Kinetic update: upstream stable patchset 2022-12-07

[Kamal Mostafa]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2022-12-07

                Ported from the following upstream stable releases:
                        v5.15.77, v6.0.7

       from git://git.kernel.org/

can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb()
can: kvaser_usb: Fix possible completions during init_completion
ALSA: Use del_timer_sync() before freeing timer
ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600
ALSA: au88x0: use explicitly signed char
ALSA: rme9652: use explicitly signed char
USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
usb: gadget: uvc: fix sg handling in error case
usb: gadget: uvc: fix sg handling during video encode
usb: dwc3: gadget: Stop processing more requests on IMI
usb: dwc3: gadget: Don't set IMI for no_interrupt
usb: bdc: change state when port disconnected
usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller
mtd: rawnand: marvell: Use correct logic for nand-keep-config
xhci: Add quirk to reset host back to default state at shutdown
xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
xhci: Remove device endpoints from bandwidth list when freeing the device
tools: iio: iio_utils: fix digit calculation
iio: light: tsl2583: Fix module unloading
iio: temperature: ltc2983: allocate iio channels once
iio: adxl372: Fix unsafe buffer attributes
fbdev: smscufx: Fix several use-after-free bugs
cpufreq: intel_pstate: Read all MSRs on the target CPU
cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
fs/binfmt_elf: Fix memory leak in load_elf_binary()
exec: Copy oldsighand->action under spin-lock
mac802154: Fix LQI recording
scsi: qla2xxx: Use transport-defined speed mask for supported_speeds
drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume
drm/msm/dsi: fix memory corruption with too many bridges
drm/msm/hdmi: fix memory corruption with too many bridges
drm/msm/dp: fix IRQ lifetime
coresight: cti: Fix hang in cti_disable_hw()
mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO
mmc: core: Fix kernel panic when remove non-standard SDIO card
mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
counter: microchip-tcb-capture: Handle Signal1 read and Synapse
kernfs: fix use-after-free in __kernfs_remove
pinctrl: Ingenic: JZ4755 bug fixes
ARC: mm: fix leakage of memory allocated for PTE
perf auxtrace: Fix address filter symbol name match for modules
s390/futex: add missing EX_TABLE entry to __futex_atomic_op()
s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser()
mmc: block: Remove error check of hw_reset on reset
ethtool: eeprom: fix null-deref on genl_info in dump
net: ieee802154: fix error return code in dgram_bind()
media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation
media: atomisp: prevent integer overflow in sh_css_set_black_frame()
drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test
ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile
perf: Fix missing SIGTRAPs
sched/core: Fix comparison in sched_group_cookie_match()
arc: iounmap() arg is volatile
mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe()
ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile
ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap()
tipc: fix a null-ptr-deref in tipc_topsrv_accept
net: netsec: fix error handling in netsec_register_mdio()
net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg()
net: hinic: fix memory leak when reading function table
net: hinic: fix the issue of CMDQ memory leaks
net: hinic: fix the issue of double release MBOX callback of VF
net: macb: Specify PHY PM management done by MAC
nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()
x86/unwind/orc: Fix unreliable stack dump with gcov
amd-xgbe: fix the SFP compliance codes check for DAC cables
amd-xgbe: add the bit rate quirk for Molex cables
drm/i915/dp: Reset frl trained flag before restarting FRL training
atlantic: fix deadlock at aq_nic_stop
kcm: annotate data-races around kcm->rx_psock
kcm: annotate data-races around kcm->rx_wait
net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY
tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
tcp: fix indefinite deferral of RTO with SACK reneging
net-memcg: avoid stalls when under memory pressure
drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()
can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path
can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path
PM: hibernate: Allow hybrid sleep to work with s2idle
media: vivid: s_fbuf: add more sanity checks
media: vivid: dev->bitmap_cap wasn't freed in all cases
media: v4l2-dv-timings: add sanity checks for blanking values
media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
media: vivid: set num_in/outputs to 0 if not supported
perf vendor events power10: Fix hv-24x7 metric events
ipv6: ensure sane device mtu in tunnels
i40e: Fix ethtool rx-flow-hash setting for X722
i40e: Fix VF hang when reset is triggered on another VF
i40e: Fix flow-type by setting GL_HASH_INSET registers
