Jammy update: v6.1.55 upstream stable release

Bug #2038831 reported by Timo Aaltonen
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-6.1 (Ubuntu)
Fix Released
Undecided
Unassigned
Jammy
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.55 upstream stable release
       from git://git.kernel.org/

Linux 6.1.55
interconnect: Teach lockdep about icc_bw_lock order
net/sched: Retire rsvp classifier
drm/amdgpu: fix amdgpu_cs_p1_user_fence
Revert "memcg: drop kmem.limit_in_bytes"
drm/amd/display: fix the white screen issue when >= 64GB DRAM
ext4: fix rec_len verify error
scsi: pm8001: Setup IRQs on resume
scsi: megaraid_sas: Fix deadlock on firmware crashdump
ata: libahci: clear pending interrupt status
ata: libata: disallow dev-initiated LPM transitions to unsupported states
i2c: aspeed: Reset the i2c controller when timeout occurs
tracefs: Add missing lockdown check to tracefs_create_dir()
nfsd: fix change_info in NFSv4 RENAME replies
selinux: fix handling of empty opts in selinux_fs_context_submount()
tracing: Have option files inc the trace array ref count
tracing: Have current_trace inc the trace array ref count
tracing: Increase trace array ref count on enable and filter files
tracing: Have event inject files inc the trace array ref count
tracing: Have tracing_max_latency inc the trace array ref count
btrfs: check for BTRFS_FS_ERROR in pending ordered assert
btrfs: release path before inode lookup during the ino lookup ioctl
btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio
btrfs: fix lockdep splat and potential deadlock after failure running delayed items
dm: don't attempt to queue IO under RCU protection
Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory"
md: Put the right device in md_seq_next
nvme: avoid bogus CRTO values
io_uring/net: fix iter retargeting for selected buf
ovl: fix incorrect fdput() on aio completion
ovl: fix failed copyup of fileattr on a symlink
attr: block mode changes of symlinks
Revert "SUNRPC: Fail faster on bad verifier"
md/raid1: fix error: ISO C90 forbids mixed declarations
samples/hw_breakpoint: fix building without module unloading
x86/purgatory: Remove LTO flags
x86/boot/compressed: Reserve more memory for page tables
panic: Reenable preemption in WARN slowpath
scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
scsi: target: core: Fix target_cmd_counter leak
riscv: kexec: Align the kexeced kernel entry
x86/ibt: Suppress spurious ENDBR
selftests: tracing: Fix to unmount tracefs for recovering environment
scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page()
nvmet: use bvec_set_page to initialize bvecs
block: factor out a bvec_set_page helper
btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
btrfs: add a helper to read the superblock metadata_uuid
MIPS: Use "grep -E" instead of "egrep"
misc: fastrpc: Fix incorrect DMA mapping unmap request
misc: fastrpc: Prepare to dynamic dma-buf locking specification
dma-buf: Add unlocked variant of attachment-mapping functions
printk: Consolidate console deferred printing
printk: Keep non-panic-CPUs out of console lock
interconnect: Fix locking for runpm vs reclaim
kobject: Add sanity check for kset->kobj.ktype in kset_register()
media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
usb: chipidea: add workaround for chipidea PEC bug
usb: ehci: add workaround for chipidea PORTSC.PEC bug
misc: open-dice: make OPEN_DICE depend on HAS_IOMEM
serial: cpm_uart: Avoid suspicious locking
scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
tools: iio: iio_generic_buffer: Fix some integer type and calculation
usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
usb: cdns3: Put the cdns set active part outside the spin lock
media: pci: cx23885: replace BUG with error return
media: tuners: qt1010: replace BUG_ON with a regular error
scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected
media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
media: anysee: fix null-ptr-deref in anysee_master_xfer
media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
media: mdp3: Fix resource leaks in of_find_device_by_node
PCI: fu740: Set the number of MSI vectors
PCI: vmd: Disable bridge window for domain reset
powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
ARM: 9317/1: kexec: Make smp stop calls asynchronous
PCI: dwc: Provide deinit callback for i.MX
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
ext2: fix datatype of block number in ext2_xattr_set2()
md: raid1: fix potential OOB in raid1_remove_disk()
bus: ti-sysc: Configure uart quirks for k3 SoC
drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()
drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314
drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK
ALSA: hda: intel-dsp-cfg: add LunarLake support
ASoC: Intel: sof_sdw: Update BT offload config for soundwire config
ASoC: SOF: topology: simplify code to prevent static analysis warnings
drm/amd/display: Fix underflow issue on 175hz timing
samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size
arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size
arm64: dts: qcom: sm6350: correct ramoops pmsg-size
arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
drm/edid: Add quirk for OSVR HDK 2.0
drm/bridge: tc358762: Instruct DSI host to generate HSE packets
libbpf: Free btf_vmlinux when closing bpf_object
wifi: mac80211_hwsim: drop short frames
wifi: mac80211: check for station first in client probe
wifi: cfg80211: ocb: don't leave if not joined
wifi: cfg80211: reject auth/assoc to AP with our address
netfilter: ebtables: fix fortify warnings in size_entry_mwt()
wifi: mac80211: check S1G action frame size
alx: fix OOB-read compiler warning
mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
tpm_tis: Resend command to recover from data transfer errors
netlink: convert nlk->flags to atomic flags
Bluetooth: Fix hci_suspend_sync crash
crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
net/ipv4: return the real errno instead of -EINVAL
net: Use sockaddr_storage for getsockopt(SO_PEERNAME).
can: sun4i_can: Add support for the Allwinner D1
can: sun4i_can: Add acceptance register quirk
wifi: wil6210: fix fortify warnings
mt76: mt7921: don't assume adequate headroom for SDIO headers
wifi: mwifiex: fix fortify warning
wifi: ath9k: fix printk specifier
wifi: ath9k: fix fortify warnings
ice: Don't tx before switchdev is fully configured
crypto: lrw,xts - Replace strlcpy with strscpy
devlink: remove reload failed checks in params get/set callbacks
selftests/nolibc: fix up kernel parameters support
ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
hw_breakpoint: fix single-stepping when using bpf_overflow_handler
perf/imx_ddr: speed up overflow frequency of cycle
perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
scftorture: Forgive memory-allocation failure if KASAN
rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
kernel/fork: beware of __put_task_struct() calling context
ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
btrfs: output extra debug info if we failed to find an inline backref
autofs: fix memory leak of waitqueues in autofs_catatonic_mode

