[ubuntu/focal-proposed] linux-xilinx-zynqmp 5.4.0-1018.21 (Accepted)
Andy Whitcroft
apw at canonical.com
Fri Sep 23 15:16:51 UTC 2022
linux-xilinx-zynqmp (5.4.0-1018.21) focal; urgency=medium
* focal/linux-xilinx-zynqmp: 5.4.0-1018.21 -proposed tracker (LP: #1987968)
* Support builtin revoked certificates (LP: #1932029)
- [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
* Please trust Canonical Livepatch Service kmod signing key (LP: #1898716)
- [Config] Add canonical-certs.pem
* CVE-2022-23960
- [Config] updateconfigs for CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
* Focal update: upstream stable patchset v5.4.192 (LP: #1979014)
- [Config] updateconfigs for NVM
* Focal update: v5.4.141 upstream stable release (LP: #1943484)
- SAUCE: usb: dwc3: Fix dwc3_gadget_disable_irq declaration
* Focal update: v5.4.174 upstream stable release (LP: #1960566)
- SAUCE: tty: pl011: Remove release and request port callback in
xlnx_sbsa_uart_pops
* Focal update: v5.4.178 upstream stable release (LP: #1964634)
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
* Focal update: v5.4.142 upstream stable release (LP: #1944202)
- ASoC: xilinx: Fix reference to PCM buffer address
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
* Unable to handle kernel NULL pointer dereference on reboot (LP: #1950962)
- drm: xlnx: drv: unbind all components before framebuffer cleanup
[ Ubuntu: 5.4.0-125.141 ]
* focal/linux: 5.4.0-125.141 -proposed tracker (LP: #1983947)
* nbd: requests can become stuck when disconnecting from server with qemu-nbd
(LP: #1896350)
- blk-mq: blk-mq: provide forced completion method
- blk-mq: move failure injection out of blk_mq_complete_request
- nbd: don't handle response without a corresponding request message
- nbd: make sure request completion won't concurrent
- nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
- nbd: fix io hung while disconnecting device
* CVE-2021-33656
- vt: drop old FONT ioctls
* CVE-2021-33061
- ixgbe: add the ability for the PF to disable VF link state
- ixgbe: add improvement for MDD response functionality
- ixgbevf: add disable link state
[ Ubuntu: 5.4.0-124.140 ]
* CVE-2022-2586
- SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
- SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
* CVE-2022-2588
- SAUCE: net_sched: cls_route: remove from list when handle is 0
* CVE-2022-34918
- netfilter: nf_tables: stricter validation of element data
[ Ubuntu: 5.4.0-123.139 ]
* focal/linux: 5.4.0-123.139 -proposed tracker (LP: #1981284)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.07.11)
* Hairpin traffic does not work with centralized NAT gw (LP: #1967856)
- net: openvswitch: fix misuse of the cached connection on tuple changes
* [UBUNTU 20.04] Include patches to avoid self-detected stall with Secure
Execution (LP: #1979296)
- KVM: s390: pv: add macros for UVC CC values
- KVM: s390: pv: avoid stalls when making pages secure
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
* Focal update: v5.4.195 upstream stable release (LP: #1980407)
- batman-adv: Don't skb_split skbuffs with frag_list
- hwmon: (tmp401) Add OF device ID table
- mac80211: Reset MBSSID parameters upon connection
- net: Fix features skip in for_each_netdev_feature()
- ipv4: drop dst in multicast routing path
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name()
- netlink: do not reset transport header in netlink_recvmsg()
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
- dim: initialize all struct fields
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY
- s390/ctcm: fix variable dereferenced before check
- s390/ctcm: fix potential memory leak
- s390/lcs: fix variable dereferenced before check
- net/sched: act_pedit: really ensure the skb is writable
- net/smc: non blocking recvmsg() return -EAGAIN when no data and
signal_pending
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
- gfs2: Fix filesystem block deallocation for short writes
- hwmon: (f71882fg) Fix negative temperature
- ASoC: max98090: Reject invalid values in custom control put()
- ASoC: max98090: Generate notifications on changes for custom control
- ASoC: ops: Validate input values in snd_soc_put_volsw_range()
- s390: disable -Warray-bounds
- net: emaclite: Don't advertise 1000BASE-T and do auto negotiation
- tcp: resalt the secret every 10 seconds
- tty: n_gsm: fix mux activation issues in gsm_config()
- usb: cdc-wdm: fix reading stuck on device close
- usb: typec: tcpci: Don't skip cleanup in .remove() on error
- USB: serial: pl2303: add device id for HP LM930 Display
- USB: serial: qcserial: add support for Sierra Wireless EM7590
- USB: serial: option: add Fibocom L610 modem
- USB: serial: option: add Fibocom MA510 modem
- slimbus: qcom: Fix IRQ check in qcom_slim_probe
- serial: 8250_mtk: Fix UART_EFR register address
- serial: 8250_mtk: Fix register address for XON/XOFF character
- drm/nouveau/tegra: Stop using iommu_present()
- i40e: i40e_main: fix a missing check on list iterator
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
- drm/vmwgfx: Initialize drm_mode_fb_cmd2
- MIPS: fix build with gcc-12
- net: phy: Fix race condition on link status change
- arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map
- ping: fix address binding wrt vrf
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
- Linux 5.4.195
* Focal update: v5.4.194 upstream stable release (LP: #1980399)
- MIPS: Use address-of operator on section symbols
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version,
environment} types
- drm/i915: Cast remain to unsigned long in eb_relocate_vma
- nfp: bpf: silence bitwise vs. logical OR warning
- can: grcan: grcan_probe(): fix broken system id check for errata workaround
needs
- can: grcan: only use the NAPI poll budget for RX
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL
- [Config] updateconfigs for ARCH_HAS_HOLES_MEMORYMODEL
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
- x86/asm: Allow to pass macros to __ASM_FORM()
- x86: xen: kvm: Gather the definition of emulate prefixes
- x86: xen: insn: Decode Xen and KVM emulate-prefix signature
- x86: kprobes: Prohibit probing on instruction which has emulate prefix
- KVM: x86/svm: Account for family 17h event renumberings in
amd_pmc_perf_hw_id
- Bluetooth: Fix the creation of hdev->name
- mm: fix missing cache flush for all tail pages of compound page
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
__mcopy_atomic()
- Linux 5.4.194
* Focal update: v5.4.193 upstream stable release (LP: #1979566)
- MIPS: Fix CP0 counter erratum detection for R4k CPUs
- parisc: Merge model and model name into one line in /proc/cpuinfo
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
- Revert "SUNRPC: attempt AF_LOCAL connect on setup"
- firewire: fix potential uaf in outbound_phy_packet_callback()
- firewire: remove check of list iterator against head past the loop body
- firewire: core: extend card->lock in fw_core_handle_bus_reset
- ACPICA: Always create namespace nodes using acpi_ns_create_node()
- genirq: Synchronize interrupt thread startup
- ASoC: da7219: Fix change notifications for tone generator frequency
- ASoC: wm8958: Fix change notifications for DSP controls
- ASoC: meson: Fix event generation for G12A tohdmi mux
- s390/dasd: fix data corruption for ESE devices
- s390/dasd: prevent double format of tracks for ESE devices
- s390/dasd: Fix read for ESE with blksize < 4k
- s390/dasd: Fix read inconsistency for ESE DASD devices
- can: grcan: grcan_close(): fix deadlock
- can: grcan: use ofdev->dev when allocating DMA memory
- nfc: replace improper check device_is_registered() in netlink related
functions
- NFC: netlink: fix sleep in atomic bug when firmware download timeout
- hwmon: (adt7470) Fix warning on module removal
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback
- RDMA/siw: Fix a condition race issue in MPA request processing
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()
- net: stmmac: dwmac-sun8i: add missing of_node_put() in
sun8i_dwmac_register_mdio_mux()
- net: emaclite: Add error handling for of_address_to_resource()
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is
operational
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
- smsc911x: allow using IRQ0
- btrfs: always log symlinks in full mode
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
- drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu
- NFSv4: Don't invalidate inode attributes on delegation return
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised
- net: ipv6: ensure we call ipv6_mc_down() at most once
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
- mm: fix unexpected zeroed page mapping with zram swap
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
- ALSA: pcm: Fix races among concurrent read/write and buffer changes
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
- ALSA: pcm: Fix races among concurrent prealloc proc writes
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- tcp: make sure treq->af_specific is initialized
- dm: fix mempool NULL pointer race when completing IO
- dm: interlock pending dm_io and dm_wait_for_bios_completion
- PCI: aardvark: Clear all MSIs at setup
- PCI: aardvark: Fix reading MSI interrupt number
- mmc: rtsx: add 74 Clocks in power on flow
- Linux 5.4.193
* CVE-2022-1679
- SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
* CVE-2022-28893
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
- SUNRPC: Don't leak sockets in xs_local_connect()
* CVE-2022-1734
- nfc: nfcmrvl: main: reorder destructive operations in
nfcmrvl_nci_unregister_dev to avoid bugs
* CVE-2022-1652
- floppy: use a statically allocated error counter
[ Ubuntu: 5.4.0-122.138 ]
* focal/linux: 5.4.0-122.138 -proposed tracker (LP: #1979489)
* Remove SAUCE patches from test_vxlan_under_vrf.sh in net of
ubuntu_kernel_selftests (LP: #1975691)
- Revert "UBUNTU: SAUCE: selftests: net: Don't fail test_vxlan_under_vrf on
xfail"
- Revert "UBUNTU: SAUCE: selftests: net: Make test for VXLAN underlay in non-
default VRF an expected failure"
* Enable Asus USB-BT500 Bluetooth dongle(0b05:190e) (LP: #1976613)
- Bluetooth: btusb: Add flag to define wideband speech capability
- Bluetooth: btrtl: Add support for RTL8761B
- Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
* [UBUNTU 20.04] rcu stalls with many storage key guests (LP: #1975582)
- s390/gmap: voluntarily schedule during key setting
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
* Ubuntu 5.4.0-117.132-generic 5.4.189 has BUG: kernel NULL pointer
dereference, address: 0000000000000034 (LP: #1978719)
- mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
* Focal update: upstream stable patchset v5.4.192 (LP: #1979014)
- floppy: disable FDRAWCMD by default
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- hamradio: defer 6pack kfree after unregister_netdev
- hamradio: remove needs_free_netdev to avoid UAF
- lightnvm: disable the subsystem
- [Config] updateconfigs for NVM, NVM_PBLK
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host
- USB: quirks: add a Realtek card reader
- USB: quirks: add STRING quirk for VCOM device
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
- xhci: stop polling roothubs after shutdown
- xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
- iio: dac: ad5592r: Fix the missing return value.
- iio: dac: ad5446: Fix read_raw not returning set value
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
- usb: misc: fix improper handling of refcount in uss720_probe()
- usb: typec: ucsi: Fix role swapping
- usb: gadget: uvc: Fix crash when encoding data for usb request
- usb: gadget: configfs: clear deactivation flag in
configfs_composite_unbind()
- usb: dwc3: core: Fix tx/rx threshold settings
- usb: dwc3: gadget: Return proper request status
- serial: imx: fix overrun interrupts in DMA mode
- serial: 8250: Also set sticky MCR bits in console restoration
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
- arch_topology: Do not set llc_sibling if llc_id is invalid
- hex2bin: make the function hex_to_bin constant-time
- hex2bin: fix access beyond string end
- video: fbdev: udlfb: properly check endpoint type
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
- mtd: rawnand: fix ecc parameters for mt7622
- USB: Fix xhci event ring dequeue pointer ERDP update issue
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
- ARM: dts: Fix mmc order for omap3-gta04
- ARM: dts: am3517-evm: Fix misc pinmuxing
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
- ipvs: correctly print the memory size of ip_vs_conn_tab
- mtd: rawnand: Fix return value check of wait_for_completion_timeout
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt
hook
- tcp: md5: incorrect tcp_header_len for incoming connections
- tcp: ensure to use the most recently sent skb when filling the rate sample
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event
- ARM: dts: imx6ull-colibri: fix vqmmc regulator
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
- pinctrl: pistachio: fix use of irq_of_parse_and_map()
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
- net: hns3: add validity check for message data length
- net/smc: sync err code when tcp connection was refused
- ip_gre: Make o_seqno start from 0 in native mode
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
- clk: sunxi: sun9i-mmc: check return value after calling
platform_get_resource()
- net: bcmgenet: hide status block before TX timestamping
- net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
- drm/amd/display: Fix memory leak in dcn21_clock_source_create
- tls: Skip tls_append_frag on zero copy size
- bnx2x: fix napi API usage sequence
- ixgbe: ensure IPsec VF<->PF compatibility
- tcp: fix F-RTO may not work correctly when receiving DSACK
- ASoC: wm8731: Disable the regulator when probing fails
- ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
- cifs: destage any unwritten data to the server before calling
copychunk_write
- drivers: net: hippi: Fix deadlock in rr_close()
- net: ethernet: stmmac: fix write to sgmii_adapter_base
- x86/cpu: Load microcode during restore_processor_state()
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
- tty: n_gsm: fix malformed counter for out of frame data
- netfilter: nft_socket: only do sk lookups when indev is available
- tty: n_gsm: fix insufficient txframe size
- tty: n_gsm: fix missing explicit ldisc flush
- tty: n_gsm: fix wrong command retry handling
- tty: n_gsm: fix wrong command frame length field encoding
- tty: n_gsm: fix incorrect UA handling
- hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs
- mm, hugetlb: allow for "high" userspace addresses
- Linux 5.4.192
* CVE-2022-1789
- KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
* Focal update: v5.4.191 upstream stable release (LP: #1976116)
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
- mm: page_alloc: fix building error on -Werror=array-compare
- tracing: Dump stacktrace trigger to the corresponding instance
- gfs2: assign rgrp glock before compute_bitstructs
- tcp: fix race condition when creating child sockets from syncookies
- tcp: Fix potential use-after-free due to double kfree()
- ALSA: usb-audio: Clear MIDI port active flag after draining
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap
- dmaengine: mediatek:Fix PM usage reference leak of
mtk_uart_apdma_alloc_chan_resources
- igc: Fix infinite loop in release_swfw_sync
- igc: Fix BUG: scheduling while atomic
- rxrpc: Restore removed timer deletion
- net/smc: Fix sock leak when release after smc_shutdown()
- net/packet: fix packet_sock xmit return value checking
- net/sched: cls_u32: fix possible leak in u32_init_knode()
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using
netdev_master_upper_dev_get_rcu
- netlink: reset network and mac headers in netlink_dump()
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
- ARM: vexpress/spc: Avoid negative array index when !SMP
- reset: tegra-bpmp: Restore Handle errors in BPMP response
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be
negative
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the
constant
- vxlan: fix error return code in vxlan_fdb_append
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT
- mt76: Fix undefined behavior due to shift overflowing the constant
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
- drm/msm/mdp5: check the return of kzalloc()
- net: macb: Restart tx only if queue pointer is lagging
- scsi: qedi: Fix failed disconnect handling
- stat: fix inconsistency between struct stat and struct compat_stat
- EDAC/synopsys: Read the error count from the correct register
- oom_kill.c: futex: delay the OOM reaper to allow time for proper futex
cleanup
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading
- dma: at_xdmac: fix a missing check on list iterator
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
- KVM: PPC: Fix TCE handling for VFIO
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- powerpc/perf: Fix power9 event alternatives
- xtensa: patch_text: Fixup last cpu should be master
- xtensa: fix a7 clobbering in coprocessor context load/store
- openvswitch: fix OOB access in reserve_sfa_size()
- ASoC: soc-dapm: fix two incorrect uses of list iterator
- e1000e: Fix possible overflow in LTR decoding
- ARC: entry: fix syscall_trace_exit argument
- arm_pmu: Validate single/group leader events
- ext4: fix symlink file size not match to file content
- ext4: fix use-after-free in ext4_search_dir
- ext4, doc: fix incorrect h_reserved size
- ext4: fix overhead calculation to account for the reserved gdt blocks
- ext4: force overhead calculation if the s_overhead_cluster makes no sense
- jbd2: fix a potential race while discarding reserved buffers after an abort
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and
controller
- staging: ion: Prevent incorrect reference counting behavour
- block/compat_ioctl: fix range check in BLKGETSIZE
- Linux 5.4.191
* Focal update: v5.4.190 upstream stable release (LP: #1973085)
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
- net/sched: flower: fix parsing of ethertype following VLAN header
- veth: Ensure eth header is in skb's linear part
- gpiolib: acpi: use correct format characters
- mlxsw: i2c: Fix initialization error flow
- net/sched: fix initialization order when updating chain 0 head
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
- net/sched: taprio: Check if socket flags are valid
- cfg80211: hold bss_lock while updating nontrans_list
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
- sctp: Initialize daddr on peeled off socket
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
- nfc: nci: add flush_workqueue to prevent uaf
- cifs: potential buffer overflow in handling symlinks
- drm/amd: Add USBC connector ID
- drm/amd/display: fix audio format not updated after edid updated
- drm/amd/display: Update VTEM Infopacket definition
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS
- drm/amdkfd: Check for potential null return of kmalloc_array()
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
- scsi: target: tcmu: Fix possible page UAF
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
- gpu: ipu-v3: Fix dev_dbg frequency output
- regulator: wm8994: Add an off-on delay for WM8994 variant
- arm64: alternatives: mark patch_alternative() as `noinstr`
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
- drm/amd/display: Fix allocate_mst_payload assert on resume
- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
- scsi: mvsas: Add PCI ID of RocketRaid 2640
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
- drivers: net: slip: fix NPD bug in sl_tx_timeout()
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant
- mm, page_alloc: fix build_zonerefs_node()
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
- gcc-plugins: latent_entropy: use /dev/urandom
- ath9k: Properly clear TX status area before reporting to mac80211
- ath9k: Fix usage of driver-private space in tx_info
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
- btrfs: mark resumed async balance as writing
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
- ipv6: fix panic when forwarding a pkt with no in6 dev
- drm/amd/display: don't ignore alpha property on pre-multiplied mode
- genirq/affinity: Consider that CPUs on nodes can be unbalanced
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
- ARM: davinci: da850-evm: Avoid NULL pointer dereference
- dm integrity: fix memory corruption when tag_size is less than digest size
- smp: Fix offline cpu check in flush_smp_call_function_queue()
- i2c: pasemi: Wait for write xfers to finish
- dma-direct: avoid redundant memory sync for swiotlb
- ax25: add refcount in ax25_dev to avoid UAF bugs
- ax25: fix reference count leaks of ax25_dev
- ax25: fix UAF bugs of net_device caused by rebinding operation
- ax25: Fix refcount leaks caused by ax25_cb_del()
- ax25: fix UAF bug in ax25_send_control()
- ax25: fix NPD bug in ax25_disconnect
- ax25: Fix NULL pointer dereferences in ax25 timers
- ax25: Fix UAF bugs in ax25 timers
- Linux 5.4.190
[ Ubuntu: 5.4.0-121.137 ]
* focal/linux: 5.4.0-121.137 -proposed tracker (LP: #1978666)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.05.30)
* CVE-2022-28388
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
path
* test_vxlan_under_vrf.sh in net from ubuntu_kernel_selftests failed (Check VM
connectivity through VXLAN (underlay in the default VRF) [FAIL])
(LP: #1871015)
- selftests: net: test_vxlan_under_vrf: fix HV connectivity test
* [UBUNTU 20.04] CPU-MF: add extended counter set definitions for new IBM z16
(LP: #1974433)
- s390/cpumf: add new extended counter set for IBM z16
* [UBUNTU 20.04] KVM nesting support leaks too much memory, might result in
stalls during cleanup (LP: #1974017)
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead
* [UBUNTU 20.04] Null Pointer issue in nfs code running Ubuntu on IBM Z
(LP: #1968096)
- NFS: Fix up nfs_ctx_key_to_expire()
[ Ubuntu: 5.4.0-120.136 ]
* CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166
- cpu/speculation: Add prototype for cpu_show_srbds()
- x86/cpu: Add Jasper Lake to Intel family
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel
CPU family
- x86/cpu: Add another Alder Lake CPU to the Intel family
- Documentation: Add documentation for Processor MMIO Stale Data
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
- x86/speculation: Add a common function for MD_CLEAR mitigation update
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
- x86/speculation/srbds: Update SRBDS mitigation selection
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
- KVM: x86/speculation: Disable Fill buffer clear within guests
- x86/speculation/mmio: Print SMT warning
[ Ubuntu: 5.4.0-117.132 ]
* CVE-2022-1966
- netfilter: nf_tables: add nft_set_elem_expr_alloc()
- netfilter: nf_tables: disallow non-stateful expression in sets earlier
[ Ubuntu: 5.4.0-115.129 ]
* CVE-2022-21499
- SAUCE: debug: Lock down kgdb
[ Ubuntu: 5.4.0-114.128 ]
* focal/linux: 5.4.0-114.128 -proposed tracker (LP: #1974391)
* 32 GT/s PCI link speeds reporting "Unknown speed" in sysfs (LP: #1970798)
- PCI: Add 32 GT/s decoding in some macros
- PCI: Add pci_speed_string()
- PCI: Use pci_speed_string() for all PCI/PCI-X/PCIe strings
- PCI: Add PCIE_LNKCAP2_SLS2SPEED() macro
* issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480)
- vsock: remove ratelimit unknown ioctl message
* config CONFIG_HISI_PMU for kunpeng920 (LP: #1956086)
- drivers/perf: hisi: Permit modular builds of HiSilicon uncore drivers
- [Config] CONFIG_HISI_PMU=m
* Focal update: v5.4.189 upstream stable release (LP: #1971497)
- swiotlb: fix info leak with DMA_FROM_DEVICE
- USB: serial: pl2303: add IBM device IDs
- USB: serial: simple: add Nokia phone driver
- netdevice: add the case if dev is NULL
- HID: logitech-dj: add new lightspeed receiver id
- xfrm: fix tunnel model fragmentation behavior
- virtio_console: break out of buf poll on remove
- ethernet: sun: Free the coherent when failing in probing
- spi: Fix invalid sgs value
- net:mcf8390: Use platform_get_irq() to get the interrupt
- spi: Fix erroneous sgs value with min_t()
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function
pfkey_register
- net: dsa: microchip: add spi_device_id tables
- iommu/iova: Improve 32-bit free space estimate
- tpm: fix reference counting for struct tpm_chip
- block: Add a helper to validate the block size
- virtio-blk: Use blk_validate_block_size() to validate block size
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
- xhci: fix runtime PM imbalance in USB2 resume
- xhci: make xhci_handshake timeout for xhci_reset() adjustable
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
- coresight: Fix TRCCONFIGR.QE sysfs interface
- iio: afe: rescale: use s64 for temporary scale calculations
- iio: inkern: apply consumer scale on IIO_VAL_INT cases
- iio: inkern: apply consumer scale when no channel scale is available
- iio: inkern: make a best effort on offset calculation
- greybus: svc: fix an error handling bug in gb_svc_hello()
- clk: uniphier: Fix fixed-rate initialization
- KEYS: fix length validation in keyctl_pkey_params_get_2()
- Documentation: add link to stable release candidate tree
- Documentation: update stable tree link
- HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
- SUNRPC: avoid race between mod_timer() and del_timer_sync()
- NFSD: prevent underflow in nfssvc_decode_writeargs()
- NFSD: prevent integer overflow on 32 bit systems
- f2fs: fix to unlock page correctly in error path of is_alive()
- f2fs: quota: fix loop condition at f2fs_quota_sync()
- f2fs: fix to do sanity check on .cp_pack_total_block_count
- pinctrl: samsung: drop pin banks references on error paths
- spi: mxic: Fix the transmit path
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
- jffs2: fix memory leak in jffs2_do_mount_fs
- jffs2: fix memory leak in jffs2_scan_medium
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
- mm: invalidate hwpoison page cache page in fault path
- mempolicy: mbind_range() set_policy() after vma_merge()
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
- qed: display VF trust config
- qed: validate and restrict untrusted VFs vlan promisc mode
- riscv: Fix fill_callchain return value
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
- ALSA: cs4236: fix an incorrect NULL check on list iterator
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
- mm,hwpoison: unmap poisoned page before invalidation
- mm/kmemleak: reset tag when compare object pointer
- drbd: fix potential silent data corruption
- powerpc/kvm: Fix kvm_use_magic_page
- udp: call udp_encap_enable for v6 sockets when enabling encap
- ACPI: properties: Consistently return -ENOENT if there are no more
references
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
- mailbox: tegra-hsp: Flush whole channel
- block: don't merge across cgroup boundaries if blkcg is enabled
- drm/edid: check basic audio support on CEA extension block
- video: fbdev: sm712fb: Fix crash in smtcfb_read()
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420
- carl9170: fix missing bit-wise or operator for tx_params
- thermal: int340x: Increase bitmap size
- lib/raid6/test: fix multiple definition linking error
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
- crypto: rsa-pkcs1pad - restore signature length check
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
- DEC: Limit PMAX memory probing to R3k systems
- media: davinci: vpif: fix unbalanced runtime PM get
- xtensa: fix stop_machine_cpuslocked call in patch_text
- xtensa: fix xtensa_wsr always writing 0
- brcmfmac: firmware: Allocate space for default boardrev in nvram
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
- brcmfmac: pcie: Fix crashes due to early IRQs
- PCI: pciehp: Clear cmd_busy bit in polling mode
- regulator: qcom_smd: fix for_each_child.cocci warnings
- crypto: authenc - Fix sleep in atomic context in decrypt_tail
- crypto: mxs-dcp - Fix scatterlist processing
- spi: tegra114: Add missing IRQ check in tegra_spi_probe
- selftests/x86: Add validity check and allow field splitting
- audit: log AUDIT_TIME_* records only from rules
- crypto: ccree - don't attempt 0 len DMA mappings
- spi: pxa2xx-pci: Balance reference count for PCI DMA device
- hwmon: (pmbus) Add mutex to regulator ops
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
- block: don't delete queue kobject before its children
- PM: hibernate: fix __setup handler error handling
- PM: suspend: fix return value of __setup handler
- hwrng: atmel - disable trng on failure path
- crypto: vmx - add missing dependencies
- clocksource/drivers/timer-of: Check return value of of_iomap in
timer_of_base_init()
- ACPI: APEI: fix return value of __setup handlers
- crypto: ccp - ccp_dmaengine_unregister release dma channels
- hwmon: (pmbus) Add Vin unit off handling
- clocksource: acpi_pm: fix return value of __setup handler
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
- perf/core: Fix address filter parser for multiple filters
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel
- f2fs: fix missing free nid in f2fs_handle_failed_inode
- f2fs: fix to avoid potential deadlock
- media: bttv: fix WARNING regression on tunerless devices
- media: coda: Fix missing put_device() call in coda_get_vdoa_data
- media: hantro: Fix overfill bottom register field name
- media: aspeed: Correct value for h-total-pixels
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
- video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
- ARM: dts: qcom: ipq4019: fix sleep clock
- soc: qcom: rpmpd: Check for null return of devm_kcalloc
- soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
- arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo
- media: video/hdmi: handle short reads of hdmi info frame.