net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
PM: domains: Fix handling of unavailable/disabled idle states
perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics
net: fec: limit register access on i.MX6UL
net: ethernet: ave: Fix MAC to be in charge of PHY PM
ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
ALSA: aoa: Fix I2S device accounting
openvswitch: switch from WARN to pr_warn
net: ehea: fix possible memory leak in ehea_register_port()
net: bcmsysport: Indicate MAC is in charge of PHY PM
nh: fix scope used to find saddr when adding non gw nh
net: broadcom: bcm4908_enet: update TX stats after actual transmission
netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed
net/mlx5e: Do not increment ESN when updating IPsec ESN state
net/mlx5e: Extend SKB room check to include PTP-SQ
net/mlx5: Fix possible use-after-free in async command interface
net/mlx5: Update fw fatal reporter state on PCI handlers successful recover
net/mlx5: Fix crash during sync firmware reset
net: do not sense pfmemalloc status in skb_append_pagefrags()
kcm: do not sense pfmemalloc status in kcm_sendpage()
net: enetc: survive memory pressure without crashing
arm64: Add AMPERE1 to the Spectre-BHB affected list
can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L
can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive
ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
ALSA: hda/realtek: Add another HP ZBook G9 model quirks
usb: gadget: uvc: limit isoc_sg to super speed gadgets
usb: gadget: uvc: fix dropped frame after missed isoc
usb: gadget: aspeed: Fix probe regression
usb: dwc3: gadget: Force sending delayed status during soft disconnect
usb: typec: ucsi: Check the connection on resume
usb: typec: ucsi: acpi: Implement resume callback
usb: dwc3: Don't switch OTG -> peripheral if extcon is present
mtd: rawnand: tegra: Fix PM disable depth imbalance in probe
mtd: parsers: bcm47xxpart: Fix halfblock reads
iio: adxl367: Fix unsafe buffer attributes
fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
drm/amdgpu: Fix VRAM BO swap issue
drm/i915: Extend Wa_1607297627 to Alderlake-P
drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x
drm/amdgpu: fix pstate setting issue
drm/amdkfd: update gfx1037 Lx cache setting
drm/amdkfd: correct the cache info for gfx1036
drm/msm: fix use-after-free on probe deferral
drm/msm/hdmi: fix IRQ lifetime
drm/msm/dp: fix memory corruption with too many bridges
drm/msm/dp: fix bridge lifetime
mmc: queue: Cancel recovery work on cleanup
mmc: core: Fix WRITE_ZEROES CQE handling
counter: 104-quad-8: Fix race getting function mode and direction
mm/uffd: fix vma check on userfault for wp
mm: migrate: fix return value if all subpages of THPs are migrated successfully
mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs
mm/huge_memory: do not clobber swp_entry_t during THP split
s390/cio: fix out-of-bounds access on cio_ignore free
s390/uaccess: add missing EX_TABLE entries to __clear_user()
ACPI: PCC: Fix unintentional integer overflow
powerpc/64s/interrupt: Fix clear of PACA_IRQS_HARD_DIS when returning to soft-masked context
media: amphion: release m2m ctx when releasing vpu instance
media: ov8865: Fix an error handling path in ov8865_probe()
media: sun6i-csi: Add a Kconfig dependency on RESET_CONTROLLER
media: sun4i-csi: Add a Kconfig dependency on RESET_CONTROLLER
media: sun8i-di: Add a Kconfig dependency on RESET_CONTROLLER
media: sun8i-rotate: Add a Kconfig dependency on RESET_CONTROLLER
media: cedrus: Add a Kconfig dependency on RESET_CONTROLLER
drm/msm/a6xx: Replace kcalloc() with kvzalloc()
drm/msm/dp: add atomic_check to bridge ops
drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training
ASoC: codec: tlv320adc3xxx: add GPIOLIB dependency
pinctrl: qcom: Avoid glitching lines when we first mux to output
spi: qup: support using GPIO as chip select line
x86/fpu: Configure init_fpstate attributes orderly
x86/fpu: Fix the init_fpstate size check with the actual size
x86/fpu: Exclude dynamic states from init_fpstate
bpf: prevent decl_tag from being referenced in func_proto
mtd: rawnand: intel: Remove unused nand_pa member from ebu_nand_cs
mtd: rawnand: intel: Use devm_platform_ioremap_resource_byname()
ASoC: codecs: tlv320adc3xxx: Wrap adc3xxx_i2c_remove() in __exit_p()
spi: aspeed: Fix window offset of CE1
net: lan966x: Fix the rx drop counter
x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly
amd-xgbe: Yellow carp devices do not need rrc
drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU
net: lan966x: Stop replacing tx dcbs and dcbs_buf when changing MTU
mptcp: set msk local address earlier
netdevsim: fix memory leak in nsim_bus_dev_new()
net/mlx5: Wait for firmware to enable CRS before pci_restore_state
net/mlx5: DR, Fix matcher disconnect error flow
net/mlx5e: Update restore chain id for slow path packets
net/mlx5e: TC, Reject forwarding from internal port to internal port
riscv: mm: add missing memcpy in kasan_init
UBUNTU: Upstream stable to v5.15.77, v6.0.7

