Jammy update: v5.17.3 upstream stable release

Bug #1968986 reported by Andrea Righi
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Jammy
Confirmed
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.17.3 upstream stable release
       from git://git.kernel.org/

Linux 5.17.3
io_uring: drop the old style inflight file tracking
io_uring: defer file assignment
io_uring: propagate issue_flags state down to file assignment
io_uring: move read/write file prep state into actual opcode handler
static_call: Don't make __static_call_return0 static
mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
irqchip/gic, gic-v3: Prevent GSI to SGI translations
powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S
irqchip/gic-v4: Wait for GICR_VPENDBASER.Dirty to clear before descheduling
x86/extable: Prefer local labels in .set directives
x86,static_call: Fix __static_call_return0 for i386
sched: Teach the forced-newidle balancer about CPU affinity limitation.
sched/core: Fix forceidle balancing
objtool: Fix SLS validation for kcov tail-call replacement
x86/bug: Prevent shadowing in __WARN_FLAGS
Revert "powerpc: Set max_mapnr correctly"
powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb()
KVM: avoid NULL pointer dereference in kvm_dirty_ring_push
dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
tools build: Filter out options and warnings not supported by clang
perf python: Fix probing for some clang command line options
perf build: Don't use -ffat-lto-objects in the python feature test when building with clang-13
bpf: Treat bpf_sk_lookup remote_port as a 2-byte field
selftests/bpf: Fix u8 narrow load checks for bpf_sk_lookup remote_port
bpf: Make remote_port field in struct bpf_sk_lookup 16-bit wide
Revert "selftests: net: Add tls config dependency for tls selftests"
net/smc: send directly on setting TCP_NODELAY
drm/amdkfd: Fix variable set but not used warning
Revert "ACPI: processor: idle: Only flush cache on entering C3"
SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
drm/amdgpu: don't use BACO for reset in S3
drm/amdkfd: Create file descriptor after client is added to smi_clients list
drm/nouveau/pmu: Add missing callbacks for Tegra devices
drm/amdgpu/vcn: Fix the register setting for vcn1
drm/amdgpu/smu10: fix SoC/fclk units in auto mode
drm/amdgpu/display: change pipe policy for DCN 2.1
drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
drm/panel: ili9341: fix optional regulator handling
amd/display: set backlight only if required
fbdev: Fix unregistering of framebuffers without device
irqchip/gic-v3: Fix GICR_CTLR.RWP polling
perf/core: Inherit event_caps
perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
ata: sata_dwc_460ex: Fix crash due to OOB write
perf/x86/intel: Don't extend the pseudo-encoding to GP counters
x86/mm/tlb: Revert retpoline avoidance approach
x86/msi: Fix msi message data shadow struct
gpio: Restrict usage of GPIO chip irq members before initialization
drbd: fix an invalid memory access caused by incorrect use of list iterator
RDMA/hfi1: Fix use-after-free bug for mm struct
arm64: patch_text: Fixup last cpu should be master
qed: fix ethtool register dump
cifs: force new session setup and tcon for dfs
spi: core: add dma_map_dev for __spi_unmap_msg()
btrfs: prevent subvol with swapfile from being deleted
btrfs: avoid defragging extents whose next extents are not targets
btrfs: remove device item and update super block in the same transaction
btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone
btrfs: fix qgroup reserve overflow the qgroup limit
perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids
x86/speculation: Restore speculation related MSRs during S3 resume
x86/pm: Save the MSR validity status at context setup
io_uring: fix race between timeout flush and removal
io_uring: implement compat handling for IORING_REGISTER_IOWQ_AFF
io_uring: defer splice/tee file validity check until command issue
io_uring: don't check req->file in io_fsync_prep()
mm/mempolicy: fix mpol_new leak in shared_policy_replace
mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
highmem: fix checks in __kmap_local_sched_{in,out}
lz4: fix LZ4_decompress_safe_partial read out of bound
mmc: core: Fixup support for writeback-cache for eMMC and SD
mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete
mmc: renesas_sdhi: special 4tap settings only apply to HS400
mmc: mmci: stm32: correctly check all elements of sg list
mmc: block: Check for errors after write on SPI
Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
