[ubuntu/focal-security] linux-oem-5.13 5.13.0-1017.21 (Accepted)

Andy Whitcroft apw at canonical.com
Tue Oct 19 10:41:10 UTC 2021

linux-oem-5.13 (5.13.0-1017.21) focal; urgency=medium

  * focal/linux-oem-5.13: 5.13.0-1017.21 -proposed tracker (LP: #1946722)

  * Intel AX201 8086:7af0 subsys 8086:4070 hardware reset periodically: FW error
    in SYNC CMD UNKNOWN (LP: #1941665)
    - iwlwifi: mvm: support BIOS enable/disable for 11ax in Russia
    - iwlwifi: mvm: Read acpi dsm to get unii4 enable/disable bitmap.

linux-oem-5.13 (5.13.0-1016.20) focal; urgency=medium

  * focal/linux-oem-5.13: 5.13.0-1016.20 -proposed tracker (LP: #1946371)

  * Fix missing recording from headset mic (LP: #1946383)
    - ALSA: hda/realtek - ALC236 headset MIC recording issue

  * Missing CNVi firmware for Intel AX211/AX201/9560/9462 on ADL-S/ADL-P
    (LP: #1933938)
    - iwlwifi: mvm: introduce iwl_proto_offload_cmd_v4
    - iwlwifi: mvm: update iwl_wowlan_patterns_cmd
    - iwlwifi: mvm: introduce iwl_wowlan_kek_kck_material_cmd_v4
    - iwlwifi: mvm: introduce iwl_wowlan_get_status_cmd
    - iwlwifi: move UEFI code to a separate file
    - iwlwifi: support loading the reduced power table from UEFI
    - iwlwifi: move error dump to fw utils
    - iwlwifi: add 9560 killer device
    - iwlwifi: fw: dump TCM error table if present
    - iwlwifi: bump FW API to 64 for AX devices
    - SAUCE: Bluetooth: btintel: Support Digital(N) + RF(N-1) combination

  * Fix A yellow screen pops up in an instant (< 1 second) and then disappears
    before loading the system (LP: #1945932)
    - SAUCE: drm/i915: Stop force enabling pipe bottom color gammma/csc

linux-oem-5.13 (5.13.0-1015.19) focal; urgency=medium

  * focal/linux-oem-5.13: 5.13.0-1015.19 -proposed tracker (LP: #1945647)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.09.27)

  * Speakup modules not included in Hirsute kernel (LP: #1942459)
    - [Config] CONFIG_SPEAKUP=m

  * It hangs while booting up with AMD W6800 [1002:73A3] (LP: #1945553)
    - drm/amdgpu: Rename flag which prevents HW access
    - drm/amd/pm: Fix a bug communicating with the SMU (v5)
    - drm/amd/pm: Fix a bug in semaphore double-lock

  * Fix missing HDMI audio on Intel RKL (LP: #1945556)
    - drm/i915/audio: Use BIOS provided value for RKL HDA link

  * CVE-2021-3759
    - memcg: enable accounting of ipc resources

  * e1000e extremly slow (LP: #1930754)
    - SAUCE: e1000e: Separate TGP board type from SPT
    - SAUCE: e1000e: Fixing packet loss issues on new platforms

  * Miscellaneous Ubuntu changes
    - [Config] mark CONFIG_BPF_UNPRIV_DEFAULT_OFF enforced

  [ Ubuntu: 5.13.0-17.17 ]

