Focal update: v5.4.13 upstream stable release

Bug #1861085 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-5.4 (Ubuntu)
Fix Released
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.13 upstream stable release
       from git://git.kernel.org/

Linux 5.4.13
ocfs2: call journal flush to mark journal as empty after journal recovery when mount
hexagon: work around compiler crash
hexagon: parenthesize registers in asm predicates
kbuild/deb-pkg: annotate libelf-dev dependency as :native
media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes
drm/amdgpu: enable gfxoff for raven1 refresh
ioat: ioat_alloc_ring() failure handling.
s390/qeth: lock the card while changing its hsuid
dmaengine: k3dma: Avoid null pointer traversal
rxrpc: Fix missing security check on incoming calls
rxrpc: Don't take call->user_mutex in rxrpc_new_incoming_call()
rxrpc: Unlock new call in rxrpc_new_incoming_call() rather than the caller
drm/arm/mali: make malidp_mw_connector_helper_funcs static
MIPS: Prevent link failure with kcov instrumentation
tomoyo: Suppress RCU warning at list_for_each_entry_rcu().
mips: Fix gettimeofday() in the vdso library
mips: cacheinfo: report shared CPU map
riscv: export flush_icache_all to modules
rseq/selftests: Turn off timeout setting
selftests: firmware: Fix it to do root uid check and skip
scsi: target/iblock: Fix protection error with blocks greater than 512B
scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
gpio: mpc8xxx: Add platform device to gpiochip->parent
rtc: bd70528: Add MODULE ALIAS to autoload module
rtc: brcmstb-waketimer: add missed clk_disable_unprepare
rtc: msm6242: Fix reading of 10-hour digit
NFSD fixing possible null pointer derefering in copy offload
f2fs: fix potential overflow
sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
iwlwifi: mvm: fix support for single antenna diversity
rtlwifi: Remove unnecessary NULL check in rtl_regd_init
iwlwifi: mvm: consider ieee80211 station max amsdu value
spi: lpspi: fix memory leak in fsl_lpspi_probe
spi: rspi: Use platform_get_irq_byname_optional() for optional irqs
spi: atmel: fix handling of cs_change set on non-last xfer
spi: pxa2xx: Set controller->max_transfer_size in dma mode
mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
mtd: spi-nor: fix silent truncation in spi_nor_read()
spi: sprd: Fix the incorrect SPI register
ubifs: do_kill_orphans: Fix a memory leak bug
ubifs: Fixed missed le64_to_cpu() in journal
Revert "ubifs: Fix memory leak bug in alloc_ubifs_info() error path"
memory: mtk-smi: Add PM suspend and resume ops
iommu/mediatek: Add a new tlb_lock for tlb_flush
iommu/mediatek: Correct the flush_iotlb_all callback
media: hantro: Set H264 FIELDPIC_FLAG_E flag correctly
media: aspeed-video: Fix memory leaks in aspeed_video_probe
media: hantro: Do not reorder H264 scaling list
media: cedrus: Use correct H264 8x8 scaling list
media: coda: fix deadlock between decoder picture run and start command
media: exynos4-is: Fix recursive locking in isp_video_release()
media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
media: hantro: h264: Fix the frame_num wraparound case
media: rcar-vin: Fix incorrect return statement in rvin_try_format()
media: ov6650: Fix default format not applied on device probe
media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
media: ov6650: Fix some format attributes not under control
media: ov6650: Fix incorrect use of JPEG colorspace
ARM: 8943/1: Fix topology setup in case of CPU hotplug for CONFIG_SCHED_MC
tty: serial: pch_uart: correct usage of dma_unmap_sg
tty: serial: imx: use the sg count from dma_map_sg
MIPS: SGI-IP27: Fix crash, when CPUs are disabled via nr_cpus parameter
MIPS: Loongson: Fix return value of loongson_hwmon_init
MIPS: PCI: remember nasid changed by set interrupt affinity
powerpc/powernv: Disable native PCIe port management
PCI/PTM: Remove spurious "d" from granularity message
tools: PCI: Fix fd leakage
PCI/PM: Clear PCIe PME Status even for legacy power management
PCI: Fix missing bridge dma_ranges resource list cleanup
PCI: dwc: Fix find_next_bit() usage
PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
PCI: aardvark: Use LTSSM state to build link training flag
compat_ioctl: handle SIOCOUTQNSD
af_unix: add compat_ioctl support
gfs2: add compat_ioctl support
arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
scsi: sd: enable compat ioctls for sed-opal
drm/amdgpu/discovery: reserve discovery data at the top of VRAM
drm/amdgpu: cleanup creating BOs at fixed location (v2)
Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper."
PCI: pciehp: Do not disable interrupt twice on suspend
pinctrl: lewisburg: Update pin list according to v1.1v6
pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts
pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR
pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call
affs: fix a memory leak in affs_remount
rsi: fix potential null dereference in rsi_probe()
clk: imx: pll14xx: Fix quick switch of S/K parameter
dmaengine: dw: platform: Mark 'hclk' clock optional
clk: Fix memory leak in clk_unregister()
clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume
clk: meson: axg-audio: fix regmap last register
mei: fix modalias documentation
iio: imu: adis16480: assign bias value only if operation succeeded
iio: imu: st_lsm6dsx: fix gyro gain definitions for LSM9DS1
NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
nfsd: v4 support requires CRYPTO_SHA256