scsi: ufs: ufs-pci: Add support for Intel MTL
scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove()
arm64: Add part number for Arm Cortex-A78AE
perf session: Remap buf if there is no space for event
perf tools: Fix perf's libperf_print callback
perf: arm-spe: Fix perf report --mem-mode
perf unwind: Don't show unwind error messages when augmenting frame pointer stack
iommu/omap: Fix regression in probe for NULL pointer dereference
SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec()
SUNRPC: Handle low memory situations in call_status()
SUNRPC: Handle ENOMEM in call_transmit_status()
io_uring: don't touch scm_fp_list after queueing skb
io_uring: nospec index for tags on files update
scsi: ufs: ufshpb: Fix a NULL check on list iterator
scsi: sd: sd_read_cpr() requires VPD pages
drbd: Fix five use after free bugs in get_initial_state
bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
drm/amd/display: Remove redundant dsc power gating from init_hw
drm/amd/display: Fix for dmub outbox notification enable
spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
qede: confirm skb is allocated before using
net: phy: mscc-miim: reject clause 45 register accesses
net: sfc: fix using uninitialized xdp tx_queue
rxrpc: fix a race in rxrpc_exit_net()
net: openvswitch: fix leak of nested actions
net: ethernet: mv643xx: Fix over zealous checking of_get_mac_address()
net: openvswitch: don't send internal clone attribute to the userspace.
ice: clear cmd_type_offset_bsz for TX rings
ice: xsk: fix VSI state check in ice_xsk_wakeup()
ice: synchronize_rcu() when terminating rings
ipv6: Fix stats accounting in ip6_pkt_drop
ice: Do not skip not enabled queues in ice_vc_dis_qs_msg
ice: Set txq_teid to ICE_INVAL_TEID on ring creation
dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
sctp: count singleton chunks in assoc user stats
IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
cifs: fix potential race with cifsd thread
IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD
RDMA/mlx5: Add a missing update of cache->last_add
RDMA/mlx5: Don't remove cache MRs when a delay is needed
sfc: Do not free an empty page_ring
bnxt_en: Prevent XDP redirect from running when stopping TX queue
bnxt_en: reserve space inside receive page for skb_shared_info
bnxt_en: Synchronize tx when xdp redirects happen on same ring
arch/arm64: Fix topology initialization for core scheduling
regulator: atc260x: Fix missing active_discharge_on setting
spi: rpc-if: Fix RPM imbalance in probe error path
regulator: rtq2134: Fix missing active_discharge_on setting
drm/imx: dw_hdmi-imx: Fix bailout in error cases of probe
drm/imx: Fix memory leak in imx_pd_connector_get_modes
drm/imx: imx-ldb: Check for null pointer after calling kmemdup
net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
net: ipv4: fix route with nexthop object delete warning
mctp: Use output netdev to allocate skb headroom
mctp: Fix check for dev_hard_header() result
ice: Fix MAC address setting
ice: Clear default forwarding VSI during VSI release
Revert "net: dsa: stop updating master MTU from master.c"
skbuff: fix coalescing for page_pool fragment recycling
vrf: fix packet sniffing for traffic originating from ip tunnels
net/tls: fix slab-out-of-bounds bug in decrypt_internal
net: sfc: add missing xdp queue reinitialization
vdpa: mlx5: prevent cvq work from hogging CPU
scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map()
scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling
scsi: core: scsi_logging: Fix a BUG
NFSv4: fix open failure with O_ACCMODE flag
Revert "NFSv4: Handle the special Linux file open access mode"
netfilter: bitwise: fix reduce comparisons
Drivers: hv: vmbus: Fix potential crash on module unload
Drivers: hv: vmbus: Fix initialization of device object in vmbus_device_register()
drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
mm: fix race between MADV_FREE reclaim and blkdev direct IO read
parisc: Fix patch code locking and flushing
parisc: Fix CPU affinity for Lasi, WAX and Dino chips
selftests: net: Add tls config dependency for tls selftests
NFS: Avoid writeback threads getting stuck in mempool_alloc()
NFS: nfsiod should not block forever in mempool_alloc()
SUNRPC: Fix socket waits for write buffer space
jfs: prevent NULL deref in diFree
virtio_console: eliminate anonymous module_init & module_exit
serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
x86/Kconfig: Do not allow CONFIG_X86_X32_ABI=y with llvm-objcopy
x86: Annotate call_on_stack()
NFS: swap-out must always use STABLE writes.
