Jammy update: v6.1.45 upstream stable release

Bug #2032631 reported by Timo Aaltonen
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-6.1 (Ubuntu)
Invalid
Undecided
Unassigned
Jammy
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.45 upstream stable release
       from git://git.kernel.org/

Linux 6.1.45
x86/CPU/AMD: Do not leak quotient data after a division by 0
Revert "drm/i915: Disable DC states for all commits"
drm/amdgpu: Use apt name for FW reserved region
drm/amdgpu: Remove unnecessary domain argument
drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2
arm64/ptrace: Don't enable SVE when setting streaming SVE
exfat: check if filename entries exceeds max filename length
f2fs: don't reset unchangable mount option in f2fs_remount()
f2fs: fix to set flush_merge opt and show noflush_merge
selftests/rseq: Play nice with binaries statically linked against glibc 2.35+
drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0
drm/amd/display: Ensure that planes are in the same order
drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
powerpc/mm/altmap: Fix altmap boundary check
mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
mtd: rawnand: rockchip: fix oobfree offset and description
mtd: rawnand: omap_elm: Fix incorrect type in assignment
io_uring: annotate offset timeout races
f2fs: fix to do sanity check on direct node in truncate_dnode()
btrfs: remove BUG_ON()'s in add_new_free_space()
ext2: Drop fragment support
fs: Protect reconfiguration of sb read-write from racing writes
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
debugobjects: Recheck debug_objects_enabled before reporting
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
fs/sysv: Null check to prevent null-ptr-deref bug
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
file: reinstate f_pos locking optimization for regular files
bpf, cpumap: Make sure kthread is running before map update returns
clk: imx93: Propagate correct error in imx93_clocks_probe()
drm/i915/gt: Cleanup aux invalidation registers
drm/i915: Fix premature release of request's reusable memory
drm/ttm: check null pointer before accessing when swapping
open: make RESOLVE_CACHED correctly test for O_TMPFILE
arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems
arm64/fpsimd: Clear SME state in the target task when setting the VL
arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE
powerpc/ftrace: Create a dummy stackframe to fix stack unwind
bpf: Disable preemption in bpf_event_output
rbd: prevent busy loop when requesting exclusive lock
x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
net: tap_open(): set sk_uid from current_fsuid()
net: tun_chr_open(): set sk_uid from current_fsuid()
arm64: dts: stratix10: fix incorrect I2C property for SCL signal
bpf: Disable preemption in bpf_perf_event_output
mtd: rawnand: meson: fix OOB available bytes for ECC
mtd: spinand: toshiba: Fix ecc_get_status
exfat: release s_lock before calling dir_emit()
exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
firmware: arm_scmi: Drop OF node reference in the transport channel setup
ceph: defer stopping mdsc delayed_work
USB: zaurus: Add ID for A-300/B-500/C-700
libceph: fix potential hang in ceph_osdc_notify()
scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
scsi: zfcp: Defer fc_rport blocking until after ADISC response
rust: allocator: Prevent mis-aligned allocation
tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
tcp_metrics: annotate data-races around tm->tcpm_net
tcp_metrics: annotate data-races around tm->tcpm_vals[]
tcp_metrics: annotate data-races around tm->tcpm_lock
tcp_metrics: annotate data-races around tm->tcpm_stamp
tcp_metrics: fix addr_same() helper
prestera: fix fallback to previous version on same major version
net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
net/mlx5: fs_core: Make find_closest_ft more generic
vxlan: Fix nexthop hash size
ip6mr: Fix skb_under_panic in ip6mr_cache_report()
s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
net: dcb: choose correct policy to parse DCB_ATTR_BCN
bnxt_en: Fix max_mtu setting for multi-buf XDP
bnxt_en: Fix page pool logic for page size >= 64K
net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
net: korina: handle clk prepare error in korina_probe()
net: ll_temac: fix error checking of irq_of_parse_and_map()
bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
bpf, cpumap: Handle skb as well when clean up ptr_ring
ice: Fix RDMA VSI removal during queue rebuild
net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
net: annotate data-races around sk->sk_priority
net: add missing data-race annotation for sk_ll_usec
net: add missing data-race annotations around sk->sk_peek_off
net: annotate data-races around sk->sk_mark
net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
net: add missing READ_ONCE(sk->sk_sndbuf) annotation
net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
net: annotate data-races around sk->sk_max_pacing_rate
net: annotate data-race around sk->sk_txrehash
net: annotate data-races around sk->sk_reserved_mem
qed: Fix scheduling in a tasklet while getting stats
mISDN: hfcpci: Fix potential deadlock on &hc->lock
net: sched: cls_u32: Fix match key mis-addressing
perf test uprobe_from_different_cu: Skip if there is no gcc
net: dsa: fix value check in bcm_sf2_sw_probe()
rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set
net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups
wifi: cfg80211: Fix return value in scan logic
erofs: fix wrong primary bvec selection on deduplicated extents
KVM: s390: fix sthyi error handling
word-at-a-time: use the same return type for has_zero regardless of endianness
firmware: arm_scmi: Fix chan_free cleanup on SMC
lib/bitmap: workaround const_eval test build failure
firmware: smccc: Fix use of uninitialised results structure
arm64: dts: freescale: Fix VPU G2 clock
arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
arm64: dts: phycore-imx8mm: Correction in gpio-line-names
arm64: dts: phycore-imx8mm: Label typo-fix of VPU
arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl
arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl
iommu/arm-smmu-v3: Document nesting-related errata
iommu/arm-smmu-v3: Add explicit feature for nesting
iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
net: ipa: only reset hashed tables when supported
net/mlx5: Free irqs only on shutdown callback
perf: Fix function pointer case
io_uring: gate iowait schedule on having pending requests

