Focal update: v5.4.14 upstream stable release

Bug #1861090 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-5.4 (Ubuntu)
Fix Released
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.14 upstream stable release
       from git://git.kernel.org/

Linux 5.4.14
scsi: lpfc: use hdwq assigned cpu for allocation
perf script: Fix --reltime with --time
hwmon: (pmbus/ibm-cffps) Fix LED blink behavior
hwmon: (pmbus/ibm-cffps) Switch LEDs to blocking brightness call
regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
clk: imx7ulp: Correct DDR clock mux options
clk: imx7ulp: Correct system clock source option #7
clk: sprd: Use IS_ERR() to validate the return value of syscon_regmap_lookup_by_phandle()
perf script: Allow --time with --reltime
perf probe: Fix wrong address verification
rtw88: fix potential read outside array boundary
scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq()
scsi: lpfc: Fix hdwq sgl locks and irq handling
scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq
scsi: core: scsi_trace: Use get_unaligned_be*()
scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
scsi: scsi_transport_sas: Fix memory leak when removing devices
scsi: hisi_sas: Return directly if init hardware failed
scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences
scsi: target: core: Fix a pr_debug() argument
scsi: bnx2i: fix potential use after free
scsi: qla4xxx: fix double free bug
scsi: hisi_sas: Set the BIST init value before enabling BIST
scsi: hisi_sas: Don't create debugfs dump folder twice
scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
um: virtio_uml: Disallow modular build
um: Don't trace irqflags during shutdown
mtd: cfi_cmdset_0002: fix delayed error detection on HyperFlash
mtd: cfi_cmdset_0002: only check errors when ready in cfi_check_err_status()
mtd: devices: fix mchp23k256 read and write
Revert "arm64: dts: juno: add dma-ranges property"
ARM: dts: Fix sgx sysconfig register for omap4
arm64: dts: juno: Fix UART frequency
ARM: dts: dra7: fix cpsw mdio fck clock
arm64: dts: allwinner: a64: Re-add PMU node
ARM: dts: imx6ul-kontron-n6310-s: Disable the snvs-poweroff driver
arm64: dts: qcom: sdm845-cheza: delete zap-shader
arm64: dts: imx8mm-evk: Assigned clocks for audio plls
arm64: dts: renesas: r8a774a1: Remove audio port node
arm64: dts: marvell: Fix CP110 NAND controller node multi-line comment alignment
tick/sched: Annotate lockless access to last_jiffies_update
cfg80211: check for set_wiphy_params
arm64: dts: marvell: Add AP806-dual missing CPU clocks
arm64: dts: renesas: r8a77970: Fix PWM3
arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
arm64: dts: meson: g12: fix audio fifo reg size
arm64: dts: meson: axg: fix audio fifo reg size
cw1200: Fix a signedness bug in cw1200_load_firmware()
arm64: dts: qcom: msm8998: Disable coresight by default
irqchip: Place CONFIG_SIFIVE_PLIC into the menu
tcp: refine rule to allow EPOLLOUT generation under mem pressure
dt-bindings: Add missing 'properties' keyword enclosing 'snps,tso'
xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
devlink: Wait longer before warning about unset port type
net: stmmac: tc: Do not setup flower filtering if RSS is enabled
net: stmmac: selftests: Update status when disabling RSS
selftests: mlxsw: qos_mc_aware: Fix mausezahn invocation
net: stmmac: selftests: Mark as fail when received VLAN ID != expected
net: stmmac: selftests: Make it work in Synopsys AXS101 boards
mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters
mlxsw: spectrum: Wipe xstats.backlog of down ports
mlxsw: spectrum: Do not modify cloned SKBs during xmit
sh_eth: check sh_eth_cpu_data::dual_port when dumping registers
drm/amdgpu: allow direct upload save restore list for raven2
i40e: prevent memory leak in i40e_setup_macvlans
net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
net: sched: act_ctinfo: fix memory leak
net: dsa: tag_gswip: fix typo in tagger name
net: dsa: sja1105: Don't error out on disabled ports with no phy-mode
net: systemport: Fixed queue mapping in internal ring map
net: ethernet: ave: Avoid lockdep warning
bnxt_en: Do not treat DSN (Digital Serial Number) read failure as fatal.
bnxt_en: Fix ipv6 RFS filter matching logic.
