Kinetic update: upstream stable patchset 2022-12-07

Bug #1999079 reported by Kamal Mostafa
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Kamal Mostafa

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2022-12-07

                Ported from the following upstream stable releases:
                        v5.15.77, v6.0.7

       from git://

can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb()
can: kvaser_usb: Fix possible completions during init_completion
ALSA: Use del_timer_sync() before freeing timer
ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600
ALSA: au88x0: use explicitly signed char
ALSA: rme9652: use explicitly signed char
USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
usb: gadget: uvc: fix sg handling in error case
usb: gadget: uvc: fix sg handling during video encode
usb: dwc3: gadget: Stop processing more requests on IMI
usb: dwc3: gadget: Don't set IMI for no_interrupt
usb: bdc: change state when port disconnected
usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller
mtd: rawnand: marvell: Use correct logic for nand-keep-config
xhci: Add quirk to reset host back to default state at shutdown
xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
xhci: Remove device endpoints from bandwidth list when freeing the device
tools: iio: iio_utils: fix digit calculation
iio: light: tsl2583: Fix module unloading
iio: temperature: ltc2983: allocate iio channels once
iio: adxl372: Fix unsafe buffer attributes
fbdev: smscufx: Fix several use-after-free bugs
cpufreq: intel_pstate: Read all MSRs on the target CPU
cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
fs/binfmt_elf: Fix memory leak in load_elf_binary()
exec: Copy oldsighand->action under spin-lock
mac802154: Fix LQI recording
scsi: qla2xxx: Use transport-defined speed mask for supported_speeds
drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume
drm/msm/dsi: fix memory corruption with too many bridges
drm/msm/hdmi: fix memory corruption with too many bridges
drm/msm/dp: fix IRQ lifetime
coresight: cti: Fix hang in cti_disable_hw()
mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO
mmc: core: Fix kernel panic when remove non-standard SDIO card
mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
counter: microchip-tcb-capture: Handle Signal1 read and Synapse
kernfs: fix use-after-free in __kernfs_remove
pinctrl: Ingenic: JZ4755 bug fixes
ARC: mm: fix leakage of memory allocated for PTE
perf auxtrace: Fix address filter symbol name match for modules
s390/futex: add missing EX_TABLE entry to __futex_atomic_op()
s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser()
mmc: block: Remove error check of hw_reset on reset
ethtool: eeprom: fix null-deref on genl_info in dump
net: ieee802154: fix error return code in dgram_bind()
media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation
media: atomisp: prevent integer overflow in sh_css_set_black_frame()
drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test
ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile
perf: Fix missing SIGTRAPs
sched/core: Fix comparison in sched_group_cookie_match()
arc: iounmap() arg is volatile
mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe()
ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile
ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap()
tipc: fix a null-ptr-deref in tipc_topsrv_accept
net: netsec: fix error handling in netsec_register_mdio()
net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg()
net: hinic: fix memory leak when reading function table
net: hinic: fix the issue of CMDQ memory leaks
net: hinic: fix the issue of double release MBOX callback of VF
net: macb: Specify PHY PM management done by MAC
nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()
x86/unwind/orc: Fix unreliable stack dump with gcov
amd-xgbe: fix the SFP compliance codes check for DAC cables
amd-xgbe: add the bit rate quirk for Molex cables
drm/i915/dp: Reset frl trained flag before restarting FRL training
atlantic: fix deadlock at aq_nic_stop
kcm: annotate data-races around kcm->rx_psock
kcm: annotate data-races around kcm->rx_wait
net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY
tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
tcp: fix indefinite deferral of RTO with SACK reneging
net-memcg: avoid stalls when under memory pressure
drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()
can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path
can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path
PM: hibernate: Allow hybrid sleep to work with s2idle
media: vivid: s_fbuf: add more sanity checks
media: vivid: dev->bitmap_cap wasn't freed in all cases
media: v4l2-dv-timings: add sanity checks for blanking values
media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
media: vivid: set num_in/outputs to 0 if not supported
perf vendor events power10: Fix hv-24x7 metric events
ipv6: ensure sane device mtu in tunnels
i40e: Fix ethtool rx-flow-hash setting for X722
i40e: Fix VF hang when reset is triggered on another VF