- media: em28xx: initialize refcount before kref_get
- media: usb: go7007: s2250-board: fix leak in probe()
- uaccess: fix nios2 and microblaze get_user_8()
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
- ASoC: ti: davinci-i2s: Add check for clk_enable()
- ALSA: spi: Add check for clk_enable()
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property
- arm64: dts: broadcom: Fix sata nodename
- printk: fix return value of printk.devkmsg __setup handler
- ASoC: mxs-saif: Handle errors for clk_enable
- ASoC: atmel_ssc_dai: Handle errors for clk_enable
- ASoC: soc-compress: prevent the potentially use of null pointer
- memory: emif: Add check for setup_interrupts
- memory: emif: check the pointer temp in get_device_details()
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
- media: stk1160: If start stream fails, return buffers with
VB2_BUF_STATE_QUEUED
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
- ASoC: wm8350: Handle error for wm8350_register_irq
- ASoC: fsi: Add check for clk_enable
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
- ivtv: fix incorrect device_caps for ivtvfb
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in
msm8916_wcd_digital_probe
- mmc: davinci_mmc: Handle error for clk_enable
- ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
- drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
- udmabuf: validate ubuf->pagecount
- Bluetooth: hci_serdev: call init_rwsem() before p->open()
- mtd: onenand: Check for error irq
- mtd: rawnand: gpmi: fix controller timings setting
- drm/edid: Don't clear formats if using deep color
- drm/amd/display: Fix a NULL pointer dereference in
amdgpu_dm_connector_add_common_modes()
- ath9k_htc: fix uninit value bugs
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
- ray_cs: Check ioremap return value
- powerpc/perf: Don't use perf_hw_context for trace IMC PMU
- mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
- mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
- net: dsa: mv88e6xxx: Enable port policy support on 6097
- PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
- iommu/ipmmu-vmsa: Check for error num after setting mask
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
- IB/cma: Allow XRC INI QPs to set their local ACK timeout
- dax: make sure inodes are flushed before destroy cache
- iwlwifi: Fix -EIO error code that is never returned
- iwlwifi: mvm: Fix an error code in iwl_mvm_up()
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
- scsi: pm8001: Fix abort all task initialization
- drm/amd/display: Remove vupdate_int_entry definition
- TOMOYO: fix __setup handlers return values
- ext2: correct max file size computing
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false
return
- scsi: hisi_sas: Change permission of parameter prot_mask
- drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
- bpf, arm64: Call build_prologue() first in first JIT pass
- bpf, arm64: Feed byte-offset into bpf line info
- libbpf: Skip forward declaration when counting duplicated type names
- powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
- KVM: x86: Fix emulation in writing cr8
- KVM: x86/emulator: Defer not-present segment check in
__load_segment_descriptor()
- hv_balloon: rate-limit "Unhandled message" warning
- i2c: xiic: Make bus names unique
- power: supply: wm8350-power: Handle error for wm8350_register_irq
- power: supply: wm8350-power: Add missing free in free_charger_irq
- PCI: Reduce warnings on possible RW1C corruption
- mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
- powerpc/sysdev: fix incorrect use to determine if list is empty
- mfd: mc13xxx: Add check for mc13xxx_irq_request
- selftests/bpf: Make test_lwt_ip_encap more stable and faster
- powerpc: 8xx: fix a return value error in mpc8xx_pic_init
- vxcan: enable local echo for sent CAN frames
- MIPS: RB532: fix return value of __setup handler
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
- bpf, sockmap: Fix more uncharged while msg has more_data
- bpf, sockmap: Fix double uncharge the mem of sk_msg
- USB: storage: ums-realtek: fix error code in rts51x_read_mem()
- Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
- af_netlink: Fix shift out of bounds in group mask calculation
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active
- selftests/bpf/test_lirc_mode2.sh: Exit with proper code
- tcp: ensure PMTU updates are processed during fastopen
- openvswitch: always update flow key after nat
- tipc: fix the timer expires after interval 100ms
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
- mxser: fix xmit_buf leak in activate when LSR == 0xff
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
- misc: alcor_pci: Fix an error handling path
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
- pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
- clk: qcom: ipq8074: Use floor ops for SDCC1 clock
- phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
- serial: 8250_mid: Balance reference count for PCI DMA device
- serial: 8250: Fix race condition in RTS-after-send handling
- iio: adc: Add check for devm_request_threaded_irq
- NFS: Return valid errors from nfs2/3_decode_dirent()
- dma-debug: fix return value of __setup handlers
- clk: imx7d: Remove audio_mclk_root_clk
- clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
- clk: qcom: clk-rcg2: Update the frac table for pixel clock
- remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
- remoteproc: qcom_wcnss: Add missing of_node_put() in
wcnss_alloc_memory_region
- clk: actions: Terminate clk_div_table with sentinel element
- clk: loongson1: Terminate clk_div_table with sentinel element
- clk: clps711x: Terminate clk_div_table with sentinel element
- clk: tegra: tegra124-emc: Fix missing put_device() call in
emc_ensure_emc_driver
- NFS: remove unneeded check in decode_devicenotify_args()
- staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
- pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
- pinctrl: mediatek: paris: Fix pingroup pin config state readback
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
- tty: hvc: fix return value of __setup handler
- kgdboc: fix return value of __setup handler
- kgdbts: fix return value of __setup handler
- firmware: google: Properly state IOMEM dependency
- driver core: dd: fix return value of __setup handler
- jfs: fix divide error in dbNextAG
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
- clk: qcom: gcc-msm8994: Fix gpll4 width
- clk: Initialize orphan req_rate
- xen: fix is_xen_pmu()
- net: phy: broadcom: Fix brcm_fet_config_init()
- selftests: test_vxlan_under_vrf: Fix broken test case
- qlcnic: dcb: default to returning -EOPNOTSUPP
- net/x25: Fix null-ptr-deref caused by x25_disconnect
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
- lib/test: use after free in register_test_dev_kmod()
- LSM: general protection fault in legacy_parse_param
- gcc-plugins/stackleak: Exactly match strings instead of prefixes
- pinctrl: npcm: Fix broken references to chip->parent_device
- block, bfq: don't move oom_bfqq
- selinux: use correct type for context length
- loop: use sysfs_emit() in the sysfs xxx show()
- Fix incorrect type in assignment of ipv6 port for audit
- irqchip/qcom-pdc: Fix broken locking
- irqchip/nvic: Release nvic_base upon failure
- bfq: fix use-after-free in bfq_dispatch_request
- ACPICA: Avoid walking the ACPI Namespace if it is not there
- lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
- Revert "Revert "block, bfq: honor already-setup queue merges""
- ACPI/APEI: Limit printable size of BERT table data
- PM: core: keep irq flags in device_pm_check_callbacks()
- spi: tegra20: Use of_device_get_match_data()
- ext4: don't BUG if someone dirty pages without asking ext4 first
- ntfs: add sanity check on allocation size
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
- video: fbdev: w100fb: Reset global state
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
- ARM: dts: bcm2837: Add the missing L1/L2 cache information
- ASoC: madera: Add dependencies on MFD
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of
snprintf()
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
- ASoC: soc-core: skip zero num_dai component in searching dai name
- media: cx88-mpeg: clear interrupt status register before streaming video
- ARM: tegra: tamonten: Fix I2C3 pad setting
- ARM: mmp: Fix failure to remove sram device
- video: fbdev: sm712fb: Fix crash in smtcfb_write()
- media: Revert "media: em28xx: add missing em28xx_close_extension"
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup
- powerpc/lib/sstep: Fix 'sthcx' instruction
- powerpc/lib/sstep: Fix build errors with newer binutils
- powerpc: Fix build errors with newer binutils
- scsi: qla2xxx: Fix stuck session in gpdb
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
- scsi: qla2xxx: Fix warning for missing error code
- scsi: qla2xxx: Fix device reconnect in loop topology
- scsi: qla2xxx: Add devids and conditionals for 28xx
- scsi: qla2xxx: Check for firmware dump already collected
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- scsi: qla2xxx: Fix disk failure to rediscover
- scsi: qla2xxx: Fix incorrect reporting of task management failure
- scsi: qla2xxx: Fix hang due to session stuck
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
- scsi: qla2xxx: Fix N2N inconsistent PLOGI
- scsi: qla2xxx: Reduce false trigger to login
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing
- KVM: Prevent module exit until all VMs are freed
- KVM: x86: fix sending PV IPI
- ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- ubifs: rename_whiteout: correct old_dir size computing
- XArray: Fix xas_create_range() when multi-order entry present
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
- can: mcba_usb: properly check endpoint type
- XArray: Update the LRU list in xas_split()
- rtc: check if __rtc_read_time was successful
- gfs2: Make sure FITRIM minlen is rounded up to fs block size
- net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
- pinctrl: pinconf-generic: Print arguments for bias-pull-*
- pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
- pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
- ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- ARM: iop32x: offset IRQ numbers by 1
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- powerpc/kasan: Fix early region not updated correctly
- ASoC: soc-compress: Change the check for codec_dai
- mm/mmap: return 1 from stack_guard_gap __setup() handler
- mm/memcontrol: return 1 from cgroup.memory __setup() handler
- mm/usercopy: return 1 from hardened_usercopy __setup() handler
- bpf: Fix comment for helper bpf_current_task_under_cgroup()
- dt-bindings: mtd: nand-controller: Fix the reg property description
- dt-bindings: mtd: nand-controller: Fix a comment in the examples
- dt-bindings: spi: mxic: The interrupt property is not mandatory
- ubi: fastmap: Return error code if memory allocation fails in add_aeb()
- ASoC: topology: Allow TLV control to be either read or write
- ARM: dts: spear1340: Update serial node properties
- ARM: dts: spear13xx: Update SPI dma properties
- um: Fix uml_mconsole stop/go
- openvswitch: Fixed nd target mask field in the flow dump.
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
- ubifs: Rectify space amount budget for mkdir/tmpfile operations
- rtc: wm8350: Handle error for wm8350_register_irq
- riscv module: remove (NOLOAD)
- ARM: 9187/1: JIVE: fix return value of __setup handler
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
- drm: Add orientation quirk for GPD Win Max
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
- ptp: replace snprintf with sysfs_emit
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
- bpf: Make dst_port field in struct bpf_sock 16-bit wide
- scsi: mvsas: Replace snprintf() with sysfs_emit()
- scsi: bfa: Replace snprintf() with sysfs_emit()
- power: supply: axp20x_battery: properly report current when discharging
- ipv6: make mc_forwarding atomic
- powerpc: Set crashkernel offset to mid of RMA region
- drm/amdgpu: Fix recursive locking warning
- PCI: aardvark: Fix support for MSI interrupts
- iommu/arm-smmu-v3: fix event handling soft lockup
- usb: ehci: add pci device support for Aspeed platforms
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- power: supply: axp288-charger: Set Vhold to 4.4V
- ipv4: Invalidate neighbour for broadcast address upon address addition
- dm ioctl: prevent potential spectre v1 gadget
- drm/amdkfd: make CRAT table missing message informational only
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
- scsi: aha152x: Fix aha152x_setup() __setup handler return value
- net/smc: correct settings of RMB window update limit
- mips: ralink: fix a refcount leak in ill_acc_of_setup()
- macvtap: advertise link netns via netlink
- tuntap: add sanity checks about msg_controllen in sendmsg
- bnxt_en: Eliminate unintended link toggle during FW reset
- MIPS: fix fortify panic when copying asm exception handlers
- scsi: libfc: Fix use after free in fc_exch_abts_resp()
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
- xtensa: fix DTC warning unit_address_format
- Bluetooth: Fix use after free in hci_send_acl
- netlabel: fix out-of-bounds memory accesses
- init/main.c: return 1 from handled __setup() functions
- minix: fix bug when opening a file with O_DIRECT
- clk: si5341: fix reported clk_rate when output divider is 2
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors
- NFSv4: Protect the state recovery thread against direct reclaim
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
- clk: Enforce that disjoints limits are invalid
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory
- NFS: swap IO handling is slightly different for O_DIRECT IO
- NFS: swap-out must always use STABLE writes.
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
- virtio_console: eliminate anonymous module_init & module_exit
- jfs: prevent NULL deref in diFree
- SUNRPC: Fix socket waits for write buffer space
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips
- parisc: Fix patch code locking and flushing
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
- Drivers: hv: vmbus: Fix potential crash on module unload
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
- net/tls: fix slab-out-of-bounds bug in decrypt_internal
- net: ipv4: fix route with nexthop object delete warning
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
- drm/imx: Fix memory leak in imx_pd_connector_get_modes
- bnxt_en: reserve space inside receive page for skb_shared_info
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
- ipv6: Fix stats accounting in ip6_pkt_drop
- net: openvswitch: don't send internal clone attribute to the userspace.
- rxrpc: fix a race in rxrpc_exit_net()
- qede: confirm skb is allocated before using
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
- drbd: Fix five use after free bugs in get_initial_state
- SUNRPC: Handle ENOMEM in call_transmit_status()
- SUNRPC: Handle low memory situations in call_status()
- perf tools: Fix perf's libperf_print callback
- perf session: Remap buf if there is no space for event
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
- mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is
complete
- lz4: fix LZ4_decompress_safe_partial read out of bound
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace
- x86/pm: Save the MSR validity status at context setup
- x86/speculation: Restore speculation related MSRs during S3 resume
- btrfs: fix qgroup reserve overflow the qgroup limit
- arm64: patch_text: Fixup last cpu should be master
- ata: sata_dwc_460ex: Fix crash due to OOB write
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling
- tools build: Filter out options and warnings not supported by clang
- tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros
- mmc: mmci: stm32: correctly check all elements of sg list
- mm: don't skip swap entry even if zap_details specified
- arm64: module: remove (NOLOAD) from linker script
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
- drm/amdkfd: add missing void argument to function kgd2kfd_init
- drm/amdkfd: Fix -Wstrict-prototypes from
amdgpu_amdkfd_gfx_10_0_get_functions()
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
- selftests: cgroup: Test open-time credential usage for migration checks
- selftests: cgroup: Test open-time cgroup namespace usage for migration
checks
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function
- ACPI: processor idle: Check for architectural support for LPI
- Linux 5.4.189
* Focal update: v5.4.188 upstream stable release (LP: #1971496)
- nfsd: cleanup nfsd_file_lru_dispose()
- nfsd: Containerise filecache laundrette
- net: ipv6: fix skb_over_panic in __ip6_append_data
- tpm: Fix error handling in async work
- staging: fbtft: fb_st7789v: reset display before initialization
- thermal: int340x: fix memory leak in int3400_notify()
- llc: fix netdevice reference leaks in llc_ui_bind()
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- drivers: net: xgene: Fix regression in CRC stripping
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
- ALSA: oss: Fix PCM OSS buffer allocation overflow
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
- ALSA: hda/realtek: Add quirk for ASUS GA402
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- crypto: qat - disable registration of algorithms
- rcu: Don't deboost before reporting expedited quiescent state
- mac80211: fix potential double free on mesh join
- tpm: use try_get_ops() in tpm-space.c
- nds32: fix access_ok() checks in get/put_user
- llc: only change llc->dev when bind() succeeds
- Linux 5.4.188
* Focal update: v5.4.187 upstream stable release (LP: #1971493)
- crypto: qcom-rng - ensure buffer for generate is completely filled
- ocfs2: fix crash when initialize filecheck kobj fails
- efi: fix return value of __setup handlers
- net: phy: marvell: Fix invalid comparison in the resume and suspend
functions
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- hv_netvsc: Add check for kvmalloc_array
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- net: dsa: Add missing of_node_put() in dsa_port_parse_of
- arm64: fix clang warning about TRAMP_VALIAS
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- usb: usbtmc: Fix bug in pipe direction for control transfers
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- Linux 5.4.187
* Focal update: v5.4.186 upstream stable release (LP: #1969678)
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
- sctp: fix the processing for INIT chunk
- xfrm: Check if_id in xfrm_migrate
- xfrm: Fix xfrm migrate issues when address family changes
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
- arm64: dts: rockchip: reorder rk3399 hdmi clocks
- arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg"
- ARM: dts: rockchip: reorder rk322x hmdi clocks
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
- mac80211: refuse aggregations sessions before authorized
- MIPS: smp: fill in sibling and core maps earlier
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when
fully ready
- atm: firestream: check the return value of ioremap() in fs_init()
- iwlwifi: don't advertise TWT support
- drm/vrr: Set VRR capable prop only if it is attached to connector
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- tcp: make tcp_read_sock() more robust
- sfc: extend the locking on mcdi->seqno
- kselftest/vm: fix tests build with old libc
- fixup for "arm64 entry: Add macro for reading symbol address from the
trampoline"
- Linux 5.4.186
* Focal update: v5.4.185 upstream stable release (LP: #1969672)
- clk: qcom: gdsc: Add support to update GDSC transition delay
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
- net: qlogic: check the return value of dma_alloc_coherent() in
qed_vf_hw_prepare()
- qed: return status of qed_iov_get_link
- drm/sun4i: mixer: Fix P010 and P210 format numbers
- ARM: dts: aspeed: Fix AST2600 quad spi group
- ethernet: Fix error handling in xemaclite_of_probe
- net: ethernet: ti: cpts: Handle error for clk_enable
- net: ethernet: lpc_eth: Handle error for clk_enable
- ax25: Fix NULL pointer dereference in ax25_kill_by_device
- net/mlx5: Fix size field in bufferx_reg struct
- net/mlx5: Fix a race on command flush flow
- NFC: port100: fix use-after-free in port100_send_complete
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell.
