[ubuntu/focal-proposed] linux-gcp 5.4.0-1076.81 (Accepted)
Andy Whitcroft
apw at canonical.com
Mon May 30 10:56:33 UTC 2022
linux-gcp (5.4.0-1076.81) focal; urgency=medium
* focal/linux-gcp: 5.4.0-1076.81 -proposed tracker (LP: #1974369)
[ Ubuntu: 5.4.0-115.129 ]
* CVE-2022-21499
- SAUCE: debug: Lock down kgdb
[ Ubuntu: 5.4.0-114.128 ]
* focal/linux: 5.4.0-114.128 -proposed tracker (LP: #1974391)
* 32 GT/s PCI link speeds reporting "Unknown speed" in sysfs (LP: #1970798)
- PCI: Add 32 GT/s decoding in some macros
- PCI: Add pci_speed_string()
- PCI: Use pci_speed_string() for all PCI/PCI-X/PCIe strings
- PCI: Add PCIE_LNKCAP2_SLS2SPEED() macro
* issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480)
- vsock: remove ratelimit unknown ioctl message
* config CONFIG_HISI_PMU for kunpeng920 (LP: #1956086)
- drivers/perf: hisi: Permit modular builds of HiSilicon uncore drivers
- [Config] CONFIG_HISI_PMU=m
* Focal update: v5.4.189 upstream stable release (LP: #1971497)
- swiotlb: fix info leak with DMA_FROM_DEVICE
- USB: serial: pl2303: add IBM device IDs
- USB: serial: simple: add Nokia phone driver
- netdevice: add the case if dev is NULL
- HID: logitech-dj: add new lightspeed receiver id
- xfrm: fix tunnel model fragmentation behavior
- virtio_console: break out of buf poll on remove
- ethernet: sun: Free the coherent when failing in probing
- spi: Fix invalid sgs value
- net:mcf8390: Use platform_get_irq() to get the interrupt
- spi: Fix erroneous sgs value with min_t()
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function
pfkey_register
- net: dsa: microchip: add spi_device_id tables
- iommu/iova: Improve 32-bit free space estimate
- tpm: fix reference counting for struct tpm_chip
- block: Add a helper to validate the block size
- virtio-blk: Use blk_validate_block_size() to validate block size
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
- xhci: fix runtime PM imbalance in USB2 resume
- xhci: make xhci_handshake timeout for xhci_reset() adjustable
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
- coresight: Fix TRCCONFIGR.QE sysfs interface
- iio: afe: rescale: use s64 for temporary scale calculations
- iio: inkern: apply consumer scale on IIO_VAL_INT cases
- iio: inkern: apply consumer scale when no channel scale is available
- iio: inkern: make a best effort on offset calculation
- greybus: svc: fix an error handling bug in gb_svc_hello()
- clk: uniphier: Fix fixed-rate initialization
- KEYS: fix length validation in keyctl_pkey_params_get_2()
- Documentation: add link to stable release candidate tree
- Documentation: update stable tree link
- HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
- SUNRPC: avoid race between mod_timer() and del_timer_sync()
- NFSD: prevent underflow in nfssvc_decode_writeargs()
- NFSD: prevent integer overflow on 32 bit systems
- f2fs: fix to unlock page correctly in error path of is_alive()
- f2fs: quota: fix loop condition at f2fs_quota_sync()
- f2fs: fix to do sanity check on .cp_pack_total_block_count
- pinctrl: samsung: drop pin banks references on error paths
- spi: mxic: Fix the transmit path
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
- jffs2: fix memory leak in jffs2_do_mount_fs
- jffs2: fix memory leak in jffs2_scan_medium
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
- mm: invalidate hwpoison page cache page in fault path
- mempolicy: mbind_range() set_policy() after vma_merge()
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
- qed: display VF trust config
- qed: validate and restrict untrusted VFs vlan promisc mode
