diff -u linux-azure-5.15.0/debian.azure/changelog linux-azure-5.15.0/debian.azure/changelog --- linux-azure-5.15.0/debian.azure/changelog +++ linux-azure-5.15.0/debian.azure/changelog @@ -1,3 +1,26 @@ +linux-azure (5.15.0-1061.70) jammy; urgency=medium + + * jammy/linux-azure: 5.15.0-1061.70 -proposed tracker (LP: #2059642) + + [ Ubuntu: 5.15.0-103.113 ] + + * jammy/linux: 5.15.0-103.113 -proposed tracker (LP: #2059683) + * Packaging resync (LP: #1786013) + - [Packaging] drop getabis data + * Remove getabis scripts (LP: #2059143) + - [Packaging] Remove getabis + * CVE-2023-24023 + - Bluetooth: Add more enc key size check + * CVE-2023-52600 + - jfs: fix uaf in jfs_evict_inode + * Jammy update: v5.15.149 upstream stable release (LP: #2059014) // + CVE-2023-52603 + - UBSAN: array-index-out-of-bounds in dtSplitRoot + * CVE-2024-26581 + - netfilter: nft_set_rbtree: skip end interval element from gc + + -- Tim Gardner Tue, 02 Apr 2024 19:30:38 -0600 + linux-azure (5.15.0-1060.69) jammy; urgency=medium * jammy/linux-azure: 5.15.0-1060.69 -proposed tracker (LP: #2055592) diff -u linux-azure-5.15.0/debian.azure/reconstruct linux-azure-5.15.0/debian.azure/reconstruct --- linux-azure-5.15.0/debian.azure/reconstruct +++ linux-azure-5.15.0/debian.azure/reconstruct @@ -19,7 +19,6 @@ chmod +x 'debian/scripts/misc/fips-checks' chmod +x 'debian/scripts/misc/fw-to-ihex.sh' chmod +x 'debian/scripts/misc/gen-auto-reconstruct' -chmod +x 'debian/scripts/misc/getabis' chmod +x 'debian/scripts/misc/git-ubuntu-log' chmod +x 'debian/scripts/misc/insert-changes' chmod +x 'debian/scripts/misc/insert-mainline-changes' diff -u linux-azure-5.15.0/debian.azure/tracking-bug linux-azure-5.15.0/debian.azure/tracking-bug --- linux-azure-5.15.0/debian.azure/tracking-bug +++ linux-azure-5.15.0/debian.azure/tracking-bug @@ -1 +1 @@ -2055592 2024.03.04-1 +2059642 s2024.03.04-1 diff -u linux-azure-5.15.0/debian.master/changelog linux-azure-5.15.0/debian.master/changelog --- linux-azure-5.15.0/debian.master/changelog +++ linux-azure-5.15.0/debian.master/changelog @@ -1,3 +1,28 @@ +linux (5.15.0-103.113) jammy; urgency=medium + + * jammy/linux: 5.15.0-103.113 -proposed tracker (LP: #2059683) + + * Packaging resync (LP: #1786013) + - [Packaging] drop getabis data + + * Remove getabis scripts (LP: #2059143) + - [Packaging] Remove getabis + + * CVE-2023-24023 + - Bluetooth: Add more enc key size check + + * CVE-2023-52600 + - jfs: fix uaf in jfs_evict_inode + + * Jammy update: v5.15.149 upstream stable release (LP: #2059014) // + CVE-2023-52603 + - UBSAN: array-index-out-of-bounds in dtSplitRoot + + * CVE-2024-26581 + - netfilter: nft_set_rbtree: skip end interval element from gc + + -- Manuel Diewald Thu, 28 Mar 2024 19:21:10 +0100 + linux (5.15.0-102.112) jammy; urgency=medium * jammy/linux: 5.15.0-102.112 -proposed tracker (LP: #2055632) reverted: --- linux-azure-5.15.0/debian.master/etc/getabis +++ linux-azure-5.15.0.orig/debian.master/etc/getabis @@ -1,19 +0,0 @@ -repo_list=( - "http://archive.ubuntu.com/ubuntu/pool/main/l/linux" - "http://ports.ubuntu.com/ubuntu-ports/pool/main/l/linux" - "http://archive.ubuntu.com/ubuntu/pool/universe/l/linux" - "http://ports.ubuntu.com/ubuntu-ports/pool/universe/l/linux" - "http://ppa.launchpad.net/canonical-kernel-team/ppa/ubuntu/pool/main/l/linux" - "http://ppa.launchpad.net/canonical-kernel-team/ppa2/ubuntu/pool/main/l/linux" - "http://ppa.launchpad.net/canonical-kernel-team/unstable/ubuntu/pool/main/l/linux" - "http://ppa.launchpad.net/canonical-kernel-team/bootstrap/ubuntu/pool/main/l/linux" -) - -package_prefixes