  * impish/linux: 5.13.0-17.17 -proposed tracker (LP: #1944943)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/master)
    - debian/dkms-versions -- update from kernel-versions (main/master)
  * Medion Notebook Keyboard not working (LP: #1909814)
    - ACPI: resources: Add DMI-based legacy IRQ override quirk
  * Can not boot impish in Cavium ThunderX  (LP: #1942633)
    - arm64: Restore forced disabling of KPTI on ThunderX
  * PCIE LnkCtl ASPM not enabled under VMD mode for Alder Lake platforms
    (LP: #1942160)
    - SAUCE: vmd: fixup bridge ASPM by driver name instead
  * CirrusLogic/CS8409: No headset mic device when plugged earphone jack when
    HDMI/DP is used on Dolphin platform (LP: #1943935)
    - SAUCE: ALSA: hda/cs8409: Setup Dolphin Headset Mic as Phantom Jack
    - ALSA: hda/cs8409: Initialize Codec only in init fixup.
    - ALSA: hda/cs8409: Ensure Type Detection is only run on startup when
  * psock_snd.sh in net from ubuntu_kernel_selftests ADT failure with
    focal/groovy/hirsute/impish (LP: #1892213)
    - selftests/net: remove min gso test in packet_snd
  * Update mpt3sas Driver to for Ubuntu 21.10 and 20.04
    (LP: #1935034)
    - scsi: mpt3sas: Documentation cleanup
    - scsi: mpt3sas: Handle firmware faults during first half of IOC init
    - scsi: mpt3sas: Handle firmware faults during second half of IOC init
    - scsi: core: Introduce scsi_build_sense()
    - scsi: mpt3sas: Fix fall-through warnings for Clang
    - scsi: mpt3sas: Fix Coverity reported issue
    - scsi: mpt3sas: Bump driver version to
  * Update fix for LP: #1936708 (LP: #1942972)
    - Revert "UBUNTU: SAUCE: drm/i915/dp: Use max params for older panels"
    - drm/i915/dp: Use max params for panels < eDP 1.4
  * [SRU][H/OEM-5.13/OEM-5.14/U] Fix invalid MAC address after hotplug tbt dock
    (LP: #1942999)
    - SAUCE: igc: wait for the MAC copy when enabled MAC passthrough
  * Speakup modules not included in Hirsute kernel (LP: #1942459)
    - [Config] CONFIG_SPEAKUP=m
  * s390x BPF JIT vulnerabilities (LP: #1943960)
    - s390/bpf: Fix branch shortening during codegen pass
    - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
    - s390/bpf: Fix optimizing out zero-extensions
  * CVE-2021-41073
    - io_uring: ensure symmetry in handling iter types in loop_rw_iter()
  * CVE-2021-40490
    - ext4: fix race writing to an inline_data file while its xattrs are changing
  *  LRMv5: switch primary version handling to kernel-versions data set
    (LP: #1928921)
    - [Packaging] switch to kernel-versions
  * Noise will pop up during WB or stay in Ubuntu OS when external speaker
    attached (LP: #1942043)
    - Revert "UBUNTU: SAUCE: ALSA: hda/cs8409: Prevent pops and clicks during
    - ALSA: hda: Release controller display power during shutdown/reboot
    - ALSA: hda: Release codec display power during shutdown/reboot
    - ALSA: hda: conexant: Turn off EAPD at suspend, too
    - ALSA: hda: Suspend codec at shutdown
    - ALSA: hda: Nuke unused reboot_notify callback
    - ALSA: hda: Disable runtime resume at shutdown
  * ALSA: hda/cs8409: Add support for dolphin (LP: #1939541)
    - ALSA: hda/cirrus: Move CS8409 HDA bridge to separate module
    - ALSA: hda/cs8409: Move arrays of configuration to a new file
    - ALSA: hda/cs8409: Use enums for register names and coefficients
    - ALSA: hda/cs8409: Mask all CS42L42 interrupts on initialization
    - ALSA: hda/cs8409: Reduce HS pops/clicks for Cyborg
    - ALSA: hda/cs8409: Disable unnecessary Ring Sense for Cyborg/Warlock/Bullseye
    - ALSA: hda/cs8409: Disable unsolicited responses during suspend
    - ALSA: hda/cs8409: Disable unsolicited response for the first boot
    - ALSA: hda/cs8409: Mask CS42L42 wake events
    - ALSA: hda/cs8409: Simplify CS42L42 jack detect.
    - ALSA: hda/cs8409: Prevent I2C access during suspend time
    - ALSA: hda/cs8409: Generalize volume controls
    - ALSA: hda/cs8409: Dont disable I2C clock between consecutive accesses
    - ALSA: hda/cs8409: Avoid setting the same I2C address for every access
    - ALSA: hda/cs8409: Avoid re-setting the same page as the last access
    - ALSA: hda/cs8409: Support i2c bulk read/write functions
    - ALSA: hda/cs8409: Separate CS8409, CS42L42 and project functions