CVE References

Timo Aaltonen (tjaalton)
Changed in linux-oem-6.1 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Timo Aaltonen (tjaalton)
Changed in linux-oem-6.1 (Ubuntu):
status: Confirmed → Invalid
Changed in linux-oem-6.1 (Ubuntu Jammy):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (44.8 KiB)

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1021.21

---------------
linux-oem-6.1 (6.1.0-1021.21) jammy; urgency=medium

  * jammy/linux-oem-6.1: 6.1.0-1021.21 -proposed tracker (LP: #2030428)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

  * Jammy update: v6.1.46 upstream stable release (LP: #2032632)
    - gcc-plugins: Reorganize gimple includes for GCC 13
    - Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()"
    - tpm: Disable RNG for all AMD fTPMs
    - tpm: Add a helper for checking hwrng enabled
    - ksmbd: validate command request size
    - ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
    - KVM: SEV: snapshot the GHCB before accessing it
    - KVM: SEV: only access GHCB fields once
    - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
    - wifi: rtw89: fix 8852AE disconnection caused by RX full flags
    - selftests: forwarding: Set default IPv6 traceroute utility
    - wireguard: allowedips: expand maximum node depth
    - mmc: moxart: read scr register without changing byte order
    - ipv6: adjust ndisc_is_useropt() to also return true for PIO
    - selftests: mptcp: join: fix 'delete and re-add' test
    - selftests: mptcp: join: fix 'implicit EP' test
    - mptcp: avoid bogus reset on fallback close
    - mptcp: fix disconnect vs accept race
    - dmaengine: pl330: Return DMA_PAUSED when transaction is paused
    - net: mana: Fix MANA VF unload when hardware is unresponsive
    - riscv/kexec: load initrd high in available memory
    - riscv,mmio: Fix readX()-to-delay() ordering
    - riscv/kexec: handle R_RISCV_CALL_PLT relocation type
    - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
    - drm/nouveau/gr: enable memory loads on helper invocation on all channels
    - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
    - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
    - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
    - drm/amd/display: check attr flag before set cursor degamma on DCN3+
    - drm/amdgpu: add S/G display parameter
    - drm/amd: Disable S/G for APUs when 64GB or more host memory
    - drm/amd/display: limit DPIA link rate to HBR3
    - cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
    - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
    - radix tree test suite: fix incorrect allocation size for pthreads
    - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
    - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
    - drm/amd/pm: expose swctf threshold setting for legacy powerplay
    - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock
      settings
    - drm/amd/pm: avoid unintentional shutdown due to temperature momentary
      fluctuation
    - drm/amd/display: Handle virtual hardware detect
    - drm/amd/display: Add function for validate and update new stream
    - drm/amd/display: Handle seamless boot stream
    - drm/amd/display: Update OTG instance in the commit stream
    - drm/amd/display: Avoid ABM when ODM combine is e...

Changed in linux-oem-6.1 (Ubuntu Jammy):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.