CVE References

Timo Aaltonen (tjaalton)
Changed in linux-oem-6.1 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (49.7 KiB)

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1025.25

---------------
linux-oem-6.1 (6.1.0-1025.25) jammy; urgency=medium

  * jammy/linux-oem-6.1: 6.1.0-1025.25 -proposed tracker (LP: #2038056)

  * Jammy update: v6.1.57 upstream stable release (LP: #2039174)
    - spi: zynqmp-gqspi: fix clock imbalance on probe failure
    - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol
    - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates
    - mptcp: rename timer related helper to less confusing names
    - mptcp: fix dangling connection hang-up
    - mptcp: annotate lockless accesses to sk->sk_err
    - mptcp: move __mptcp_error_report in protocol.c
    - mptcp: process pending subflow error on close
    - ata,scsi: do not issue START STOP UNIT on resume
    - scsi: sd: Differentiate system and runtime start/stop management
    - scsi: sd: Do not issue commands to suspended disks on shutdown
    - scsi: core: Improve type safety of scsi_rescan_device()
    - scsi: Do not attempt to rescan suspended devices
    - ata: libata-scsi: Fix delayed scsi_rescan_device() execution
    - NFS: Cleanup unused rpc_clnt variable
    - NFS: rename nfs_client_kset to nfs_kset
    - NFSv4: Fix a state manager thread deadlock regression
    - mm/memory: add vm_normal_folio()
    - mm/mempolicy: convert queue_pages_pmd() to queue_folios_pmd()
    - mm/mempolicy: convert queue_pages_pte_range() to queue_folios_pte_range()
    - mm/mempolicy: convert migrate_page_add() to migrate_folio_add()
    - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are
      specified
    - mm/page_alloc: always remove pages from temporary list
    - mm/page_alloc: leave IRQs enabled for per-cpu page allocations
    - mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list
    - ring-buffer: remove obsolete comment for free_buffer_page()
    - ring-buffer: Fix bytes info in per_cpu buffer stats
    - btrfs: use struct qstr instead of name and namelen pairs
    - btrfs: setup qstr from dentrys using fscrypt helper
    - btrfs: use struct fscrypt_str instead of struct qstr
    - Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return"
    - arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path
    - net: add sysctl accept_ra_min_rtr_lft
    - net: change accept_ra_min_rtr_lft to affect all RA lifetimes
    - net: release reference to inet6_dev pointer
    - arm64: cpufeature: Fix CLRBHB and BC detection
    - drm/amd/display: Adjust the MST resume flow
    - iommu/arm-smmu-v3: Set TTL invalidation hint better
    - iommu/arm-smmu-v3: Avoid constructing invalid range commands
    - rbd: move rbd_dev_refresh() definition
    - rbd: decouple header read-in from updating rbd_dev->header
    - rbd: decouple parent info read-in from updating rbd_dev
    - rbd: take header_rwsem in rbd_dev_refresh() only when updating
    - block: fix use-after-free of q->q_usage_counter
    - hwmon: (nzxt-smart2) Add device id
    - hwmon: (nzxt-smart2) add another USB ID
    - i40e: fix the wrong PTP frequency calculation
    - scsi: zfcp: Fix a double put in zfcp_port_enqueue()
    - iommu/vt-d: Avoid memory allocation in iommu_suspen...

Changed in linux-oem-6.1 (Ubuntu Jammy):
status: New → Fix Released
Timo Aaltonen (tjaalton)
Changed in linux-oem-6.1 (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.