- riscv: Fix fill_callchain return value
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
- ALSA: cs4236: fix an incorrect NULL check on list iterator
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
- mm,hwpoison: unmap poisoned page before invalidation
- mm/kmemleak: reset tag when compare object pointer
- drbd: fix potential silent data corruption
- powerpc/kvm: Fix kvm_use_magic_page
- udp: call udp_encap_enable for v6 sockets when enabling encap
- ACPI: properties: Consistently return -ENOENT if there are no more
references
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
- mailbox: tegra-hsp: Flush whole channel
- block: don't merge across cgroup boundaries if blkcg is enabled
- drm/edid: check basic audio support on CEA extension block
- video: fbdev: sm712fb: Fix crash in smtcfb_read()
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420
- carl9170: fix missing bit-wise or operator for tx_params
- thermal: int340x: Increase bitmap size
- lib/raid6/test: fix multiple definition linking error
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
- crypto: rsa-pkcs1pad - restore signature length check
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
- DEC: Limit PMAX memory probing to R3k systems
- media: davinci: vpif: fix unbalanced runtime PM get
- xtensa: fix stop_machine_cpuslocked call in patch_text
- xtensa: fix xtensa_wsr always writing 0
- brcmfmac: firmware: Allocate space for default boardrev in nvram
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
- brcmfmac: pcie: Fix crashes due to early IRQs
- PCI: pciehp: Clear cmd_busy bit in polling mode
- regulator: qcom_smd: fix for_each_child.cocci warnings
- crypto: authenc - Fix sleep in atomic context in decrypt_tail
- crypto: mxs-dcp - Fix scatterlist processing
- spi: tegra114: Add missing IRQ check in tegra_spi_probe
- selftests/x86: Add validity check and allow field splitting
- audit: log AUDIT_TIME_* records only from rules
- crypto: ccree - don't attempt 0 len DMA mappings
- spi: pxa2xx-pci: Balance reference count for PCI DMA device
- hwmon: (pmbus) Add mutex to regulator ops
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
- block: don't delete queue kobject before its children
- PM: hibernate: fix __setup handler error handling
- PM: suspend: fix return value of __setup handler
- hwrng: atmel - disable trng on failure path
- crypto: vmx - add missing dependencies
- clocksource/drivers/timer-of: Check return value of of_iomap in
timer_of_base_init()
- ACPI: APEI: fix return value of __setup handlers
- crypto: ccp - ccp_dmaengine_unregister release dma channels
- hwmon: (pmbus) Add Vin unit off handling
- clocksource: acpi_pm: fix return value of __setup handler
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
- perf/core: Fix address filter parser for multiple filters
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel
- f2fs: fix missing free nid in f2fs_handle_failed_inode
- f2fs: fix to avoid potential deadlock
- media: bttv: fix WARNING regression on tunerless devices
- media: coda: Fix missing put_device() call in coda_get_vdoa_data
- media: hantro: Fix overfill bottom register field name
- media: aspeed: Correct value for h-total-pixels
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
- video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
- ARM: dts: qcom: ipq4019: fix sleep clock
- soc: qcom: rpmpd: Check for null return of devm_kcalloc
- soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
- arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo
- media: video/hdmi: handle short reads of hdmi info frame.
