[ubuntu/bionic-security] linux-azure-4.15 4.15.0-1131.144 (Accepted)
Andy Whitcroft
apw at canonical.com
Mon Feb 21 20:49:44 UTC 2022
linux-azure-4.15 (4.15.0-1131.144) bionic; urgency=medium
* bionic/linux-azure-4.15: 4.15.0-1131.144 -proposed tracker (LP: #1959291)
* Packaging resync (LP: #1786013)
- [Packaging] linux-azure: config resync
* Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113)
- HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option
[ Ubuntu: 4.15.0-168.176 ]
* bionic/linux: 4.15.0-168.176 -proposed tracker (LP: #1959308)
* CVE-2022-22942
- SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
* Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033)
- IB/qib: Use struct_size() helper
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- net: usb: lan78xx: add Allied Telesis AT29M2-AF
- can: kvaser_usb: get CAN clock frequency from device
- HID: holtek: fix mouse probing
- spi: change clk_disable_unprepare to clk_unprepare
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- netfilter: fix regression in looped (broad|multi)cast's MAC handling
- qlcnic: potential dereference null pointer of rx_queue->page_ring
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
- net: skip virtio_net_hdr_set_proto if protocol already set
- bonding: fix ad_actor_system option setting to default
- fjes: Check for error irq
- drivers: net: smc911x: Check for error irq
- sfc: falcon: Check null pointer of rx_queue->page_ring
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
- ALSA: jack: Check the return value of kstrdup()
- ALSA: drivers: opl3: Fix incorrect use of vp->state
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
- pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
- f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
- usb: gadget: u_ether: fix race in setting MAC address in setup phase
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
- hwmon: (lm90) Do not report 'busy' status bit as alarm
- ax25: NPD bug when detaching AX25 device
- hamradio: defer ax25 kfree after unregister_netdev
- hamradio: improve the incomplete fix to avoid NPD
- phonet/pep: refuse to enable an unbound pipe
- parisc: Correct completer in lws start
* Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957)
- nfc: fix segfault in nfc_genl_dump_devices_done
- drm/msm/dsi: set default num_data_lanes
- net/mlx4_en: Update reported link modes for 1/10G
- parisc/agp: Annotate parisc agp init functions with __init
- i2c: rk3x: Handle a spurious start completion interrupt flag
- net: netlink: af_netlink: Prevent empty skb by adding a check on len.
- tracing: Fix a kmemleak false positive in tracing_map
- bpf: fix panic due to oob in bpf_prog_test_run_skb
- hwmon: (dell-smm) Fix warning on /proc/i8k creation error
- mac80211: send ADDBA requests using the tid/queue of the aggregation session
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390
- dm btree remove: fix use after free in rebalance_children()
- audit: improve robustness of the audit queue handling
- nfsd: fix use-after-free due to delegation race
- x86: Make ARCH_USE_MEMREMAP_PROT a generic Kconfig symbol
- x86/sme: Explicitly map new EFI memmap table as encrypted
- ARM: socfpga: dts: fix qspi node compatible
- dmaengine: st_fdma: fix MODULE_ALIAS
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
- igbvf: fix double free in `igbvf_probe`
- ixgbe: set X550 MDIO speed before talking to PHY
- net/packet: rx_owner_map depends on pg_vec
- sit: do not call ipip6_dev_free() from sit_init_net()
- USB: gadget: bRequestType is a bitfield, not a enum
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
- PCI/MSI: Mask MSI-X vectors only on success
- USB: serial: option: add Telit FN990 compositions
- timekeeping: Really make sure wall_to_monotonic isn't positive
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
- net: systemport: Add global locking for descriptor lifecycle
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
- fuse: annotate lock in fuse_reverse_inval_entry()
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
- net: lan78xx: Avoid unnecessary self assignment
- ARM: 8805/2: remove unneeded naked function usage
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO
- ARM: 8800/1: use choice for kernel unwinders
- [Config] updateconfigs for UNWINDER_ARM
- Input: touchscreen - avoid bitwise vs logical OR warning
- xen/blkfront: harden blkfront against event channel storms
- xen/netfront: harden netfront against event channel storms
- xen/console: harden hvc_xen against event channel storms
- xen/netback: fix rx queue stall detection
- xen/netback: don't queue unlimited number of packages
- mac80211: track only QoS data frames for admission control
* Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113)
- HID: add hid_is_usb() function to make it simpler for USB detection
- HID: add USB_HID dependancy to hid-prodikeys
- HID: add USB_HID dependancy to hid-chicony
- HID: add USB_HID dependancy on some USB HID drivers
- HID: wacom: fix problems when device is not a valid USB device
- HID: check for valid USB device for many HID drivers
- can: sja1000: fix use after free in ems_pcmcia_add_card()
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
- bpf: Fix the off-by-two error in range markings