    - ALSA: hda/cs8409: Move codec properties to its own struct
    - ALSA: hda/cs8409: Support multiple sub_codecs for Suspend/Resume/Unsol
    - ALSA: hda/cs8409: Add Support to disable jack type detection for CS42L42
    - ALSA: hda/cs8409: Add support for dolphin
    - ALSA: hda/cs8409: Enable Full Scale Volume for Line Out Codec on Dolphin
    - ALSA: hda/cs8409: Set fixed sample rate of 48kHz for CS42L42
    - ALSA: hda/cs8409: Use timeout rather than retries for I2C transaction waits
    - ALSA: hda/cs8409: Remove unnecessary delays
    - ALSA: hda/cs8409: Follow correct CS42L42 power down sequence for suspend
    - ALSA: hda/cs8409: Unmute/Mute codec when stream starts/stops
    - ALSA: hda/cs8409: Prevent pops and clicks during suspend
    - SAUCE: ALSA: hda/cs8409: Prevent pops and clicks during reboot
    - [Config] Enable Cirrus Logic HDA bridge support
  * Impish update: v5.13.14 upstream stable release (LP: #1942644)
    - net: qrtr: fix another OOB Read in qrtr_endpoint_post
    - bpf: Fix ringbuf helper function compatibility
    - ASoC: rt5682: Adjust headset volume button threshold
    - ASoC: component: Remove misplaced prefix handling in pin control functions
    - platform/x86: Add and use a dual_accel_detect() helper
    - netfilter: ipset: Limit the maximal range of consecutive elements to
    - netfilter: conntrack: collect all entries in one cycle
    - once: Fix panic when module unload
    - io_uring: rsrc ref lock needs to be IRQ safe
    - blk-iocost: fix lockdep warning on blkcg->lock
    - ovl: fix uninitialized pointer read in ovl_lookup_real_one()
    - net: mscc: Fix non-GPL export of regmap APIs
    - can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX
      and TX error counters
    - ceph: correctly handle releasing an embedded cap flush
    - dt-bindings: sifive-l2-cache: Fix 'select' matching
    - riscv: Ensure the value of FP registers in the core dump file is up to date
    - powerpc: Re-enable ARCH_ENABLE_SPLIT_PMD_PTLOCK
    - mm/memory_hotplug: fix potential permanent lru cache disable
    - Revert "btrfs: compression: don't try to compress if we don't have enough
    - net: stmmac: fix kernel panic due to NULL pointer dereference of xsk_pool
    - net: stmmac: fix kernel panic due to NULL pointer dereference of buf->xdp
    - drm/i915: Fix syncmap memory leak
    - drm/i915/dp: Drop redundant debug print
    - drm/amdgpu: Cancel delayed work when GFXOFF is disabled
    - drm/amdgpu: use the preferred pin domain after the check
    - drm/amdgpu: Fix build with missing pm_suspend_target_state module export
    - Revert "USB: serial: ch341: fix character loss at high transfer rates"
    - USB: serial: option: add new VID/PID to support Fibocom FG150
    - usb: renesas-xhci: Prefer firmware loading on unknown ROM state
    - usb: typec: tcpm: Raise vdm_sm_running flag only when VDM SM is running
    - usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
    - usb: dwc3: gadget: Stop EP0 transfers during pullup disable
    - scsi: core: Fix hang of freezing queue between blocking and running device
    - RDMA/mlx5: Fix crash when unbind multiport slave
    - RDMA/uverbs: Track dmabuf memory regions
    - RDMA/bnxt_re: Add missing spin lock initialization
    - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
    - RDMA/bnxt_re: Remove unpaired rtnl unlock in bnxt_re_dev_init()
    - RDMA/rxe: Fix memory allocation while in a spin lock
    - ice: do not abort devlink info if board identifier can't be found
    - net: usb: pegasus: fixes of set_register(s) return value evaluation;
    - igc: Use num_tx_queues when iterating over tx_ring queue
    - e1000e: Fix the max snoop/no-snoop latency for 10M
    - RDMA/efa: Free IRQ vectors on error flow
    - ip_gre: add validation for csum_start
    - xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
    - net: marvell: fix MVNETA_TX_IN_PRGRS bit number
    - ucounts: Increase ucounts reference counter before the security hook
    - net/sched: ets: fix crash when flipping from 'strict' to 'quantum'
    - SUNRPC: Fix XPT_BUSY flag leakage in svc_handle_xprt()...
    - ipv6: use siphash in rt6_exception_hash()
    - ipv4: use siphash instead of Jenkins in fnhe_hashfun()