- media: em28xx: initialize refcount before kref_get
- media: usb: go7007: s2250-board: fix leak in probe()
- uaccess: fix nios2 and microblaze get_user_8()
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
- ASoC: ti: davinci-i2s: Add check for clk_enable()
- ALSA: spi: Add check for clk_enable()
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property
- arm64: dts: broadcom: Fix sata nodename
- printk: fix return value of printk.devkmsg __setup handler
- ASoC: mxs-saif: Handle errors for clk_enable
- ASoC: atmel_ssc_dai: Handle errors for clk_enable
- ASoC: soc-compress: prevent the potentially use of null pointer
- memory: emif: Add check for setup_interrupts
- memory: emif: check the pointer temp in get_device_details()
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
- media: stk1160: If start stream fails, return buffers with
VB2_BUF_STATE_QUEUED
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
- ASoC: wm8350: Handle error for wm8350_register_irq
- ASoC: fsi: Add check for clk_enable
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
- ivtv: fix incorrect device_caps for ivtvfb
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in
msm8916_wcd_digital_probe
- mmc: davinci_mmc: Handle error for clk_enable
- ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
- drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
- udmabuf: validate ubuf->pagecount
- Bluetooth: hci_serdev: call init_rwsem() before p->open()
- mtd: onenand: Check for error irq
- mtd: rawnand: gpmi: fix controller timings setting
- drm/edid: Don't clear formats if using deep color
- drm/amd/display: Fix a NULL pointer dereference in
amdgpu_dm_connector_add_common_modes()
- ath9k_htc: fix uninit value bugs
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
- ray_cs: Check ioremap return value
- powerpc/perf: Don't use perf_hw_context for trace IMC PMU
- mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
- mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
- net: dsa: mv88e6xxx: Enable port policy support on 6097
- PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
- iommu/ipmmu-vmsa: Check for error num after setting mask
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
- IB/cma: Allow XRC INI QPs to set their local ACK timeout
- dax: make sure inodes are flushed before destroy cache
- iwlwifi: Fix -EIO error code that is never returned
- iwlwifi: mvm: Fix an error code in iwl_mvm_up()
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
- scsi: pm8001: Fix abort all task initialization
- drm/amd/display: Remove vupdate_int_entry definition
- TOMOYO: fix __setup handlers return values
- ext2: correct max file size computing
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false
return
- scsi: hisi_sas: Change permission of parameter prot_mask
- drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
- bpf, arm64: Call build_prologue() first in first JIT pass
- bpf, arm64: Feed byte-offset into bpf line info
- libbpf: Skip forward declaration when counting duplicated type names
- powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
- KVM: x86: Fix emulation in writing cr8
- KVM: x86/emulator: Defer not-present segment check in
__load_segment_descriptor()
- hv_balloon: rate-limit "Unhandled message" warning
- i2c: xiic: Make bus names unique
- power: supply: wm8350-power: Handle error for wm8350_register_irq
- power: supply: wm8350-power: Add missing free in free_charger_irq
- PCI: Reduce warnings on possible RW1C corruption
- mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
- powerpc/sysdev: fix incorrect use to determine if list is empty
- mfd: mc13xxx: Add check for mc13xxx_irq_request
- selftests/bpf: Make test_lwt_ip_encap more stable and faster
- powerpc: 8xx: fix a return value error in mpc8xx_pic_init
- vxcan: enable local echo for sent CAN frames
- MIPS: RB532: fix return value of __setup handler
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
- bpf, sockmap: Fix more uncharged while msg has more_data
- bpf, sockmap: Fix double uncharge the mem of sk_msg
- USB: storage: ums-realtek: fix error code in rts51x_read_mem()
- Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
- af_netlink: Fix shift out of bounds in group mask calculation
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active
- selftests/bpf/test_lirc_mode2.sh: Exit with proper code
- tcp: ensure PMTU updates are processed during fastopen
- openvswitch: always update flow key after nat
- tipc: fix the timer expires after interval 100ms
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
- mxser: fix xmit_buf leak in activate when LSR == 0xff
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
- misc: alcor_pci: Fix an error handling path
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
- pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
- clk: qcom: ipq8074: Use floor ops for SDCC1 clock
- phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
- serial: 8250_mid: Balance reference count for PCI DMA device
- serial: 8250: Fix race condition in RTS-after-send handling
- iio: adc: Add check for devm_request_threaded_irq
- NFS: Return valid errors from nfs2/3_decode_dirent()
- dma-debug: fix return value of __setup handlers
- clk: imx7d: Remove audio_mclk_root_clk
- clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
- clk: qcom: clk-rcg2: Update the frac table for pixel clock
- remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
- remoteproc: qcom_wcnss: Add missing of_node_put() in
wcnss_alloc_memory_region
- clk: actions: Terminate clk_div_table with sentinel element
- clk: loongson1: Terminate clk_div_table with sentinel element