- nfp: Fix memory leak in nfp_cpp_area_cache_add()
- seg6: fix the iif in the IPv6 socket control block
- IB/hfi1: Correct guard on eager buffer deallocation
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered
- ALSA: ctl: Fix copy of updated id with element read/write
- ALSA: pcm: oss: Fix negative period/buffer sizes
- ALSA: pcm: oss: Limit the period size to 16MB
- ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
- tracefs: Have new files inherit the ownership of their parent
- can: pch_can: pch_can_rx_normal: fix use after free
- can: m_can: Disable and ignore ELO interrupt
- libata: add horkage for ASMedia 1092
- wait: add wake_up_pollfree()
- binder: use wake_up_pollfree()
- signalfd: use wake_up_pollfree()
- tracefs: Set all files to the same group ownership as the mount option
- block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
- qede: validate non LSO skb length
- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
- net: altera: set a couple error code in probe()
- net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
- net, neigh: clear whole pneigh_entry at alloc time
- net/qla3xxx: fix an error code in ql_adapter_up()
- USB: gadget: detect too-big endpoint 0 requests
- USB: gadget: zero allocate endpoint 0 buffers
- usb: core: config: fix validation of wMaxPacketValue entries
- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
suspending
- usb: core: config: using bit mask instead of individual bits
- iio: trigger: Fix reference counting
- iio: trigger: stm32-timer: fix MODULE_ALIAS
- iio: stk3310: Don't return error code in interrupt handler
- iio: mma8452: Fix trigger reference couting
- iio: ltr501: Don't return error code in trigger handler
- iio: kxsd9: Don't return error code in trigger handler
- iio: itg3200: Call iio_trigger_notify_done() on error
- iio: dln2-adc: Fix lockdep complaint
- iio: dln2: Check return value of devm_iio_trigger_register()
- iio: adc: axp20x_adc: fix charging current reporting on AXP22x
- iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
- irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
- irqchip: nvic: Fix offset for Interrupt Priority Offsets
- bonding: make tx_rebalance_counter an atomic
* Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614)
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- media: cec: copy sequence field for the reply
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- fuse: fix page stealing
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- tracing: Fix pid filtering when triggers are attached
- netfilter: ipvs: Fix reuse connection if RS weight is 0
- ARM: dts: BCM5301X: Fix I2C controller interrupt
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
- net: ieee802154: handle iftypes as u32
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- drm/vc4: fix error code in vc4_create_object()
- ipv6: fix typos in __ip6_finish_output()
- net/smc: Ensure the active closing peer first closes clcsock
- PM: hibernate: use correct mode for swsusp_close()
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
flows
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
- net/smc: Don't call clcsock shutdown twice when smc shutdown
- vhost/vsock: fix incorrect used length reported to the guest
- tracing: Check pid filtering when creating events
- s390/mm: validate VMA in PGSTE manipulation functions
- PCI: aardvark: Fix a leaked reference by adding missing of_node_put()
- PCI: aardvark: Wait for endpoint to be ready before training link
- PCI: aardvark: Train link immediately after enabling training
- PCI: aardvark: Improve link training
- PCI: aardvark: Issue PERST via GPIO
- PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros
- PCI: aardvark: Indicate error in 'val' when config read fails
- PCI: aardvark: Introduce an advk_pcie_valid_device() helper
- PCI: aardvark: Don't touch PCIe registers if no card connected
- PCI: aardvark: Fix compilation on s390
- PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()
- PCI: aardvark: Update comment about disabling link training
- PCI: aardvark: Remove PCIe outbound window configuration
- PCI: aardvark: Configure PCIe resources from 'ranges' DT property
- PCI: aardvark: Fix PCIe Max Payload Size setting
- PCI: Add PCI_EXP_LNKCTL2_TLS* macros
- PCI: aardvark: Fix link training
- PCI: aardvark: Fix checking for link up via LTSSM state
- pinctrl: armada-37xx: Correct mpp definitions
- pinctrl: armada-37xx: add missing pin: PCIe1 Wakeup
- pinctrl: armada-37xx: Correct PWM pins definitions
- arm64: dts: marvell: armada-37xx: declare PCIe reset pin
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- NFC: add NCI_UNREG flag to eliminate the race
- fuse: release pipe buf after last use
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- xen/blkfront: read response from backend only once
- xen/blkfront: don't take local copy of a request from the ring page
- xen/blkfront: don't trust the backend response data blindly
- xen/netfront: read response from backend only once
- xen/netfront: don't read data from request on the ring page
- xen/netfront: disentangle tx_skb_freelist
- xen/netfront: don't trust the backend response data blindly
- tty: hvc: replace BUG_ON() with negative return value
