Eoan update: v5.2.5 upstream stable release

Bug #1838539 reported by Paolo Pisati
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Eoan
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.2.5 upstream stable release
       from git://git.kernel.org/

Linux 5.2.5
io_uring: don't use iov_iter_advance() for fixed buffers
io_uring: fix counter inc/dec mismatch in async_list
io_uring: ensure ->list is initialized for poll commands
io_uring: add a memory barrier before atomic_read
access: avoid the RCU grace period for the temporary subjective credentials
drm/i915: Make the semaphore saturation mask global
structleak: disable STRUCTLEAK_BYREF in combination with KASAN_STACK
libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
libnvdimm/region: Register badblocks before namespaces
libnvdimm/bus: Prevent duplicate device_unregister() calls
drivers/base: Introduce kill_device()
iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
iommu/iova: Remove stale cached32_node
iommu/vt-d: Don't queue_iova() if there is no flush queue
io_uring: fix the sequence comparison in io_sequence_defer
powerpc/pmu: Set pmcregs_in_use in paca when running as LPAR
powerpc/tm: Fix oops on sigreturn on systems without TM
powerpc/mm: Limit rma_size to 1TB when running without HV mode
powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
powerpc/dma: Fix invalid DMA mmap behavior
ALSA: hda - Add a conexant codec entry to let mute led work
ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips
ALSA: pcm: Fix refcount_inc() on zero usage
ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
ALSA: ac97: Fix double free of ac97_codec_device
drm/panel: Add support for Armadeus ST0700 Adapt
hpet: Fix division by zero in hpet_time_div()
eeprom: make older eeprom drivers select NVMEM_SYSFS
mei: me: add mule creek canyon (EHL) device ids
fpga-manager: altera-ps-spi: Fix build error
binder: prevent transactions to context manager from its own process.
binder: Set end of SG buffer area properly.
x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user()
x86/speculation/mds: Apply more accurate check on hypervisor platform
x86/sysfb_efi: Add quirks for some devices with swapped width and height
selinux: check sidtab limit before adding a new entry
btrfs: inode: Don't compress if NODATASUM or NODATACOW set
media: videodev2.h: change V4L2_PIX_FMT_BGRA444 define: fourcc was already in use
KVM: PPC: Book3S HV: XIVE: fix rollback when kvmppc_xive_create fails
KVM: PPC: Book3S HV: Save and restore guest visible PSSCR bits on pseries
KVM: PPC: Book3S HV: Always save guest pmu for guest capable of nesting
KVM: X86: Fix fpu state crash in kvm guest
usb: usb251xb: Reallow swap-dx-lanes to apply to the upstream port
Revert "usb: usb251xb: Add US port lanes inversion property"
Revert "usb: usb251xb: Add US lanes inversion dts-bindings"
usb: pci-quirks: Correct AMD PLL quirk detection
usb: wusbcore: fix unbalanced get/put cluster_id
usb-storage: Add a limitation for blk_queue_max_hw_sectors()
xhci: Fix crash if scatter gather is used with Immediate Data Transfer (IDT).
locking/lockdep: Hide unused 'class' variable
mm, swap: fix race between swapoff and some swap operations
mm: use down_read_killable for locking mmap_sem in access_remote_vm
locking/lockdep: Fix lock used or unused stats error
proc: use down_read_killable mmap_sem for /proc/pid/maps
cxgb4: reduce kernel stack usage in cudbg_collect_mem_region()
proc: use down_read_killable mmap_sem for /proc/pid/map_files
proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
proc: use down_read_killable mmap_sem for /proc/pid/pagemap
proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup
mm/mmu_notifier: use hlist_add_head_rcu()
memcg, fsnotify: no oom-kill for remote memcg charging
mm/gup.c: remove some BUG_ONs from get_gate_page()
mm/gup.c: mark undo_dev_pagemap as __maybe_unused
mm/mincore.c: fix race between swapoff and mincore
9p: pass the correct prototype to read_cache_page
mm/kmemleak.c: fix check for softirq context
sh: prevent warnings when using iounmap
nvme: fix NULL deref for fabrics options
block/bio-integrity: fix a memory leak bug
platform/x86: Fix PCENGINES_APU2 Kconfig warning
powerpc/eeh: Handle hugepages in ioremap space
dlm: check if workqueues are NULL before flushing/destroying
mailbox: handle failed named mailbox channel request
f2fs: avoid out-of-range memory access
f2fs: fix to avoid long latency during umount
rds: Accept peer connection reject messages due to incompatible version
block: init flush rq ref count to 1
powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
nvme-tcp: set the STABLE_WRITES flag when data digests are enabled
io_uring: fix io_sq_thread_stop running in front of io_sq_thread
nvme-tcp: don't use sendpage for SLAB pages
nvme-pci: limit max_hw_sectors based on the DMA max mapping size
nvme-pci: check for NULL return from pci_alloc_p2pmem()
RDMA/core: Fix race when resolving IP address
perf intel-bts: Fix potential NULL pointer dereference found by the smatch tool
PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
perf hists browser: Fix potential NULL pointer dereference found by the smatch tool
perf annotate: Fix dereferencing freed memory found by the smatch tool
perf map: Fix potential NULL pointer dereference found by smatch tool
perf session: Fix potential NULL pointer dereference found by the smatch tool
perf trace: Fix potential NULL pointer dereference found by the smatch tool
perf top: Fix potential NULL pointer dereference detected by the smatch tool
rseq/selftests: Fix Thumb mode build failure on arm32
perf stat: Fix use-after-freed pointer detected by the smatch tool
perf test mmap-thread-lookup: Initialize variable to suppress memory sanitizer warning
PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions
PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers
kallsyms: exclude kasan local symbols on s390
PCI: mobiveil: Fix the Class Code field
PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows
KVM: nVMX: Stash L1's CR3 in vmcs01.GUEST_CR3 on nested entry w/o EPT
arm64: assembler: Switch ESB-instruction with a vanilla nop if !ARM64_HAS_RAS
IB/ipoib: Add child to parent list only if device initialized
powerpc/mm: Handle page table allocation failures
IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE
serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
serial: sh-sci: Terminate TX DMA during buffer flushing
RDMA/i40iw: Set queue pair state when being queried
powerpc/mm: mark more tlb functions as __always_inline
powerpc/4xx/uic: clear pending interrupt after irq type/pol change
powerpc: silence a -Wcast-function-type warning in dawr_write_file_bool
f2fs: fix is_idle() check for discard type
um: Silence lockdep complaint about mmap_sem
mm/swap: fix release_pages() when releasing devmap pages
mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk
mfd: arizona: Fix undefined behavior
mfd: core: Set fwnode for created devices
mfd: madera: Add missing of table registration
mfd: cros_ec: Register cros_ec_lid_angle driver when presented
recordmcount: Fix spurious mcount entries on powerpc
fixdep: check return value of printf() and putchar()
powerpc/rtas: retry when cpu offline races with suspend/migration
powerpc/xmon: Fix disabling tracing while in xmon
powerpc/cacheflush: fix variable set but not used
dt-bindings: backlight: lm3630a: correct schema validation
iio: iio-utils: Fix possible incorrect mask calculation
PCI: xilinx-nwl: Fix Multi MSI data programming
phy: meson-g12a-usb3-pcie: disable locking for cr_regmap
genksyms: Teach parser about 128-bit built-in types
kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
i2c: stm32f7: fix the get_irq error cases
PCI: sysfs: Ignore lockdep for remove attribute
phy: renesas: rcar-gen3-usb2: fix imbalance powered flag
serial: mctrl_gpio: Check if GPIO property exisits before requesting it
drm/msm: Depopulate platform on probe failure
powerpc/pci/of: Fix OF flags parsing for 64bit BARs
drm/msm/adreno: Ensure that the zap shader region is big enough
kvm: vmx: segment limit check: use access length
KVM: nVMX: Intercept VMWRITEs to GUEST_{CS,SS}_AR_BYTES
mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
kvm: vmx: fix limit checking in get_vmx_mem_address()
usb: dwc3: Fix core validation in probe, move after clocks are enabled
usb: gadget: Zero ffs_io_data
tty: serial_core: Set port active bit in uart_port_activate
serial: uartps: Use the same dynamic major number for all ports
serial: imx: fix locking in set_termios()
iio: adxl372: fix iio_triggered_buffer_{pre,post}enable positions
platform/x86: asus-wmi: Increase input buffer size of WMI methods
drm/rockchip: Properly adjust to a true clock in adjusted_mode
dma-remap: Avoid de-referencing NULL atomic_pool
powerpc/pseries/mobility: prevent cpu hotplug during DT update
drm/bridge: tfp410: fix use of cancel_delayed_work_sync
sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
drm/amd/display: fix compilation error
phy: renesas: rcar-gen2: Fix memory leak at error paths
drm/amd/display: set link->dongle_max_pix_clk to 0 on a disconnect
drm/virtio: Add memory barriers for capset cache.
drm/amd/display: Update link rate from DPCD 10
drm/amd/display: Always allocate initial connector state state
PCI: endpoint: Allocate enough space for fixed size BAR
serial: 8250: Fix TX interrupt handling condition
tty: serial: msm_serial: avoid system lockup condition
tty/serial: digicolor: Fix digicolor-usart already registered warning
memstick: Fix error cleanup path of memstick_init
drm/omap: don't check dispc timings for DSI
mm/hmm: fix use after free with struct hmm in the mmu notifiers
i2c: nvidia-gpu: resume ccgx i2c client
drm/vkms: Forward timer right after drm_crtc_handle_vblank
drm/crc-debugfs: Also sprinkle irqrestore over early exits
drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
gpu: host1x: Increase maximum DMA segment size
f2fs: Lower threshold for disable_cp_again
f2fs: Fix accounting for unusable blocks
drm/amd/display: Increase Backlight Gain Step Size
drm/amd/display: CS_TFM_1D only applied post EOTF
drm/amd/display: Reset planes for color management changes
drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
drm/bridge: tc358767: read display_props in get_modes()
staging: kpc2000: report error status to spi core
PCI: Return error if cannot probe VF
tools: PCI: Fix broken pcitest compilation
drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
drm/amdkfd: Fix sdma queue map issue
drm/amdkfd: Fix a potential memory leak
drm/amd/display: Disable ABM before destroy ABM struct
drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE
f2fs: fix to avoid deadloop if data_flush is on
drm/amdgpu: Reserve shared fence for eviction fence
drm/amd/display: Fill plane attrs only for valid pxl format
drm/amd/display: Disable cursor when offscreen in negative direction
drm/msm/a6xx: Avoid freeing gmu resources multiple times
drm/amd/display: fix multi display seamless boot case
drm/amd/display: Fill prescale_params->scale for RGB565
ipmi_ssif: fix unexpected driver unregister warning
drm/msm/a6xx: Check for ERR or NULL before iounmap
f2fs: fix to check layout on last valid checkpoint park
tty: serial: cpm_uart - fix init when SMC is relocated
pinctrl: rockchip: fix leaked of_node references
tty: max310x: Fix invalid baudrate divisors calculator
usb: core: hub: Disable hub-initiated U1/U2
drm/bochs: Fix connector leak during driver unload
staging: vt6656: use meaningful error code during buffer allocation
ipmi_si: fix unexpected driver unregister warning
staging: kpc2000: added missing clean-up to probe_core_uio.
drm/virtio: set seqno for dma-fence
iio: adc: stm32-dfsdm: missing error case during probe
iio: adc: stm32-dfsdm: manage the get_irq error case
drm/panel: simple: Fix panel_simple_dsi_probe
drm/lima: handle shared irq case for lima_pp_bcast_irq_handler
btrfs: shut up bogus -Wmaybe-uninitialized warning
media: drivers: media: coda: fix warning same module names
regulator: 88pm800: fix warning same module names