- clk: clps711x: Terminate clk_div_table with sentinel element
- clk: tegra: tegra124-emc: Fix missing put_device() call in
emc_ensure_emc_driver
- NFS: remove unneeded check in decode_devicenotify_args()
- staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
- pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
- pinctrl: mediatek: paris: Fix pingroup pin config state readback
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
- tty: hvc: fix return value of __setup handler
- kgdboc: fix return value of __setup handler
- kgdbts: fix return value of __setup handler
- firmware: google: Properly state IOMEM dependency
- driver core: dd: fix return value of __setup handler
- jfs: fix divide error in dbNextAG
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
- clk: qcom: gcc-msm8994: Fix gpll4 width
- clk: Initialize orphan req_rate
- xen: fix is_xen_pmu()
- net: phy: broadcom: Fix brcm_fet_config_init()
- selftests: test_vxlan_under_vrf: Fix broken test case
- qlcnic: dcb: default to returning -EOPNOTSUPP
- net/x25: Fix null-ptr-deref caused by x25_disconnect
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
- lib/test: use after free in register_test_dev_kmod()
- LSM: general protection fault in legacy_parse_param
- gcc-plugins/stackleak: Exactly match strings instead of prefixes
- pinctrl: npcm: Fix broken references to chip->parent_device
- block, bfq: don't move oom_bfqq
- selinux: use correct type for context length
- loop: use sysfs_emit() in the sysfs xxx show()
- Fix incorrect type in assignment of ipv6 port for audit
- irqchip/qcom-pdc: Fix broken locking
- irqchip/nvic: Release nvic_base upon failure
- bfq: fix use-after-free in bfq_dispatch_request
- ACPICA: Avoid walking the ACPI Namespace if it is not there
- lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
- Revert "Revert "block, bfq: honor already-setup queue merges""
- ACPI/APEI: Limit printable size of BERT table data
- PM: core: keep irq flags in device_pm_check_callbacks()
- spi: tegra20: Use of_device_get_match_data()
- ext4: don't BUG if someone dirty pages without asking ext4 first
- ntfs: add sanity check on allocation size
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
- video: fbdev: w100fb: Reset global state
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
- ARM: dts: bcm2837: Add the missing L1/L2 cache information
- ASoC: madera: Add dependencies on MFD
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of
snprintf()
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
- ASoC: soc-core: skip zero num_dai component in searching dai name
- media: cx88-mpeg: clear interrupt status register before streaming video
- ARM: tegra: tamonten: Fix I2C3 pad setting
- ARM: mmp: Fix failure to remove sram device
- video: fbdev: sm712fb: Fix crash in smtcfb_write()
- media: Revert "media: em28xx: add missing em28xx_close_extension"
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup
- powerpc/lib/sstep: Fix 'sthcx' instruction
- powerpc/lib/sstep: Fix build errors with newer binutils
- powerpc: Fix build errors with newer binutils
- scsi: qla2xxx: Fix stuck session in gpdb
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
- scsi: qla2xxx: Fix warning for missing error code
- scsi: qla2xxx: Fix device reconnect in loop topology
- scsi: qla2xxx: Add devids and conditionals for 28xx
- scsi: qla2xxx: Check for firmware dump already collected
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- scsi: qla2xxx: Fix disk failure to rediscover
- scsi: qla2xxx: Fix incorrect reporting of task management failure
- scsi: qla2xxx: Fix hang due to session stuck
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
- scsi: qla2xxx: Fix N2N inconsistent PLOGI
- scsi: qla2xxx: Reduce false trigger to login
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing
- KVM: Prevent module exit until all VMs are freed
- KVM: x86: fix sending PV IPI
- ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- ubifs: rename_whiteout: correct old_dir size computing
- XArray: Fix xas_create_range() when multi-order entry present
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
- can: mcba_usb: properly check endpoint type
- XArray: Update the LRU list in xas_split()
- rtc: check if __rtc_read_time was successful
- gfs2: Make sure FITRIM minlen is rounded up to fs block size
- net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
- pinctrl: pinconf-generic: Print arguments for bias-pull-*
- pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
- pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
- ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- ARM: iop32x: offset IRQ numbers by 1
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- powerpc/kasan: Fix early region not updated correctly
- ASoC: soc-compress: Change the check for codec_dai
- mm/mmap: return 1 from stack_guard_gap __setup() handler
- mm/memcontrol: return 1 from cgroup.memory __setup() handler
- mm/usercopy: return 1 from hardened_usercopy __setup() handler
- bpf: Fix comment for helper bpf_current_task_under_cgroup()
- dt-bindings: mtd: nand-controller: Fix the reg property description
- dt-bindings: mtd: nand-controller: Fix a comment in the examples
- dt-bindings: spi: mxic: The interrupt property is not mandatory
- ubi: fastmap: Return error code if memory allocation fails in add_aeb()
- ASoC: topology: Allow TLV control to be either read or write
- ARM: dts: spear1340: Update serial node properties
- ARM: dts: spear13xx: Update SPI dma properties
- um: Fix uml_mconsole stop/go
- openvswitch: Fixed nd target mask field in the flow dump.