linux-buildinfo - -getall armhf generic -getall armhf generic-lpae -getall amd64 generic -getall arm64 generic generic-64k -getall ppc64el generic -getall s390x generic diff -u linux-azure-5.15.0/debian.master/reconstruct linux-azure-5.15.0/debian.master/reconstruct --- linux-azure-5.15.0/debian.master/reconstruct +++ linux-azure-5.15.0/debian.master/reconstruct @@ -18,7 +18,6 @@ chmod +x 'debian/scripts/misc/fips-checks' chmod +x 'debian/scripts/misc/fw-to-ihex.sh' chmod +x 'debian/scripts/misc/gen-auto-reconstruct' -chmod +x 'debian/scripts/misc/getabis' chmod +x 'debian/scripts/misc/git-ubuntu-log' chmod +x 'debian/scripts/misc/insert-changes' chmod +x 'debian/scripts/misc/insert-mainline-changes' diff -u linux-azure-5.15.0/debian.master/tracking-bug linux-azure-5.15.0/debian.master/tracking-bug --- linux-azure-5.15.0/debian.master/tracking-bug +++ linux-azure-5.15.0/debian.master/tracking-bug @@ -1 +1 @@ -2055632 2024.03.04-1 +2059683 s2024.03.04-1 diff -u linux-azure-5.15.0/debian/changelog linux-azure-5.15.0/debian/changelog --- linux-azure-5.15.0/debian/changelog +++ linux-azure-5.15.0/debian/changelog @@ -1,3 +1,26 @@ +linux-azure (5.15.0-1061.70) jammy; urgency=medium + + * jammy/linux-azure: 5.15.0-1061.70 -proposed tracker (LP: #2059642) + + [ Ubuntu: 5.15.0-103.113 ] + + * jammy/linux: 5.15.0-103.113 -proposed tracker (LP: #2059683) + * Packaging resync (LP: #1786013) + - [Packaging] drop getabis data + * Remove getabis scripts (LP: #2059143) + - [Packaging] Remove getabis + * CVE-2023-24023 + - Bluetooth: Add more enc key size check + * CVE-2023-52600 + - jfs: fix uaf in jfs_evict_inode + * Jammy update: v5.15.149 upstream stable release (LP: #2059014) // + CVE-2023-52603 + - UBSAN: array-index-out-of-bounds in dtSplitRoot + * CVE-2024-26581 + - netfilter: nft_set_rbtree: skip end interval element from gc + + -- Tim Gardner Tue, 02 Apr 2024 19:30:38 -0600 + linux-azure (5.15.0-1060.69) jammy; urgency=medium * jammy/linux-azure: 5.15.0-1060.69 -proposed tracker (LP: #2055592) diff -u linux-azure-5.15.0/debian/control linux-azure-5.15.0/debian/control --- linux-azure-5.15.0/debian/control +++ linux-azure-5.15.0/debian/control @@ -54,7 +54,7 @@ XS-Testsuite: autopkgtest #XS-Testsuite-Depends: gcc-4.7 binutils -Package: linux-azure-headers-5.15.0-1060 +Package: linux-azure-headers-5.15.0-1061 Build-Profiles: Architecture: all Multi-Arch: foreign @@ -64,46 +64,46 @@ Description: Header files related to Linux kernel version 5.15.0 This package provides kernel header files for version 5.15.0, for sites that want the latest kernel headers. Please read - /usr/share/doc/linux-azure-headers-5.15.0-1060/debian.README.gz for details + /usr/share/doc/linux-azure-headers-5.15.0-1061/debian.README.gz for details -Package: linux-azure-tools-5.15.0-1060 +Package: linux-azure-tools-5.15.0-1061 Build-Profiles: Architecture: amd64 arm64 Section: devel Priority: optional Depends: ${misc:Depends}, ${shlibs:Depends}, linux-tools-common -Description: Linux kernel version specific tools for version 5.15.0-1060 +Description: Linux kernel version specific tools for version 5.15.0-1061 This package provides the architecture dependant parts for kernel version locked tools (such as perf and x86_energy_perf_policy) for - version 5.15.0-1060 on + version 5.15.0-1061 on 64 bit x86. - You probably want to install linux-tools-5.15.0-1060-. + You probably want to install linux-tools-5.15.0-1061-. -Package: linux-azure-cloud-tools-5.15.0-1060 +Package: linux-azure-cloud-tools-5.15.0-1061 Build-Profiles: Architecture: amd64 arm64 Section: devel Priority: optional Depends: ${misc:Depends}, ${shlibs:Depends}, linux-cloud-tools-common -Description: Linux kernel version specific cloud tools for version 5.15.0-1060 +Description: Linux kernel version specific cloud tools for version 5.15.0-1061 This package provides the architecture dependant parts for kernel - version locked tools for cloud tools for version 5.15.0-1060 on + version locked tools for cloud tools for version 5.15.0-1061 on 64 bit x86. - You probably want to install linux-cloud-tools-5.15.0-1060-. + You probably want to install linux-cloud-tools-5.15.0-1061-. -Package: linux-image-unsigned-5.15.0-1060-azure +Package: linux-image-unsigned-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: kernel Priority: optional Provides: linux-image, fuse-module, kvm-api-4, redhat-cluster-modules, ivtv-modules, virtualbox-guest-modules [amd64], ${linux:rprovides} -Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-1060-azure +Depends: ${misc:Depends}, ${shlibs:Depends}, kmod, linux-base (>= 4.5ubuntu1~16.04.1), linux-modules-5.15.0-1061-azure Recommends: grub-pc [amd64] | grub-efi-amd64 [amd64] | grub-efi-ia32 [amd64] | grub [amd64] | flash-kernel [arm64] | grub-efi-arm64 [arm64] Breaks: flash-kernel (<< 3.0~rc.4ubuntu64) [arm64] -Conflicts: linux-image-5.15.0-1060-azure -Suggests: fdutils, linux-azure-doc-5.15.0 | linux-azure-source-5.15.0, linux-azure-tools, linux-headers-5.15.0-1060-azure, initramfs-tools | linux-initramfs-tool +Conflicts: linux-image-5.15.0-1061-azure +Suggests: fdutils, linux-azure-doc-5.15.0 | linux-azure-source-5.15.0, linux-azure-tools, linux-headers-5.15.0-1061-azure, initramfs-tools | linux-initramfs-tool Description: Linux kernel image for version 5.15.0 on 64 bit x86 SMP This package contains the unsigned Linux kernel image for version 5.15.0 on 64 bit x86 SMP. @@ -116,7 +116,7 @@ the linux-azure meta-package, which will ensure that upgrades work correctly, and that supporting packages are also installed. -Package: linux-modules-5.15.0-1060-azure +Package: linux-modules-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: kernel @@ -136,12 +136,12 @@ the linux-azure meta-package, which will ensure that upgrades work correctly, and that supporting packages are also installed. -Package: linux-modules-extra-5.15.0-1060-azure +Package: linux-modules-extra-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: kernel Priority: optional -Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-1060-azure | linux-image-unsigned-5.15.0-1060-azure, wireless-regdb +Depends: ${misc:Depends}, ${shlibs:Depends}, linux-image-5.15.0-1061-azure | linux-image-unsigned-5.15.0-1061-azure, wireless-regdb Description: Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP This package contains the Linux kernel extra modules for version 5.15.0 on 64 bit x86 SMP. @@ -158,21 +158,21 @@ the linux-azure meta-package, which will ensure that upgrades work correctly, and that supporting packages are also installed. -Package: linux-headers-5.15.0-1060-azure +Package: linux-headers-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: devel Priority: optional -Depends: ${misc:Depends}, linux-azure-headers-5.15.0-1060, ${shlibs:Depends} +Depends: ${misc:Depends}, linux-azure-headers-5.15.0-1061, ${shlibs:Depends} Provides: linux-headers, linux-headers-3.0 Description: Linux kernel headers for version 5.15.0 on 64 bit x86 SMP This package provides kernel header files for version 5.15.0 on 64 bit x86 SMP. . This is for sites that want the latest kernel headers. Please