Paolo Pisati (p-pisati)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (27.8 KiB)

This bug was fixed in the package linux - 5.2.0-13.14

---------------
linux (5.2.0-13.14) eoan; urgency=medium

  * eoan/linux: 5.2.0-13.14 -proposed tracker (LP: #1840261)

  * NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
    - media: vimc: fix component match compare

  * Miscellaneous upstream changes
    - selftests/bpf: remove bpf_util.h from BPF C progs

linux (5.2.0-12.13) eoan; urgency=medium

  * eoan/linux: 5.2.0-12.13 -proposed tracker (LP: #1840184)

  * Eoan update: v5.2.8 upstream stable release (LP: #1840178)
    - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
    - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
    - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
    - ALSA: usb-audio: Sanity checks for each pipe and EP types
    - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
    - HID: wacom: fix bit shift for Cintiq Companion 2
    - HID: Add quirk for HP X1200 PIXART OEM mouse
    - atm: iphase: Fix Spectre v1 vulnerability
    - bnx2x: Disable multi-cos feature.
    - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
    - ife: error out when nla attributes are empty
    - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
    - ip6_tunnel: fix possible use-after-free on xmit
    - ipip: validate header length in ipip_tunnel_xmit
    - mlxsw: spectrum: Fix error path in mlxsw_sp_module_init()
    - mvpp2: fix panic on module removal
    - mvpp2: refactor MTU change code
    - net: bridge: delete local fdb on device init failure
    - net: bridge: mcast: don't delete permanent entries when fast leave is
      enabled
    - net: bridge: move default pvid init/deinit to NETDEV_REGISTER/UNREGISTER
    - net: fix ifindex collision during namespace removal
    - net/mlx5e: always initialize frag->last_in_page
    - net/mlx5: Use reversed order when unregister devices
    - net: phy: fixed_phy: print gpio error only if gpio node is present
    - net: phylink: don't start and stop SGMII PHYs in SFP modules twice
    - net: phylink: Fix flow control for fixed-link
    - net: phy: mscc: initialize stats array
    - net: qualcomm: rmnet: Fix incorrect UL checksum offload logic
    - net: sched: Fix a possible null-pointer dereference in dequeue_func()
    - net sched: update vlan action for batched events operations
    - net: sched: use temporary variable for actions indexes
    - net/smc: do not schedule tx_work in SMC_CLOSED state
    - net: stmmac: Use netif_tx_napi_add() for TX polling function
    - NFC: nfcmrvl: fix gpio-handling regression
    - ocelot: Cancel delayed work before wq destruction
    - tipc: compat: allow tipc commands without arguments
    - tipc: fix unitilized skb list crash
    - tun: mark small packets as owned by the tap sock
    - net/mlx5: Fix modify_cq_in alignment
    - net/mlx5e: Prevent encap flow counter update async to user query
    - r8169: don't use MSI before RTL8168d
    - bpf: fix XDP vlan selftests test_xdp_vlan.sh
    - selftests/bpf: add wrapper scripts for test_xdp_vlan.sh
    - selftests/bpf: reduce time to execute test_xdp_vlan.sh
    - net: fix bpf_xdp_adjust_head regression for generic-XDP
    - hv_sock: Fi...

Changed in linux (Ubuntu Eoan):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.