bnxt_en: Fix NTUPLE firmware command failures.
tcp: fix marked lost packets not being retransmitted
r8152: add missing endpoint sanity check
ptp: free ptp device pin descriptors properly
net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
net: usb: lan78xx: limit size of local TSO packets
net/sched: act_ife: initalize ife->metalist earlier
net: phy: dp83867: Set FORCE_LINK_GOOD to default after reset
net: hns: fix soft lockup when there is not enough memory
net: hns3: pad the short frame before sending to the hardware
net: dsa: tag_qca: fix doubled Tx statistics
net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key()
hv_netvsc: Fix memory leak when removing rndis device
macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
batman-adv: Fix DAT candidate selection on little endian systems
bpftool: Fix printing incorrect pointer in btf_dump_ptr
net: bpf: Don't leak time wait and request sockets
NFC: pn533: fix bulk-message timeout
netfilter: nf_tables: fix flowtable list del corruption
netfilter: nf_tables: store transaction list locally while requesting module
netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
netfilter: nft_tunnel: ERSPAN_VERSION must not be null
netfilter: nft_tunnel: fix null-attribute check
netfilter: nat: fix ICMP header corruption on ICMP errors
netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
netfilter: fix a use-after-free in mtype_destroy()
i2c: iop3xx: Fix memory leak in probe error path
bpf/sockmap: Read psock ingress_msg before sk_receive_queue
cfg80211: fix page refcount issue in A-MSDU decap
cfg80211: fix memory leak in cfg80211_cqm_rssi_update
cfg80211: fix memory leak in nl80211_probe_mesh_link
cfg80211: fix deadlocks in autodisconnect work
i2c: tegra: Properly disable runtime PM on driver's probe error
i2c: tegra: Fix suspending in active runtime PM state
bpf: Sockmap/tls, fix pop data with SK_DROP return code
bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chaining
bpf: Sockmap/tls, tls_sw can create a plaintext buf > encrypt buf
bpf: Sockmap/tls, msg_push_data may leave end mark in place
bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds
bpf: Sockmap/tls, push write_space updates through ulp updates
bpf: Sockmap, ensure sock lock held during tear down
bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
bpf: Fix incorrect verifier simulation of ARSH under ALU32
drm/amd/display: Reorder detect_edp_sink_caps before link settings read.
block: Fix the type of 'sts' in bsg_queue_rq()
net: fix kernel-doc warning in <linux/netdevice.h>
tipc: fix retrans failure due to wrong destination
tipc: fix potential hanging after b/rcast changing
reset: Fix {of,devm}_reset_control_array_get kerneldoc return types
net: stmmac: Enable 16KB buffer size
net: stmmac: 16KB buffer must be 16 byte aligned
ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
ARM: dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL
ARM: dts: imx6sll-evk: Remove incorrect power supply assignment
ARM: dts: imx6sl-evk: Remove incorrect power supply assignment
ARM: dts: imx6sx-sdb: Remove incorrect power supply assignment
ARM: dts: imx6qdl-sabresd: Remove incorrect power supply assignment
mm: khugepaged: add trace status description for SCAN_PAGE_HAS_PRIVATE
mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
mm/memory_hotplug: don't free usage map when removing a re-added early section
Btrfs: always copy scrub arguments back to user space
btrfs: check rw_devices, not num_devices for balance
btrfs: fix memory leak in qgroup accounting
btrfs: relocation: fix reloc_root lifespan and access
btrfs: do not delete mismatched root refs
btrfs: fix invalid removal of root ref
btrfs: rework arguments of btrfs_unlink_subvol
mm, debug_pagealloc: don't rely on static keys too early
mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid
mm: memcg/slab: fix percpu slab vmstats flushing
mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment
mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment
perf report: Fix incorrectly added dimensions as switch perf data file
locking/lockdep: Fix buffer overrun problem in stack_trace[]
perf hists: Fix variable name's inconsistency in hists__for_each() macro