read - /usr/share/doc/linux-headers-5.15.0-1060/debian.README.gz for details. + /usr/share/doc/linux-headers-5.15.0-1061/debian.README.gz for details. -Package: linux-image-unsigned-5.15.0-1060-azure-dbgsym +Package: linux-image-unsigned-5.15.0-1061-azure-dbgsym Build-Profiles: Architecture: amd64 arm64 Section: devel @@ -189,27 +189,27 @@ is uncompressed, and unstripped. This package also includes the unstripped modules. -Package: linux-tools-5.15.0-1060-azure +Package: linux-tools-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: devel Priority: optional -Depends: ${misc:Depends}, linux-azure-tools-5.15.0-1060 -Description: Linux kernel version specific tools for version 5.15.0-1060 +Depends: ${misc:Depends}, linux-azure-tools-5.15.0-1061 +Description: Linux kernel version specific tools for version 5.15.0-1061 This package provides the architecture dependant parts for kernel version locked tools (such as perf and x86_energy_perf_policy) for - version 5.15.0-1060 on + version 5.15.0-1061 on 64 bit x86. -Package: linux-cloud-tools-5.15.0-1060-azure +Package: linux-cloud-tools-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: devel Priority: optional -Depends: ${misc:Depends}, linux-azure-cloud-tools-5.15.0-1060 -Description: Linux kernel version specific cloud tools for version 5.15.0-1060 +Depends: ${misc:Depends}, linux-azure-cloud-tools-5.15.0-1061 +Description: Linux kernel version specific cloud tools for version 5.15.0-1061 This package provides the architecture dependant parts for kernel - version locked tools for cloud for version 5.15.0-1060 on + version locked tools for cloud for version 5.15.0-1061 on 64 bit x86. Package: linux-udebs-azure @@ -223,7 +223,7 @@ for easier version and migration tracking. -Package: linux-buildinfo-5.15.0-1060-azure +Package: linux-buildinfo-5.15.0-1061-azure Build-Profiles: Architecture: amd64 arm64 Section: kernel reverted: --- linux-azure-5.15.0/debian/scripts/misc/getabis +++ linux-azure-5.15.0.orig/debian/scripts/misc/getabis @@ -1,222 +0,0 @@ -#!/bin/bash - -export LC_ALL=C.UTF-8 - -if [ "$#" = "1" ]; then - set - $(echo "$1" | sed -e 's/-/ /') -fi -if [ "$#" != "2" ]; then - echo "Usage: $0 " 1>&2 - echo "Usage: $0 " 1>&2 - exit 1 -fi - -if [ "$DEBIAN" = "" ]; then - . debian/debian.env -fi - -ver=$1 -revision=$2 -abi=${revision%%.*} - -verabi=$ver-$abi -verfull=$ver-$revision - -WGET="wget --tries=1 --timeout=10 --quiet -c" - -# Check if we use a flat (unversioned) ABI directory -if [ -f "${DEBIAN}/abi/version" ] || \ - grep -qP '^abidir\s+.*/__abi.current/' debian/rules.d/0-common-vars.mk ; then - echo "Using flat ABI directory" - flat_abi=1 - abidir=$(pwd)/${DEBIAN}/abi -else - echo "Using versioned ABI directory" - flat_abi=0 - abidir=$(pwd)/${DEBIAN}/abi/${verfull} -fi - -tmpdir="`pwd`/abi-tmp-$verfull" -origdir="`pwd`" -fwinfo=$abidir/fwinfo - -test -d $tmpdir || mkdir $tmpdir - -package_prefixes() { - : # no longer used ... -} - -getall() { - arch=$1 - shift - - mkdir -p $abidir/$arch - - for sub in $@; do - if [ -f $abidir/$arch/$sub ]; then - echo "Existing $sub($arch)..." - continue - fi - echo "Fetching $sub($arch)..." - getall_set "linux-buildinfo" "$arch" "$sub" || \ - getall_set "linux-image-unsigned linux-modules linux-modules-extra" "$arch" "$sub" || \ - getall_set "linux-image-unsigned linux-modules" "$arch" "$sub" || \ - getall_set "linux-image linux-modules linux-modules-extra" "$arch" "$sub" || \ - getall_set "linux-image linux-modules" "$arch" "$sub" || \ - getall_set "linux-image linux-image-extra" "$arch" "$sub" || \ - getall_set "linux-image" "$arch" "$sub" || \ - { echo "FAILED"; exit 1; } - done -} -getall_set() -{ - prefixes="$1" - arch="$2" - sub="$3" - ( - echo -n " set:" - filenames="" - cd $tmpdir - found=1 - for prefix in $prefixes - do - echo -n " $prefix=" - if [ "$found" = 0 ]; then - echo -n "-" - continue - fi - filename=${prefix}-${verabi}-${sub}_${verfull}_${arch}.deb - for r in "${repo_list[@]}" - do - if ! [ -f $filename ]; then - $WGET $r/$filename - rc="$?" - # If this was not successful or a valid error - # return from the server all bets are off, bail. - [ "$rc" != 0 -a "$rc" != 8 ] && return 2 - fi - if [ -f $filename ]; then - echo -n "y" - filenames="$filenames $filename" - break - fi - done - if [ ! -f "$filename" ]; then - echo -n "n" - found=0 - fi - done - echo "" - if [ "$found" = 0 ]; then - return 1 - fi - echo " extracting..." - for filename in $filenames - do - dpkg-deb --extract $filename tmp - done - # FORM 1: linux-image et al extracted here. - if [ -d tmp/boot ]; then - echo " images..." - find tmp -name "*.ko" | while read f; do - modinfo $f | grep ^firmware >> $fwinfo - done - if [ -f tmp/boot/abi-* ]; then - mv tmp/boot/abi-* $abidir/$arch/$sub - else - echo " NO ABI FILE" - fi - if [ -f tmp/boot/retpoline-* ]; then - mv tmp/boot/retpoline-* $abidir/$arch/$sub.retpoline - else - echo " NO RETPOLINE FILE" - fi - (cd tmp; find lib/modules/$verabi-$sub/kernel -name '*.ko') | \ - sed -e 's/.*\/\([^\/]*\)\.ko/\1/' | sort > \ - $abidir/$arch/$sub.modules - ( - cd tmp; - # Prevent exposing some errors when called by python scripts. SIGPIPE seems to get - # exposed when using the `find ...` form of the command. - ko=$(find lib/modules/$verabi-$sub/kernel \ - -name '*.ko' | head -1) - readelf -p .comment "$ko" | gawk ' - ($1 == "[") { - printf("%s", $3); - for (n=4; n<=NF; n++) { - printf(" %s", $n); - } - print "" - }' | sort -u >$abidir/$arch/$sub.compiler - version=`cat $abidir/$arch/$sub.compiler` - echo " $version" - ) - # FORM 2: moduleinfo packages - # cranky fix -- modinfo supported - else - echo " buildinfo..." - base="tmp/usr/lib/linux/${verabi}-${sub}" - mv "$base/abi" "$abidir/$arch/$sub" - for comp in 'modules' 'retpoline' 'compiler' - do - mv "$base/$comp" "$abidir/$arch/$sub.$comp" - done - if [ -e "${base}"/modules.builtin ] ; then - mv "${base}"/modules.builtin "${abidir}/${arch}/${sub}".modules.builtin - fi - cat "$base/fwinfo" >>"$fwinfo" - if [ -e "${base}"/fwinfo.builtin ] ; then - cat "${base}"/fwinfo.builtin >> "${fwinfo}".builtin - fi - fi - rm -rf tmp $filenames - echo " done" - ) - rc="$?" - if [ "$rc" = 2 ]; then - echo "ERROR: downloads are reporting network failures" 1>&2 - exit 1 - fi - return "$rc" -} - -# MAIN - -# Setup abi directory -rm -rf "${abidir}" -mkdir -p $abidir -echo $abi > $abidir/abiname -if [ ${flat_abi} -eq 1 ] ; then - echo "${verfull}" > "${abidir}"/version -fi - -# NOTE: The flavours are hardcoded, because they may have changed from the -# current build. - -. $DEBIAN/etc/getabis - -# Extract compiler source package version from e.g.: -# GCC: (Ubuntu/Linaro 4.8.2-19ubuntu1) 4.8.2 -compilers=`sed 's/^.*(.* \(.*\)).