Jammy update: v5.15.25 upstream stable release

Bug #1963890 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Jammy
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.15.25 upstream stable release
       from git://git.kernel.org/

Linux 5.15.25
lockdep: Correct lock_classes index mapping
i2c: brcmstb: fix support for DSL and CM variants
ice: enable parsing IPSEC SPI headers for RSS
scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp() and qedi_process_cmd_cleanup_resp()
copy_process(): Move fd_install() out of sighand->siglock critical section
dmaengine: ptdma: Fix the error handling path in pt_core_init()
i2c: qcom-cci: don't put a device tree node before i2c_add_adapter()
i2c: qcom-cci: don't delete an unregistered adapter
tests: fix idmapped mount_setattr test
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe
dmaengine: sh: rcar-dmac: Check for error num after setting mask
net: sched: limit TC_ACT_REPEAT loops
ucounts: Move RLIMIT_NPROC handling after set_user
rlimit: Fix RLIMIT_NPROC enforcement failure caused by capability calls in set_user
lib/iov_iter: initialize "flags" in new pipe_buffer
ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1
ucounts: Base set_cred_ucounts changes on the real user
ucounts: In set_cred_ucounts assume new->ucounts is non-NULL
ucounts: Handle wrapping in is_ucounts_overlimit
EDAC: Fix calculation of returned address and next offset in edac_align_ptr()
scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
kconfig: fix failing to generate auto.conf
net: macb: Align the dma and coherent dma masks
net: usb: qmi_wwan: Add support for Dell DW5829e
drm/amd/display: fix yellow carp wm clamping
drm/amd/display: Cap pflip irqs per max otg number
display/amd: decrease message verbosity about watermarks table failure
tracing: Fix tp_printk option related with tp_printk_stop_on_boot
drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
ata: libata-core: Disable TRIM on M88V29
kconfig: let 'shell' return enough output for deep path names
ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems"
mm: io_uring: allow oom-killer from io_uring_setup
selftests: fixup build warnings in pidfd / clone3 tests
pidfd: fix test failure due to stack overflow on some arches
arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
arm64: dts: meson-g12: add ATF BL32 reserved-memory region
arm64: dts: meson-gx: add ATF BL32 reserved-memory region
ksmbd: don't align last entry offset in smb2 query directory
ksmbd: fix same UniqueId for dot and dotdot entries
netfilter: conntrack: don't refresh sctp entries in closed state
x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm
irqchip/sifive-plic: Add missing thead,c900-plic match string
phy: phy-mtk-tphy: Fix duplicated argument in phy-mtk-tphy
staging: vc04_services: Fix RCU dereference check
phy: usb: Leave some clocks running during suspend
ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
ARM: OMAP2+: hwmod: Add of_node_put() before break
KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event
KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
mtd: rawnand: ingenic: Fix missing put_device in ingenic_ecc_get
HID: elo: fix memory leak in elo_probe
mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
mtd: phram: Prevent divide by zero bug in phram_setup()
mtd: parsers: qcom: Fix missing free for pparts in cleanup
mtd: parsers: qcom: Fix kernel panic on skipped partition
mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
block: fix surprise removal for drivers calling blk_set_queue_dying
tty: n_tty: do not look ahead for EOL character past the end of the buffer
NFS: Do not report writeback errors in nfs_getattr()
NFS: LOOKUP_DIRECTORY is also ok with symlinks
NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked()
block/wbt: fix negative inflight counter when remove scsi device
ASoC: qcom: Actually clear DMA interrupt register for HDMI
ASoC: tas2770: Insert post reset delay
scsi: ufs: Fix a deadlock in the error handler
scsi: ufs: Remove dead code
tipc: fix wrong notification node addresses
smb3: fix snapshot mount option
mtd: rawnand: gpmi: don't leak PM reference in error path
powerpc/lib/sstep: fix 'ptesync' build error
powerpc/603: Fix boot failure with DEBUG_PAGEALLOC and KFENCE
cifs: fix set of group SID via NTSD xattrs
ASoC: ops: Fix stereo change notifications in snd_soc_put_xr_sx()
ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_sx()
ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
ALSA: hda: Fix missing codec probe on Shenker Dock 15
ALSA: hda: Fix regression on forced probe mask option
ALSA: hda/realtek: Fix deadlock by COEF mutex
ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack Ultra
arm64: Correct wrong label in macro __init_el2_gicv3
selftests/exec: Add non-regular to TEST_GEN_PROGS
perf bpf: Defer freeing string after possible strlen() on it
net: bridge: multicast: notify switchdev driver whenever MC processing gets disabled
dpaa2-eth: Initialize mutex used in one step timestamping path
dpaa2-switch: fix default return of dpaa2_switch_flower_parse_mirror_key
tipc: fix wrong publisher node address in link publications
atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC
net: phy: mediatek: remove PHY mode check on MT7531
net/smc: Avoid overwriting the copies of clcsock callback functions