- gpio: ts4900: Do not set DAT and OE together
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
- net: phy: DP83822: clear MISR2 register to disable interrupts
- sctp: fix kernel-infoleak for SCTP sockets
- net: bcmgenet: Don't claim WOL when its not available
- net-sysfs: add check for netdevice being present to speed_show
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
- Revert "xen-netback: Check for hotplug-status existence before watching"
- ipv6: prevent a possible race condition with lifetimes
- tracing: Ensure trace buffer is at least 4096 bytes large
- selftest/vm: fix map_fixed_noreplace test failure
- selftests/memfd: clean up mapping in mfd_fail_write
- ARM: Spectre-BHB: provide empty stub for non-config
- fuse: fix pipe buffer lifetime for direct_io
- staging: gdm724x: fix use after free in gdm_lte_rx()
- net: macb: Fix lost RX packet wakeup race in NAPI receive
- mmc: meson: Fix usage of meson_mmc_post_req()
- riscv: Fix auipc+jalr relocation range checks
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0
- virtio: unexport virtio_finalize_features
- virtio: acknowledge all features before access
- ARM: fix Thumb2 regression with Spectre BHB
- ext4: add check to prevent attempting to resize an fs with sparse_super2
- x86/cpufeatures: Mark two free bits in word 3
- x86/cpu: Add hardware-enforced cache coherency as a CPUID feature
- x86/mm/pat: Don't flush cache if hardware enforces cache coherency across
encryption domnains
- KVM: SVM: Don't flush cache if hardware enforces cache coherency across
encryption domains
- Linux 5.4.185
* Focal update: v5.4.184 upstream stable release (LP: #1969242)
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()
- ARM: report Spectre v2 status through sysfs
- ARM: early traps initialisation
- ARM: use LOADADDR() to get load address of sections
- [Config] updateconfigs for HARDEN_BRANCH_HISTORY
- ARM: Spectre-BHB workaround
- ARM: include unprivileged BPF status in Spectre V2 reporting
- ARM: fix build error when BPF_SYSCALL is disabled
- ARM: fix co-processor register typo
- ARM: Do not use NOCROSSREFS directive with ld.lld
- ARM: fix build warning in proc-v7-bugs.c
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
- xen/grant-table: add gnttab_try_end_foreign_access()
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
- xen/gntalloc: don't use gnttab_query_foreign_access()
- xen: remove gnttab_query_foreign_access()
- xen/9p: use alloc/free_pages_exact()
- xen/pvcalls: use alloc/free_pages_exact()
- xen/gnttab: fix gnttab_end_foreign_access() without page specified
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
- Linux 5.4.184
* Focal update: v5.4.183 upstream stable release (LP: #1969239)
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- i2c: bcm2835: Avoid clock stretching timeouts
- ASoC: rt5668: do not block workqueue if card is unbound
- ASoC: rt5682: do not block workqueue if card is unbound
- Input: clear BTN_RIGHT/MIDDLE on buttonpads
- cifs: fix double free race when mount fails in cifs_get_root()
- dmaengine: shdma: Fix runtime PM imbalance on error
- i2c: cadence: allow COMPILE_TEST
- i2c: qup: allow COMPILE_TEST
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- usb: gadget: don't release an existing dev->buf
- usb: gadget: clear related members when goto fail
- ata: pata_hpt37x: fix PCI clock detection
- ALSA: intel_hdmi: Fix reference to PCM buffer address
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- xfrm: enforce validity of offload input flags
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- block: Fix fsync always failed if once failed
- xen/netfront: destroy queues before real_num_tx_queues is zeroed
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
- ia64: ensure proper NUMA distance and possible map initialization
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- iavf: Fix missing check for running netdev
- net: sxgbe: fix return value of __setup handler
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
- efivars: Respect "block" flag in efivar_entry_set_safe()
- firmware: arm_scmi: Remove space in MODULE_ALIAS name
- ASoC: cs4265: Fix the duplicated control name
- can: gs_usb: change active_channels's type from atomic_t to u8
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
- igc: igc_read_phy_reg_gpy: drop premature return
- ARM: Fix kgdb breakpoint for Thumb2
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
- igc: igc_write_phy_reg_gpy: drop premature return
- ibmvnic: free reset-work-item when flushing
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- soc: fsl: qe: Check of ioremap return value
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- nl80211: Handle nla_memdup failures in handle_nan_filter
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
- HID: add mapping for KEY_DICTATE
- HID: add mapping for KEY_ALL_APPLICATIONS
- tracing/histogram: Fix sorting on old "cpu" value
- tracing: Fix return value of __setup handlers
- btrfs: fix lost prealloc extents beyond eof after full fsync
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
- btrfs: add missing run of delayed items after unlink during log replay
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
- net: dcb: disable softirqs in dcbnl_flush_dev()
- hamradio: fix macro redefine warning
- Linux 5.4.183
* Focal update: v5.4.182 upstream stable release (LP: #1969236)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
- clk: jz4725b: fix mmc0 clock gating
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
- parisc/unaligned: Fix ldw() and stw() unalignment handlers
- drm/amdgpu: disable MMHUB PG for Picasso
- sr9700: sanity check for packet length
- USB: zaurus: support another broken Zaurus
- x86/fpu: Correct pkru/xstate inconsistency
- tee: export teedev_open() and teedev_close_context()
- optee: use driver internal tee_context for some rpc
- lan743x: fix deadlock in lan743x_phy_link_status_change()
- ping: remove pr_err from ping_lookup
- perf data: Fix double free in perf_session__delete()
- bpf: Do not try bpf_msg_push_data with len 0
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
- tipc: Fix end of loop tests for list_for_each_entry()
- gso: do not skip outer ip header in case of ipip and net_failover
- openvswitch: Fix setting ipv6 fields causing hw csum failure
- drm/edid: Always set RGB444
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
- net: ll_temac: check the return value of devm_kmalloc()
- net: Force inlining of checksum functions in net/checksum.h
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
- netfilter: nf_tables: fix memory leak during stateful obj update
- net/mlx5: Fix possible deadlock on rule deletion
- net/mlx5: Fix wrong limitation of metadata match on ecpf
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in
zynq_qspi_exec_mem_op()
- configfs: fix a race in configfs_{,un}register_subsystem()
- RDMA/ib_srp: Fix a deadlock
- tracing: Have traceon and traceoff trigger honor the instance
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
- iio: Fix error handling for PM
- ata: pata_hpt37x: disable primary channel on HPT371
- Revert "USB: serial: ch341: add new Product ID for CH341A"
- usb: gadget: rndis: add spinlock for rndis response list
- tracefs: Set the group ownership in apply_options() not parse_options()
- USB: serial: option: add support for DW5829e
- USB: serial: option: add Telit LE910R1 compositions
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
- xhci: re-initialize the HC during resume if HCE was set
- xhci: Prevent futile URB re-submissions due to incorrect return value.
- tty: n_gsm: fix encoding of control signal octet bit DV
- tty: n_gsm: fix proper link termination after failed open
- tty: n_gsm: fix NULL pointer access due to DLCI release
- gpio: tegra186: Fix chip_data type confusion
- Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of
DEVINIT/PREOS/ACR"
- memblock: use kfree() to release kmalloced memblock regions
- fget: clarify and improve __fget_files() implementation
- Linux 5.4.182
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
[ Ubuntu: 5.4.0-113.127 ]
* focal/linux: 5.4.0-113.127 -proposed tracker (LP: #1973980)
* CVE-2022-29581
- net/sched: cls_u32: fix netns refcount changes in u32_change()
* CVE-2022-1116
- io_uring: fix fs->users overflow
* ext4: limit length to bitmap_maxbytes (LP: #1972281)
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
option (LP: #1972740)
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
[ Ubuntu: 5.4.0-110.124 ]
* focal/linux: 5.4.0-110.124 -proposed tracker (LP: #1969053)
* net/mlx5e: Fix page DMA map/unmap attributes (LP: #1967292)
- net/mlx5e: Fix page DMA map/unmap attributes
* xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()
(LP: #1966803)
- xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()
* LRMv6: add multi-architecture support (LP: #1968774)
- [Packaging] resync dkms-build{,--nvidia-N}
* xfrm interface cannot be changed anymore (LP: #1968591)
- xfrm: fix the if_id check in changelink
* Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
- [Debian] Use kernel-testing repo from launchpad
* vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
selector (got 50)) (LP: #1956315)
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
* [SRU][Regression] Revert "PM: ACPI: reboot: Use S5 for reboot" which causes
Bus Fatal Error when rebooting system with BCM5720 NIC (LP: #1917471)
- Revert "PM: ACPI: reboot: Use S5 for reboot"
* Focal update: v5.4.181 upstream stable release (LP: #1967582)
- Makefile.extrawarn: Move -Wunaligned-access to W=1
- HID:Add support for UGTABLET WP5540
- Revert "svm: Add warning message for AVIC IPI invalid target"
- serial: parisc: GSC: fix build when IOSAPIC is not set
- parisc: Drop __init from map_pages declaration
- parisc: Fix data TLB miss in sba_unmap_sg
- parisc: Fix sglist access in ccio-dma.c
- btrfs: send: in case of IO error log it
- platform/x86: ISST: Fix possible circular locking dependency detected
- selftests: rtc: Increase test timeout so that all tests run
- net: ieee802154: at86rf230: Stop leaking skb's
- selftests/zram: Skip max_comp_streams interface on newer kernel
- selftests/zram01.sh: Fix compression ratio calculation
- selftests/zram: Adapt the situation that /dev/zram0 is being used
- ax25: improve the incomplete fix to avoid UAF and NPD bugs
- vfs: make freeze_super abort when sync_filesystem returns error
- quota: make dquot_quota_sync return errors from ->sync_fs
- nvme: fix a possible use-after-free in controller reset during load
- nvme-tcp: fix possible use-after-free in transport error_recovery work
- nvme-rdma: fix possible use-after-free in transport error_recovery work
- drm/amdgpu: fix logic inversion in check
- Revert "module, async: async_synchronize_full() on module init iff async is
used"
- ftrace: add ftrace_init_nop()
- module/ftrace: handle patchable-function-entry
- arm64: module: rework special section handling
- arm64: module/ftrace: intialize PLT at load time
- iwlwifi: fix use-after-free
- drm/radeon: Fix backlight control on iMac 12,1
- ext4: check for out-of-order index extents in ext4_valid_extent_entries()
- ext4: check for inconsistent extents between index and leaf block
- ext4: prevent partial update of the extent blocks
- taskstats: Cleanup the use of task->exit_code
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
- vsock: remove vsock from connected table when connect is interrupted by a
signal
- mmc: block: fix read single on recovery logic
- iwlwifi: pcie: fix locking when "HW not ready"
- iwlwifi: pcie: gen2: fix locking when "HW not ready"
- netfilter: nft_synproxy: unregister hooks on init error path
- net: dsa: lan9303: fix reset on probe
- net: ieee802154: ca8210: Fix lifs/sifs periods
- ping: fix the dif and sdif check in ping_lookup
- bonding: force carrier update when releasing slave
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
- bonding: fix data-races around agg_select_timer
- libsubcmd: Fix use-after-free for realloc(..., 0)
- ALSA: hda: Fix regression on forced probe mask option
- ALSA: hda: Fix missing codec probe on Shenker Dock 15
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
- powerpc/lib/sstep: fix 'ptesync' build error
- mtd: rawnand: gpmi: don't leak PM reference in error path
- block/wbt: fix negative inflight counter when remove scsi device
- NFS: LOOKUP_DIRECTORY is also ok with symlinks
- NFS: Do not report writeback errors in nfs_getattr()
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
- EDAC: Fix calculation of returned address and next offset in
edac_align_ptr()
- net: sched: limit TC_ACT_REPEAT loops
- dmaengine: sh: rcar-dmac: Check for error num after setting mask
- copy_process(): Move fd_install() out of sighand->siglock critical section
- i2c: brcmstb: fix support for DSL and CM variants
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
- ARM: OMAP2+: hwmod: Add of_node_put() before break
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
- irqchip/sifive-plic: Add missing thead,c900-plic match string
- netfilter: conntrack: don't refresh sctp entries in closed state
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
- kconfig: let 'shell' return enough output for deep path names
- ata: libata-core: Disable TRIM on M88V29
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot
- net: usb: qmi_wwan: Add support for Dell DW5829e
- net: macb: Align the dma and coherent dma masks
- kconfig: fix failing to generate auto.conf
- Linux 5.4.181
* Focal update: v5.4.180 upstream stable release (LP: #1966118)
- integrity: check the return value of audit_log_start()
- ima: Remove ima_policy file before directory
- ima: Allow template selection with ima_template[_fmt]= after ima_hash=
- ima: Do not print policy rule with inactive LSM labels
- mmc: sdhci-of-esdhc: Check for error num after setting mask
- net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
- net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
- NFS: Fix initialisation of nfs_client cl_flags field
- NFSD: Clamp WRITE offsets
- NFSD: Fix offset type in I/O trace points
- NFSv4 only print the label when its queried
- nfs: nfs4clinet: check the return value of kstrdup()
- NFSv4.1: Fix uninitialised variable in devicenotify
- NFSv4 remove zero number of fs_locations entries error check
- NFSv4 expose nfs_parse_server_name function
- drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
- net: sched: Clarify error message when qdisc kind is unknown
- scsi: target: iscsi: Make sure the np under each tpg is unique
- scsi: qedf: Fix refcount issue when LOGO is received during TMF
- scsi: myrs: Fix crash in error case
- PM: hibernate: Remove register_nosave_region_late()
- usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
- riscv: fix build with binutils 2.38
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
- ARM: socfpga: fix missing RESET_CONTROLLER
- nvme-tcp: fix bogus request completion when failing to send AER
- ACPI/IORT: Check node revision for PMCG resources
- PM: s2idle: ACPI: Fix wakeup interrupts handling
- net: bridge: fix stale eth hdr pointer in br_dev_xmit
- perf probe: Fix ppc64 'perf probe add events failed' case
- ARM: dts: meson: Fix the UART compatible strings
- staging: fbtft: Fix error path in fbtft_driver_module_init()
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
- usb: f_fs: Fix use-after-free for epfile
- misc: fastrpc: avoid double fput() on failed usercopy
- ixgbevf: Require large buffers for build_skb on 82599VF
- bonding: pair enable_port with slave_arr_updates
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- nfp: flower: fix ida_idx not being released
- net: do not keep the dst cache when uncloning an skb dst and its metadata
- net: fix a memleak when uncloning an skb dst and its metadata
- veth: fix races around rq->rx_notify_masked
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
- tipc: rate limit warning for received illegal binding update
- net: amd-xgbe: disable interrupts during pci removal
- vt_ioctl: fix array_index_nospec in vt_setactivate
- vt_ioctl: add array_index_nospec to VT_ACTIVATE
- n_tty: wake up poll(POLLRDNORM) on receiving data
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- usb: ulpi: Move of_node_put to ulpi_dev_release
- usb: ulpi: Call of_node_put correctly
- usb: dwc3: gadget: Prevent core from processing stale TRBs
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
- USB: gadget: validate interface OS descriptor requests
- usb: gadget: rndis: check size of RNDIS_MSG_SET command
- usb: gadget: f_uac2: Define specific wTerminalType
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
- USB: serial: option: add ZTE MF286D modem
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
- USB: serial: cp210x: add NCR Retail IO box id
- USB: serial: cp210x: add CPI Bulk Coin Recycler id
- seccomp: Invalidate seccomp mode to catch death failures
- hwmon: (dell-smm) Speed up setting of fan speed
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
- perf: Fix list corruption in perf_cgroup_switch()
- Linux 5.4.180
* Focal update: v5.4.179 upstream stable release (LP: #1965591)
- moxart: fix potential use-after-free on remove path
- Linux 5.4.179
* CVE-2020-27820
- drm/nouveau: Add a dedicated mutex for the clients list
- drm/nouveau: clean up all clients on device removal
* CVE-2022-1016
- netfilter: nf_tables: initialize registers in nft_do_chain()
* CVE-2022-27223
- USB: gadget: validate endpoint index for xilinx udc
* CVE-2022-26490
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
* CVE-2021-26401
- x86/speculation: Use generic retpoline by default on AMD
- x86/speculation: Update link to AMD speculation whitepaper
- x86/speculation: Warn about Spectre v2 LFENCE mitigation
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
* CVE-2022-0001
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
reporting
[ Ubuntu: 5.4.0-109.123 ]
* focal/linux: 5.4.0-109.123 -proposed tracker (LP: #1968290)
* USB devices not detected during boot on USB 3.0 hubs (LP: #1968210)
- SAUCE: Revert "Revert "xhci: Set HCD flag to defer primary roothub
registration""
- SAUCE: Revert "Revert "usb: core: hcd: Add support for deferring roothub
registration""
[ Ubuntu: 5.4.0-108.122 ]
* focal/linux: 5.4.0-108.122 -proposed tracker (LP: #1966740)
* Packaging resync (LP: #1786013)
- [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
- debian/dkms-versions -- update from kernel-versions (main/2022.03.21)
* Low RX performance for 40G Solarflare NICs (LP: #1964512)
- SAUCE: sfc: The size of the RX recycle ring should be more flexible
* [UBUNTU 20.04] KVM: Enable storage key checking for intercepted instruction
(LP: #1962831)
- selftests: kvm: add _vm_ioctl
- selftests: kvm: Introduce the TEST_FAIL macro
- KVM: selftests: Add GUEST_ASSERT variants to pass values to host
- KVM: s390: gaccess: Refactor gpa and length calculation
- KVM: s390: gaccess: Refactor access address range check
- KVM: s390: gaccess: Cleanup access to guest pages
- s390/uaccess: introduce bit field for OAC specifier
- s390/uaccess: fix compile error
- s390/uaccess: Add copy_from/to_user_key functions
- KVM: s390: Honor storage keys when accessing guest memory
- KVM: s390: handle_tprot: Honor storage keys
- KVM: s390: selftests: Test TEST PROTECTION emulation
- KVM: s390: Add optional storage key checking to MEMOP IOCTL
- KVM: s390: Add vm IOCTL for key checked guest absolute memory access
- KVM: s390: Rename existing vcpu memop functions
- KVM: s390: Add capability for storage key extension of MEM_OP IOCTL
- KVM: s390: Update api documentation for memop ioctl
- KVM: s390: Clarify key argument for MEM_OP in api docs
- KVM: s390: Add missing vm MEM_OP size check
* 【sec-0911】 fail to reset sec module (LP: #1943301)
- crypto: hisilicon/sec2 - Add workqueue for SEC driver.