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.19.0-31.32

---------------
linux (5.19.0-31.32) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-31.32 -proposed tracker (LP: #2003423)

  * amdgpu: framebuffer is destroyed and the screen freezes with unsupported IP
    blocks (LP: #2003524)
    - drm/amd: Delay removal of the firmware framebuffer

  * Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

linux (5.19.0-30.31) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-30.31 -proposed tracker (LP: #2001756)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)

  * Add some ACPI device IDs for Intel HID device (LP: #1995453)
    - platform/x86/intel/hid: Add some ACPI device IDs

  * Fix iosm: WWAN cannot build the connection (DW5823e) (LP: #1998115)
    - net: wwan: iosm: fix driver not working with INTEL_IOMMU disabled
    - [Config] CONFIG_IOSM update annotations on arm64 armhf ppc64el s390x riscv64

  * BPF_[AND|OR|XOR|FETCH|XCHG|CMPXCHG] in net:test_bpf.sh from
    ubuntu_kernel_selftests failed on K-5.19 P9 (LP: #2001618)
    - powerpc/bpf/64: add support for BPF_ATOMIC bitwise operations
    - powerpc/bpf/64: add support for atomic fetch operations
    - powerpc/bpf/64: Add instructions for atomic_[cmp]xchg

  * [DEP-8] Run ADT regression suite for lowlatency kernels Jammy and later
    (LP: #1999528)
    - [DEP-8] Fix regression suite to run on lowlatency

  * Kinetic update: upstream stable patchset 2022-12-15 (LP: #1999828)
    - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
    - KVM: x86: Trace re-injected exceptions
    - RDMA/cma: Use output interface for net_dev check
    - IB/hfi1: Correctly move list in sc_disable()
    - RDMA/hns: Disable local invalidate operation
    - NFSv4: Fix a potential state reclaim deadlock
    - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
    - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
    - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
    - NFSv4.2: Fixup CLONE dest file size for zero-length count
    - nfs4: Fix kmemleak when allocate slot failed
    - net: dsa: Fix possible memory leaks in dsa_loop_init()
    - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
    - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
    - net: dsa: fall back to default tagger if we can't load the one from DT
    - nfc: fdp: Fix potential memory leak in fdp_nci_send()
    - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
    - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
    - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
    - net: fec: fix improper use of NETDEV_TX_BUSY
    - ata: pata_legacy: fix pdc20230_set_piomode()
    - net: sched: Fix use after free in red_enqueue()
    - net: tun: fix bugs for oversize packet when napi frags enabled
    - netfilter: nf_tables: netlink notifier might race to release objects
    - netfilter: nf_tables: release flow rule object from commit path
    - ipvs: use explicitly signed chars
    - ipvs: fix WARNING i...

[Łukasz Zemczak (sil2100)]

The verification of the Stable Release Update for linux-lowlatency-hwe-5.19 has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.