nfsd: Fix cld_net->cn_tfm initialization
NFSv2: Fix a typo in encode_sattr()
crypto: geode-aes - convert to skcipher API and make thread-safe
crypto: algif_skcipher - Use chunksize instead of blocksize
crypto: virtio - implement missing support for output IVs
crypto: arm64/aes-neonbs - add return value of skcipher_walk_done() in __xts_crypt()
crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig
crypto: cavium/nitrox - fix firmware assignment to AE cores
scsi: ufs: Give an unique ID to each ufs-bsg
dm: add dm-clone to the documentation index
xprtrdma: Fix oops in Receive handler after device removal
xprtrdma: Fix completion wait during device removal
xprtrdma: Fix create_qp crash on device unload
Documentation/ABI: Add missed attribute for mlxreg-io sysfs interfaces
Documentation/ABI: Fix documentation inconsistency for mlxreg-io sysfs interfaces
asm-generic/nds32: don't redefine cacheflush primitives
platform/x86: GPD pocket fan: Use default values when wrong modparams are given
platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
platform/mellanox: fix potential deadlock in the tmfifo driver
scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
scsi: enclosure: Fix stale device oops with hot replug
keys: Fix request_key() cache
afs: Fix afs_lookup() to not clobber the version on a new dentry
afs: Fix use-after-loss-of-ref
libbpf: Fix Makefile' libbpf symbol mismatch diagnostic
bpf: Support pre-2.25-binutils objcopy for vmlinux BTF
bpf: skmsg, fix potential psock NULL pointer dereference
bpf: Make use of probe_user_write in probe write helper
uaccess: Add non-pagefault user-space write function
RDMA/srpt: Report the SCSI residual to the initiator
RDMA/mlx5: Return proper error value
rdma: Remove nes ABI header
RDMA/hns: Bugfix for qpc/cqc timer configuration
RDMA/hns: Fix to support 64K page for srq
xprtrdma: Close window between waking RPC senders and posting Receives
xprtrdma: Fix MR list handling
xprtrdma: Connection becomes unstable after a reconnect
xprtrdma: Add unique trace points for posting Local Invalidate WRs
RDMA/hns: Release qp resources when failed to destroy qp
RDMA/hns: Fix build error again
RDMA/siw: Fix port number endianness in a debug message
RDMA/counter: Prevent QP counter manual binding in auto mode
RDMA/hns: Modify return value of restrack functions
RDMA/hns: remove a redundant le16_to_cpu
RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()
ASoC: rsnd: fix DALIGN register for SSIU
ASoC: core: Fix compile warning with CONFIG_DEBUG_FS=n
ASoC: SOF: Intel: Broadwell: clarify mutual exclusion with legacy driver
ASoC: fsl_esai: Add spin lock to protect reset, stop and start
ASoC: simple_card_utils.h: Add missing include
ASoC: dt-bindings: mt8183: add missing update
netfilter: nft_meta: use 64-bit time arithmetic
netfilter: nf_tables_offload: release flow_rule on error from commit path
btrfs: simplify inode locking for RWF_NOWAIT
hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename()
syscalls/x86: Fix function types in COND_SYSCALL
syscalls/x86: Use the correct function type for sys_ni_syscall
syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
perf vendor events s390: Remove name from L1D_RO_EXCL_WRITES description
afs: Fix missing cell comparison in afs_test_super()
reset: brcmstb: Remove resource checks
dt-bindings: reset: Fix brcmstb-reset example
can: j1939: fix address claim code example
ath9k: use iowrite32 over __raw_writel
MAINTAINERS: Append missed file to the database
scsi: smartpqi: Update attribute name to `driver_version`
cifs: Adjust indentation in smb2_open_file
s390/qeth: fix initialization on old HW
s390/qeth: vnicc Fix init to default
s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
s390/qeth: fix false reporting of VNIC CHAR config failure
s390/qeth: fix qdio teardown after early init error
hsr: reset network header when supervision frame is created
hsr: rename debugfs file when interface name is changed
hsr: add hsr root debugfs directory
drm/tegra: Fix ordering of cleanup code
PCI: amlogic: Fix probed clock names
PM / devfreq: tegra: Add COMMON_CLK dependency
gpio: Fix error message on out-of-range GPIO in lookup table
scsi: mpt3sas: Fix double free in attach error handling
fs: move guard_bio_eod() after bio_set_op_attrs
bpf: cgroup: prevent out-of-order release of cgroup bpf
iommu: Remove device link to group on failure
iommu/vt-d: Unlink device if failed to add to group
selftests: loopback.sh: skip this test if the driver does not support
pinctrl: meson: Fix wrong shift value when get drive-strength
gpio: zynq: Fix for bug in zynq_gpio_restore_context API
mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
ASoC: SOF: imx8: Fix dsp_box offset
netfilter: nft_flow_offload: fix underflow in flowtable reference counter
pinctrl: lochnagar: select GPIOLIB
ASoC: stm32: spdifrx: fix input pin state management
ASoC: stm32: spdifrx: fix race condition in irq handler
ASoC: stm32: spdifrx: fix inconsistent lock state
ASoC: soc-core: Set dpcm_playback / dpcm_capture
ASoC: SOF: imx8: fix memory allocation failure check on priv->pd_dev
i2c: bcm2835: Store pointer to bus clock
mtd: rawnand: stm32_fmc2: avoid to lock the CPU bus
IB/hfi1: Don't cancel unused work item
RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
phy: mapphone-mdm6600: Fix uninitialized status value regression
rtc: mt6397: fix alarm register overwrite
HID: hidraw, uhid: Always report EPOLLOUT

