nvmem: core: add a missing of_node_put
mfd: syscon: Free the allocated name field of struct regmap_config
power: supply: ab8500: Fix an old bug
ubifs: Fix races between xattr_{set|get} and listxattr operations
thermal/drivers/int340x/processor_thermal: Fix tcc setting
ipmi/watchdog: Stop watchdog timer when the current action is 'none'
qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute
i40e: fix PTP on 5Gb links
ASoC: tegra: Set driver_name=tegra for all machine drivers
fpga: stratix10-soc: Add missing fpga_mgr_free() call
clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround
cpu/hotplug: Cure the cpusets trainwreck
arm64: tlb: fix the TTL value of tlb_get_level
ata: ahci_sunxi: Disable DIPM
mmc: core: Allow UHS-I voltage switch for SDSC cards if supported
mmc: core: clear flags before allowing to retune
mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
mmc: sdhci-acpi: Disable write protect detection on Toshiba Encore 2 WT8-B
drm/i915/display: Do not zero past infoframes.vsc
drm/nouveau: Don't set allow_fb_modifiers explicitly
drm/arm/malidp: Always list modifiers
drm/msm/mdp4: Fix modifier support enabling
drm/tegra: Don't set allow_fb_modifiers explicitly
drm/amd/display: Reject non-zero src_y and src_x for video planes
pinctrl/amd: Add device HID for new AMD GPIO controller
drm/amd/display: fix incorrrect valid irq check
drm/rockchip: dsi: remove extra component_del() call
drm/dp: Handle zeroed port counts in drm_dp_read_downstream_info()
drm/vc4: hdmi: Prevent clock unbalance
drm/vc4: crtc: Skip the TXP
drm/vc4: txp: Properly set the possible_crtcs mask
drm/radeon: Call radeon_suspend_kms() in radeon_pci_shutdown() for Loongson64
drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create()
drm/amdgpu: enable sdma0 tmz for Raven/Renoir(V2)
drm/amdgpu: Update NV SIMD-per-CU to 2
powerpc/powernv/vas: Release reference to tgid during window close
powerpc/barrier: Avoid collision with clang's __lwsync macro
powerpc/mm: Fix lockup on kernel exec fault
scsi: iscsi: Fix iSCSI cls conn state
scsi: iscsi: Fix race condition between login and sync thread
io_uring: convert io_buffer_idr to XArray
io_uring: Convert personality_idr to XArray
io_uring: simplify io_remove_personalities()
mm,hwpoison: return -EBUSY when migration fails
loop: fix I/O error on fsync() in detached loop devices
arm64: dts: rockchip: Enable USB3 for rk3328 Rock64
arm64: dts: rockchip: add rk3328 dwc3 usb controller node
ath11k: unlock on error path in ath11k_mac_op_add_interface()
MIPS: MT extensions are not available on MIPS32r1
selftests/resctrl: Fix incorrect parsing of option "-t"
MIPS: set mips32r5 for virt extensions
MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops
sctp: add size validation when walking chunks
sctp: validate from_addr_param return
flow_offload: action should not be NULL when it is referenced
bpf: Fix false positive kmemleak report in bpf_ringbuf_area_alloc()
sched/fair: Ensure _sum and _avg values stay consistent
Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
Bluetooth: mgmt: Fix the command returns garbage parameter value
Bluetooth: btusb: Add support USB ALT 3 for WBS
Bluetooth: L2CAP: Fix invalid access on ECRED Connection response
Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails
Bluetooth: btusb: Add a new QCA_ROME device (0cf3:e500)
Bluetooth: Shutdown controller after workqueues are flushed or cancelled
Bluetooth: Fix alt settings for incoming SCO with transparent coding format
Bluetooth: Fix the HCI to MGMT status conversion table
Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip.
RDMA/cma: Fix rdma_resolve_route() memory leak
net: ip: avoid OOM kills with large UDP sends over loopback
media, bpf: Do not copy more entries than user space requested
IB/isert: Align target max I/O size to initiator size
mac80211_hwsim: add concurrent channels scanning support over virtio
mac80211: consider per-CPU statistics if present
cfg80211: fix default HE tx bitrate mask in 2G band
wireless: wext-spy: Fix out-of-bounds warning
sfc: error code if SRIOV cannot be disabled
sfc: avoid double pci_remove of VFs
iwlwifi: pcie: fix context info freeing
iwlwifi: pcie: free IML DMA memory allocation
iwlwifi: mvm: fix error print when session protection ends
iwlwifi: mvm: don't change band on bound PHY contexts
RDMA/rxe: Don't overwrite errno from ib_umem_get()
vsock: notify server to shutdown when client has pending signal
atm: nicstar: register the interrupt handler in the right place
atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
net: fec: add ndo_select_queue to fix TX bandwidth fluctuations
MIPS: add PMD table accounting into MIPS'pmd_alloc_one
rtl8xxxu: Fix device info for RTL8192EU devices
mt76: mt7915: fix IEEE80211_HE_PHY_CAP7_MAX_NC for station mode
drm/amdkfd: Walk through list with dqm lock hold
drm/amdgpu: fix bad address translation for sienna_cichlid
io_uring: fix false WARN_ONCE
net: sched: fix error return code in tcf_del_walker()
net: ipa: Add missing of_node_put() in ipa_firmware_load()
net: fix mistake path for netdev_features_strings
mt76: mt7615: fix fixed-rate tx status reporting
ice: mark PTYPE 2 as reserved
ice: fix incorrect payload indicator on PTYPE
bpf: Fix up register-based shifts in interpreter to silence KUBSAN
drm/amdkfd: Fix circular lock in nocpsch path
drm/amdkfd: fix circular locking on get_wave_state