- crypto: hisilicon/sec2 - update SEC initialization and reset
* Lots of hisi_qm zombie task slow down system after stress test
(LP: #1932117)
- crypto: hisilicon - Use one workqueue per qm instead of per qp
* Lots of hisi_qm zombie task slow down system after stress test
(LP: #1932117) // 【sec-0911】 fail to reset sec module (LP: #1943301)
- crypto: hisilicon - Unify hardware error init/uninit into QM
* [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
- KVM: s390: Simplify SIGP Set Arch handling
- KVM: s390: Add a routine for setting userspace CPU state
* Move virtual graphics drivers from linux-modules-extra to linux-modules
(LP: #1960633)
- [Packaging] Move VM DRM drivers into modules
* Focal update: v5.4.178 upstream stable release (LP: #1964634)
- audit: improve audit queue handling when "audit=1" on cmdline
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- ALSA: usb-audio: Simplify quirk entries with a macro
- ALSA: hda/realtek: Add quirk for ASUS GU603
- ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
quirks
- ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
chipset)
- ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
reboot from Windows
- btrfs: fix deadlock between quota disable and qgroup rescan worker
- drm/nouveau: fix off by one in BIOS boundary checking
- mm/kmemleak: avoid scanning potential huge holes
- block: bio-integrity: Advance seed correctly for larger interval sizes
- memcg: charge fs_context and legacy_fs_context
- IB/rdmavt: Validate remote_addr during loopback atomic tests
- RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
- RDMA/mlx4: Don't continue event handler after memory allocation failure
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
- spi: bcm-qspi: check for valid cs before applying chip select
- spi: mediatek: Avoid NULL pointer crash in interrupt
- spi: meson-spicc: add IRQ check in meson_spicc_probe
- net: ieee802154: hwsim: Ensure proper channel selection at probe time
- net: ieee802154: mcr20a: Fix lifs/sifs periods
- net: ieee802154: ca8210: Stop leaking skb's
- net: ieee802154: Return meaningful error codes from the netlink helpers
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly
- net: stmmac: dump gmac4 DMA registers correctly
- net: stmmac: ensure PTP time register reads are consistent
- drm/i915/overlay: Prevent divide by zero bugs in scaling
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
- ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
- ASoC: max9759: fix underflow in speaker_gain_control_put()
- pinctrl: bcm2835: Fix a few error paths
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
- selftests: futex: Use variable MAKE instead of make
- rtc: cmos: Evaluate century appropriate
- EDAC/altera: Fix deferred probing
- EDAC/xgene: Fix deferred probing
- ext4: fix error handling in ext4_restore_inline_data()
- cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
- Linux 5.4.178
* Focal update: v5.4.177 upstream stable release (LP: #1964628)
- PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
- psi: Fix uaf issue when psi trigger is destroyed while being polled
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- net: amd-xgbe: ensure to reset the tx_timer_active flag
- net: amd-xgbe: Fix skb data length underflow
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- Linux 5.4.177
* Focal update: v5.4.176 upstream stable release (LP: #1962345)
- s390/hypfs: include z/VM guests with access control group set
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
devices
- udf: Restore i_lenAlloc when inode expansion fails
- udf: Fix NULL ptr deref when converting from inline format
- PM: wakeup: simplify the output logic of pm_show_wakelocks()
- tracing/histogram: Fix a potential memory leak for kstrdup()
- tracing: Don't inc err_log entry count if entry allocation fails
- fsnotify: fix fsnotify hooks in pseudo filesystems
- drm/etnaviv: relax submit size limits
- arm64: errata: Fix exec handling in erratum 1418040 workaround
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: 8250: of: Fix mapped region size when using reg-offset property
- serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- ucsi_ccg: Check DEV_INT bit only when starting CCG4
- net: sfp: ignore disabled SFP node
- powerpc/32: Fix boot failure with GCC latent entropy plugin
- i40e: Increase delay to 1 s after global EMP reset
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- i40e: fix unsigned stat widths
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- ipv6_tunnel: Rate limit warning messages
- net: fix information leakage in /proc/net/ptype
- hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
- hwmon: (lm90) Mark alert as broken for MAX6680
- ping: fix the sk_bound_dev_if match in ping_lookup
- ipv4: avoid using shared IP generator for connected sockets
- hwmon: (lm90) Reduce maximum conversion rate for G781
- NFSv4: Handle case where the lookup of a directory fails
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file
- net-procfs: show net devices bound packet types
- drm/msm: Fix wrong size calculation
- drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- ipv6: annotate accesses to fn->fn_sernum
- NFS: Ensure the server has an up to date ctime before hardlinking
- NFS: Ensure the server has an up to date ctime before renaming
- netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- net: phy: broadcom: hook up soft_reset for BCM54616S
- phylib: fix potential use-after-free
- rxrpc: Adjust retransmission backoff
- hwmon: (lm90) Mark alert as broken for MAX6654
- ibmvnic: init ->running_cap_crqs early
- ibmvnic: don't spin in tasklet
- drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
- yam: fix a memory leak in yam_siocdevprivate()
- net: hns3: handle empty unknown interrupt for VF
- ipv4: raw: lock the socket in raw_bind()
- ipv4: tcp: send zero IPID in SYNACK messages
- ipv4: remove sparse error in ip_neigh_gw4()
- dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
- fsnotify: invalidate dcache before IN_DELETE event
- block: Fix wrong offset in bio_truncate()
- mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
- Linux 5.4.176
* Focal update: v5.4.175 upstream stable release (LP: #1962330)
- rcu: Tighten rcu_advance_cbs_nowake() checks
- pinctrl: bcm2835: Drop unused define
- pinctrl: bcm2835: Refactor platform data
- pinctrl: bcm2835: Add support for all GPIOs on BCM2711
- pinctrl: bcm2835: Match BCM7211 compatible string
- pinctrl: bcm2835: Add support for wake-up interrupts
- pinctrl: bcm2835: Change init order for gpio hogs
- ARM: dts: gpio-ranges property is now required
- mmc: sdhci-esdhc-imx: disable CMDQ support
- select: Fix indefinitely sleeping task in poll_schedule_timeout()
- Linux 5.4.175
[ Ubuntu: 5.4.0-107.121 ]
* focal/linux: 5.4.0-107.121 -proposed tracker (LP: #1966275)
* CVE-2022-27666
- esp: Fix possible buffer overflow in ESP transformation
* CVE-2022-1055
- net: sched: fix use-after-free in tc_new_tfilter()
* Pick fixup from v5.4.176 upstream stable release to address cert
failure with clock jitter test in NUC7i3DNHE (LP: #1964204)
- Bluetooth: refactor malicious adv data check
[ Ubuntu: 5.4.0-105.119 ]
* CVE-2022-0847
- lib/iov_iter: initialize "flags" in new pipe_buffer
* Broken network on some AWS instances with focal/impish kernels
(LP: #1961968)
- SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
* [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
(LP: #1960182)
- s390/cpumf: Support for CPU Measurement Facility CSVN 7
- s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
* Hipersocket page allocation failure on Ubuntu 20.04 based SSC environments
(LP: #1959529)
- s390/qeth: use memory reserves to back RX buffers
* CVE-2022-0516
- KVM: s390: Return error on SIDA memop on normal guest
* CVE-2022-0435
- tipc: improve size validations for received domain records
* CVE-2022-0492
- cgroup-v1: Require capabilities to set release_agent
* Recalled NFSv4 files delegations overwhelm server (LP: #1957986)
- NFSv4: Fix delegation handling in update_open_stateid()
- NFSv4: nfs4_callback_getattr() should ignore revoked delegations
- NFSv4: Delegation recalls should not find revoked delegations
- NFSv4: fail nfs4_refresh_delegation_stateid() when the delegation was
revoked
- NFS: Rename nfs_inode_return_delegation_noreclaim()
- NFSv4: Don't remove the delegation from the super_list more than once
- NFSv4: Hold the delegation spinlock when updating the seqid
- NFSv4: Clear the NFS_DELEGATION_REVOKED flag in
nfs_update_inplace_delegation()
- NFSv4: Update the stateid seqid in nfs_revoke_delegation()
- NFSv4: Revoke the delegation on success in nfs4_delegreturn_done()
- NFSv4: Ignore requests to return the delegation if it was revoked
- NFSv4: Don't reclaim delegations that have been returned or revoked
- NFSv4: nfs4_return_incompatible_delegation() should check delegation
validity
- NFSv4: Fix nfs4_inode_make_writeable()
- NFS: nfs_inode_find_state_and_recover() fix stateid matching
- NFSv4: Fix races between open and delegreturn
- NFSv4: Handle NFS4ERR_OLD_STATEID in delegreturn
- NFSv4: Don't retry the GETATTR on old stateid in nfs4_delegreturn_done()
- NFSv4: nfs_inode_evict_delegation() should set NFS_DELEGATION_RETURNING
- NFS: Clear NFS_DELEGATION_RETURN_IF_CLOSED when the delegation is returned
- NFSv4: Try to return the delegation immediately when marked for return on
close
- NFSv4: Add accounting for the number of active delegations held
- NFSv4: Limit the total number of cached delegations
- NFSv4: Ensure the delegation is pinned in nfs_do_return_delegation()
- NFSv4: Ensure the delegation cred is pinned when we call delegreturn
* Focal update: v5.4.174 upstream stable release (LP: #1960566)
- HID: uhid: Fix worker destroying device without any protection
- HID: wacom: Reset expected and received contact counts at the same time
- HID: wacom: Ignore the confidence flag when a touch is removed
- HID: wacom: Avoid using stale array indicies to read contact count
- f2fs: fix to do sanity check in is_alive()
- nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
bind()
- mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
- mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for i.MX6
- x86/gpu: Reserve stolen memory for first integrated Intel GPU
- tools/nolibc: x86-64: Fix startup code bug
- tools/nolibc: i386: fix initial stack alignment
- tools/nolibc: fix incorrect truncation of exit code
- rtc: cmos: take rtc_lock while reading from CMOS
- media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
- media: flexcop-usb: fix control-message timeouts
- media: mceusb: fix control-message timeouts
- media: em28xx: fix control-message timeouts
- media: cpia2: fix control-message timeouts
- media: s2255: fix control-message timeouts
- media: dib0700: fix undefined behavior in tuner shutdown
- media: redrat3: fix control-message timeouts
- media: pvrusb2: fix control-message timeouts
- media: stk1160: fix control-message timeouts
- can: softing_cs: softingcs_probe(): fix memleak on registration failure
- lkdtm: Fix content of section containing lkdtm_rodata_do_nothing()
- iommu/io-pgtable-arm-v7s: Add error handle for page table allocation failure
- dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
- mm_zone: add function to check if managed dma zone exists
- mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
pages
- shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
- drm/rockchip: dsi: Hold pm-runtime across bind/unbind
- drm/rockchip: dsi: Reconfigure hardware on resume()
- drm/panel: kingdisplay-kd097d04: Delete panel on attach() failure
- drm/panel: innolux-p079zca: Delete panel on attach() failure
- drm/rockchip: dsi: Fix unbalanced clock on probe error
- Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
- clk: bcm-2835: Pick the closest clock rate
- clk: bcm-2835: Remove rounding up the dividers
- wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
- wcn36xx: Release DMA channel descriptor allocations
- media: videobuf2: Fix the size printk format
- media: aspeed: fix mode-detect always time out at 2nd run
- media: em28xx: fix memory leak in em28xx_init_dev
- media: aspeed: Update signal status immediately to ensure sane hw state
- arm64: dts: meson-gxbb-wetek: fix HDMI in early boot
- arm64: dts: meson-gxbb-wetek: fix missing GPIO binding
- Bluetooth: stop proccessing malicious adv data
- tee: fix put order in teedev_close_context()
- media: dmxdev: fix UAF when dvb_register_device() fails
- crypto: qce - fix uaf on qce_ahash_register_one
- arm64: dts: ti: k3-j721e: correct cache-sets info
- tty: serial: atmel: Check return code of dmaengine_submit()
- tty: serial: atmel: Call dma_async_issue_pending()
- media: rcar-csi2: Correct the selection of hsfreqrange
- media: imx-pxp: Initialize the spinlock prior to using it
- media: si470x-i2c: fix possible memory leak in si470x_i2c_probe()
- media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released
- media: venus: core: Fix a resource leak in the error handling path of
'venus_probe()'
- netfilter: bridge: add support for pppoe filtering
- arm64: dts: qcom: msm8916: fix MMC controller aliases
- ACPI: EC: Rework flushing of EC work while suspended to idle
- drm/amdgpu: Fix a NULL pointer dereference in
amdgpu_connector_lcd_native_mode()
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in
radeon_driver_open_kms()
- arm64: dts: ti: k3-j721e: Fix the L2 cache sets
- tty: serial: uartlite: allow 64 bit address
- serial: amba-pl011: do not request memory region twice
- floppy: Fix hang in watchdog when disk is ejected
- staging: rtl8192e: return error code from rtllib_softmac_init()
- staging: rtl8192e: rtllib_module: fix error handle case in alloc_rtllib()
- Bluetooth: btmtksdio: fix resume failure
- media: dib8000: Fix a memleak in dib8000_init()
- media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
- media: si2157: Fix "warm" tuner state detection
- sched/rt: Try to restart rt period timer when rt runtime exceeded
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
- mwifiex: Fix possible ABBA deadlock
- xfrm: fix a small bug in xfrm_sa_len()
- crypto: stm32/cryp - fix xts and race condition in crypto_engine requests
- crypto: stm32/cryp - fix double pm exit
- crypto: stm32/cryp - fix lrw chaining mode
- ARM: dts: gemini: NAS4220-B: fis-index-block with 128 KiB sectors
- media: dw2102: Fix use after free
- media: msi001: fix possible null-ptr-deref in msi001_probe()
- media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
- drm/msm/dpu: fix safe status debugfs file
- drm/bridge: ti-sn65dsi86: Set max register for regmap
- media: hantro: Fix probe func error path
- xfrm: interface with if_id 0 should return error
- xfrm: state and policy should fail if XFRMA_IF_ID 0
- ARM: 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
- usb: ftdi-elan: fix memory leak on device disconnect
- ARM: dts: armada-38x: Add generic compatible to UART nodes
- mmc: meson-mx-sdio: add IRQ check
- selinux: fix potential memleak in selinux_add_opt()
- bpftool: Enable line buffering for stdout
- x86/mce/inject: Avoid out-of-bounds write when setting flags
- ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
__nonstatic_find_io_region()
- pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
nonstatic_find_mem_region()
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
- ppp: ensure minimum packet size in ppp_write()
- rocker: fix a sleeping in atomic bug
- staging: greybus: audio: Check null pointer
- fsl/fman: Check for null pointer after calling devm_ioremap
- Bluetooth: hci_bcm: Check for error irq
- HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_get_str_desc
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_huion_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_frame_init_v1_buttonpad
- debugfs: lockdown: Allow reading debugfs files that are not world readable
- net/mlx5e: Don't block routes with nexthop objects in SW
- Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
- net/mlx5: Set command entry semaphore up once got index free
- spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe
- tpm: add request_locality before write TPM_INT_ENABLE
- can: softing: softing_startstop(): fix set but not used variable warning
- can: xilinx_can: xcan_probe(): check for error irq
- pcmcia: fix setting of kthread task states
- net: mcs7830: handle usb read errors properly
- ext4: avoid trim error on fs with small groups
- ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
- ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
- ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
- RDMA/hns: Validate the pkey index
- clk: imx8mn: Fix imx8mn_clko1_sels
- powerpc/prom_init: Fix improper check of prom_getprop()
- ASoC: uniphier: drop selecting non-existing SND_SOC_UNIPHIER_AIO_DMA
- ALSA: oss: fix compile error when OSS_DEBUG is enabled
- char/mwave: Adjust io port register size
- binder: fix handling of error during copy
- iommu/io-pgtable-arm: Fix table descriptor paddr formatting
- scsi: ufs: Fix race conditions related to driver data
- PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
- powerpc/powermac: Add additional missing lockdep_register_key()
- RDMA/core: Let ib_find_gid() continue search even after empty entry
- RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
- ASoC: rt5663: Handle device_property_read_u32_array error codes
- clk: stm32: Fix ltdc's clock turn off by clk_disable_unused() after system
enter shell
- dmaengine: pxa/mmp: stop referencing config->slave_id
- iommu/iova: Fix race between FQ timeout and teardown
- phy: uniphier-usb3ss: fix unintended writing zeros to PHY register
- ASoC: samsung: idma: Check of ioremap return value
- misc: lattice-ecp3-config: Fix task hung when firmware load failed
- mips: lantiq: add support for clk_set_parent()
- mips: bcm63xx: add support for clk_set_parent()
- RDMA/cxgb4: Set queue pair state when being queried
- of: base: Fix phandle argument length mismatch error message
- Bluetooth: Fix debugfs entry leak in hci_register_dev()
- fs: dlm: filter user dlm messages for kernel locks
- drm/lima: fix warning when CONFIG_DEBUG_SG=y & CONFIG_DMA_API_DEBUG=y
- ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
- drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
- ARM: shmobile: rcar-gen2: Add missing of_node_put()
- batman-adv: allow netlink usage in unprivileged containers
- usb: gadget: f_fs: Use stream_open() for endpoint files
- drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
- HID: apple: Do not reset quirks when the Fn key is not found
- media: b2c2: Add missing check in flexcop_pci_isr:
- EDAC/synopsys: Use the quirk for version instead of ddr version
- mlxsw: pci: Add shutdown method in PCI driver
- drm/bridge: megachips: Ensure both bridges are probed before registration
- gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
- HSI: core: Fix return freed object in hsi_new_client
- mwifiex: Fix skb_over_panic in mwifiex_usb_recv()
- rsi: Fix use-after-free in rsi_rx_done_handler()
- rsi: Fix out-of-bounds read in rsi_read_pkt()
- usb: uhci: add aspeed ast2600 uhci support
- floppy: Add max size check for user space request
- x86/mm: Flush global TLB when switching to trampoline page-table
- media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds.
- media: saa7146: hexium_orion: Fix a NULL pointer dereference in
hexium_attach()
- media: m920x: don't use stack on USB reads
- iwlwifi: mvm: synchronize with FW after multicast commands
- ath10k: Fix tx hanging
- net-sysfs: update the queue counts in the unregistration path
- net: phy: prefer 1000baseT over 1000baseKX
- gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
- x86/mce: Mark mce_panic() noinstr
- x86/mce: Mark mce_end() noinstr
- x86/mce: Mark mce_read_aux() noinstr
- net: bonding: debug: avoid printing debug logs when bond is not notifying
peers
- bpf: Do not WARN in bpf_warn_invalid_xdp_action()
- HID: quirks: Allow inverting the absolute X/Y values
- media: igorplugusb: receiver overflow should be reported
- media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
hexium_attach()
- mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
- audit: ensure userspace is penalized the same as the kernel when under
pressure
- arm64: dts: ls1028a-qds: move rtc node to the correct i2c bus
- arm64: tegra: Adjust length of CCPLEX cluster MMIO region
- cpufreq: Fix initialization of min and max frequency QoS requests
- usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
- ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
- iwlwifi: fix leaks/bad data after failed firmware load
- iwlwifi: remove module loading failure message
- iwlwifi: mvm: Fix calculation of frame length
- um: registers: Rename function names to avoid conflicts and build problems
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
- ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
- ACPICA: Utilities: Avoid deleting the same object twice in a row
- ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
- ACPICA: Fix wrong interpretation of PCC address
- ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
- drm/amdgpu: fixup bad vram size on gmc v8
- ACPI: battery: Add the ThinkPad "Not Charging" quirk
- btrfs: remove BUG_ON() in find_parent_nodes()
- btrfs: remove BUG_ON(!eie) in find_parent_nodes
- net: mdio: Demote probed message to debug print
- mac80211: allow non-standard VHT MCS-10/11
- dm btree: add a defensive bounds check to insert_at()
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
- net: phy: marvell: configure RGMII delays for 88E1118
- net: gemini: allow any RGMII interface mode
- regulator: qcom_smd: Align probe function with rpmh-regulator
- serial: pl010: Drop CR register reset on set_termios
- serial: core: Keep mctrl register state and cached copy in sync
- random: do not throw away excess input to crng_fast_load
- parisc: Avoid calling faulthandler_disabled() twice
- powerpc/6xx: add missing of_node_put
- powerpc/powernv: add missing of_node_put
- powerpc/cell: add missing of_node_put
- powerpc/btext: add missing of_node_put
- powerpc/watchdog: Fix missed watchdog reset due to memory ordering race
- i2c: i801: Don't silently correct invalid transfer size
- powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING
- i2c: mpc: Correct I2C reset procedure
- clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
- powerpc/powermac: Add missing lockdep_register_key()
- KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST
- w1: Misuse of get_user()/put_user() reported by sparse
- scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
- ALSA: seq: Set upper limit of processed events
- powerpc: handle kdump appropriately with crash_kexec_post_notifiers option
- MIPS: OCTEON: add put_device() after of_find_device_by_node()
- i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters
- MIPS: Octeon: Fix build errors using clang
- scsi: sr: Don't use GFP_DMA
- ASoC: mediatek: mt8173: fix device_node leak
- power: bq25890: Enable continuous conversion for ADC at charging
- rpmsg: core: Clean up resources on announce_create failure.