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
- ubifs: Rectify space amount budget for mkdir/tmpfile operations
- rtc: wm8350: Handle error for wm8350_register_irq
- riscv module: remove (NOLOAD)
- ARM: 9187/1: JIVE: fix return value of __setup handler
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
- drm: Add orientation quirk for GPD Win Max
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
- ptp: replace snprintf with sysfs_emit
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
- bpf: Make dst_port field in struct bpf_sock 16-bit wide
- scsi: mvsas: Replace snprintf() with sysfs_emit()
- scsi: bfa: Replace snprintf() with sysfs_emit()
- power: supply: axp20x_battery: properly report current when discharging
- ipv6: make mc_forwarding atomic
- powerpc: Set crashkernel offset to mid of RMA region
- drm/amdgpu: Fix recursive locking warning
- PCI: aardvark: Fix support for MSI interrupts
- iommu/arm-smmu-v3: fix event handling soft lockup
- usb: ehci: add pci device support for Aspeed platforms
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- power: supply: axp288-charger: Set Vhold to 4.4V
- ipv4: Invalidate neighbour for broadcast address upon address addition
- dm ioctl: prevent potential spectre v1 gadget
- drm/amdkfd: make CRAT table missing message informational only
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
- scsi: aha152x: Fix aha152x_setup() __setup handler return value
- net/smc: correct settings of RMB window update limit
- mips: ralink: fix a refcount leak in ill_acc_of_setup()
- macvtap: advertise link netns via netlink
- tuntap: add sanity checks about msg_controllen in sendmsg
- bnxt_en: Eliminate unintended link toggle during FW reset
- MIPS: fix fortify panic when copying asm exception handlers
- scsi: libfc: Fix use after free in fc_exch_abts_resp()
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
- xtensa: fix DTC warning unit_address_format
- Bluetooth: Fix use after free in hci_send_acl
- netlabel: fix out-of-bounds memory accesses
- init/main.c: return 1 from handled __setup() functions
- minix: fix bug when opening a file with O_DIRECT
- clk: si5341: fix reported clk_rate when output divider is 2
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors
- NFSv4: Protect the state recovery thread against direct reclaim
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
- clk: Enforce that disjoints limits are invalid
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory
- NFS: swap IO handling is slightly different for O_DIRECT IO
- NFS: swap-out must always use STABLE writes.
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
- virtio_console: eliminate anonymous module_init & module_exit
- jfs: prevent NULL deref in diFree
- SUNRPC: Fix socket waits for write buffer space
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips
- parisc: Fix patch code locking and flushing
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
- Drivers: hv: vmbus: Fix potential crash on module unload
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
- net/tls: fix slab-out-of-bounds bug in decrypt_internal
- net: ipv4: fix route with nexthop object delete warning
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
- drm/imx: Fix memory leak in imx_pd_connector_get_modes
- bnxt_en: reserve space inside receive page for skb_shared_info
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
- ipv6: Fix stats accounting in ip6_pkt_drop
- net: openvswitch: don't send internal clone attribute to the userspace.