clk: samsung: exynos5420: Keep top G3D clocks enabled
s390/setup: Fix secure ipl message
efi/earlycon: Fix write-combine mapping on x86
x86/resctrl: Fix potential memory leak
drm/i915: Add missing include file <linux/math64.h>
mtd: spi-nor: Fix selection of 4-byte addressing opcodes on Spansion
scsi: storvsc: Correctly set number of hardware queues for IDE disk
s390/zcrypt: Fix CCA cipher key gen with clear key value function
x86/efistub: Disable paging at mixed mode entry
perf/x86/intel/uncore: Fix missing marker for snr_uncore_imc_freerunning_events
locking/rwsem: Fix kernel crash when spinning on RWSEM_OWNER_UNKNOWN
x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained
x86/resctrl: Fix an imbalance in domain_remove_cpu()
cpu/SMT: Fix x86 link error without CONFIG_SYSFS
usb: core: hub: Improved device recognition on remote wakeup
mtd: rawnand: gpmi: Restore nfc timing setup after suspend/resume
mtd: rawnand: gpmi: Fix suspend/resume problem
ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
scsi: mptfusion: Fix double fetch bug in ioctl
scsi: fnic: fix invalid stack access
staging: comedi: ni_routes: allow partial routing information
staging: comedi: ni_routes: fix null dereference in ni_find_route_source()
USB: serial: quatech2: handle unbound ports
USB: serial: keyspan: handle unbound ports
USB: serial: io_edgeport: add missing active-port sanity check
USB: serial: io_edgeport: handle unbound ports on URB completion
USB: serial: ch341: handle unbound port at reset_resume
USB: serial: suppress driver bind attributes
USB: serial: option: add support for Quectel RM500Q in QDL mode
USB: serial: opticon: fix control-message timeouts
USB: serial: option: Add support for Quectel RM500Q
USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
iio: buffer: align the size of scan bytes to size of the largest element
iio: chemical: pms7003: fix unmet triggered buffer dependency
iio: light: vcnl4000: Fix scale for vcnl4040
iio: imu: st_lsm6dsx: Fix selection of ST_LSM6DS3_ID
iio: adc: ad7124: Fix DT channel configuration
perf: Correctly handle failed perf_get_aux_event()
ARM: davinci: select CONFIG_RESET_CONTROLLER
ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
cpuidle: teo: Fix intervals[] array indexing bug
io_uring: only allow submit from owning task
fuse: fix fuse_send_readpages() in the syncronous read case
block: fix an integer overflow in logical block size
clk: sunxi-ng: r40: Allow setting parent rate for external clock outputs
Fix built-in early-load Intel microcode alignment
arm64: dts: agilex/stratix10: fix pmu interrupt numbers
arm64: dts: allwinner: a64: olinuxino: Fix eMMC supply regulator
arm64: dts: allwinner: a64: olinuxino: Fix SDIO supply regulator
ALSA: usb-audio: fix sync-ep altsetting sanity check
ALSA: firewire-tascam: fix corruption due to spin lock without restoration in SoftIRQ context
ALSA: seq: Fix racy access for queue timer in proc read
ALSA: dice: fix fallback from protocol extension into limited functionality
ASoC: Intel: bytcht_es8316: Fix Irbis NB41 netbook quirk
ARM: dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection
ARM: dts: imx7ulp: fix reg of cpu node
ARM: OMAP2+: Fix ti_sysc_find_one_clockdomain to check for to_clk_hw_omap
ASoC: msm8916-wcd-analog: Fix MIC BIAS Internal1
ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
ASoC: stm32: dfsdm: fix 16 bits record
ASoC: stm32: sai: fix possible circular locking
ASoC: msm8916-wcd-digital: Reset RX interpolation path after use
arm64: dts: imx8mq-librem5-devkit: use correct interrupt for the magnetometer
Revert "gpio: thunderx: Switch to GPIOLIB_IRQCHIP"
clk: Don't try to enable critical clocks if prepare failed
bus: ti-sysc: Fix iterating over clocks
arm64: dts: imx8mm: Change SDMA1 ahb clock for imx8mm
arm64: dts: ls1028a: fix endian setting for dcfg
ARM: dts: imx6q-dhcom: fix rtc compatible
dt-bindings: reset: meson8b: fix duplicate reset IDs
soc: amlogic: meson-ee-pwrc: propagate errors from pm_genpd_init()
soc: amlogic: meson-ee-pwrc: propagate PD provider registration errors
clk: qcom: gcc-sdm845: Add missing flag to votable GDSCs
ARM: dts: meson8: fix the size of the PMU registers