- crypto: omap-aes - Fix broken pm_runtime_and_get() usage
- crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
- crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers
- fuse: Pass correct lend value to filemap_write_and_wait_range()
- serial: Fix incorrect rs485 polarity on uart open
- cputime, cpuacct: Include guest time in user time in cpuacct.stat
- tracing/kprobes: 'nmissed' not showed correctly for kretprobe
- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
- s390/mm: fix 2KB pgtable release race
- drm/etnaviv: limit submit sizes
- drm/nouveau/kms/nv04: use vzalloc for nv04_display
- drm/bridge: analogix_dp: Make PSR-exit block less
- PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI config space
- PCI: pci-bridge-emul: Correctly set PCIe capabilities
- PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
- xfrm: fix policy lookup for ipv6 gre packets
- btrfs: fix deadlock between quota enable and other quota operations
- btrfs: check the root node for uptodate before returning it
- btrfs: respect the max size in the header when activating swap file
- ext4: make sure to reset inode lockdep class when quota enabling fails
- ext4: make sure quota gets properly shutdown on error
- ext4: set csum seed in tmp inode while migrating to extents
- ext4: Fix BUG_ON in ext4_bread when write quota data
- ext4: don't use the orphan list when migrating an inode
- drm/radeon: fix error handling in radeon_driver_open_kms
- of: base: Improve argument length mismatch error
- firmware: Update Kconfig help text for Google firmware
- media: rcar-csi2: Optimize the selection PHTW register
- Documentation: dmaengine: Correctly describe dmatest with channel unset
- Documentation: ACPI: Fix data node reference documentation
- Documentation: refer to config RANDOMIZE_BASE for kernel address-space
randomization
- Documentation: fix firewire.rst ABI file path error
- scsi: core: Show SCMD_LAST in text form
- RDMA/hns: Modify the mapping attribute of doorbell to device
- RDMA/rxe: Fix a typo in opcode name
- dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
- Revert "net/mlx5: Add retry mechanism to the command entry index allocation"
- powerpc/cell: Fix clang -Wimplicit-fallthrough warning
- powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses
- bpftool: Remove inclusion of utilities.mak from Makefiles
- ipv4: avoid quadratic behavior in netns dismantle
- net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
- parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries
- f2fs: fix to reserve space for IO align feature
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
- clk: si5341: Fix clock HW provider cleanup
- net: axienet: limit minimum TX ring size
- net: axienet: fix number of TX ring slots for available check
- net: axienet: increase default TX ring size to 128
- rtc: pxa: fix null pointer dereference
- inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
- netns: add schedule point in ops_exit_list()
- xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
- gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
- libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
- perf script: Fix hex dump character output
- dmaengine: at_xdmac: Don't start transactions at tx_submit level
- dmaengine: at_xdmac: Print debug message after realeasing the lock
- dmaengine: at_xdmac: Fix concurrency over xfers_list
- dmaengine: at_xdmac: Fix lld view setting
- dmaengine: at_xdmac: Fix at_xdmac_lld struct definition
- arm64: dts: qcom: msm8996: drop not documented adreno properties
- net_sched: restore "mpu xxx" handling
- bcmgenet: add WOL IRQ check
- net: ethernet: mtk_eth_soc: fix error checking in mtk_mac_config()
- dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix property
- dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
- scripts/dtc: dtx_diff: remove broken example from help text
- lib82596: Fix IRQ check in sni_82596_probe
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
- mtd: nand: bbt: Fix corner case in bad block table handling
- Revert "ia64: kprobes: Use generic kretprobe trampoline handler"
- Linux 5.4.174
* Focal update: v5.4.173 upstream stable release (LP: #1959701)
- kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test
- devtmpfs regression fix: reconfigure on each mount
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- perf: Protect perf_guest_cbs with RCU
- KVM: s390: Clarify SIGP orders versus STOP/RESTART
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- firmware: qemu_fw_cfg: fix sysfs information leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- mtd: fixup CFI on ixp4xx
- ARM: 9025/1: Kconfig: CPU_BIG_ENDIAN depends on !LD_IS_LLD
- Linux 5.4.173
* Focal update: v5.4.172 upstream stable release (LP: #1959698)
- workqueue: Fix unbind_workers() VS wq_worker_running() race
- Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
- Bluetooth: bfusb: fix division by zero in send path
- USB: core: Fix bug in resuming hub's handling of wakeup requests
- USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
- mmc: sdhci-pci: Add PCI ID for Intel ADL
- veth: Do not record rx queue hint in veth_xmit
- mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
- drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...)
functions
- can: gs_usb: fix use of uninitialized variable, detach device on reception
of invalid USB data
- can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
- random: fix data race on crng_node_pool
- random: fix data race on crng init time
- random: fix crash on multiple early calls to add_bootloader_randomness()
- media: Revert "media: uvcvideo: Set unique vdev name based in type"
- staging: wlan-ng: Avoid bitwise vs logical OR warning in
hfa384x_usb_throttlefn()
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
- staging: greybus: fix stack size warning with UBSAN
- Linux 5.4.172
* Focal update: v5.4.171 upstream stable release (LP: #1959437)
- f2fs: quota: fix potential deadlock
- Input: touchscreen - Fix backport of
a02dcde595f7cbd240ccd64de96034ad91cffc40
- selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
- tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
- tracing: Tag trace_percpu_buffer as a percpu pointer
- ieee802154: atusb: fix uninit value in atusb_set_extended_addr
- iavf: Fix limit of total number of queues to active queues of VF
- RDMA/core: Don't infoleak GRH fields
- RDMA/uverbs: Check for null return of kmalloc_array
- mac80211: initialize variable have_higher_than_11mbit
- i40e: fix use-after-free in i40e_sync_filters_subtask()
- i40e: Fix for displaying message regarding NVM version
- i40e: Fix incorrect netdev's real number of RX/TX queues
- ipv4: Check attribute length for RTA_GATEWAY in multipath route
- ipv4: Check attribute length for RTA_FLOW in multipath route
- ipv6: Check attribute length for RTA_GATEWAY in multipath route
- ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
- lwtunnel: Validate RTA_ENCAP_TYPE attribute length
- batman-adv: mcast: don't send link-local multicast to mcast routers
- sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
- net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
- power: supply: core: Break capacity loop
- power: reset: ltc2952: Fix use of floating point literals
- rndis_host: support Hytera digital radios
- phonet: refcount leak in pep_sock_accep
- ipv6: Continue processing multipath route even if gateway attribute is
invalid
- ipv6: Do cleanup if attribute validation fails in multipath route
- usb: mtu3: fix interval value for intr and isoc
- scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
- ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
- net: udp: fix alignment problem in udp4_seq_show()
- atlantic: Fix buff_ring OOB in aq_ring_rx_clean
- mISDN: change function names to avoid conflicts
- Linux 5.4.171
* Focal update: v5.4.170 upstream stable release (LP: #1958898)
- tee: handle lookup of shm with reference count 0
- Input: i8042 - add deferred probe support
- Input: i8042 - enable deferred probe quirk for ASUS UM325UA
- tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- platform/x86: apple-gmux: use resource_size() with res
- memblock: fix memblock_phys_alloc() section mismatch error
- recordmcount.pl: fix typo in s390 mcount regex
- selinux: initialize proto variable in selinux_ip_postroute_compat()
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
- net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
- sctp: use call_rcu to free endpoint
- net: usb: pegasus: Do not drop long Ethernet frames
- net: lantiq_xrx200: fix statistics of received bytes
- NFC: st21nfca: Fix memory leak in device probe and remove
- ionic: Initialize the 'lif->dbid_inuse' bitmap
- net/mlx5e: Fix wrong features assignment in case of error
- selftests/net: udpgso_bench_tx: fix dst ip argument
- net/ncsi: check for error return from call to nla_put_u32
- fsl/fman: Fix missing put_device() call in fman_port_probe
- i2c: validate user data in compat ioctl
- nfc: uapi: use kernel size_t to fix user-space builds
- uapi: fix linux/nfc.h userspace compilation errors
- xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
- usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- usb: mtu3: add memory barrier before set GPD's HWO
- usb: mtu3: fix list_head check warning
- usb: mtu3: set interval of FS intr and isoc endpoint
- binder: fix async_free_space accounting for empty parcels
- scsi: vmw_pvscsi: Set residual data length conditionally
- Input: appletouch - initialize work before device registration
- Input: spaceball - fix parsing of movement data packets
- net: fix use-after-free in tw_timer_handler
- perf script: Fix CPU filtering of a script's switch events
- Linux 5.4.170
* Focal update: v5.4.170 upstream stable release (LP: #1958898) // HID_ASUS
should depend on USB_HID in stable v4.15 backports (LP: #1959762)
- HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option
* Focal update: v5.4.169 upstream stable release (LP: #1958557)
- net: usb: lan78xx: add Allied Telesis AT29M2-AF
- serial: 8250_fintek: Fix garbled text for console
- arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
- spi: change clk_disable_unprepare to clk_unprepare
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- netfilter: fix regression in looped (broad|multi)cast's MAC handling
- qlcnic: potential dereference null pointer of rx_queue->page_ring
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
- net: skip virtio_net_hdr_set_proto if protocol already set
- ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
- bonding: fix ad_actor_system option setting to default
- fjes: Check for error irq
- drivers: net: smc911x: Check for error irq
- sfc: falcon: Check null pointer of rx_queue->page_ring
- Input: elantech - fix stack out of bound access in
elantech_change_report_id()
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
- hwmon: (lm90) Add max6654 support to lm90 driver
- hwmon: (lm90) Add basic support for TI TMP461
- hwmon: (lm90) Introduce flag indicating extended temperature support
- hwmon: (lm90) Drop critical attribute support for MAX6654
- ALSA: jack: Check the return value of kstrdup()
- ALSA: drivers: opl3: Fix incorrect use of vp->state
- ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
- ipmi: bail out if init_srcu_struct fails
- ipmi: ssif: initialize ssif_info->client early
- ipmi: fix initialization when workqueue allocation fails
- parisc: Correct completer in lws start
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
- pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
- mmc: sdhci-tegra: Fix switch to HS400ES mode
- mmc: core: Disable card detect during shutdown
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
- tee: optee: Fix incorrect page free bug
- f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
- usb: gadget: u_ether: fix race in setting MAC address in setup phase
- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
- mm: mempolicy: fix THP allocations escaping mempolicy restrictions
- pinctrl: mediatek: fix global-out-of-bounds issue
- hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
- hwmon: (lm90) Do not report 'busy' status bit as alarm
- ax25: NPD bug when detaching AX25 device
- hamradio: defer ax25 kfree after unregister_netdev
- hamradio: improve the incomplete fix to avoid NPD
- phonet/pep: refuse to enable an unbound pipe
- Linux 5.4.169
* Focal update: v5.4.168 upstream stable release (LP: #1957991)
- KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
- mac80211: mark TX-during-stop for TX in in_reconfig
- mac80211: send ADDBA requests using the tid/queue of the aggregation session
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
- virtio_ring: Fix querying of maximum DMA mapping size for virtio device
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390
- dm btree remove: fix use after free in rebalance_children()
- audit: improve robustness of the audit queue handling
- iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
- nfsd: fix use-after-free due to delegation race
- arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
edge
- arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
- arm64: dts: rockchip: fix audio-supply for Rock Pi 4
- mac80211: track only QoS data frames for admission control
- ARM: socfpga: dts: fix qspi node compatible
- clk: Don't parent clks until the parent is fully registered
- selftests: net: Correct ping6 expected rc from 2 to 1
- s390/kexec_file: fix error handling when applying relocations
- sch_cake: do not call cake_destroy() from cake_init()
- inet_diag: use jiffies_delta_to_msecs()
- inet_diag: fix kernel-infoleak for UDP sockets
- selftests: Fix raw socket bind tests with VRF
- selftests: Fix IPv6 address bind tests
- dmaengine: st_fdma: fix MODULE_ALIAS
- selftest/net/forwarding: declare NETIFS p9 p10
- mac80211: agg-tx: refactor sending addba
- mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
- mac80211: accept aggregation sessions on 6 GHz
- mac80211: fix lookup when adding AddBA extension element
- net: sched: lock action when translating it to flow_action infra
- flow_offload: return EOPNOTSUPP for the unsupported mpls action type
- rds: memory leak in __rds_conn_create()
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
- igb: Fix removal of unicast MAC filters of VFs
- igbvf: fix double free in `igbvf_probe`
- ixgbe: set X550 MDIO speed before talking to PHY
- netdevsim: Zero-initialize memory for new map's value in function
nsim_bpf_map_alloc
- net: Fix double 0x prefix print in SKB dump
- net/smc: Prevent smc_release() from long blocking
- net: systemport: Add global locking for descriptor lifecycle
- sit: do not call ipip6_dev_free() from sit_init_net()
- USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
- PCI/MSI: Mask MSI-X vectors only on success
- usb: xhci: Extend support for runtime power management for AMD's Yellow
carp.
- USB: serial: cp210x: fix CP2105 GPIO registration
- USB: serial: option: add Telit FN990 compositions
- timekeeping: Really make sure wall_to_monotonic isn't positive
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
- mac80211: validate extended element ID is present
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO
- Input: touchscreen - avoid bitwise vs logical OR warning
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
- xsk: Do not sleep in poll() when need_wakeup set
- media: mxl111sf: change mutex_init() location
- fuse: annotate lock in fuse_reverse_inval_entry()
- ovl: fix warning in ovl_create_real()
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
- rcu: Mark accesses to rcu_state.n_force_qs
- mac80211: fix regression in SSN handling of addba tx
- net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info
- Revert "xsk: Do not sleep in poll() when need_wakeup set"
- xen/blkfront: harden blkfront against event channel storms
- xen/netfront: harden netfront against event channel storms
- xen/console: harden hvc_xen against event channel storms
- xen/netback: fix rx queue stall detection
- xen/netback: don't queue unlimited number of packages
- Linux 5.4.168
* Focal update: v5.4.167 upstream stable release (LP: #1957987)
- nfc: fix segfault in nfc_genl_dump_devices_done
- drm/msm/dsi: set default num_data_lanes
- net/mlx4_en: Update reported link modes for 1/10G
- parisc/agp: Annotate parisc agp init functions with __init
- i2c: rk3x: Handle a spurious start completion interrupt flag
- net: netlink: af_netlink: Prevent empty skb by adding a check on len.
- drm/amd/display: Fix for the no Audio bug with Tiled Displays
- drm/amd/display: add connector type check for CRC source set
- tracing: Fix a kmemleak false positive in tracing_map
- KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
- selinux: fix race condition when computing ocontext SIDs
- bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc
- hwmon: (dell-smm) Fix warning on /proc/i8k creation error
- memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
- memblock: align freed memory map on pageblock boundaries with SPARSEMEM
- memblock: ensure there is no overflow in memblock_overlaps_region()
- arm: extend pfn_valid to take into account freed memory map alignment
- arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
- Linux 5.4.167
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
[ Ubuntu: 5.4.0-104.118 ]
* CVE-2022-23960
- SAUCE: kvm: arm: fix build on 32-bit
[ Ubuntu: 5.4.0-103.117 ]
* CVE-2022-23960
- arm64: Add part number for Arm Cortex-A77
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
- arm64: Add Cortex-X2 CPU part definition
- arm64: add ID_AA64ISAR2_EL1 sys register
- SAUCE: arm64: entry.S: Add ventry overflow sanity checks
- SAUCE: arm64: entry: Make the trampoline cleanup optional
- SAUCE: arm64: entry: Free up another register on kpti's tramp_exit path
- SAUCE: arm64: entry: Move the trampoline data page before the text page
- SAUCE: arm64: entry: Allow tramp_alias to access symbols after the 4K
boundary
- SAUCE: arm64: entry: Don't assume tramp_vectors is the start of the vectors
- SAUCE: arm64: entry: Move trampoline macros out of ifdef'd section
- SAUCE: arm64: entry: Make the kpti trampoline's kpti sequence optional
- SAUCE: arm64: entry: Allow the trampoline text to occupy multiple pages
- SAUCE: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
- SAUCE: arm64: entry: Add vectors that have the bhb mitigation sequences
- SAUCE: arm64: entry: Add macro for reading symbol addresses from the
trampoline
- SAUCE: arm64: Add percpu vectors for EL1
- SAUCE: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of
Spectre-v2
- SAUCE: KVM: arm64: Add templates for BHB mitigation sequences
- SAUCE: arm64: Mitigate spectre style branch history side channels
- SAUCE: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
migrated
- SAUCE: arm64: Use the clearbhb instruction in mitigations
- [Config]: set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y
* CVE-2022-25636
- netfilter: nf_tables_offload: incorrect flow offload action array size
* CVE-2022-0001
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation()
- x86,bugs: Unconditionally allow spectre_v2=retpoline,amd
- SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
- SAUCE: x86/speculation: Add eIBRS + Retpoline options
- SAUCE: Documentation/hw-vuln: Update spectre doc
* Disable unprivileged BPF by default (LP: #1961338)
- bpf: Add kconfig knob for disabling unpriv bpf by default
- [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
[ Ubuntu: 5.4.0-100.113 ]
* focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900)
* CVE-2022-22942
- SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
* CVE-2022-0330
- drm/i915: Flush TLBs before releasing backing store
* Focal update: v5.4.166 upstream stable release (LP: #1957008)
- netfilter: selftest: conntrack_vrf.sh: fix file permission
- Linux 5.4.166
- net/packet: rx_owner_map depends on pg_vec
- USB: gadget: bRequestType is a bitfield, not a enum
- HID: holtek: fix mouse probing
- udp: using datalen to cap ipv6 udp max gso segments
- selftests: Calculate udpgso segment count without header adjustment
* Focal update: v5.4.165 upstream stable release (LP: #1957007)
- serial: tegra: Change lower tolerance baud rate limit for tegra20 and
tegra30
- ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type
- HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
- HID: google: add eel USB id
- HID: add hid_is_usb() function to make it simpler for USB detection
- HID: add USB_HID dependancy to hid-prodikeys
- HID: add USB_HID dependancy to hid-chicony
- HID: add USB_HID dependancy on some USB HID drivers
- HID: bigbenff: prevent null pointer dereference
- HID: wacom: fix problems when device is not a valid USB device
- HID: check for valid USB device for many HID drivers
- can: kvaser_usb: get CAN clock frequency from device
- can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
stats->{rx,tx}_errors counter
- can: sja1000: fix use after free in ems_pcmcia_add_card()
- nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
- selftests: netfilter: add a vrf+conntrack testcase
- vrf: don't run conntrack on vrf with !dflt qdisc
- bpf: Fix the off-by-two error in range markings
- ice: ignore dropped packets during init
- bonding: make tx_rebalance_counter an atomic
- nfp: Fix memory leak in nfp_cpp_area_cache_add()
- seg6: fix the iif in the IPv6 socket control block
- udp: using datalen to cap max gso segments
- iavf: restore MSI state on reset
- iavf: Fix reporting when setting descriptor count
- IB/hfi1: Correct guard on eager buffer deallocation
- mm: bdi: initialize bdi_min_ratio when bdi is unregistered
- ALSA: ctl: Fix copy of updated id with element read/write
- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
- ALSA: pcm: oss: Fix negative period/buffer sizes
- ALSA: pcm: oss: Limit the period size to 16MB
- ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
- btrfs: clear extent buffer uptodate when we fail to write it
- btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
- nfsd: Fix nsfd startup race (again)
- tracefs: Have new files inherit the ownership of their parent
- clk: qcom: regmap-mux: fix parent clock lookup
- drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
- can: pch_can: pch_can_rx_normal: fix use after free
- can: m_can: Disable and ignore ELO interrupt
- x86/sme: Explicitly map new EFI memmap table as encrypted
- libata: add horkage for ASMedia 1092
- wait: add wake_up_pollfree()
- SAUCE: binder: export __wake_up_pollfree for binder module
- binder: use wake_up_pollfree()
- signalfd: use wake_up_pollfree()
- aio: keep poll requests on waitqueue until completed
- aio: fix use-after-free due to missing POLLFREE handling
- tracefs: Set all files to the same group ownership as the mount option
- block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
- qede: validate non LSO skb length
- ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
- i40e: Fix failed opcode appearing if handling messages from VF
- i40e: Fix pre-set max number of queues for VF
- mtd: rawnand: fsmc: Take instruction delay into account
- mtd: rawnand: fsmc: Fix timing computation
- dt-bindings: net: Reintroduce PHY no lane swap binding
- tools build: Remove needless libpython-version feature check that breaks
test-all fast path
- net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
- net: altera: set a couple error code in probe()
- net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
- net, neigh: clear whole pneigh_entry at alloc time
- net/qla3xxx: fix an error code in ql_adapter_up()
- Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
rp_filter tests"
- selftests/fib_tests: Rework fib_rp_filter_test()
- USB: gadget: detect too-big endpoint 0 requests
- USB: gadget: zero allocate endpoint 0 buffers
- usb: core: config: fix validation of wMaxPacketValue entries
- xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
suspending
- usb: core: config: using bit mask instead of individual bits
- xhci: avoid race between disable slot command and host runtime suspend
- iio: trigger: Fix reference counting
- iio: trigger: stm32-timer: fix MODULE_ALIAS
- iio: stk3310: Don't return error code in interrupt handler
- iio: mma8452: Fix trigger reference couting
- iio: ltr501: Don't return error code in trigger handler
- iio: kxsd9: Don't return error code in trigger handler
- iio: itg3200: Call iio_trigger_notify_done() on error
- iio: dln2-adc: Fix lockdep complaint
- iio: dln2: Check return value of devm_iio_trigger_register()
- iio: at91-sama5d2: Fix incorrect sign extension
- iio: adc: axp20x_adc: fix charging current reporting on AXP22x
- iio: ad7768-1: Call iio_trigger_notify_done() on error
- iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
- irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
- irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
- irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
- irqchip: nvic: Fix offset for Interrupt Priority Offsets
- misc: fastrpc: fix improper packet size calculation
- bpf: Add selftests to cover packet access corner cases
- Linux 5.4.165
* Focal update: v5.4.164 upstream stable release (LP: #1956381)
- NFSv42: Fix pagecache invalidation after COPY/CLONE
- of: clk: Make <linux/of_clk.h> self-contained
- arm64: dts: mcbin: support 2W SFP modules
- can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
- gfs2: Fix length of holes reported at end-of-file
- drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
- mac80211: do not access the IV when it was stripped
- net/smc: Transfer remaining wait queue entries during fallback
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
- net: return correct error code
- platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
- s390/setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
hns_dsaf_ge_srst_by_port()
- net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
bound
- net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
- perf hist: Fix memory leak of a perf_hpp_fmt
- perf report: Fix memory leaks around perf_tip()
- net/smc: Avoid warning of possible recursive locking
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- rt2x00: do not mark device gone on EPROTO errors during start
- cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
- s390/pci: move pseudo-MMIO to prevent MIO overlap
- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
- i2c: stm32f7: flush TX FIFO upon transfer errors
- i2c: stm32f7: recover the bus on access timeout
- i2c: stm32f7: stop dma transfer in case of NACK
- i2c: cbus-gpio: set atomic transfer callback
- natsemi: xtensa: fix section mismatch warnings
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- selftests: net: Correct case name
- rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
is available
- net: marvell: mvpp2: Fix the computation of shared CPUs
- net: annotate data-races on txq->xmit_lock_owner
- ipv4: convert fib_num_tclassid_users to atomic_t
- net/rds: correct socket tunable error in rds_tcp_tune()
- net/smc: Keep smc_close_final rc during active close
- drm/msm: Do hw_init() before capturing GPU state
- ipv6: fix memory leak in fib6_rule_suppress
- KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
- sched/uclamp: Fix rq->uclamp_max not set on first enqueue
- parisc: Fix KBUILD_IMAGE for self-extracting kernel
- parisc: Fix "make install" on newer debian releases
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- x86/tsc: Add a timer to make sure TSC_adjust is always checked
- x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
- x86/64/mm: Map all kernel memory into trampoline_pgd
- tty: serial: msm_serial: Deactivate RX DMA for polling support
- serial: pl011: Add ACPI SBSA UART match id
