ARM64_SW_TTBR0_PAN Should Be Enabled For Oracle Kernels

[Joseph Salisbury]

== SRU Justification ==
The config option CONFIG_ARM64_SW_TTBR0_PAN was unintentionally disabled in the
linux-oracle kernels by the following commit:
c25f2bf469b3 ("UBUNTU: [config] oracle: Bring-up for arm64 support")

CONFIG_ARM64_SW_TTBR0_PAN is enabled for all other kernels and should be enabled
for the oracle kernels.

v2: * Add enforcment line to annotations.
    * Removed patch for Impish, since config was re-enabled by someone else in
      that relese.

== Fix ==
  UBUNTU: [config] oracle: Enable CONFIG_ARM64_SW_TTBR0_PAN

== Regression Potential ==
Low. Option was previously enabled.

[Stefan Bader (smb)]

According to the v2 submission this change has already been made for Impish.

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is awaiting verification that the linux-oracle/5.4.0-1080.88 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-focal' to 'verification-done-focal'. If the problem still exists, change the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Luke Nowakowski-Krijger (lukenow)]

This option is enabled now, switching to verification done

[Po-Hsu Lin (cypressyew)]

Marking linux-oracle as fix-released since this issue does not exist on newer Oracle kernels.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oracle - 5.4.0-1081.89

---------------
linux-oracle (5.4.0-1081.89) focal; urgency=medium

  [ Ubuntu: 5.4.0-124.140 ]

  * CVE-2022-2586
    - SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
    - SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
  * CVE-2022-2588
    - SAUCE: net_sched: cls_route: remove from list when handle is 0
  * CVE-2022-34918
    - netfilter: nf_tables: stricter validation of element data

linux-oracle (5.4.0-1080.88) focal; urgency=medium

  * focal/linux-oracle: 5.4.0-1080.88 -proposed tracker (LP: #1981274)

  * ARM64_SW_TTBR0_PAN Should Be Enabled For Oracle Kernels (LP: #1968902)
    - [config] oracle: Enable CONFIG_ARM64_SW_TTBR0_PAN

  [ Ubuntu: 5.4.0-123.139 ]

  * focal/linux: 5.4.0-123.139 -proposed tracker (LP: #1981284)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2022.07.11)
  * Hairpin traffic does not work with centralized NAT gw (LP: #1967856)
    - net: openvswitch: fix misuse of the cached connection on tuple changes
  * [UBUNTU 20.04] Include patches to avoid self-detected stall with Secure
    Execution (LP: #1979296)
    - KVM: s390: pv: add macros for UVC CC values
    - KVM: s390: pv: avoid stalls when making pages secure
    - KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
  * Focal update: v5.4.195 upstream stable release (LP: #1980407)
    - batman-adv: Don't skb_split skbuffs with frag_list
    - hwmon: (tmp401) Add OF device ID table
    - mac80211: Reset MBSSID parameters upon connection
    - net: Fix features skip in for_each_netdev_feature()
    - ipv4: drop dst in multicast routing path
    - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name()
    - netlink: do not reset transport header in netlink_recvmsg()
    - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
    - dim: initialize all struct fields
    - hwmon: (ltq-cputemp) restrict it to SOC_XWAY
    - s390/ctcm: fix variable dereferenced before check
    - s390/ctcm: fix potential memory leak
    - s390/lcs: fix variable dereferenced before check
    - net/sched: act_pedit: really ensure the skb is writable
    - net/smc: non blocking recvmsg() return -EAGAIN when no data and
      signal_pending
    - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
    - gfs2: Fix filesystem block deallocation for short writes
    - hwmon: (f71882fg) Fix negative temperature
    - ASoC: max98090: Reject invalid values in custom control put()
    - ASoC: max98090: Generate notifications on changes for custom control
    - ASoC: ops: Validate input values in snd_soc_put_volsw_range()
    - s390: disable -Warray-bounds
    - net: emaclite: Don't advertise 1000BASE-T and do auto negotiation
    - tcp: resalt the secret every 10 seconds
    - tty: n_gsm: fix mux activation issues in gsm_config()
    - usb: cdc-wdm: fix reading stuck on device close
    - usb: typec: tcpci: Don't skip cleanup in .remove() on error
    - USB: serial: pl2303: add device id for HP LM930 Display
    - USB: serial: qcserial: add support for Sierra Wireless EM7590
    - US...