libsubcmd: Fix use-after-free for realloc(..., 0)
bonding: fix data-races around agg_select_timer
net_sched: add __rcu annotation to netdev->qdisc
drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
bonding: force carrier update when releasing slave
ping: fix the dif and sdif check in ping_lookup
net: ieee802154: ca8210: Fix lifs/sifs periods
net: dsa: lan9303: add VLAN IDs to master device
net: dsa: lan9303: handle hwaccel VLAN tags
net: dsa: lantiq_gswip: fix use after free in gswip_remove()
net: dsa: mv88e6xxx: flush switchdev FDB workqueue before removing VLAN
net: dsa: lan9303: fix reset on probe
cfg80211: fix race in netlink owner interface destruction
brcmfmac: firmware: Fix crash in brcm_alt_fw_path
mac80211: mlme: check for null after calling kmemdup
Revert "net: ethernet: bgmac: Use devm_platform_ioremap_resource_byname"
ipv6: per-netns exclusive flowlabel checks
ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
ipv4: fix data races in fib_alias_hw_flags_set
selftests: netfilter: disable rp_filter on router
netfilter: nft_synproxy: unregister hooks on init error path
selftests: netfilter: fix exit value for nft_concat_range
iwlwifi: mvm: don't send SAR GEO command for 3160 devices
iwlwifi: pcie: gen2: fix locking when "HW not ready"
iwlwifi: pcie: fix locking when "HW not ready"
drm/i915/ttm: tweak priority hint selection
drm/i915/gvt: Make DRM_I915_GVT depend on X86
drm/cma-helper: Set VM_DONTEXPAND for mmap
vsock: remove vsock from connected table when connect is interrupted by a signal
drm/i915: Fix mbus join config lookup
drm/i915: Fix dbuf slice config lookup
drm/i915/opregion: check port number bounds for SWSCI display power state
drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix.
drm/amd/pm: correct the sequence of sending gpu reset msg
drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
drm/radeon: Fix backlight control on iMac 12,1
iwlwifi: fix use-after-free
KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state
KVM: x86: nSVM: fix potential NULL derefernce on nested migration
KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT && !gCR0.PG case
KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a result of RSM
KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU
random: wake up /dev/random writers after zap
gcc-plugins/stackleak: Use noinstr in favor of notrace
Revert "module, async: async_synchronize_full() on module init iff async is used"
x86/Xen: streamline (and fix) PV CPU enumeration
drm/amdgpu: fix logic inversion in check
drm/amd: Only run s3 or s0ix if system is configured properly
drm/amd: add support to check whether the system is set to s3
net: sparx5: do not refer to skb after passing it on
nvme-rdma: fix possible use-after-free in transport error_recovery work
nvme-tcp: fix possible use-after-free in transport error_recovery work
nvme: fix a possible use-after-free in controller reset during load
drm/amd: Warn users about potential s0ix problems
scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
scsi: pm8001: Fix use-after-free for aborted TMF sas_task
scsi: core: Reallocate device's budget map on queue depth change
kselftest: Fix vdso_test_abi return status
scsi: pm80xx: Fix double completion for SATA devices
quota: make dquot_quota_sync return errors from ->sync_fs
vfs: make freeze_super abort when sync_filesystem returns error
pinctrl: bcm63xx: fix unmet dependency on REGMAP for GPIO_REGMAP
ax25: improve the incomplete fix to avoid UAF and NPD bugs
selftests: skip mincore.check_file_mmap when fs lacks needed support
selftests: openat2: Skip testcases that fail with EOPNOTSUPP
selftests: openat2: Add missing dependency in Makefile
selftests: openat2: Print also errno in failure messages
selftests/zram: Adapt the situation that /dev/zram0 is being used
selftests/zram01.sh: Fix compression ratio calculation
selftests/zram: Skip max_comp_streams interface on newer kernel
net: ieee802154: at86rf230: Stop leaking skb's
kselftest: signal all child processes
selftests: rtc: Increase test timeout so that all tests run
kunit: tool: Import missing importlib.abc
platform/x86: ISST: Fix possible circular locking dependency detected
platform/x86: touchscreen_dmi: Add info for the RWC NANOTE P8 AY07J 2-in-1
btrfs: send: in case of IO error log it
parisc: Add ioread64_lo_hi() and iowrite64_lo_hi()
PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology
HID: amd_sfh: Correct the structure field name
HID: amd_sfh: Increase sensor command timeout
HID: i2c-hid: goodix: Fix a lockdep splat
HID: amd_sfh: Add illuminance mask to limit ALS max value
mm: don't try to NUMA-migrate COW pages that have other uses
mmc: block: fix read single on recovery logic
parisc: Fix sglist access in ccio-dma.c
parisc: Fix data TLB miss in sba_unmap_sg
parisc: Drop __init from map_pages declaration
serial: parisc: GSC: fix build when IOSAPIC is not set
parisc: Show error if wrong 32/64-bit compiler is being used
Revert "svm: Add warning message for AVIC IPI invalid target"
HID:Add support for UGTABLET WP5540
scsi: lpfc: Fix mailbox command failure during driver initialization
btrfs: zoned: cache reported zone during mount
fs/proc: task_mmu.c: don't read mapcount for migration entry
drm/nouveau/pmu/gm200-: use alternate falcon reset sequence