- serial: core: fix transmit-buffer reset and memleak
- serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
- serial: 8250_pci: rewrite pericom_do_set_divisor()
- iwlwifi: mvm: retry init flow if failed
- parisc: Mark cr16 CPU clocksource unstable on all SMP machines
- net/tls: Fix authentication failure in CCM mode
- Linux 5.4.164
* Focal update: v5.4.163 upstream stable release (LP: #1956380)
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- usb: dwc2: gadget: Fix ISOC flow for elapsed frames
- usb: dwc2: hcd_queue: Fix use of floating point literal
- net: nexthop: fix null pointer dereference when IPv6 is not enabled
- usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- media: cec: copy sequence field for the reply
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- staging/fbtft: Fix backlight
- staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
- tracing/uprobe: Fix uprobe_perf_open probes iteration
- tracing: Fix pid filtering when triggers are attached
- mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
- mdio: aspeed: Fix "Link is Down" issue
- PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
- PCI: aardvark: Wait for endpoint to be ready before training link
- PCI: aardvark: Fix big endian support
- PCI: aardvark: Train link immediately after enabling training
- PCI: aardvark: Improve link training
- PCI: aardvark: Issue PERST via GPIO
- PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros
- PCI: aardvark: Don't touch PCIe registers if no card connected
- PCI: aardvark: Fix compilation on s390
- PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()
- PCI: aardvark: Update comment about disabling link training
- PCI: pci-bridge-emul: Fix array overruns, improve safety
- PCI: aardvark: Configure PCIe resources from 'ranges' DT property
- PCI: aardvark: Fix PCIe Max Payload Size setting
- PCI: aardvark: Implement re-issuing config requests on CRS response
- PCI: aardvark: Simplify initialization of rootcap on virtual bridge
- PCI: aardvark: Fix link training
- PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
bridge
- PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
- PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
- pinctrl: armada-37xx: Correct PWM pins definitions
- arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- netfilter: ipvs: Fix reuse connection if RS weight is 0
- ARM: dts: BCM5301X: Fix I2C controller interrupt
- ARM: dts: BCM5301X: Add interrupt properties to GPIO node
- ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
- ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
- net: ieee802154: handle iftypes as u32
- firmware: arm_scmi: pm: Propagate return value to caller
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed
- ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- drm/vc4: fix error code in vc4_create_object()
- iavf: Prevent changing static ITR values if adaptive moderation is on
- ipv6: fix typos in __ip6_finish_output()
- nfp: checking parameter process for rx-usecs/tx-usecs is invalid
- net: ipv6: add fib6_nh_release_dsts stub
- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
- net/smc: Ensure the active closing peer first closes clcsock
- nvmet-tcp: fix incomplete data digest send
- net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
- PM: hibernate: use correct mode for swsusp_close()
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
flows
- nvmet: use IOCB_NOWAIT only if the filesystem supports it
- igb: fix netpoll exit with traffic
- MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
- net: vlan: fix underflow for the real_dev refcnt
- net/smc: Don't call clcsock shutdown twice when smc shutdown
- net: hns3: fix VF RSS failed problem after PF enable multi-TCs
- net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
- net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
- f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
- smb3: do not error on fsync when readonly
- vhost/vsock: fix incorrect used length reported to the guest
- tracing: Check pid filtering when creating events
- s390/mm: validate VMA in PGSTE manipulation functions
- shm: extend forced shm destroy to support objects from several IPC nses
- NFC: add NCI_UNREG flag to eliminate the race
- fuse: release pipe buf after last use
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- xen/blkfront: read response from backend only once
- xen/blkfront: don't take local copy of a request from the ring page
- xen/blkfront: don't trust the backend response data blindly
- xen/netfront: read response from backend only once
- xen/netfront: don't read data from request on the ring page
- xen/netfront: disentangle tx_skb_freelist
- xen/netfront: don't trust the backend response data blindly
- tty: hvc: replace BUG_ON() with negative return value
- Linux 5.4.163
* net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
- net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
* CVE-2021-4083
- fget: check that the fd still exists after getting a ref to it
* CVE-2021-4155
- xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
[ Ubuntu: 5.4.0-99.112 ]
* focal/linux: 5.4.0-99.112 -proposed tracker (LP: #1959817)
* linux-image-5.4.0-97.110 freezes by accessing cifs shares (LP: #1959665)
- Revert "cifs: To match file servers, make sure the server hostname matches"
- Revert "cifs: set a minimum of 120s for next dns resolution"
- Revert "cifs: use the expiry output of dns_query to schedule next
resolution"
[ Ubuntu: 5.4.0-97.110 ]
* icmp_redirect from selftests fails on F/kvm (unary operator expected)
(LP: #1938964)
- selftests: icmp_redirect: pass xfail=0 to log_test()
* Focal: CIFS stable updates (LP: #1954926)
- cifs: use the expiry output of dns_query to schedule next resolution
- cifs: set a minimum of 120s for next dns resolution
- cifs: To match file servers, make sure the server hostname matches
* seccomp_bpf in seccomp from ubuntu_kernel_selftests failed to build on B-5.4
(LP: #1896420)
- SAUCE: selftests/seccomp: fix "storage size of 'md' isn't known" build issue
- SAUCE: selftests/seccomp: Fix s390x regs not defined issue
* system crash when removing ipmi_msghandler module (LP: #1950666)
- ipmi: Move remove_work to dedicated workqueue
- ipmi: msghandler: Make symbol 'remove_work_wq' static
* zcrypt DD: Toleration for new IBM Z Crypto Hardware - (Backport to Ubuntu
20.04) (LP: #1954680)
- s390/AP: support new dynamic AP bus size limit
* [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
kernel part (LP: #1953334)
- s390/setup: diag 318: refactor struct
- s390/kvm: diagnose 0x318 sync and reset
- KVM: s390: remove diag318 reset code
- KVM: s390: add debug statement for diag 318 CPNC data
* Updates to ib_peer_memory requested by Nvidia (LP: #1947206)
- SAUCE: RDMA/core: Updated ib_peer_memory
* Include Infiniband Peer Memory interface (LP: #1923104)
- IB: Allow calls to ib_umem_get from kernel ULPs
- SAUCE: RDMA/core: Introduce peer memory interface
* Focal update: v5.4.162 upstream stable release (LP: #1954834)
- arm64: zynqmp: Do not duplicate flash partition label property
- arm64: zynqmp: Fix serial compatible string
- ARM: dts: NSP: Fix mpcore, mmc node names
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- arm64: dts: hisilicon: fix arm,sp805 compatible string
- RDMA/bnxt_re: Check if the vlan is valid before reporting
- usb: musb: tusb6010: check return value after calling
platform_get_resource()
- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
- arm64: dts: freescale: fix arm,sp805 compatible string
- ASoC: SOF: Intel: hda-dai: fix potential locking issue
- clk: imx: imx6ul: Move csi_sel mux to correct base register
- ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- firmware_loader: fix pre-allocated buf built-in firmware use
- ARM: dts: omap: fix gpmc,mux-add-data type
- usb: host: ohci-tmio: check return value after calling
platform_get_resource()
- ARM: dts: ls1021a: move thermal-zones node out of soc/
- ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
- ALSA: ISA: not for M68K
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- MIPS: sni: Fix the build
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr()
- powerpc/5200: dts: fix memory node unit name
- ALSA: gus: fix null pointer dereference on pointer block
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli
- sh: check return code of request_irq
- maple: fix wrong return value of maple_bus_init().
- f2fs: fix up f2fs_lookup tracepoints
- sh: fix kconfig unmet dependency warning for FRAME_POINTER
- sh: math-emu: drop unused functions
- sh: define __BIG_ENDIAN for math-emu
- clk: ingenic: Fix bugs with divided dividers
- clk/ast2600: Fix soc revision for AHB
- clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- tracing: Save normal string variables
- tracing/histogram: Do not copy the fixed-size char array field over the
field size
- RDMA/netlink: Add __maybe_unused to static inline in C file
- perf bpf: Avoid memory leak from perf_env__insert_btf()
- perf bench futex: Fix memory leak of perf_cpu_map__new()
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh
- net: bnx2x: fix variable dereferenced before check
- iavf: check for null in iavf_fix_features
- iavf: free q_vectors before queues in iavf_disable_vf
- iavf: Fix failure to exit out from last all-multicast mode
- iavf: prevent accidental free of filter structure
- iavf: validate pointers
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- MIPS: generic/yamon-dt: fix uninitialized variable error
- mips: bcm63xx: add support for clk_get_parent()
- mips: lantiq: add support for clk_get_parent()
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
- scsi: core: sysfs: Fix hang when device state is set via sysfs
- net: sched: act_mirred: drop dst for the direction from egress to ingress
- net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix ping is lost after configuring ADq on VF
- i40e: Fix creation of first queue by omitting it if is not power of two
- i40e: Fix display error code in dmesg
- NFC: reorganize the functions in nci_request
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- NFC: reorder the logic in nfc_{un,}register_device
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- s390/kexec: fix return code handling
- arm64: vdso32: suppress error message for 'make mrproper'
- tun: fix bonding active backup with arp monitoring
- hexagon: export raw I/O routines for modules
- ipc: WARN if trying to remove ipc object which is absent
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
- s390/kexec: fix memory leak of ipl report buffer
- udf: Fix crash after seekdir
- btrfs: fix memory ordering between normal and ordered work functions
- parisc/sticon: fix reverse colors
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/udl: fix control-message timeout
- drm/nouveau: use drm_dev_unplug() during device removal
- drm/i915/dp: Ensure sink rate values are always valid
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- Revert "net: mvpp2: disable force link UP during port init procedure"
- perf/core: Avoid put_page() when GUP fails
- batman-adv: Consider fragmentation for needed_headroom
- batman-adv: Reserve needed_*room for fragments
- batman-adv: Don't always reallocate the fragmentation skb head
- ASoC: DAPM: Cover regression by kctl change notification fix
- usb: max-3421: Use driver data instead of maintaining a list of bound
devices
- ice: Delete always true check of PF pointer
- ALSA: hda: hdac_ext_stream: fix potential locking issues
- ALSA: hda: hdac_stream: fix potential locking issue in
snd_hdac_stream_assign()
- Linux 5.4.162
* Focal update: v5.4.161 upstream stable release (LP: #1954828)
- scsi: ufs: Fix interrupt error message for shared interrupts
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- scsi: ufs: Fix tm request when non-fatal error happens
- fortify: Explicitly disable Clang support
- parisc/entry: fix trace test in syscall exit path
- PCI/MSI: Destroy sysfs before freeing entries
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
- erofs: fix unsafe pagevec reuse of hooked pclusters
- Linux 5.4.161
* Focal update: v5.4.160 upstream stable release (LP: #1953387)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
- binder: use euid from cred instead of using task
- binder: use cred instead of task for selinux checks
- binder: use cred instead of task for getsecid
- Input: iforce - fix control-message timeout
- Input: elantench - fix misreporting trackpoint coordinates
- Input: i8042 - Add quirk for Fujitsu Lifebook T725
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
- scsi: qla2xxx: Fix use after free in eh_abort path
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- parisc: Fix ptrace check on syscall return
- tpm: Check for integer overflow in tpm2_map_response_body()
- firmware/psci: fix application of sizeof to pointer
- crypto: s5p-sss - Add error handling in s5p_aes_probe()
- media: ite-cir: IR receiver stop working after receive overflow
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
- media: v4l2-ioctl: Fix check_ext_ctrls
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
- ALSA: hda/realtek: Add quirk for ASUS UX550VE
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- fuse: fix page stealing
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
- x86/irq: Ensure PI wakeup handler is unregistered before module unload
- cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- cavium: Fix return values of the probe function
- sfc: Don't use netif_info before net_device setup
- hyperv/vmbus: include linux/bitops.h
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
- reset: socfpga: add empty driver allowing consumers to probe
- mmc: winbond: don't build on M68K
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- nvmet-tcp: fix a memory leak when releasing a queue
- spi: spl022: fix Microwire full duplex mode
- net: multicast: calculate csum of looped-back and forwarded packets
- watchdog: Fix OMAP watchdog early handling
- drm: panel-orientation-quirks: Add quirk for GPD Win3
- nvmet-tcp: fix header digest verification
- r8169: Add device 10ec:8162 to driver r8169
- vmxnet3: do not stop tx queues after netif_device_detach()
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
- net/smc: Correct spelling mistake to TCPF_SYN_RECV
- btrfs: clear MISSING device status bit in btrfs_close_one_device
- btrfs: fix lost error handling when replaying directory deletes
- btrfs: call btrfs_check_rw_degradable only if there is a missing device
- ia64: kprobes: Fix to pass correct trampoline address to the handler
- hwmon: (pmbus/lm25066) Add offset coefficients
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
disabled
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-
dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- evm: mark evm_fixmode as __ro_after_init
- wcn36xx: Fix HT40 capability for 2Ghz band
- mwifiex: Read a PCI register after writing the TX ring write pointer
- libata: fix checking of DMA state
- wcn36xx: handle connection loss indication
- rsi: fix occasional initialisation failure with BT coex
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- rsi: Fix module dev_oper_mode parameter description
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
- power: supply: max17042_battery: use VFSOC for capacity when no rsns
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
- can: j1939: j1939_can_recv(): ignore messages with invalid source address
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
- serial: core: Fix initializing and restoring termios speed
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- PCI: pci-bridge-emul: Fix emulation of W1C bits
- PCI: aardvark: Do not clear status bits of masked interrupts
- PCI: aardvark: Fix checking for link up via LTSSM state
- PCI: aardvark: Do not unmask unused interrupts
- PCI: aardvark: Fix reporting Data Link Layer Link Active
- PCI: aardvark: Fix return value of MSI domain .alloc() method
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- iio: dac: ad5446: Fix ad5622_write() return value
- USB: serial: keyspan: fix memleak on probe errors
- USB: iowarrior: fix control-message timeouts
- USB: chipidea: fix interrupt deadlock
- dma-buf: WARN on dmabuf release with pending attachments
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
- Bluetooth: fix use-after-free error in lock_sock_nested()
- drm/panel-orientation-quirks: add Valve Steam Deck
- platform/x86: wmi: do not fail if disabling fails
- MIPS: lantiq: dma: add small delay after reset
- MIPS: lantiq: dma: reset correct number of channel
- locking/lockdep: Avoid RCU-induced noinstr fail
- net: sched: update default qdisc visibility after Tx queue cnt changes
- smackfs: Fix use-after-free in netlbl_catmap_walk()
- x86: Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- ath10k: high latency fixes for beacon buffer
- media: mt9p031: Fix corrupted frame after restarting stream
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
- media: uvcvideo: Set capability in s_param
- media: uvcvideo: Return -EIO for control errors
- media: uvcvideo: Set unique vdev name based in type
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
- media: s5p-mfc: Add checking to s5p_mfc_probe().
- media: imx: set a media_device bus_info string
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
- media: rcar-csi2: Add checking to rcsi2_start_receiver()
- ipmi: Disable some operations during a panic
- ACPICA: Avoid evaluating methods too early during system resume
- media: ipu3-imgu: imgu_fmt: Handle properly try
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- net-sysfs: try not to restart the syscall if it will fail eventually
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
- ACPI: battery: Accept charges over the design capacity as full
- leaking_addresses: Always print a trailing newline
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- workqueue: make sysfs of unbound kworker cpumask more clever
- tracing/cfi: Fix cmp_entries_* functions signature mismatch
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- block: remove inaccurate requeue check
- nvmet: fix use-after-free when a port is removed
- nvmet-tcp: fix use-after-free when a port is removed
- nvme: drop scan_lock and always kick requeue list when removing namespaces
- PM: hibernate: Get block device exclusively in swsusp_check()
- selftests: kvm: fix mismatched fclose() after popen()
- iwlwifi: mvm: disable RX-diversity in powersave
- smackfs: use __GFP_NOFAIL for smk_cipso_doi()
- ARM: clang: Do not rely on lr register for stacktrace
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
- vrf: run conntrack only in context of lower/physdev for locally generated
packets
- net: annotate data-race in neigh_output()
- btrfs: do not take the uuid_mutex in btrfs_rm_device
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
bcm_qspi_probe()
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
- parisc: fix warning in flush_tlb_all
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
state
- selftests/bpf: Fix strobemeta selftest regression
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
- drm/v3d: fix wait for TMU write combiner flush
- virtio-gpu: fix possible memory allocation failure
- net: net_namespace: Fix undefined member in key_remove_domain()
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- wilc1000: fix possible memory leak in cfg_scan_result()
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
- crypto: caam - disable pkc for non-E SoCs
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
- net: dsa: rtl8366rb: Fix off-by-one bug
- ath10k: Fix missing frame timestamp for beacon/probe-resp
- drm/amdgpu: fix warning for overflow check
- media: em28xx: add missing em28xx_close_extension
- media: cxd2880-spi: Fix a null pointer dereference on error handling path
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: TDA1997x: handle short reads of hdmi info frame.
- media: mtk-vpu: Fix a resource leak in the error handling path of
'mtk_vpu_probe()'
- media: radio-wl1273: Avoid card name truncation
- media: si470x: Avoid card name truncation
- media: tm6000: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- kprobes: Do not use local variable when creating debugfs file
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
- cpuidle: Fix kobject memory leaks in error paths
- media: em28xx: Don't use ops->suspend if it is NULL
- ath9k: Fix potential interrupt storm on queue reset
- EDAC/amd64: Handle three rank interleaving mode
- netfilter: nft_dynset: relax superfluous check on set updates
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
- crypto: qat - detect PFVF collision after ACK
- crypto: qat - disregard spurious PFVF interrupts
- hwrng: mtk - Force runtime pm ops for sleep ops
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
- memstick: avoid out-of-range warning
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
- hwmon: Fix possible memleak in __hwmon_device_register()
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
lm25066_coeff
- ath10k: fix max antenna gain unit
- drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- mmc: mxs-mmc: disable regulator on error and in the remove function
- block: ataflop: fix breakage introduced at blk-mq refactoring
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
- rsi: stop thread firstly in rsi_91x_init() error handling
- mwifiex: Send DELBA requests according to spec
- phy: micrel: ksz8041nl: do not use power down mode
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl
- PM: hibernate: fix sparse warnings
- clocksource/drivers/timer-ti-dm: Select TIMER_OF
- drm/msm: Fix potential NULL dereference in DPU SSPP
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
- libbpf: Fix BTF data layout checks and allow empty BTF
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
- irq: mips: avoid nested irq_enter()
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- samples/kretprobes: Fix return value if register_kretprobe() failed
- KVM: s390: Fix handle_sske page fault handling
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- wcn36xx: add proper DMA memory barriers in rx path
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
- net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- selftests/bpf: Fix fclose/pclose mismatch in test_progs
- udp6: allow SO_MARK ctrl msg to affect routing
- ibmvnic: don't stop queue in xmit
- ibmvnic: Process crqs after enabling interrupts
- RDMA/rxe: Fix wrong port_cap_flags
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
- arm64: dts: rockchip: Fix GPU register width for RK3328
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
- RDMA/bnxt_re: Fix query SRQ failure
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties
- ARM: dts: at91: tse850: the emac<->phy interface is rmii
- scsi: dc395: Fix error case unwinding
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
- JFS: fix memleak in jfs_mount
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- arm: dts: omap3-gta04a4: accelerometer irq fix
- soc/tegra: Fix an error handling path in tegra_powergate_power_up()
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
- clk: at91: check pmc node status before registering syscore ops
- video: fbdev: chipsfb: use memset_io() instead of memset()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- usb: gadget: hid: fix error code in do_config()
- power: supply: rt5033_battery: Change voltage values to µV
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
- ARM: dts: stm32: fix SAI sub nodes register range
- ASoC: cs42l42: Correct some register default values
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
- phy: qcom-qusb2: Fix a memory leak on probe
- serial: xilinx_uartps: Fix race condition causing stuck TX
- HID: u2fzero: clarify error check and length calculations
- HID: u2fzero: properly handle timeouts in usb_submit_urb
- powerpc/44x/fsp2: add missing of_node_put
- mips: cm: Convert to bitfield API to fix out-of-bounds access
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- PCI: aardvark: Don't spam about PIO Response Status
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
- opp: Fix return in _opp_add_static_v2()
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- mtd: core: don't remove debugfs directory if device is in use
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
- auxdisplay: ht16k33: Connect backlight to fbdev
- auxdisplay: ht16k33: Fix frame buffer device blanking
- soc: fsl: dpaa2-console: free buffer before returning from
dpaa2_console_read
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
- m68k: set a default value for MEMORY_RESERVE
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- ar7: fix kernel builds for compiler test
- scsi: qla2xxx: Fix gnl list corruption
- scsi: qla2xxx: Turn off target reset during issue_lip
- NFSv4: Fix a regression in nfs_set_open_stateid_locked()
- i2c: xlr: Fix a resource leak in the error handling path of
'xlr_i2c_probe()'
- xen-pciback: Fix return in pm_ctrl_init()
- net: davinci_emac: Fix interrupt pacing disable
- net: vlan: fix a UAF in vlan_dev_real_dev()
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- zram: off by one in read_block_state()
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
- net: hns3: allow configure ETS bandwidth of all TCs
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- net/smc: fix sk_refcnt underflow on linkdown and fallback
- cxgb4: fix eeprom len when diagnostics not implemented
- selftests/net: udpgso_bench_rx: fix port argument
- ARM: 9155/1: fix early early_iounmap()
- ARM: 9156/1: drop cc-option fallbacks for architecture selection
- parisc: Fix set_fixmap() on PA1.x CPUs
- irqchip/sifive-plic: Fixup EOI failed when masked
- f2fs: should use GFP_NOFS for directory inodes
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
- 9p/net: fix missing error check in p9_check_errors
- ovl: fix deadlock in splice write
- powerpc/lib: Add helper to check if offset is within conditional branch
range
- powerpc/bpf: Validate branch ranges
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
- powerpc/security: Add a helper to query stf_barrier type
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- video: backlight: Drop maximum brightness override for brightness zero
- s390/cio: check the subchannel validity for dev_busid
- s390/tape: fix timer initialization in tape_std_assign()
- s390/cio: make ccw_device_dma_* more robust
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- SUNRPC: Partial revert of commit 6f9f17287e78
- ath10k: fix invalid dma_addr_t token assignment
- selftests/bpf: Fix also no-alu32 strobemeta selftest
- Linux 5.4.160
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path
* Focal update: v5.4.159 upstream stable release (LP: #1953071)
- Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: ehci: handshake CMD_RUN instead of STS_HALT
- usb: gadget: Mark USB_FSL_QE broken on 64-bit
- usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- binder: don't detect sender/target during buffer cleanup
- printk/console: Allow to disable console output by using console="" or
console=null
- isofs: Fix out of bound access for corrupted isofs image
- comedi: dt9812: fix DMA buffers on stack
- comedi: ni_usb6501: fix NULL-deref in command paths
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- staging: rtl8192u: fix control-message timeouts
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
- rsi: fix control-message timeout
- Linux 5.4.159
* Focal update: v5.4.158 upstream stable release (LP: #1953066)
- scsi: core: Put LLD module refcnt after SCSI device is released
- vrf: Revert "Reset skb conntrack connection..."