NFS: swap IO handling is slightly different for O_DIRECT IO
SUNRPC: remove scheduling boost for "SWAPPER" tasks.
SUNRPC/xprt: async tasks mustn't block waiting for memory
clk: Enforce that disjoints limits are invalid
clk: ti: Preserve node in ti_dt_clocks_register()
xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
habanalabs/gaudi: handle axi errors from NIC engines
habanalabs: reject host map with mmu disabled
habanalabs: fix possible memory leak in MMU DR fini
NFSv4: Protect the state recovery thread against direct reclaim
NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()
w1: w1_therm: fixes w1_seq for ds28ea00 sensors
staging: wfx: fix an error handling in wfx_init_common()
staging: wfx: apply the necessary SDIO quirks for the Silabs WF200
opp: Expose of-node's name in debugfs
cpufreq: CPPC: Fix performance/frequency conversion
clk: rockchip: drop CLK_SET_RATE_PARENT from dclk_vop* on rk3568
phy: amlogic: meson8b-usb2: fix shared reset control use
phy: amlogic: meson8b-usb2: Use dev_err_probe()
phy: amlogic: phy-meson-gxl-usb2: fix shared reset controller use
staging: vchiq_core: handle NULL result of find_service_by_handle
staging: vchiq_arm: Avoid NULL ptr deref in vchiq_dump_platform_instances
clk: mediatek: Fix memory leaks on probe
clk: si5341: fix reported clk_rate when output divider is 2
minix: fix bug when opening a file with O_DIRECT
init/main.c: return 1 from handled __setup() functions
lib/Kconfig.debug: add ARCH dependency for FUNCTION_ALIGN option
ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
ceph: fix inode reference leakage in ceph_get_snapdir()
netlabel: fix out-of-bounds memory accesses
netfilter: conntrack: revisit gc autotuning
Bluetooth: Fix use after free in hci_send_acl
MIPS: ingenic: correct unit node address
iwlwifi: mei: fix building iwlmei
xtensa: fix DTC warning unit_address_format
mt76: fix monitor mode crash with sdio driver
xen/usb: harden xen_hcd against malicious backends
usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
net: sfp: add 2500base-X quirk for Lantech SFP module
platform/x86: hp-wmi: Fix 0x05 error code reported by several WMI calls
platform/x86: hp-wmi: Fix SW_TABLET_MODE detection method
net/mlx5e: Remove overzealous validations in netlink EEPROM query
net: limit altnames to 64k total
net: account alternate interface name memory
riscv: Fixed misaligned memory access. Fixed pointer comparison.