- rxrpc: fix a race in rxrpc_exit_net()
- qede: confirm skb is allocated before using
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
- drbd: Fix five use after free bugs in get_initial_state
- SUNRPC: Handle ENOMEM in call_transmit_status()
- SUNRPC: Handle low memory situations in call_status()
- perf tools: Fix perf's libperf_print callback
- perf session: Remap buf if there is no space for event
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
- mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is
complete
- lz4: fix LZ4_decompress_safe_partial read out of bound
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace
- x86/pm: Save the MSR validity status at context setup
- x86/speculation: Restore speculation related MSRs during S3 resume
- btrfs: fix qgroup reserve overflow the qgroup limit
- arm64: patch_text: Fixup last cpu should be master
- ata: sata_dwc_460ex: Fix crash due to OOB write
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling
- tools build: Filter out options and warnings not supported by clang
- tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros
- mmc: mmci: stm32: correctly check all elements of sg list
- mm: don't skip swap entry even if zap_details specified
- arm64: module: remove (NOLOAD) from linker script
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
- drm/amdkfd: add missing void argument to function kgd2kfd_init
- drm/amdkfd: Fix -Wstrict-prototypes from
amdgpu_amdkfd_gfx_10_0_get_functions()
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
- selftests: cgroup: Test open-time credential usage for migration checks
- selftests: cgroup: Test open-time cgroup namespace usage for migration
checks
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function
- ACPI: processor idle: Check for architectural support for LPI
- Linux 5.4.189
* Focal update: v5.4.188 upstream stable release (LP: #1971496)
- nfsd: cleanup nfsd_file_lru_dispose()
- nfsd: Containerise filecache laundrette
- net: ipv6: fix skb_over_panic in __ip6_append_data
- tpm: Fix error handling in async work
- staging: fbtft: fb_st7789v: reset display before initialization
- thermal: int340x: fix memory leak in int3400_notify()
- llc: fix netdevice reference leaks in llc_ui_bind()
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- drivers: net: xgene: Fix regression in CRC stripping
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
- ALSA: oss: Fix PCM OSS buffer allocation overflow
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
- ALSA: hda/realtek: Add quirk for ASUS GA402
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- crypto: qat - disable registration of algorithms
- rcu: Don't deboost before reporting expedited quiescent state
- mac80211: fix potential double free on mesh join
- tpm: use try_get_ops() in tpm-space.c
- nds32: fix access_ok() checks in get/put_user
- llc: only change llc->dev when bind() succeeds
- Linux 5.4.188
* Focal update: v5.4.187 upstream stable release (LP: #1971493)
- crypto: qcom-rng - ensure buffer for generate is completely filled
- ocfs2: fix crash when initialize filecheck kobj fails
- efi: fix return value of __setup handlers
- net: phy: marvell: Fix invalid comparison in the resume and suspend
functions
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- hv_netvsc: Add check for kvmalloc_array
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- net: dsa: Add missing of_node_put() in dsa_port_parse_of
- arm64: fix clang warning about TRAMP_VALIAS
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- usb: usbtmc: Fix bug in pipe direction for control transfers
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- Linux 5.4.187
* Focal update: v5.4.186 upstream stable release (LP: #1969678)
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
- sctp: fix the processing for INIT chunk
- xfrm: Check if_id in xfrm_migrate
- xfrm: Fix xfrm migrate issues when address family changes
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
- arm64: dts: rockchip: reorder rk3399 hdmi clocks
- arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg"
- ARM: dts: rockchip: reorder rk322x hmdi clocks
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
- mac80211: refuse aggregations sessions before authorized
- MIPS: smp: fill in sibling and core maps earlier
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when
fully ready
- atm: firestream: check the return value of ioremap() in fs_init()
- iwlwifi: don't advertise TWT support
- drm/vrr: Set VRR capable prop only if it is attached to connector
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- tcp: make tcp_read_sock() more robust
- sfc: extend the locking on mcdi->seqno
- kselftest/vm: fix tests build with old libc
- fixup for "arm64 entry: Add macro for reading symbol address from the
trampoline"
- Linux 5.4.186
* Focal update: v5.4.185 upstream stable release (LP: #1969672)
- clk: qcom: gdsc: Add support to update GDSC transition delay
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
- net: qlogic: check the return value of dma_alloc_coherent() in
qed_vf_hw_prepare()
- qed: return status of qed_iov_get_link
- drm/sun4i: mixer: Fix P010 and P210 format numbers
- ARM: dts: aspeed: Fix AST2600 quad spi group
- ethernet: Fix error handling in xemaclite_of_probe
- net: ethernet: ti: cpts: Handle error for clk_enable
- net: ethernet: lpc_eth: Handle error for clk_enable
- ax25: Fix NULL pointer dereference in ax25_kill_by_device
- net/mlx5: Fix size field in bufferx_reg struct
- net/mlx5: Fix a race on command flush flow
- NFC: port100: fix use-after-free in port100_send_complete
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell.