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
- Revert "xhci: Set HCD flag to defer primary roothub registration"
- Revert "usb: core: hcd: Add support for deferring roothub registration"
- sfc: Fix reading non-legacy supported link modes
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
- Linux 5.4.158
* [Ubuntu 20.04] Problem leading IUCV service down (on s390x) (LP: #1913442)
- usercopy: mark dma-kmalloc caches as usercopy caches
[ Ubuntu: 5.4.0-96.109 ]
* Support builtin revoked certificates (LP: #1932029)
- [Config]: add i386 to CONFIG_SYSTEM_REVOCATION_KEYS annotation
* CVE-2022-0185
- SAUCE: vfs: Out-of-bounds write of heap buffer in fs_context.c
- SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
[ Ubuntu: 5.4.0-94.106 ]
* focal/linux: 5.4.0-94.106 -proposed tracker (LP: #1956628)
* [Regression] Focal kernel 5.4.0-92.103 fails to boot when Secure Encrypted
Virtualization(SEV) is enabled (LP: #1956575)
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV
[ Ubuntu: 5.4.0-92.103 ]
* focal/linux: 5.4.0-92.103 -proposed tracker (LP: #1952316)
* Packaging resync (LP: #1786013)
- [Packaging] resync update-dkms-versions helper
- debian/dkms-versions -- update from kernel-versions (main/2021.11.29)
* CVE-2021-4002
- tlb: mmu_gather: add tlb_flush_*_range APIs
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare
* Re-enable DEBUG_INFO_BTF where it was disabled (LP: #1945632)
- [Config] Enable CONFIG_DEBUG_INFO_BTF on all arches
* Focal linux-azure: Vm crash on Dv5/Ev5 (LP: #1950462)
- KVM: VMX: eVMCS: make evmcs_sanitize_exec_ctrls() work again
- jump_label: Fix usage in module __init
* Support builtin revoked certificates (LP: #1932029)
- Revert "UBUNTU: SAUCE: (lockdown) Make get_cert_list() not complain about
cert lists that aren't present."
- integrity: Move import of MokListRT certs to a separate routine
- integrity: Load certs from the EFI MOK config table
- certs: Add ability to preload revocation certs
- integrity: Load mokx variables into the blacklist keyring
- certs: add 'x509_revocation_list' to gitignore
- SAUCE: Dump stack when X.509 certificates cannot be loaded
- [Packaging] build canonical-revoked-certs.pem from branch/arch certs
- [Packaging] Revoke 2012 UEFI signing certificate as built-in
- [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
* Support importing mokx keys into revocation list from the mok table
(LP: #1928679)
- efi: Support for MOK variable config table
- efi: mokvar-table: fix some issues in new code
- efi: mokvar: add missing include of asm/early_ioremap.h
- efi/mokvar: Reserve the table only if it is in boot services data
- SAUCE: integrity: add informational messages when revoking certs
* Support importing mokx keys into revocation list from the mok table
(LP: #1928679) // CVE-2020-26541 when certificates are revoked via
MokListXRT.
- SAUCE: integrity: Load mokx certs from the EFI MOK config table
* Focal update: v5.4.157 upstream stable release (LP: #1951883)
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
- ARM: 9134/1: remove duplicate memcpy() definition
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
- ARM: 9141/1: only warn about XIP address when not compile testing
- ipv6: use siphash in rt6_exception_hash()
- ipv4: use siphash instead of Jenkins in fnhe_hashfun()
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- net/tls: Fix flipped sign in tls_err_abort() calls
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
circuit
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- net: lan78xx: fix division by zero in send path
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- RDMA/mlx5: Set user priority for DCT
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- net: nxp: lpc_eth.c: avoid hang when bringing interface down
- net/tls: Fix flipped sign in async_wait.err assignment
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_start_aneg: Add an unlocked version
- sctp: use init_tag from inithdr for ABORT chunk
- sctp: fix the processing for INIT_ACK chunk
- sctp: fix the processing for COOKIE_ECHO chunk
- sctp: add vtag check in sctp_sf_violation
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
- sctp: add vtag check in sctp_sf_ootb
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT
- cfg80211: correct bridge/4addr mode check
- KVM: s390: clear kicked_mask before sleeping again
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
- perf script: Check session->header.env.arch before using it
- Linux 5.4.157
* keyboard not working on Medion notebook s17 series (LP: #1950536)
- ACPI: resources: Add one more Medion model in IRQ override quirk
* creat09 from ubuntu_ltp_syscalls and cve-2018-13405 from ubuntu_ltp/cve
failed with XFS (LP: #1950239)
- xfs: ensure that the inode uid/gid match values match the icdinode ones
- xfs: merge the projid fields in struct xfs_icdinode
- xfs: remove the icdinode di_uid/di_gid members
- xfs: fix up non-directory creation in SGID directories
* reuseport_bpf_numa in net from ubuntu_kernel_selftests fails on ppc64le
(LP: #1867570)
- selftests/net: Fix reuseport_bpf_numa by skipping unavailable nodes
* Focal update: v5.4.156 upstream stable release (LP: #1951295)
- parisc: math-emu: Fix fall-through warnings
- net: switchdev: do not propagate bridge updates across bridges
- tee: optee: Fix missing devices unregister during optee_remove
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
- xtensa: xtfpga: Try software restart before simulating CPU reset
- NFSD: Keep existing listeners on portlist error
- dma-debug: fix sg checks in debug_dma_map_sg()
- ASoC: wm8960: Fix clock configuration on slave mode
- netfilter: ipvs: make global sysctl readonly in non-init netns
- lan78xx: select CRC32
- net: dsa: lantiq_gswip: fix register definition
- NIOS2: irqflags: rename a redefined register name
- net: hns3: reset DWRR of unused tc to zero
- net: hns3: add limit ets dwrr bandwidth cannot be 0
- net: hns3: disable sriov before unload hclge layer
- net: stmmac: Fix E2E delay mechanism
- net: enetc: fix ethtool counter name for PM0_TERR
- can: rcar_can: fix suspend/resume
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
error length
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
- ceph: fix handling of "meta" errors
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- elfcore: correct reference to CONFIG_UML
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- ASoC: DAPM: Fix missing kctl change notifications
- audit: fix possible null-pointer dereference in audit_filter_rules
- powerpc64/idle: Fix SP offsets when saving GPRs
- KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
- KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to
guest
- powerpc/idle: Don't corrupt back chain when going idle
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- mm, slub: fix potential memoryleak in kmem_cache_open()
- nfc: nci: fix the UAF of rf_conn_info object
- isdn: cpai: check ctr->cnr to avoid array index out of bound
- netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
- selftests: netfilter: remove stray bash debug line
- gcc-plugins/structleak: add makefile var for disabling structleak
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- net: stmmac: add support for dwmac 3.40a
- ARM: dts: spear3xx: Fix gmac node
- isdn: mISDN: Fix sleeping function called from invalid context
- platform/x86: intel_scu_ipc: Update timeout value in comment
- ALSA: hda: avoid write to STATESTS if controller is in reset
- Input: snvs_pwrkey - add clk handling
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
- tracing: Have all levels of checks prevent recursion
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
- pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
- Linux 5.4.156
* ubuntu_ltp / finit_module02 fails on v4.15 and other kernels
(LP: #1950644) // Focal update: v5.4.156 upstream stable release
(LP: #1951295)
- vfs: check fd has read access in kernel_read_file_from_fd()
* Focal update: v5.4.155 upstream stable release (LP: #1951291)
- ovl: simplify file splice
- ALSA: usb-audio: Add quirk for VF0770
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G
- ALSA: hda/realtek - ALC236 headset MIC recording issue
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
- s390: fix strrchr() implementation
- csky: don't let sigreturn play with priveleged bits of status register
- csky: Fixup regs.sr broken in ptrace
- btrfs: unlock newly allocated extent buffer after error
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- watchdog: orion: use 0 for unset heartbeat
- x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
- mei: me: add Ice Lake-N device id.
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- usb: musb: dsps: Fix the probe error path
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- EDAC/armada-xp: Fix output of uncorrectable error counter
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
- powerpc/xive: Discard disabled interrupts in get_irqchip_state()
- iio: adc: aspeed: set driver data when adc probe.
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED
- iio: light: opt3001: Fixed timeout error when 0 lux
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
- iio: dac: ti-dac5571: fix an error code in probe()
- sctp: account stream padding length for reconf chunk
- gpio: pca953x: Improve bias setting
- net: arc: select CRC32
- net: korina: select CRC32
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
- net: stmmac: fix get_hw_feature() on old hardware
- net: encx24j600: check error in devm_regmap_init_encx24j600
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- pata_legacy: fix a couple uninitialized variable bugs
- ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators()
- mlxsw: thermal: Fix out-of-bounds memory accesses
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
- drm/panel: olimex-lcd-olinuxino: select CRC32
- drm/msm: Fix null pointer dereference on pointer edp
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- acpi/arm64: fix next_platform_timer() section mismatch error
- mqprio: Correct stats in mqprio_dump_class_stats().
- qed: Fix missing error code in qed_slowpath_start()
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
- ionic: don't remove netdev->dev_addr when syncing uc list
- Linux 5.4.155
* [UBUNTU 20.04] kernel: unable to read partitions on virtio-block dasd (kvm)
(LP: #1950144) // Focal update: v5.4.155 upstream stable release
(LP: #1951291)
- virtio: write back F_VERSION_1 before validate
* Focal update: v5.4.154 upstream stable release (LP: #1951288)
- net: phy: bcm7xxx: Fixed indirect MMD operations
- ext4: correct the error path of ext4_write_inline_data_end()
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- m68k: Handle arrivals of multiple signals correctly
- net: prevent user from passing illegal stab size
- mac80211: check return value of rhashtable_init
- net: sun: SUNVNET_COMMON should depend on INET
- drm/amdgpu: fix gart.bo pin_count leak
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- sched: Always inline is_percpu_thread()
- Linux 5.4.154
* Focal update: v5.4.153 upstream stable release (LP: #1950014)
- Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
- xen/privcmd: fix error handling in mmap-resource processing
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
- ovl: fix missing negative dentry check in ovl_rename()
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- xen/balloon: fix cancelled balloon action
- ARM: dts: omap3430-sdp: Fix NAND device node
- ARM: dts: qcom: apq8064: use compatible which contains chipid
- MIPS: BPF: Restore MIPS32 cBPF JIT
- bpf, mips: Validate conditional branch offsets
- soc: qcom: socinfo: Fixed argument passed to platform_set_data()
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding
- xtensa: move XCHAL_KIO_* definitions to kmem_layout.h
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected
- bpf, arm: Fix register clobbering in div/mod implementation
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
- ptp_pch: Load module automatically if ID matches
- arm64: dts: freescale: Fix SP805 clock-names
- arm64: dts: ls1028a: add missing CAN nodes
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- net/sched: sch_taprio: properly cancel timer from taprio_destroy()
- net: sfp: Fix typo in state machine debug string
- netlink: annotate data races around nlk->bound
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
- video: fbdev: gbefb: Only instantiate device when built for IP32
- drm/nouveau/debugfs: fix file release memory leak
- gve: Correct available tx qpl check
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- gve: fix gve_get_stats()
- i40e: fix endless loop under rtnl
- i40e: Fix freeing of uninitialized misc IRQ vector
- net: prefer socket bound to interface when not in VRF
- i2c: acpi: fix resource leak in reconfiguration device addition
- bpf, s390: Fix potential memory leak about jit_data
- RISC-V: Include clone3() on rv32
- x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI
- x86/hpet: Use another crystalball to evaluate HPET usability
- x86/Kconfig: Correct reference to MWINCHIP3D
- Linux 5.4.153
* Focal update: v5.4.152 upstream stable release (LP: #1950009)
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist case
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set
- ext2: fix sleeping in atomic bugs on error
- scsi: sd: Free scsi_disk device via put_device()
- usb: testusb: Fix for showing the connection speed
- usb: dwc2: check return value after calling platform_get_resource()
- selftests: be sure to make khdr before other targets
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- tools/vm/page-types: remove dependency on opt_file for idle page tracking
- KVM: do not shrink halt_poll_ns below grow_start
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
- perf/x86: Reset destroy callback on event init failure
- silence nfscache allocation warnings with kvzalloc
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
- Linux 5.4.152
* linux-aws: Fix backport of RDMA/efa: Expose maximum TX doorbell batch
(LP: #1949882)
- SAUCE: aws: Fix backport of RDMA/efa: Expose maximum TX doorbell batch
[ Ubuntu: 5.4.0-91.102 ]
* focal/linux: 5.4.0-91.102 -proposed tracker (LP: #1949840)
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
- debian/dkms-versions -- update from kernel-versions (main/2021.11.08)
* KVM emulation failure when booting into VM crash kernel with multiple CPUs
(LP: #1948862)
- KVM: x86: Properly reset MMU context at vCPU RESET/INIT
* aufs: kernel bug with apparmor and fuseblk (LP: #1948470)
- SAUCE: aufs: bugfix, stop omitting path->mnt
* ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164)
- net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
* require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
- Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
* ACL updates on OCFS2 are not revalidated (LP: #1947161)
- ocfs2: fix remounting needed after setfacl command
* ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351)
- powerpc/bpf: Fix BPF_MOD when imm == 1
* Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
- Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
cachefiles_read_backing_file while vmscan is active"
* Reassign I/O Path of ConnectX-5 Port 1 before Port 2 causes NULL dereference
(LP: #1943464)
- s390/pci: fix leak of PCI device structure
- s390/pci: fix use after free of zpci_dev
- s390/pci: fix zpci_zdev_put() on reserve
* [SRU][F] USB: serial: pl2303: add support for PL2303HXN (LP: #1948377)
- USB: serial: pl2303: add support for PL2303HXN
- USB: serial: pl2303: fix line-speed handling on newer chips
* Focal update: v5.4.151 upstream stable release (LP: #1947888)
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- usb: cdns3: fix race condition before setting doorbell
- fs-verity: fix signed integer overflow with i_size near S64_MAX
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
structure field
- scsi: ufs: Fix illegal offset in UPIU event trace
- mac80211: fix use-after-free in CCMP/GCMP RX
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h
- drm/amd/display: Pass PCI deviceid into DC
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced
from sysfs
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- mac80211: mesh: fix potentially unaligned access
- mac80211-hwsim: fix late beacon hrtimer handling
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- hwmon: (tmp421) report /PVLD condition as fault
- hwmon: (tmp421) fix rounding for negative values
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
- scsi: csiostor: Add module softdep on cxgb4
- net: hns3: do not allow call hns3_nic_net_open repeatedly
- net: sched: flower: protect fl_walk() with rcu
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
- perf/x86/intel: Update event constraints for ICX
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error
- ipack: ipoctal: fix stack information leak
- ipack: ipoctal: fix tty registration race
- ipack: ipoctal: fix tty-registration error handling
- ipack: ipoctal: fix missing allocation-failure check
- ipack: ipoctal: fix module reference leak
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
- ext4: fix reserved space counter leakage
- ext4: fix potential infinite loop in ext4_dx_readdir()
- HID: u2fzero: ignore incomplete packets without data
- net: udp: annotate data race around udp_sk(sk)->corkflag
- net: stmmac: don't attach interface until resume finishes
- PCI: Fix pci_host_bridge struct device release/free handling
- libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
- hso: fix bailout in error case of probe
- usb: hso: fix error handling code of hso_create_net_device
- usb: hso: remove the bailout parameter
- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- Linux 5.4.151
* Focal update: v5.4.150 upstream stable release (LP: #1947886)
- usb: gadget: r8a66597: fix a loop in set_feature()
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
- cifs: fix incorrect check for null pointer in header_assemble
- xen/x86: fix PV trap handling on secondary processors
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
- USB: cdc-acm: fix minor-number release
- binder: make sure fd closes complete
- staging: greybus: uart: fix tty use after free
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
- USB: serial: mos7840: remove duplicated 0xac24 device ID
- USB: serial: option: add Telit LN920 compositions
- USB: serial: option: remove duplicate USB device ID
- USB: serial: option: add device id for Foxconn T99W265
- mcb: fix error handling in mcb_alloc_bus()
- erofs: fix up erofs_lookup tracepoint
- btrfs: prevent __btrfs_dump_space_info() to underflow its free space
- serial: mvebu-uart: fix driver's tx_empty callback
- net: hso: fix muxed tty registration
- afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
- enetc: Fix illegal access when reading affinity_hint
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
- net/smc: add missing error check in smc_clc_prfx_set()
- gpio: uniphier: Fix void functions to remove return value
- qed: rdma - don't wait for resources under hw error recovery flow
- net/mlx4_en: Don't allow aRFS for encapsulated packets
- scsi: iscsi: Adjust iface sysfs attr detection
- tty: synclink_gt, drop unneeded forward declarations
- tty: synclink_gt: rename a conflicting function name
- fpga: machxo2-spi: Return an error on failure
- fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
- cifs: fix a sign extension bug
- scsi: qla2xxx: Restore initiator in dual mode
- scsi: lpfc: Use correct scnprintf() limit
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
- irqchip/gic-v3-its: Fix potential VPE leak on error
- md: fix a lock order reversal in md_alloc
- blktrace: Fix uaf in blk_trace access after removing by sysfs
- net: macb: fix use after free on rmmod
- net: stmmac: allow CSR clock of 300MHz
- m68k: Double cast io functions to unsigned long
- ipv6: delay fib6_sernum increase in fib6_add
- bpf: Add oversize check before call kvcalloc()
- xen/balloon: use a kernel thread instead a workqueue
- nvme-multipath: fix ANA state updates when a namespace is not present
- sparc32: page align size in arch_dma_alloc
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
- compiler.h: Introduce absolute_pointer macro
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location
- sparc: avoid stringop-overread errors
- qnx4: avoid stringop-overread errors
- parisc: Use absolute_pointer() to define PAGE0
- arm64: Mark __stack_chk_guard as __ro_after_init
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
- net: 6pack: Fix tx timeout and slot time
- spi: Fix tegra20 build with CONFIG_PM=n
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
- xen/balloon: fix balloon kthread freezing
- qnx4: work around gcc false positive warning bug
- Linux 5.4.150
* ACL updates on OCFS2 are not revalidated (LP: #1947161) // Focal update:
v5.4.150 upstream stable release (LP: #1947886)
- ocfs2: drop acl cache for directories too
* Focal update: v5.4.149 upstream stable release (LP: #1947885)
- PCI: pci-bridge-emul: Fix big-endian support
- PCI: aardvark: Indicate error in 'val' when config read fails
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
- PCI: aardvark: Fix reporting CRS value
- PCI/ACPI: Add Ampere Altra SOC MCFG quirk
- KVM: remember position in kvm->vcpus array
- console: consume APC, DM, DCS
- s390/pci_mmio: fully validate the VMA before calling follow_pte()
- ARM: Qualify enabling of swiotlb_init()
- apparmor: remove duplicate macro list_entry_is_head()
- ARM: 9077/1: PLT: Move struct plt_entries definition to header
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
- ARM: 9079/1: ftrace: Add MODULE_PLTS support
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
- sctp: validate chunk size in __rcv_asconf_lookup
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
- staging: rtl8192u: Fix bitwise vs logical operator in
TranslateRxSignalStuff819xUsb()
- um: virtio_uml: fix memory leak on init failures
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
- 9p/trans_virtio: Remove sysfs file on probe failure
- prctl: allow to setup brk for et_dyn executables
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
- profiling: fix shift-out-of-bounds bugs
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was
registered
- phy: avoid unnecessary link-up delay in polling mode
- net: stmmac: reset Tx desc base address before restarting Tx
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
- thermal/core: Fix thermal_cooling_device_register() prototype
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
- parisc: Move pci_dev_is_behind_card_dino to where it is used