can: etas_es58x: es58x_fd_rx_event_msg(): initialize rx_event_msg before calling es58x_check_msg_len()
can: isotp: set default value for N_As to 50 micro seconds
platform/x86: x86-android-tablets: Depend on EFI and SPI
scsi: libfc: Fix use after free in fc_exch_abts_resp()
powerpc/secvar: fix refcount leak in format_show()
powerpc/64e: Tie PPC_BOOK3E_64 to PPC_FSL_BOOK3E
powerpc/code-patching: Pre-map patch area
MIPS: fix fortify panic when copying asm exception handlers
PCI: endpoint: Fix misused goto label
bnxt_en: Eliminate unintended link toggle during FW reset
Bluetooth: use memset avoid memory leaks
Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg}
Bluetooth: mediatek: fix the conflict between mtk and msft vendor event
tuntap: add sanity checks about msg_controllen in sendmsg
platform/x86: thinkpad_acpi: Add dual fan probe
macvtap: advertise link netns via netlink
iavf: stop leaking iavf_status as "errno" values
mips: ralink: fix a refcount leak in ill_acc_of_setup()
net/smc: correct settings of RMB window update limit
scsi: hisi_sas: Limit users changing debugfs BIST count value
scsi: hisi_sas: Free irq vectors in order for v3 HW
scsi: aha152x: Fix aha152x_setup() __setup handler return value
power: supply: axp288_fuel_gauge: Use acpi_quirk_skip_acpi_ac_and_battery()
power: supply: axp288_charger: Use acpi_quirk_skip_acpi_ac_and_battery()
mt76: mt7615: Fix assigning negative values to unsigned variable
powerpc/64s/hash: Make hash faults work in NMI context
mctp: make __mctp_dev_get() take a refcount hold
mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU
scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()
scsi: pm8001: Fix tag leaks on error
scsi: pm8001: Fix task leak in pm8001_send_abort_all()
scsi: pm8001: Fix tag values handling
scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
scsi: pm8001: Fix pm80xx_pci_mem_copy() interface
vfio/pci: Stub vfio_pci_vga_rw when !CONFIG_VFIO_PCI_VGA
drm/amdkfd: make CRAT table missing message informational only
dm: requeue IO if mapping table not yet available
dm ioctl: prevent potential spectre v1 gadget
rtw88: change rtw_info() to proper message level
ipv4: Invalidate neighbour for broadcast address upon address addition
ath11k: Fix frames flush failure caused by deadlock
rtw89: fix RCU usage in rtw89_core_txq_push()
x86/mce: Work around an erratum on fast string copy instructions
drm/msm/dsi: Remove spurious IRQF_ONESHOT flag
ipv6: annotate some data-races around sk->sk_prot
iwlwifi: mvm: move only to an enabled channel
iwlwifi: fix small doc mistake for iwl_fw_ini_addr_val
iwlwifi: mvm: Correctly set fragmented EBS
usb: dwc3: pci: Set the swnode from inside dwc3_pci_quirks()
HID: apple: Report Magic Keyboard 2021 with fingerprint reader battery over USB
HID: apple: Report Magic Keyboard 2021 battery over USB
net/mlx5e: Disable TX queues before registering the netdev
drm/amd/display: reset lane settings after each PHY repeater LT
drm/sprd: check the platform_get_resource() return value
drm/sprd: fix potential NULL dereference
power: supply: axp288-charger: Set Vhold to 4.4V
powerpc/set_memory: Avoid spinlock recursion in change_page_attr()
scsi: mpi3mr: Fix memory leaks
scsi: mpi3mr: Fix reporting of actual data transfer size
scsi: mpi3mr: Fix deadlock while canceling the fw event
PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH.