cw1200: add missing MODULE_DEVICE_TABLE
wl1251: Fix possible buffer overflow in wl1251_cmd_scan
wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
dm writecache: commit just one block, not a full page
xfrm: Fix error reporting in xfrm_state_construct.
drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check
r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM
selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
fjes: check return value after calling platform_get_resource()
drm/amdkfd: use allowed domain for vmbo validation
net: sgi: ioc3-eth: check return value after calling platform_get_resource()
selftests: Clean forgotten resources as part of cleanup()
net: phy: realtek: add delay to fix RXC generation issue
drm/amd/display: Fix off-by-one error in DML
drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7
drm/amd/display: Release MST resources on switch from MST to SST
drm/amd/display: Update scaling settings on modeset
drm/amd/display: Fix DCN 3.01 DSCCLK validation
net: moxa: Use devm_platform_get_and_ioremap_resource()
net: micrel: check return value after calling platform_get_resource()
net: mvpp2: check return value after calling platform_get_resource()
net: bcmgenet: check return value after calling platform_get_resource()
net: mscc: ocelot: check return value after calling platform_get_resource()
virtio_net: Remove BUG() to avoid machine dead
ice: fix clang warning regarding deadcode.DeadStores
ice: set the value of global config lock timeout longer
pinctrl: mcp23s08: fix race condition in irq handler
net: bridge: mrp: Update ring transitions.
dm: Fix dm_accept_partial_bio() relative to zone management commands
dm writecache: don't split bios when overwriting contiguous cache content
dm space maps: don't reset space map allocation cursor when committing
RDMA/cxgb4: Fix missing error code in create_qp()
net: tcp better handling of reordering then loss cases
drm/amdgpu: remove unsafe optimization to drop preamble ib
drm/amd/display: Avoid HDCP over-read and corruption
MIPS: ingenic: Select CPU_SUPPORTS_CPUFREQ && MIPS_EXTERNAL_TIMER
MIPS: cpu-probe: Fix FPU detection on Ingenic JZ4760(B)
ipv6: use prandom_u32() for ID generation
virtio-net: Add validation for used length
drm: bridge: cdns-mhdp8546: Fix PM reference leak in
clk: tegra: Ensure that PLLU configuration is applied properly
clk: tegra: Fix refcounting of gate clocks
RDMA/rtrs: Change MAX_SESS_QUEUE_DEPTH
net: stmmac: the XPCS obscures a potential "PHY not found" error
drm: rockchip: add missing registers for RK3066
drm: rockchip: add missing registers for RK3188
net/mlx5: Fix lag port remapping logic
net/mlx5e: IPsec/rep_tc: Fix rep_tc_update_skb drops IPsec packet
clk: renesas: r8a77995: Add ZA2 clock
drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer()
igb: fix assignment on big endian machines
igb: handle vlan types with checker enabled
e100: handle eeprom as little endian
drm/vc4: hdmi: Fix PM reference leak in vc4_hdmi_encoder_pre_crtc_co()
drm/vc4: Fix clock source for VEC PixelValve on BCM2711
udf: Fix NULL pointer dereference in udf_symlink function
drm/sched: Avoid data corruptions
drm/scheduler: Fix hang when sched_entity released
pinctrl: equilibrium: Add missing MODULE_DEVICE_TABLE
net/sched: cls_api: increase max_reclassify_loop
net: mdio: provide shim implementation of devm_of_mdiobus_register
drm/virtio: Fix double free on probe failure
reiserfs: add check for invalid 1st journal block
drm/bridge: lt9611: Add missing MODULE_DEVICE_TABLE
net: mdio: ipq8064: add regmap config to disable REGCACHE
drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init()
net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
mISDN: fix possible use-after-free in HFC_cleanup()
atm: iphase: fix possible use-after-free in ia_module_exit()
hugetlb: clear huge pte during flush function on mips platform
clk: renesas: rcar-usb2-clock-sel: Fix error handling in .probe()
drm/amd/display: fix use_max_lb flag for 420 pixel formats
net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
drm/bridge: nwl-dsi: Force a full modeset when crtc_state->active is changed to be true
drm/vc4: fix argument ordering in vc4_crtc_get_margins()
drm/amd/amdgpu/sriov disable all ip hw status by default
drm/amd/display: fix HDCP reset sequence on reinitialize
drm/ast: Fixed CVE for DP501
drm/zte: Don't select DRM_KMS_FB_HELPER
drm/mxsfb: Don't select DRM_KMS_FB_HELPER

CVE References

AceLan Kao (acelankao)
Changed in linux-oem-5.10 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
AceLan Kao (acelankao)
Changed in linux-oem-5.10 (Ubuntu Focal):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-oem-5.10 - 5.10.0-1049.51

---------------
linux-oem-5.10 (5.10.0-1049.51) focal; urgency=medium

  * focal/linux-oem-5.10: 5.10.0-1049.50 -proposed tracker (LP: #1944209)

  * e1000e extremly slow (LP: #1930754)
    - SAUCE: e1000e: Separate TGP board type from SPT
    - SAUCE: e1000e: Fixing packet loss issues on new platforms

  * CVE-2021-41073
    - io_uring: ensure symmetry in handling iter types in loop_rw_iter()

 -- Chia-Lin Kao (AceLan) <email address hidden> Mon, 27 Sep 2021 18:33:36 +0800

Changed in linux-oem-5.10 (Ubuntu Focal):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux-oem-5.10 (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.