- gpio: ts4900: Do not set DAT and OE together
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
- net: phy: DP83822: clear MISR2 register to disable interrupts
- sctp: fix kernel-infoleak for SCTP sockets
- net: bcmgenet: Don't claim WOL when its not available
- net-sysfs: add check for netdevice being present to speed_show
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
- Revert "xen-netback: Check for hotplug-status existence before watching"
- ipv6: prevent a possible race condition with lifetimes
- tracing: Ensure trace buffer is at least 4096 bytes large
- selftest/vm: fix map_fixed_noreplace test failure
- selftests/memfd: clean up mapping in mfd_fail_write
- ARM: Spectre-BHB: provide empty stub for non-config
- fuse: fix pipe buffer lifetime for direct_io
- staging: gdm724x: fix use after free in gdm_lte_rx()
- net: macb: Fix lost RX packet wakeup race in NAPI receive
- mmc: meson: Fix usage of meson_mmc_post_req()
- riscv: Fix auipc+jalr relocation range checks
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0
- virtio: unexport virtio_finalize_features
- virtio: acknowledge all features before access
- ARM: fix Thumb2 regression with Spectre BHB
- ext4: add check to prevent attempting to resize an fs with sparse_super2
- x86/cpufeatures: Mark two free bits in word 3
- x86/cpu: Add hardware-enforced cache coherency as a CPUID feature
- x86/mm/pat: Don't flush cache if hardware enforces cache coherency across
encryption domnains
- KVM: SVM: Don't flush cache if hardware enforces cache coherency across
encryption domains
- Linux 5.4.185
* Focal update: v5.4.184 upstream stable release (LP: #1969242)
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()
- ARM: report Spectre v2 status through sysfs
- ARM: early traps initialisation
- ARM: use LOADADDR() to get load address of sections
- [Config] updateconfigs for HARDEN_BRANCH_HISTORY
- ARM: Spectre-BHB workaround
- ARM: include unprivileged BPF status in Spectre V2 reporting
- ARM: fix build error when BPF_SYSCALL is disabled
- ARM: fix co-processor register typo
- ARM: Do not use NOCROSSREFS directive with ld.lld
- ARM: fix build warning in proc-v7-bugs.c
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
- xen/grant-table: add gnttab_try_end_foreign_access()
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
- xen/gntalloc: don't use gnttab_query_foreign_access()
- xen: remove gnttab_query_foreign_access()
- xen/9p: use alloc/free_pages_exact()
- xen/pvcalls: use alloc/free_pages_exact()
- xen/gnttab: fix gnttab_end_foreign_access() without page specified
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
- Linux 5.4.184
* Focal update: v5.4.183 upstream stable release (LP: #1969239)
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- i2c: bcm2835: Avoid clock stretching timeouts
- ASoC: rt5668: do not block workqueue if card is unbound
- ASoC: rt5682: do not block workqueue if card is unbound
- Input: clear BTN_RIGHT/MIDDLE on buttonpads
- cifs: fix double free race when mount fails in cifs_get_root()
- dmaengine: shdma: Fix runtime PM imbalance on error
- i2c: cadence: allow COMPILE_TEST
- i2c: qup: allow COMPILE_TEST
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- usb: gadget: don't release an existing dev->buf
- usb: gadget: clear related members when goto fail
- ata: pata_hpt37x: fix PCI clock detection
- ALSA: intel_hdmi: Fix reference to PCM buffer address
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- xfrm: enforce validity of offload input flags
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- block: Fix fsync always failed if once failed
- xen/netfront: destroy queues before real_num_tx_queues is zeroed
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
- ia64: ensure proper NUMA distance and possible map initialization
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- iavf: Fix missing check for running netdev
- net: sxgbe: fix return value of __setup handler
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
- efivars: Respect "block" flag in efivar_entry_set_safe()
- firmware: arm_scmi: Remove space in MODULE_ALIAS name
- ASoC: cs4265: Fix the duplicated control name