CVE References

Paolo Pisati (p-pisati)
Changed in linux-5.4 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
tags: added: focal
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (82.1 KiB)

This bug was fixed in the package linux-5.4 - 5.4.0-14.17

---------------
linux-5.4 (5.4.0-14.17) focal; urgency=medium

  * focal/linux-5.4: 5.4.0-14.17 -proposed tracker (LP: #1862255)

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Boot log is swamped with "debugfs: Directory 'imc' with parent 'powerpc'
    already present" messages on kernel 5.4 (LP: #1861379)
    - powerpc/powernv: Avoid re-registration of imc debugfs directory

  * CVE-2019-3016
    - SAUCE: x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
    - SAUCE: x86/kvm: Introduce kvm_(un)map_gfn()
    - SAUCE: x86/kvm: Cache gfn to pfn translation
    - SAUCE: x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
    - SAUCE: x86/KVM: Clean up host's steal time structure

  * installing linux-modules-nvidia does not remove nvidia-dkms, and the kernel
    prioritizes the wrong version of the module from disk (LP: #1856414)
    - Revert "UBUNTU: [Packaging] dkms -- switch basic provides to *-modules"
    - Revert "UBUNTU: [Packaging] dkms -- add Provides: specifiers for existing
      zfs/nvidia/vbox"
    - Revert "UBUNTU: [packaging] dkms-build -- include versioned provides"
    - [Packaging] wireguard -- drop provides

  * Focal update: v5.4.18 upstream stable release (LP: #1862203)
    - vfs: fix do_last() regression
    - cifs: fix soft mounts hanging in the reconnect code
    - x86/resctrl: Fix a deadlock due to inaccurate reference
    - x86/resctrl: Fix use-after-free when deleting resource groups
    - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
    - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
    - e1000e: Revert "e1000e: Make watchdog use delayed work"
    - gfs2: Another gfs2_find_jhead fix
    - perf c2c: Fix return type for histogram sorting comparision functions
    - PM / devfreq: Add new name attribute for sysfs
    - tools lib: Fix builds when glibc contains strlcpy()
    - arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
    - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
    - reiserfs: Fix memory leak of journal device string
    - media: digitv: don't continue if remote control state can't be read
    - media: af9005: uninitialized variable printked
    - media: vp7045: do not read uninitialized values if usb transfer fails
    - media: gspca: zero usb_buf
    - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
    - tomoyo: Use atomic_t for statistics counter
    - ttyprintk: fix a potential deadlock in interrupt context issue
    - Bluetooth: Fix race condition in hci_release_sock()
    - cgroup: Prevent double killing of css when enabling threaded cgroup
    - clk: sunxi-ng: v3s: Fix incorrect number of hw_clks.
    - arm64: dts: meson-sm1-sei610: add gpio bluetooth interrupt
    - ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
    - ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
    - ARM: dts: beagle-x15-common: Model 5V0 regulator
    - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
    - tools lib traceevent: Fix memory leakage in filter_event
    - rseq: Unregister rseq for clone CLONE_...

Changed in linux-5.4 (Ubuntu Focal):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.