PCI: endpoint: Fix alignment fault error in copy tests
libbpf: Fix accessing the first syscall argument on s390
libbpf: Fix accessing the first syscall argument on arm64
libbpf: Fix accessing syscall arguments on powerpc
KVM: arm64: Do not change the PMU event filter after a VCPU has run
usb: ehci: add pci device support for Aspeed platforms
iommu/arm-smmu-v3: fix event handling soft lockup
kvm: selftests: aarch64: use a tighter assert in vgic_poke_irq()
kvm: selftests: aarch64: fix some vgic related comments
kvm: selftests: aarch64: fix the failure check in kvm_set_gsi_routing_irqchip_check
kvm: selftests: aarch64: pass vgic_irq guest args as a pointer
kvm: selftests: aarch64: fix assert in gicv3_access_reg
PCI: aardvark: Fix support for MSI interrupts
scsi: smartpqi: Fix kdump issue when controller is locked up
scsi: smartpqi: Fix rmmod stack trace
drm/amdgpu: Fix recursive locking warning
powerpc: Set crashkernel offset to mid of RMA region
net: initialize init_net earlier
ref_tracker: implement use-after-free detection
ipv6: make mc_forwarding atomic
libbpf: Fix build issue with llvm-readelf
cfg80211: don't add non transmitted BSS to 6GHz scanned channels
i40e: Add sending commands in atomic context
mt76: dma: initialize skip_unmap in mt76_dma_rx_fill
mt76: mt7921: fix crash when startup fails.
power: supply: axp20x_battery: properly report current when discharging
drm/v3d: fix missing unlock
scsi: bfa: Replace snprintf() with sysfs_emit()
scsi: mvsas: Replace snprintf() with sysfs_emit()
bpf: Make dst_port field in struct bpf_sock 16-bit wide
drm/bridge: Add missing pm_runtime_put_sync
net/smc: Send directly when TCP_CORK is cleared
ath11k: mhi: use mhi_sync_power_up()
ath11k: pci: fix crash on suspend if board file is not found
ath11k: fix kernel panic during unload/load ath11k modules
powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
powerpc/xive: Export XIVE IPI information for online-only processors.
RDMA/rtrs-clt: Do stop and failover outside reconnect work.
mlxsw: spectrum: Guard against invalid local ports
drm/amdgpu: Fix an error message in rmmod
drm/amdkfd: svm range restore work deadlock when process exit
drm/amdkfd: Ensure mm remain valid in svm deferred_list work
drm/amdkfd: Don't take process mutex for svm ioctls
net/mlx5e: TC, Hold sample_attr on stack instead of pointer
selftests, xsk: Fix bpf_res cleanup test
Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set
ptp: replace snprintf with sysfs_emit
usb: cdnsp: fix cdnsp_decode_trb function to properly handle ret value
usb: gadget: tegra-xudc: Fix control endpoint's definitions
usb: gadget: tegra-xudc: Do not program SPARAM
drm/amd/display: Use PSR version selected during set_psr_caps
drm/amd/display: Fix memory leak
drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
Bluetooth: hci_event: Ignore multiple conn complete events
drm/edid: improve non-desktop quirk logging
drm/edid: remove non_desktop quirk for HPN-3515 and LEN-B800.
drm/amdkfd: enable heavy-weight TLB flush on Arcturus
drm/amd/display: Add signal type check when verify stream backends same
Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
Bluetooth: hci_sync: Fix compilation warning
drm: Add orientation quirk for GPD Win Max
KVM: x86/emulator: Emulate RDPID only if it is enabled in guest
KVM: x86/pmu: Fix and isolate TSX-specific performance event logic
KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
KVM: SVM: Fix kvm_cache_regs.h inclusions for is_guest_mode()
KVM: x86/pmu: Use different raw event masks for AMD and Intel
mm: kfence: fix objcgs vector allocation
net: dsa: felix: fix possible NULL pointer dereference
rtc: wm8350: Handle error for wm8350_register_irq
um: fix and optimize xor select template for CONFIG64 and timetravel mode
lib/logic_iomem: correct fallback config references

Andrea Righi (arighi)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 5.19.0-15.15

---------------
linux (5.19.0-15.15) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-15.15 -proposed tracker (LP: #1983335)

  * Miscellaneous Ubuntu changes
    - [Config] update annotations to support both gcc-11 and gcc-12

 -- Andrea Righi <email address hidden> Tue, 02 Aug 2022 09:23:01 +0200

Changed in linux (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.