Paolo Pisati (p-pisati)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (67.6 KiB)

This bug was fixed in the package linux - 5.15.0-23.23

---------------
linux (5.15.0-23.23) jammy; urgency=medium

  * jammy/linux: 5.15.0-23.23 -proposed tracker (LP: #1964573)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * [22.04 FEAT] KVM: Enable GISA support for Secure Execution guests
    (LP: #1959977)
    - KVM: s390: pv: make use of ultravisor AIV support

  * intel_iommu breaks Intel IPU6 camera: isys port open ready failed -16
    (LP: #1958004)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs

  * CVE-2022-23960
    - ARM: report Spectre v2 status through sysfs
    - ARM: early traps initialisation
    - ARM: use LOADADDR() to get load address of sections
    - ARM: Spectre-BHB workaround
    - ARM: include unprivileged BPF status in Spectre V2 reporting
    - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
    - arm64: Add HWCAP for self-synchronising virtual counter
    - arm64: Add Cortex-X2 CPU part definition
    - arm64: add ID_AA64ISAR2_EL1 sys register
    - arm64: cpufeature: add HWCAP for FEAT_AFP
    - arm64: cpufeature: add HWCAP for FEAT_RPRES
    - arm64: entry.S: Add ventry overflow sanity checks
    - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit
    - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
    - arm64: entry: Make the trampoline cleanup optional
    - arm64: entry: Free up another register on kpti's tramp_exit path
    - arm64: entry: Move the trampoline data page before the text page
    - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
    - arm64: entry: Don't assume tramp_vectors is the start of the vectors
    - arm64: entry: Move trampoline macros out of ifdef'd section
    - arm64: entry: Make the kpti trampoline's kpti sequence optional
    - arm64: entry: Allow the trampoline text to occupy multiple pages
    - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
    - arm64: entry: Add vectors that have the bhb mitigation sequences
    - arm64: entry: Add macro for reading symbol addresses from the trampoline
    - arm64: Add percpu vectors for EL1
    - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
    - arm64: Mitigate spectre style branch history side channels
    - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
    - arm64: Use the clearbhb instruction in mitigations
    - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2
      mitigation reporting
    - ARM: fix build error when BPF_SYSCALL is disabled

  * CVE-2021-26401
    - x86/speculation: Use generic retpoline by default on AMD
    - x86/speculation: Update link to AMD speculation whitepaper
    - x86/speculation: Warn about Spectre v2 LFENCE mitigation
    - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT

  * CVE-2022-0001
    - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
    - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
    - x86/speculation: Add eIBRS + Retpoline options
    - Document...

Changed in linux (Ubuntu Jammy):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.