- can: gs_usb: change active_channels's type from atomic_t to u8
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
- igc: igc_read_phy_reg_gpy: drop premature return
- ARM: Fix kgdb breakpoint for Thumb2
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
- igc: igc_write_phy_reg_gpy: drop premature return
- ibmvnic: free reset-work-item when flushing
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- soc: fsl: qe: Check of ioremap return value
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- nl80211: Handle nla_memdup failures in handle_nan_filter
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
- HID: add mapping for KEY_DICTATE
- HID: add mapping for KEY_ALL_APPLICATIONS
- tracing/histogram: Fix sorting on old "cpu" value
- tracing: Fix return value of __setup handlers
- btrfs: fix lost prealloc extents beyond eof after full fsync
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
- btrfs: add missing run of delayed items after unlink during log replay
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
- net: dcb: disable softirqs in dcbnl_flush_dev()
- hamradio: fix macro redefine warning
- Linux 5.4.183
* Focal update: v5.4.182 upstream stable release (LP: #1969236)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
- clk: jz4725b: fix mmc0 clock gating
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
- parisc/unaligned: Fix ldw() and stw() unalignment handlers
- drm/amdgpu: disable MMHUB PG for Picasso
- sr9700: sanity check for packet length
- USB: zaurus: support another broken Zaurus
- x86/fpu: Correct pkru/xstate inconsistency
- tee: export teedev_open() and teedev_close_context()
- optee: use driver internal tee_context for some rpc
- lan743x: fix deadlock in lan743x_phy_link_status_change()
- ping: remove pr_err from ping_lookup
- perf data: Fix double free in perf_session__delete()
- bpf: Do not try bpf_msg_push_data with len 0
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
- tipc: Fix end of loop tests for list_for_each_entry()
- gso: do not skip outer ip header in case of ipip and net_failover
- openvswitch: Fix setting ipv6 fields causing hw csum failure
- drm/edid: Always set RGB444
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
- net: ll_temac: check the return value of devm_kmalloc()
- net: Force inlining of checksum functions in net/checksum.h
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
- netfilter: nf_tables: fix memory leak during stateful obj update
- net/mlx5: Fix possible deadlock on rule deletion
- net/mlx5: Fix wrong limitation of metadata match on ecpf
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in
zynq_qspi_exec_mem_op()
- configfs: fix a race in configfs_{,un}register_subsystem()
- RDMA/ib_srp: Fix a deadlock
- tracing: Have traceon and traceoff trigger honor the instance
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
- iio: Fix error handling for PM
- ata: pata_hpt37x: disable primary channel on HPT371
- Revert "USB: serial: ch341: add new Product ID for CH341A"
- usb: gadget: rndis: add spinlock for rndis response list
- tracefs: Set the group ownership in apply_options() not parse_options()
- USB: serial: option: add support for DW5829e
- USB: serial: option: add Telit LE910R1 compositions
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
- xhci: re-initialize the HC during resume if HCE was set
- xhci: Prevent futile URB re-submissions due to incorrect return value.
- tty: n_gsm: fix encoding of control signal octet bit DV
- tty: n_gsm: fix proper link termination after failed open
- tty: n_gsm: fix NULL pointer access due to DLCI release
- gpio: tegra186: Fix chip_data type confusion
- Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of
DEVINIT/PREOS/ACR"
- memblock: use kfree() to release kmalloced memblock regions
- fget: clarify and improve __fget_files() implementation
- Linux 5.4.182
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
Date: 2022-05-30 01:35:08.769759+00:00
Changed-By: Khaled El Mously <khalid.elmously at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-gcp/5.4.0-1076.81
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list