- shm: extend forced shm destroy to support objects from several IPC nses
- ipc: WARN if trying to remove ipc object which is absent
- NFSv42: Fix pagecache invalidation after COPY/CLONE
- hugetlb: take PMD sharing into account when flushing tlb/caches
- net: return correct error code
- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
- s390/setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
hns_dsaf_ge_srst_by_port()
- net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
bound
- net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
- perf hist: Fix memory leak of a perf_hpp_fmt
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
- natsemi: xtensa: fix section mismatch warnings
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
is available
- net/rds: correct socket tunable error in rds_tcp_tune()
- net/smc: Keep smc_close_final rc during active close
- parisc: Fix KBUILD_IMAGE for self-extracting kernel
- parisc: Fix "make install" on newer debian releases
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- x86/64/mm: Map all kernel memory into trampoline_pgd
- tty: serial: msm_serial: Deactivate RX DMA for polling support
- serial: pl011: Add ACPI SBSA UART match id
- serial: core: fix transmit-buffer reset and memleak
- parisc: Mark cr16 CPU clocksource unstable on all SMP machines
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs
- i2c: stm32f7: recover the bus on access timeout
- net: annotate data-races on txq->xmit_lock_owner
* CVE-2022-0330
- drm/i915: Flush TLBs before releasing backing store
* CVE-2021-4083
- fs: add fget_many() and fput_many()
- fget: check that the fd still exists after getting a ref to it
* CVE-2021-4155
- xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
linux-azure-4.15 (4.15.0-1130.143) bionic; urgency=medium
* bionic/linux-azure-4.15: 4.15.0-1130.143 -proposed tracker (LP: #1955257)
* linux-azure 4.15 fails to boot on Standard_M416s_v2 in Azure (LP: #1951924)
- PCI: hv: Replace hv_vp_set with hv_vpset
- PCI: hv: Refactor hv_irq_unmask() to use cpumask_to_vpset()
- x86/Hyper-V: Set x2apic destination mode to physical when x2apic is
available
- iommu/hyper-v: Add Hyper-V stub IOMMU driver
- [Config] linux-azure: CONFIG_HYPERV_IOMMU=y
[ Ubuntu: 4.15.0-167.175 ]
* bionic/linux: 4.15.0-167.175 -proposed tracker (LP: #1955276)
* hisi_sas driver may oops in prep_ssp_v3_hw() (LP: #1953386)
- scsi: hisi_sas: Fix to only call scsi_get_prot_op() for non-NULL scsi_cmnd
* Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- binder: use euid from cred instead of using task
- Input: elantench - fix misreporting trackpoint coordinates
- Input: i8042 - Add quirk for Fujitsu Lifebook T725
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- parisc: Fix ptrace check on syscall return
- tpm: Check for integer overflow in tpm2_map_response_body()
- media: ite-cir: IR receiver stop working after receive overflow
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- x86/irq: Ensure PI wakeup handler is unregistered before module unload
- cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- cavium: Fix return values of the probe function
- sfc: Don't use netif_info before net_device setup
- hyperv/vmbus: include linux/bitops.h
- mmc: winbond: don't build on M68K
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- spi: spl022: fix Microwire full duplex mode
- watchdog: Fix OMAP watchdog early handling
- vmxnet3: do not stop tx queues after netif_device_detach()
- btrfs: fix lost error handling when replaying directory deletes
- hwmon: (pmbus/lm25066) Add offset coefficients
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
disabled
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- evm: mark evm_fixmode as __ro_after_init
- wcn36xx: Fix HT40 capability for 2Ghz band
- mwifiex: Read a PCI register after writing the TX ring write pointer
- libata: fix checking of DMA state
- wcn36xx: handle connection loss indication
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
- power: supply: max17042_battery: use VFSOC for capacity when no rsns
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
- serial: core: Fix initializing and restoring termios speed
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- PCI: aardvark: Do not clear status bits of masked interrupts
- PCI: aardvark: Do not unmask unused interrupts
- PCI: aardvark: Fix return value of MSI domain .alloc() method
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- iio: dac: ad5446: Fix ad5622_write() return value
- USB: serial: keyspan: fix memleak on probe errors
- USB: iowarrior: fix control-message timeouts
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
- Bluetooth: fix use-after-free error in lock_sock_nested()
- platform/x86: wmi: do not fail if disabling fails
- MIPS: lantiq: dma: add small delay after reset
- MIPS: lantiq: dma: reset correct number of channel
- locking/lockdep: Avoid RCU-induced noinstr fail
- smackfs: Fix use-after-free in netlbl_catmap_walk()
- x86: Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- media: mt9p031: Fix corrupted frame after restarting stream
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: uvcvideo: Set capability in s_param
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
- media: s5p-mfc: Add checking to s5p_mfc_probe().