i40e: Fix flow-type by setting GL_HASH_INSET registers
net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
PM: domains: Fix handling of unavailable/disabled idle states
perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics
net: fec: limit register access on i.MX6UL
net: ethernet: ave: Fix MAC to be in charge of PHY PM
ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
ALSA: aoa: Fix I2S device accounting
openvswitch: switch from WARN to pr_warn
net: ehea: fix possible memory leak in ehea_register_port()
net: bcmsysport: Indicate MAC is in charge of PHY PM
nh: fix scope used to find saddr when adding non gw nh
net: broadcom: bcm4908_enet: update TX stats after actual transmission
netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed
net/mlx5e: Do not increment ESN when updating IPsec ESN state
net/mlx5e: Extend SKB room check to include PTP-SQ
net/mlx5: Fix possible use-after-free in async command interface
net/mlx5: Update fw fatal reporter state on PCI handlers successful recover
net/mlx5: Fix crash during sync firmware reset
net: do not sense pfmemalloc status in skb_append_pagefrags()
kcm: do not sense pfmemalloc status in kcm_sendpage()
net: enetc: survive memory pressure without crashing
arm64: Add AMPERE1 to the Spectre-BHB affected list
can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L
can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive
ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
ALSA: hda/realtek: Add another HP ZBook G9 model quirks
usb: gadget: uvc: limit isoc_sg to super speed gadgets
usb: gadget: uvc: fix dropped frame after missed isoc
usb: gadget: aspeed: Fix probe regression
usb: dwc3: gadget: Force sending delayed status during soft disconnect
usb: typec: ucsi: Check the connection on resume
usb: typec: ucsi: acpi: Implement resume callback
usb: dwc3: Don't switch OTG -> peripheral if extcon is present
mtd: rawnand: tegra: Fix PM disable depth imbalance in probe
mtd: parsers: bcm47xxpart: Fix halfblock reads
iio: adxl367: Fix unsafe buffer attributes
fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
drm/amdgpu: Fix VRAM BO swap issue
drm/i915: Extend Wa_1607297627 to Alderlake-P
drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x
drm/amdgpu: fix pstate setting issue
drm/amdkfd: update gfx1037 Lx cache setting
drm/amdkfd: correct the cache info for gfx1036
drm/msm: fix use-after-free on probe deferral
drm/msm/hdmi: fix IRQ lifetime
drm/msm/dp: fix memory corruption with too many bridges
drm/msm/dp: fix bridge lifetime
mmc: queue: Cancel recovery work on cleanup
mmc: core: Fix WRITE_ZEROES CQE handling
counter: 104-quad-8: Fix race getting function mode and direction
mm/uffd: fix vma check on userfault for wp
mm: migrate: fix return value if all subpages of THPs are migrated successfully
mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs
mm/huge_memory: do not clobber swp_entry_t during THP split
s390/cio: fix out-of-bounds access on cio_ignore free
s390/uaccess: add missing EX_TABLE entries to __clear_user()
ACPI: PCC: Fix unintentional integer overflow
powerpc/64s/interrupt: Fix clear of PACA_IRQS_HARD_DIS when returning to soft-masked context
media: amphion: release m2m ctx when releasing vpu instance
media: ov8865: Fix an error handling path in ov8865_probe()
media: sun6i-csi: Add a Kconfig dependency on RESET_CONTROLLER
media: sun4i-csi: Add a Kconfig dependency on RESET_CONTROLLER
media: sun8i-di: Add a Kconfig dependency on RESET_CONTROLLER
media: sun8i-rotate: Add a Kconfig dependency on RESET_CONTROLLER
media: cedrus: Add a Kconfig dependency on RESET_CONTROLLER
drm/msm/a6xx: Replace kcalloc() with kvzalloc()
drm/msm/dp: add atomic_check to bridge ops
drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training
ASoC: codec: tlv320adc3xxx: add GPIOLIB dependency
pinctrl: qcom: Avoid glitching lines when we first mux to output
spi: qup: support using GPIO as chip select line
x86/fpu: Configure init_fpstate attributes orderly
x86/fpu: Fix the init_fpstate size check with the actual size
x86/fpu: Exclude dynamic states from init_fpstate
bpf: prevent decl_tag from being referenced in func_proto
mtd: rawnand: intel: Remove unused nand_pa member from ebu_nand_cs
mtd: rawnand: intel: Use devm_platform_ioremap_resource_byname()
ASoC: codecs: tlv320adc3xxx: Wrap adc3xxx_i2c_remove() in __exit_p()
spi: aspeed: Fix window offset of CE1
net: lan966x: Fix the rx drop counter
x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly
amd-xgbe: Yellow carp devices do not need rrc
drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU
net: lan966x: Stop replacing tx dcbs and dcbs_buf when changing MTU
mptcp: set msk local address earlier
netdevsim: fix memory leak in nsim_bus_dev_new()
net/mlx5: Wait for firmware to enable CRS before pci_restore_state
net/mlx5: DR, Fix matcher disconnect error flow
net/mlx5e: Update restore chain id for slow path packets
net/mlx5e: TC, Reject forwarding from internal port to internal port
riscv: mm: add missing memcpy in kasan_init
UBUNTU: Upstream stable to v5.15.77, v6.0.7

Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: Confirmed → Invalid
Changed in linux (Ubuntu Kinetic):
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Kamal Mostafa (kamalmostafa)
description: updated
description: updated
Changed in linux (Ubuntu Kinetic):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (32.9 KiB)

This bug was fixed in the package linux - 5.19.0-31.32

linux (5.19.0-31.32) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-31.32 -proposed tracker (LP: #2003423)

  * amdgpu: framebuffer is destroyed and the screen freezes with unsupported IP
    blocks (LP: #2003524)
    - drm/amd: Delay removal of the firmware framebuffer

  * Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

linux (5.19.0-30.31) kinetic; urgency=medium

  * kinetic/linux: 5.19.0-30.31 -proposed tracker (LP: #2001756)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)

  * Add some ACPI device IDs for Intel HID device (LP: #1995453)
    - platform/x86/intel/hid: Add some ACPI device IDs

  * Fix iosm: WWAN cannot build the connection (DW5823e) (LP: #1998115)
    - net: wwan: iosm: fix driver not working with INTEL_IOMMU disabled
    - [Config] CONFIG_IOSM update annotations on arm64 armhf ppc64el s390x riscv64

    ubuntu_kernel_selftests failed on K-5.19 P9 (LP: #2001618)
    - powerpc/bpf/64: add support for BPF_ATOMIC bitwise operations
    - powerpc/bpf/64: add support for atomic fetch operations
    - powerpc/bpf/64: Add instructions for atomic_[cmp]xchg

  * [DEP-8] Run ADT regression suite for lowlatency kernels Jammy and later
    (LP: #1999528)
    - [DEP-8] Fix regression suite to run on lowlatency

  * Kinetic update: upstream stable patchset 2022-12-15 (LP: #1999828)
    - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
    - KVM: x86: Trace re-injected exceptions
    - RDMA/cma: Use output interface for net_dev check
    - IB/hfi1: Correctly move list in sc_disable()
    - RDMA/hns: Disable local invalidate operation
    - NFSv4: Fix a potential state reclaim deadlock
    - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
    - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
    - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
    - NFSv4.2: Fixup CLONE dest file size for zero-length count
    - nfs4: Fix kmemleak when allocate slot failed
    - net: dsa: Fix possible memory leaks in dsa_loop_init()
    - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
    - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
    - net: dsa: fall back to default tagger if we can't load the one from DT
    - nfc: fdp: Fix potential memory leak in fdp_nci_send()
    - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
    - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
    - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
    - net: fec: fix improper use of NETDEV_TX_BUSY
    - ata: pata_legacy: fix pdc20230_set_piomode()
    - net: sched: Fix use after free in red_enqueue()
    - net: tun: fix bugs for oversize packet when napi frags enabled
    - netfilter: nf_tables: netlink notifier might race to release objects
    - netfilter: nf_tables: release flow rule object from commit path
    - ipvs: use explicitly signed chars
    - ipvs: fix WARNING i...

Changed in linux (Ubuntu Kinetic):
status: Fix Committed → Fix Released
Revision history for this message
Łukasz Zemczak (sil2100) wrote : Update Released

The verification of the Stable Release Update for linux-lowlatency-hwe-5.19 has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.