    - cxgb4: dont touch blocked freelist bitmap after free
    - net: dsa: hellcreek: Fix incorrect setting of GCL
    - net: dsa: hellcreek: Adjust schedule look ahead window
    - rtnetlink: Return correct error on changing device netns
    - net: hns3: clear hardware resource when loading driver
    - net: hns3: add waiting time before cmdq memory is released
    - net: hns3: fix speed unknown issue in bond 4
    - net: hns3: fix duplicate node in VLAN list
    - net: hns3: fix get wrong pfc_en when query PFC configuration
    - media: ipu3-cio2: Drop reference on error path in
    - Revert "mmc: sdhci-iproc: Set SDHCI_QUIRK_CAP_CLOCK_BASE_BROKEN on BCM2711"
    - net: stmmac: add mutex lock to protect est parameters
    - net: stmmac: fix kernel panic due to NULL pointer dereference of plat->est
    - usb: gadget: u_audio: fix race condition on endpoint stop
    - perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
    - sched: Fix get_push_task() vs migrate_disable()
    - clk: renesas: rcar-usb2-clock-sel: Fix kernel NULL pointer dereference
    - iwlwifi: pnvm: accept multiple HW-type TLVs
    - iwlwifi: add new SoF with JF devices
    - iwlwifi: add new so-jf devices
    - opp: remove WARN when no valid OPPs remain
    - cpufreq: blocklist Qualcomm sm8150 in cpufreq-dt-platdev
    - virtio: Improve vq->broken access to avoid any compiler optimization
    - virtio_pci: Support surprise removal of virtio pci device
    - virtio_vdpa: reject invalid vq indices
    - vringh: Use wiov->used to check for read/write desc order
    - tools/virtio: fix build
    - platform/x86: asus-nb-wmi: Allow configuring SW_TABLET_MODE method with a
      module option
    - platform/x86: asus-nb-wmi: Add tablet_mode_sw=lid-flip quirk for the TP200s
    - qed: qed ll2 race condition fixes
    - qed: Fix null-pointer dereference in qed_rdma_create_qp()
    - Revert "drm/amd/pm: fix workload mismatch on vega10"
    - drm/amd/pm: change the workload type for some cards
    - blk-mq: don't grab rq's refcount in blk_mq_check_expired()
    - drm: Copy drm_wait_vblank to user before returning
    - platform/x86: gigabyte-wmi: add support for X570 GAMING X
    - drm/nouveau: recognise GA107
    - drm/nouveau/disp: power down unused DP links during init
    - drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences
    - platform/x86: gigabyte-wmi: add support for B450M S2H V2
    - net/rds: dma_map_sg is entitled to merge entries
    - arm64: initialize all of CNTHCTL_EL2
    - pipe: avoid unnecessary EPOLLET wakeups under normal loads
    - pipe: do FASYNC notifications for every pipe IO, not just state changes
    - tipc: call tipc_wait_for_connect only when dlen is not 0
    - vt_kdsetmode: extend console locking
    - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
    - net: dsa: mt7530: fix VLAN traffic leaks again
    - arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
    - btrfs: fix NULL pointer dereference when deleting device by invalid id
    - Revert "floppy: reintroduce O_NDELAY fix"
    - fscrypt: add fscrypt_symlink_getattr() for computing st_size
    - ext4: report correct st_size for encrypted symlinks
    - f2fs: report correct st_size for encrypted symlinks
    - ubifs: report correct st_size for encrypted symlinks
    - Revert "parisc: Add assembly implementations for memset, strlen, strcpy,
      strncpy and strcat"
    - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
    - audit: move put_tree() to avoid trim_trees refcount underflow and UAF
    - platform/x86: Make dual_accel_detect() KIOX010A + KIOX020A detect more
    - Linux 5.13.14
  * Miscellaneous Ubuntu changes
    - [Packaging] drop x32 architecture configs
    - [Packaging] remove remaining references to ports
    - [Config] mark CONFIG_BPF_UNPRIV_DEFAULT_OFF enforced
    - SAUCE: md/raid6 algorithms: scale test duration for speedier boots
    - [Config] make sure KCSAN is disabled
    - [Config] update gcc version in configs
    - [Packaging] correctly evaluate release in update-dkms-versions

Date: 2021-10-12 09:29:09.876983+00:00
Changed-By: Timo Aaltonen <tjaalton at ubuntu.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Focal-changes mailing list