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
- ACPICA: Avoid evaluating methods too early during system resume
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- ACPI: battery: Accept charges over the design capacity as full
- leaking_addresses: Always print a trailing newline
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- tracing/cfi: Fix cmp_entries_* functions signature mismatch
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- PM: hibernate: Get block device exclusively in swsusp_check()
- iwlwifi: mvm: disable RX-diversity in powersave
- smackfs: use __GFP_NOFAIL for smk_cipso_doi()
- ARM: clang: Do not rely on lr register for stacktrace
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
bcm_qspi_probe()
- parisc: fix warning in flush_tlb_all
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: mtk-vpu: Fix a resource leak in the error handling path of
'mtk_vpu_probe()'
- media: si470x: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- cpuidle: Fix kobject memory leaks in error paths
- ath9k: Fix potential interrupt storm on queue reset
- crypto: qat - detect PFVF collision after ACK
- crypto: qat - disregard spurious PFVF interrupts
- hwrng: mtk - Force runtime pm ops for sleep ops
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- memstick: avoid out-of-range warning
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
- hwmon: Fix possible memleak in __hwmon_device_register()
- ath10k: fix max antenna gain unit
- drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- mmc: mxs-mmc: disable regulator on error and in the remove function
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mwifiex: Send DELBA requests according to spec
- phy: micrel: ksz8041nl: do not use power down mode
- PM: hibernate: fix sparse warnings
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
- irq: mips: avoid nested irq_enter()
- samples/kretprobes: Fix return value if register_kretprobe() failed
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- ibmvnic: Process crqs after enabling interrupts
- RDMA/rxe: Fix wrong port_cap_flags
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
- ARM: dts: at91: tse850: the emac<->phy interface is rmii
- scsi: dc395: Fix error case unwinding
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
- JFS: fix memleak in jfs_mount
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- arm: dts: omap3-gta04a4: accelerometer irq fix
- soc/tegra: Fix an error handling path in tegra_powergate_power_up()
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
- video: fbdev: chipsfb: use memset_io() instead of memset()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- usb: gadget: hid: fix error code in do_config()
- power: supply: rt5033_battery: Change voltage values to µV
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- ASoC: cs42l42: Correct some register default values
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
- serial: xilinx_uartps: Fix race condition causing stuck TX
- mips: cm: Convert to bitfield API to fix out-of-bounds access
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- PCI: aardvark: Don't spam about PIO Response Status
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
- auxdisplay: ht16k33: Connect backlight to fbdev
- auxdisplay: ht16k33: Fix frame buffer device blanking
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- m68k: set a default value for MEMORY_RESERVE
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- ar7: fix kernel builds for compiler test
- scsi: qla2xxx: Turn off target reset during issue_lip
- i2c: xlr: Fix a resource leak in the error handling path of
'xlr_i2c_probe()'
- xen-pciback: Fix return in pm_ctrl_init()
- net: davinci_emac: Fix interrupt pacing disable
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- USB: chipidea: fix interrupt deadlock
- ARM: 9155/1: fix early early_iounmap()
- ARM: 9156/1: drop cc-option fallbacks for architecture selection
- powerpc/lib: Add helper to check if offset is within conditional branch
range
- powerpc/bpf: Validate branch ranges
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- s390/cio: check the subchannel validity for dev_busid
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
- parisc/entry: fix trace test in syscall exit path
- PCI/MSI: Destroy sysfs before freeing entries
- arm64: zynqmp: Fix serial compatible string
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- usb: musb: tusb6010: check return value after calling
platform_get_resource()
- scsi: advansys: Fix kernel pointer leak
- ARM: dts: omap: fix gpmc,mux-add-data type
- usb: host: ohci-tmio: check return value after calling
platform_get_resource()
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- MIPS: sni: Fix the build
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- powerpc/5200: dts: fix memory node unit name
- ALSA: gus: fix null pointer dereference on pointer block
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli
- sh: check return code of request_irq
- maple: fix wrong return value of maple_bus_init().