*$/\1/' $abidir/*/*.compiler | sort -u | wc -l` -if [ "$compilers" != 1 ]; then - echo "WARNING: inconsistent compiler versions detected:" 1>&2 - sort -u $abidir/*/*.compiler | sed 's/^/WARNING: /' 1>&2 -fi - -# Sort fwinfo files -sort < $fwinfo | uniq > fwinfo.tmp -mv fwinfo.tmp $fwinfo -if [ -e "${fwinfo}".builtin ] ; then - sort < "${fwinfo}".builtin | uniq > fwinfo.tmp - mv fwinfo.tmp "${fwinfo}".builtin -fi - -rmdir $tmpdir - -# If this is running in a git repo, add the new ABI directory, remove the old -if [ -d ".git" ]; then - git add "${abidir}" - if [ ${flat_abi} -eq 0 ] ; then - find "$DEBIAN"/abi/* -maxdepth 0 -type d | grep -v "$verfull" | while read f; do git rm -rf "$f"; done - fi -fi diff -u linux-azure-5.15.0/fs/jfs/jfs_mount.c linux-azure-5.15.0/fs/jfs/jfs_mount.c --- linux-azure-5.15.0/fs/jfs/jfs_mount.c +++ linux-azure-5.15.0/fs/jfs/jfs_mount.c @@ -172,15 +172,15 @@ } jfs_info("jfs_mount: ipimap:0x%p", ipimap); - /* map further access of per fileset inodes by the fileset inode */ - sbi->ipimap = ipimap; - /* initialize fileset inode allocation map */ if ((rc = diMount(ipimap))) { jfs_err("jfs_mount: diMount failed w/rc = %d", rc); goto err_ipimap; } + /* map further access of per fileset inodes by the fileset inode */ + sbi->ipimap = ipimap; + return rc; /* diff -u linux-azure-5.15.0/net/bluetooth/hci_event.c linux-azure-5.15.0/net/bluetooth/hci_event.c --- linux-azure-5.15.0/net/bluetooth/hci_event.c +++ linux-azure-5.15.0/net/bluetooth/hci_event.c @@ -3113,6 +3113,7 @@ const struct hci_rp_read_enc_key_size *rp; struct hci_conn *conn; u16 handle; + u8 rp_status; BT_DBG("%s status 0x%02x", hdev->name, status); @@ -3122,6 +3123,7 @@ } rp = (void *)skb->data; + rp_status = rp->status; handle = le16_to_cpu(rp->handle); hci_dev_lock(hdev); @@ -3134,15 +3136,30 @@ * secure approach is to then assume the key size is 0 to force a * disconnection. */ - if (rp->status) { + if (rp_status) { bt_dev_err(hdev, "failed to read key size for handle %u", handle); conn->enc_key_size = 0; } else { conn->enc_key_size = rp->key_size; + rp_status = 0; + + if (conn->enc_key_size < hdev->min_enc_key_size) { + /* As slave role, the conn->state has been set to + * BT_CONNECTED and l2cap conn req might not be received + * yet, at this moment the l2cap layer almost does + * nothing with the non-zero status. + * So we also clear encrypt related bits, and then the + * handler of l2cap conn req will get the right secure + * state at a later time. + */ + rp_status = HCI_ERROR_AUTH_FAILURE; + clear_bit(HCI_CONN_ENCRYPT, &conn->flags); + clear_bit(HCI_CONN_AES_CCM, &conn->flags); + } } - hci_encrypt_cfm(conn, 0); + hci_encrypt_cfm(conn, rp_status); unlock: hci_dev_unlock(hdev); diff -u linux-azure-5.15.0/net/netfilter/nft_set_rbtree.c linux-azure-5.15.0/net/netfilter/nft_set_rbtree.c --- linux-azure-5.15.0/net/netfilter/nft_set_rbtree.c +++ linux-azure-5.15.0/net/netfilter/nft_set_rbtree.c @@ -235,7 +235,7 @@ static const struct nft_rbtree_elem * nft_rbtree_gc_elem(const struct nft_set *__set, struct nft_rbtree *priv, - struct nft_rbtree_elem *rbe, u8 genmask) + struct nft_rbtree_elem *rbe) { struct nft_set *set = (struct nft_set *)__set; struct rb_node *prev = rb_prev(&rbe->node); @@ -254,7 +254,7 @@ while (prev) { rbe_prev = rb_entry(prev, struct nft_rbtree_elem, node); if (nft_rbtree_interval_end(rbe_prev) && - nft_set_elem_active(&rbe_prev->ext, genmask)) + nft_set_elem_active(&rbe_prev->ext, NFT_GENMASK_ANY)) break; prev = rb_prev(prev); @@ -365,7 +365,7 @@ nft_set_elem_active(&rbe->ext, cur_genmask)) { const struct nft_rbtree_elem *removed_end; - removed_end = nft_rbtree_gc_elem(set, priv, rbe, genmask); + removed_end = nft_rbtree_gc_elem(set, priv, rbe); if (IS_ERR(removed_end)) return PTR_ERR(removed_end); only in patch2: unchanged: --- linux-azure-5.15.0.orig/fs/jfs/jfs_dtree.c +++ linux-azure-5.15.0/fs/jfs/jfs_dtree.c @@ -1970,7 +1970,7 @@ do { f = &rp->slot[fsi]; fsi = f->next; - } while (fsi != -1); + } while (fsi >= 0); f->next = n; }