CVE References

Paolo Pisati (p-pisati)
Changed in linux-5.4 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (82.1 KiB)

This bug was fixed in the package linux-5.4 - 5.4.0-14.17

---------------
linux-5.4 (5.4.0-14.17) focal; urgency=medium

  * focal/linux-5.4: 5.4.0-14.17 -proposed tracker (LP: #1862255)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Boot log is swamped with "debugfs: Directory 'imc' with parent 'powerpc'
    already present" messages on kernel 5.4 (LP: #1861379)
    - powerpc/powernv: Avoid re-registration of imc debugfs directory

  * CVE-2019-3016
    - SAUCE: x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
    - SAUCE: x86/kvm: Introduce kvm_(un)map_gfn()
    - SAUCE: x86/kvm: Cache gfn to pfn translation
    - SAUCE: x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
    - SAUCE: x86/KVM: Clean up host's steal time structure

  * installing linux-modules-nvidia does not remove nvidia-dkms, and the kernel
    prioritizes the wrong version of the module from disk (LP: #1856414)
    - Revert "UBUNTU: [Packaging] dkms -- switch basic provides to *-modules"
    - Revert "UBUNTU: [Packaging] dkms -- add Provides: specifiers for existing
      zfs/nvidia/vbox"
    - Revert "UBUNTU: [packaging] dkms-build -- include versioned provides"
    - [Packaging] wireguard -- drop provides

  * Focal update: v5.4.18 upstream stable release (LP: #1862203)
    - vfs: fix do_last() regression
    - cifs: fix soft mounts hanging in the reconnect code
    - x86/resctrl: Fix a deadlock due to inaccurate reference
    - x86/resctrl: Fix use-after-free when deleting resource groups
    - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
    - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
    - e1000e: Revert "e1000e: Make watchdog use delayed work"
    - gfs2: Another gfs2_find_jhead fix
    - perf c2c: Fix return type for histogram sorting comparision functions
    - PM / devfreq: Add new name attribute for sysfs
    - tools lib: Fix builds when glibc contains strlcpy()
    - arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
    - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
    - reiserfs: Fix memory leak of journal device string
    - media: digitv: don't continue if remote control state can't be read
    - media: af9005: uninitialized variable printked
    - media: vp7045: do not read uninitialized values if usb transfer fails
    - media: gspca: zero usb_buf
    - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
    - tomoyo: Use atomic_t for statistics counter
    - ttyprintk: fix a potential deadlock in interrupt context issue
    - Bluetooth: Fix race condition in hci_release_sock()
    - cgroup: Prevent double killing of css when enabling threaded cgroup
    - clk: sunxi-ng: v3s: Fix incorrect number of hw_clks.
    - arm64: dts: meson-sm1-sei610: add gpio bluetooth interrupt
    - ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
    - ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
    - ARM: dts: beagle-x15-common: Model 5V0 regulator
    - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
    - tools lib traceevent: Fix memory leakage in filter_event
    - rseq: Unregister rseq for clone CLONE_...

Changed in linux-5.4 (Ubuntu Focal):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.