- sh: fix kconfig unmet dependency warning for FRAME_POINTER
- sh: define __BIG_ENDIAN for math-emu
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- net: bnx2x: fix variable dereferenced before check
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- MIPS: generic/yamon-dt: fix uninitialized variable error
- mips: bcm63xx: add support for clk_get_parent()
- mips: lantiq: add support for clk_get_parent()
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix NULL ptr dereference on VSI filter sync
- NFC: reorganize the functions in nci_request
- NFC: reorder the logic in nfc_{un,}register_device
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- tun: fix bonding active backup with arp monitoring
- hexagon: export raw I/O routines for modules
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
- btrfs: fix memory ordering between normal and ordered work functions
- parisc/sticon: fix reverse colors
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/udl: fix control-message timeout
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- perf/core: Avoid put_page() when GUP fails
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
- batman-adv: Consider fragmentation for needed_headroom
- batman-adv: Reserve needed_*room for fragments
- batman-adv: Don't always reallocate the fragmentation skb head
- RDMA/netlink: Add __maybe_unused to static inline in C file
- ASoC: DAPM: Cover regression by kctl change notification fix
- usb: max-3421: Use driver data instead of maintaining a list of bound
devices
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path
- crypto: s5p-sss - Add error handling in s5p_aes_probe()
- ia64: kprobes: Fix to pass correct trampoline address to the handler
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- wcn36xx: add proper DMA memory barriers in rx path
- s390/tape: fix timer initialization in tape_std_assign()
- fuse: truncate pagecache on atomic_o_trunc
- f2fs: fix up f2fs_lookup tracepoints
- iavf: check for null in iavf_fix_features
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix display error code in dmesg
* Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202)
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
- ARM: 9134/1: remove duplicate memcpy() definition
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
- ARM: 8819/1: Remove '-p' from LDFLAGS
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- ipv4: use siphash instead of Jenkins in fnhe_hashfun()
- mmc: vub300: fix control-message timeouts
- mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
circuit
- net: lan78xx: fix division by zero in send path
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
- net: nxp: lpc_eth.c: avoid hang when bringing interface down
- sctp: use init_tag from inithdr for ABORT chunk
- sctp: fix the processing for COOKIE_ECHO chunk
- sctp: add vtag check in sctp_sf_violation
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
- sctp: add vtag check in sctp_sf_ootb
- ARM: 9141/1: only warn about XIP address when not compile testing
- arm64: Avoid premature usercopy failure
- ipv6: use siphash in rt6_exception_hash()
- ipv6: make exception cache less predictible
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- scsi: core: Put LLD module refcnt after SCSI device is released
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
- sfc: Fix reading non-legacy supported link modes
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
- mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS
- arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
- block: introduce multi-page bvec helpers
- Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: gadget: Mark USB_FSL_QE broken on 64-bit
- usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- printk/console: Allow to disable console output by using console="" or
console=null
- isofs: Fix out of bound access for corrupted isofs image
- comedi: dt9812: fix DMA buffers on stack
- comedi: ni_usb6501: fix NULL-deref in command paths
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- staging: rtl8192u: fix control-message timeouts
- rsi: fix control-message timeout
- usb: ehci: handshake CMD_RUN instead of STS_HALT
Date: 2022-02-02 12:48:09.428993+00:00
Changed-By: Krzysztof Kozlowski <krzysztof.kozlowski at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-azure-4.15/4.15.0-1131.144
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list