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE
- dmaengine: ioat: depends on !UML
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
- ceph: request Fw caps before updating the mtime in ceph_write_iter
- ceph: lockdep annotations for try_nonblocking_invalidate
- btrfs: fix lockdep warning while mounting sprout fs
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
- pwm: img: Don't modify HW state in .remove() callback
- pwm: rockchip: Don't modify HW state in .remove() callback
- pwm: stm32-lp: Don't modify HW state in .remove() callback
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
- rtc: rx8010: select REGMAP_I2C
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
- Linux 5.4.149
[ Ubuntu: 5.4.0-90.101 ]
* focal/linux: 5.4.0-90.101 -proposed tracker (LP: #1947260)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.10.18)
* Add final-checks to check certificates (LP: #1947174)
- [Packaging] Add system trusted and revocation keys final check
* No sound on Lenovo laptop models Legion 15IMHG05, Yoga 7 14ITL5, and 13s
Gen2 (LP: #1939052)
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s
Gen2
* CVE-2020-36385
- RDMA/cma: Add missing locking to rdma_accept()
- RDMA/ucma: Fix the locking of ctx->file
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
* Focal update: v5.4.148 upstream stable release (LP: #1946802)
- rtc: tps65910: Correct driver module alias
- btrfs: wake up async_delalloc_pages waiters after submit
- btrfs: reset replace target device to allocation state on close
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
- PCI/MSI: Skip masking MSI-X on Xen PV
- powerpc/perf/hv-gpci: Fix counter value parsing
- xen: fix setting of max_pfn in shared_info
- include/linux/list.h: add a macro to test if entry is pointing to the head
- 9p/xen: Fix end of loop tests for list_for_each_entry
- tools/thermal/tmon: Add cross compiling support
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
- pinctrl: ingenic: Fix incorrect pull up/down info
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap
- arm64: head: avoid over-mapping in map_memory
- crypto: public_key: fix overflow during implicit conversion
- block: bfq: fix bfq_set_next_ioprio_data()
- power: supply: max17042: handle fails of reading status register
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
- VMCI: fix NULL pointer dereference when unmapping queue pair
- media: uvc: don't do DMA on stack
- media: rc-loopback: return number of emitters rather than error
- Revert "dmaengine: imx-sdma: refine to load context only once"
- dmaengine: imx-sdma: remove duplicated sdma_load_context
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
- ARM: 9105/1: atags_to_fdt: don't warn about stack size
- PCI/portdrv: Enable Bandwidth Notification only if port supports it
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
- PCI: xilinx-nwl: Enable the clock through CCF
- PCI: aardvark: Fix checking for PIO status
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
- HID: input: do not report stylus battery state as "full"
- f2fs: quota: fix potential deadlock
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
- IB/hfi1: Adjust pkey entry in index 0
- RDMA/iwcm: Release resources if iw_cm module initialization fails
- docs: Fix infiniband uverbs minor number
- pinctrl: samsung: Fix pinctrl bank pin count
- vfio: Use config not menuconfig for VFIO_NOIOMMU
- powerpc/stacktrace: Include linux/delay.h
- RDMA/efa: Remove double QP type assignment
- f2fs: show f2fs instance in printk_ratelimited
- f2fs: reduce the scope of setting fsck tag when de->name_len is zero
- openrisc: don't printk() unconditionally
- dma-debug: fix debugfs initialization order
- SUNRPC: Fix potential memory corruption
- scsi: fdomain: Fix error return code in fdomain_probe()
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
- scsi: smartpqi: Fix an error code in pqi_get_raid_map()
- scsi: qedi: Fix error codes in qedi_alloc_global_queues()
- scsi: qedf: Fix error codes in qedf_alloc_global_queues()
- powerpc/config: Renable MTD_PHYSMAP_OF
- scsi: target: avoid per-loop XCOPY buffer allocations
- HID: i2c-hid: Fix Elan touchpad regression
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs
are live
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
run_smbios_call
- fscache: Fix cookie key hashing
- clk: at91: sam9x60: Don't use audio PLL
- clk: at91: clk-generated: pass the id of changeable parent at registration
- clk: at91: clk-generated: Limit the requested rate to our range
- KVM: PPC: Fix clearing never mapped TCEs in realmode
- f2fs: fix to account missing .skipped_gc_rwsem
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
- f2fs: fix to unmap pages from userspace process in punch_hole()
- MIPS: Malta: fix alignment of the devicetree buffer
- kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
- userfaultfd: prevent concurrent API initialization
- drm/amdgpu: Fix amdgpu_ras_eeprom_init()
- ASoC: atmel: ATMEL drivers don't need HAS_DMA
- media: dib8000: rewrite the init prbs logic
- crypto: mxs-dcp - Use sg_mapping_iter to copy data
- PCI: Use pci_update_current_state() in pci_enable_device_flags()
- tipc: keep the skb in rcv queue until the whole data is read
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
- iavf: do not override the adapter state in the watchdog task
- iavf: fix locking of critical sections
- ARM: dts: qcom: apq8064: correct clock names
- video: fbdev: kyro: fix a DoS bug by restricting user input
- netlink: Deal with ESRCH error in nlmsg_notify()
- Smack: Fix wrong semantics in smk_access_entry()
- drm: avoid blocking in drm_clients_info's rcu section
- igc: Check if num of q_vectors is smaller than max before array access
- usb: host: fotg210: fix the endpoint's transactional opportunities
calculation
- usb: host: fotg210: fix the actual_length of an iso packet
- usb: gadget: u_ether: fix a potential null pointer dereference
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
- usb: gadget: composite: Allow bMaxPower=0 if self-powered
- staging: board: Fix uninitialized spinlock when attaching genpd
- tty: serial: jsm: hold port lock when reporting modem line changes
- drm/amd/display: Fix timer_per_pixel unit error
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
- bpf/tests: Fix copy-and-paste error in double word test
- bpf/tests: Do not PASS tests without actually testing the result
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
- video: fbdev: kyro: Error out if 'pixclock' equals zero
- video: fbdev: riva: Error out if 'pixclock' equals zero
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
- flow_dissector: Fix out-of-bounds warnings
- s390/jump_label: print real address in a case of a jump label bug
- s390: make PCI mio support a machine flag
- serial: 8250: Define RX trigger levels for OxSemi 950 devices
- xtensa: ISS: don't panic in rs_init
- hvsi: don't panic on tty_register_driver failure
- serial: 8250_pci: make setup_port() parameters explicitly unsigned
- staging: ks7010: Fix the initialization of the 'sleep_status' structure
- samples: bpf: Fix tracex7 error raised on the missing argument
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
- Bluetooth: skip invalid hci_sync_conn_complete_evt
- workqueue: Fix possible memory leaks in wq_numa_init()
- bonding: 3ad: fix the concurrency between __bond_release_one() and
bond_3ad_state_machine_handler()
- arm64: tegra: Fix Tegra194 PCIe EP compatible string
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the
matching in-/output
- media: imx258: Rectify mismatch of VTS value
- media: imx258: Limit the max analogue gain to 480
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops
- media: TDA1997x: fix tda1997x_query_dv_timings() return value
- media: tegra-cec: Handle errors of clk_prepare_enable()
- ARM: dts: imx53-ppd: Fix ACHC entry
- arm64: dts: qcom: sdm660: use reg value for memory node
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
- selftests/bpf: Fix xdp_tx.c prog section name
- Bluetooth: schedule SCO timeouts with delayed_work
- Bluetooth: avoid circular locks in sco_sock_connect
- net/mlx5: Fix variable type to match 64bit
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
access in amdgpu_i2c_router_select_ddc_port()
- drm/display: fix possible null-pointer dereference in dcn10_set_clock()
- mac80211: Fix monitor MTU limit so that A-MSDUs get through
- ARM: tegra: tamonten: Fix UART pad setting
- arm64: tegra: Fix compatible string for Tegra132 CPUs
- arm64: dts: ls1046a: fix eeprom entries
- nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
- Bluetooth: Fix handling of LE Enhanced Connection Complete
- opp: Don't print an error if required-opps is missing
- serial: sh-sci: fix break handling for sysrq
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
- rpc: fix gss_svc_init cleanup on failure
- staging: rts5208: Fix get_ms_information() heap buffer size
- gfs2: Don't call dlm after protocol is unmounted
- usb: chipidea: host: fix port index underflow and UBSAN complains
- lockd: lockd server-side shouldn't set fl_ops
- drm/exynos: Always initialize mapping in exynos_drm_register_dma()
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
- btrfs: tree-log: check btrfs_lookup_data_extent return value
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
- ASoC: Intel: Skylake: Fix passing loadable flag for module
- of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
- mmc: sdhci-of-arasan: Check return value of non-void funtions
- mmc: rtsx_pci: Fix long reads when clock is prescaled
- selftests/bpf: Enlarge select() timeout for test_maps
- mmc: core: Return correct emmc response in case of ioctl error
- cifs: fix wrong release in sess_alloc_buffer() failed path
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
quirk set"
- usb: musb: musb_dsps: request_irq() after initializing musb
- usbip: give back URBs for unsent unlink requests during cleanup
- usbip:vhci_hcd USB port can get stuck in the disabled state
- ASoC: rockchip: i2s: Fix regmap_ops hang
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
- drm/amdkfd: Account for SH/SE count when setting up cu masks.
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
- iwlwifi: mvm: avoid static queue number aliasing
- iwlwifi: mvm: fix access to BSS elements
- net/mlx5: DR, Enable QP retransmission
- parport: remove non-zero check on count
- ath9k: fix OOB read ar9300_eeprom_restore_internal
- ath9k: fix sleeping in atomic context
- net: fix NULL pointer reference in cipso_v4_doi_free
- fix array-index-out-of-bounds in taprio_change
- net: w5100: check return value after calling platform_get_resource()
- parisc: fix crash with signals and alloca
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
- scsi: BusLogic: Fix missing pr_cont() use
- scsi: qla2xxx: Changes to support kdump kernel
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx
- cpufreq: powernv: Fix init_chip_info initialization in numa=off
- s390/pv: fix the forcing of the swiotlb
- mm/hugetlb: initialize hugetlb_usage in mm_init
- mm,vmscan: fix divide by zero in get_scan_count
- memcg: enable accounting for pids in nested pid namespaces
- platform/chrome: cros_ec_proto: Send command again when timeout occurs
- lib/test_stackinit: Fix static initializer test
- net: dsa: lantiq_gswip: fix maximum frame length
- drm/msi/mdp4: populate priv->kms in mdp4_kms_init
- drm/amdgpu: Fix BUG_ON assert
- drm/panfrost: Simplify lock_region calculation
- drm/panfrost: Use u64 for size in lock_region
- drm/panfrost: Clamp lock region to Bifrost minimum
- btrfs: fix upper limit for max_inline for page size 64K
- xen: reset legacy rtc flag for PV domU
- bnx2x: Fix enabling network interfaces without VFs
- arm64/sve: Use correct size when reinitialising SVE state
- PM: base: power: don't try to use non-existing RTC for storing data
- PCI: Add AMD GPU multi-function power dependencies
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
- drm/etnaviv: return context from etnaviv_iommu_context_get
- drm/etnaviv: put submit prev MMU context when it exists
- drm/etnaviv: stop abusing mmu_context as FE running marker
- drm/etnaviv: keep MMU context across runtime suspend/resume
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
- drm/etnaviv: fix MMU context leak on GPU reset
- drm/etnaviv: reference MMU context when setting up hardware state
- drm/etnaviv: add missing MMU context put when reaping MMU mapping
- s390/sclp: fix Secure-IPL facility detection
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
- tipc: fix an use-after-free issue in tipc_recvmsg
- net-caif: avoid user-triggerable WARN_ON(1)
- ptp: dp83640: don't define PAGE0
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
- r6040: Restore MDIO clock frequency after MAC reset
- tipc: increase timeout in tipc_sk_enqueue()
- perf machine: Initialize srcline string member in add_location struct
- net/mlx5: FWTrace, cancel work on alloc pd error flow
- net/mlx5: Fix potential sleeping in atomic context
- events: Reuse value read using READ_ONCE instead of re-reading it
- vhost_net: fix OoB on sendmsg() failure.
- net/af_unix: fix a data-race in unix_dgram_poll
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
- qed: Handle management FW error
- dt-bindings: arm: Fix Toradex compatible typo
- ibmvnic: check failover_pending in login response
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing
registers
- net: hns3: pad the short tunnel frame before sending to hardware
- net: hns3: change affinity_mask to numa node range
- net: hns3: disable mac in flr process
- net: hns3: fix the timing issue of VF clearing interrupt sources
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
- mfd: db8500-prcmu: Adjust map to reality
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
- fuse: fix use after free in fuse_read_interrupt()
- mfd: Don't use irq_create_mapping() to resolve a mapping
- tracing/probes: Reject events which have the same name of existing one
- PCI: Add ACS quirks for Cavium multi-function devices
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
- PCI: ibmphp: Fix double unmap of io_mem
- ethtool: Fix an error code in cxgb2.c
- NTB: Fix an error code in ntb_msit_probe()
- NTB: perf: Fix an error code in perf_setup_inbuf()
- mfd: axp20x: Update AXP288 volatile ranges
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of
'cafe_nand_probe()'
- ARC: export clear_user_page() for modules
- perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
- net: dsa: b53: Fix calculating number of switch ports
- netfilter: socket: icmp6: fix use-after-scope
- fq_codel: reject silly quantum parameters
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
- ip_gre: validate csum_start only on pull
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
- Linux 5.4.148
* Focal update: v5.4.147 upstream stable release (LP: #1946795)
- Linux 5.4.147
- upstream stable to v5.4.147
* CVE-2021-3428
- ext4: save the error code which triggered an ext4_error() in the superblock
- ext4: simulate various I/O and checksum errors when reading metadata
- ext4: save all error info in save_error_info() and drop ext4_set_errno()
- ext4: check journal inode extents more carefully
* ip6gretap / erspan / ip6erspan in rtnetlink.sh from net of
ubuntu_kernel_selftests failed on B-5.4-aws / B-5.4-gke / B-5.4-oracle /
B-5.4-azure / B-5.4 (LP: #1896448)
- SAUCE: selftests: rtnetlink: fixes for older iproute2
* CVE-2019-19449
- f2fs: fix wrong total_sections check and fsmeta check
- f2fs: fix to do sanity check on segment/section count
* kernel bug found when disconnecting one fiber channel interface on Cisco
Chassis with fnic DRV_VERSION "1.6.0.47" (LP: #1944586)
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands
* memfd from ubuntu_kernel_selftests failed to build on B-5.4 (unknown type
name ‘__u64’) (LP: #1944613)
- SAUCE: selftests/memfd: fix __u64 not defined build issue
* Medion Notebook Keyboard not working (LP: #1909814)
- ACPI: resources: Add DMI-based legacy IRQ override quirk
* vrf: fix refcnt leak with vxlan slaves (LP: #1945180)
- ipv4: Fix device used for dst_alloc with local routes
* Check for changes relevant for security certifications (LP: #1945989)
- [Packaging] Add a new fips-checks script
- [Packaging] Add fips-checks as part of finalchecks
* Fix cold plugged USB device on certain PCIe USB cards (LP: #1945211)
- Revert "UBUNTU: SAUCE: Revert "usb: core: reduce power-on-good delay time of
root hub""
- usb: core: hcd: Add support for deferring roothub registration
- xhci: Set HCD flag to defer primary roothub registration
- usb: core: hcd: Modularize HCD stop configuration in usb_stop_hcd()
* CVE-2021-3759
- memcg: enable accounting of ipc resources
* Focal update: v5.4.146 upstream stable release (LP: #1946024)
- locking/mutex: Fix HANDOFF condition
- regmap: fix the offset of register error log
- crypto: mxs-dcp - Check for DMA mapping errors
- sched/deadline: Fix reset_on_fork reporting of DL tasks
- power: supply: axp288_fuel_gauge: Report register-address on readb / writeb
errors
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
- sched/deadline: Fix missing clock update in migrate_task_rq_dl()
- rcu/tree: Handle VM stoppage in stall detection
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
- hrtimer: Ensure timerfd notification for HIGHRES=n
- udf: Check LVID earlier
- udf: Fix iocharset=utf8 mount option
- isofs: joliet: Fix iocharset=utf8 mount option
- bcache: add proper error unwinding in bcache_device_init
- nvme-tcp: don't update queue count when failing to set io queues
- nvme-rdma: don't update queue count when failing to set io queues
- nvmet: pass back cntlid on successful completion
- power: supply: max17042_battery: fix typo in MAx17042_TOFF
- s390/cio: add dev_busid sysfs entry for each subchannel
- libata: fix ata_host_start()
- crypto: qat - do not ignore errors from enable_vf2pf_comms()
- crypto: qat - handle both source of interrupt in VF ISR
- crypto: qat - fix reuse of completion variable
- crypto: qat - fix naming for init/shutdown VF to PF notifications
- crypto: qat - do not export adf_iov_putmsg()
- fcntl: fix potential deadlock for &fasync_struct.fa_lock
- udf_get_extendedattr() had no boundary checks.
- s390/kasan: fix large PMD pages address alignment check
- s390/debug: fix debug area life cycle
- m68k: emu: Fix invalid free in nfeth_cleanup()
- sched: Fix UCLAMP_FLAG_IDLE setting
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config
- genirq/timings: Fix error return code in irq_timings_test_irqs()
- lib/mpi: use kcalloc in mpi_resize
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock
source channel
- crypto: qat - use proper type for vf_mask
- certs: Trigger creation of RSA module signing key if it's not an RSA key
- regulator: vctrl: Use locked regulator_get_voltage in probe path
- regulator: vctrl: Avoid lockdep warning in enable/disable ops
- spi: sprd: Fix the wrong WDG_LOAD_VAL
- spi: spi-zynq-qspi: use wait_for_completion_timeout to make
zynq_qspi_exec_mem_op not interruptible
- EDAC/i10nm: Fix NVDIMM detection
- drm/panfrost: Fix missing clk_disable_unprepare() on error in
panfrost_clk_init()
- media: TDA1997x: enable EDID support
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
- media: cxd2880-spi: Fix an error handling path
- bpf: Fix a typo of reuseport map in bpf.h.
- bpf: Fix potential memleak and UAF in the verifier.
- ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
- arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
- soc: qcom: rpmhpd: Use corner in power_off
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
- media: dvb-usb: Fix error handling in dvb_usb_i2c_init
- media: go7007: remove redundant initialization
- media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
- 6lowpan: iphc: Fix an off-by-one check of array index
- netns: protect netns ID lookups with RCU
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
- ARM: dts: meson8: Use a higher default GPU clock frequency
- ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
- ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
- ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
- net/mlx5e: Prohibit inner indir TIRs in IPoIB
- cgroup/cpuset: Fix a partition bug with hotplug
- net: cipso: fix warnings in netlbl_cipsov4_add_std
- i2c: highlander: add IRQ check
- leds: lt3593: Put fwnode in any case during ->probe()
- leds: trigger: audio: Add an activate callback to ensure the initial
brightness is set
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
- media: venus: venc: Fix potential null pointer dereference on pointer fmt
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
- PCI: PM: Enable PME if it can be signaled from D3cold
- soc: qcom: smsm: Fix missed interrupts if state changes while masked
- debugfs: Return error during {full/open}_proxy_open() on rmmod
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
- PM: EM: Increase energy calculation precision
- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
- counter: 104-quad-8: Return error when invalid mode during ceiling_write
- Bluetooth: fix repeated calls to sco_sock_kill
- drm/msm/dsi: Fix some reference counted resource leaks
- usb: gadget: udc: at91: add IRQ check
- usb: phy: fsl-usb: add IRQ check
- usb: phy: twl6030: add IRQ checks
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
- usb: host: ohci-tmio: add IRQ check
- usb: phy: tahvo: add IRQ check
- mac80211: Fix insufficient headroom issue for AMSDU
- lockd: Fix invalid lockowner cast after vfs_test_lock
- nfsd4: Fix forced-expiry locking
- usb: gadget: mv_u3d: request_irq() after initializing UDC
- mm/swap: consider max pages in iomap_swapfile_add_extent
- Bluetooth: add timeout sanity check to hci_inquiry
- i2c: iop3xx: fix deferred probing
- i2c: s3c2410: fix IRQ check
- rsi: fix error code in rsi_load_9116_firmware()
- rsi: fix an error code in rsi_probe()
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
- ASoC: Intel: Skylake: Fix module resource and format selection
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
- mmc: moxart: Fix issue with uninitialized dma_slave_config
- bpf: Fix possible out of bound write in narrow load handling
- CIFS: Fix a potencially linear read overflow
- i2c: mt65xx: fix IRQ check
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA
config is available
- tty: serial: fsl_lpuart: fix the wrong mapbase value
- ASoC: wcd9335: Fix a double irq free in the remove function
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe
function
- ASoC: wcd9335: Disable irq on slave ports in the remove function
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
- bcma: Fix memory leak for internally-handled cores
- brcmfmac: pcie: fix oops on failure to resume and reprobe
- ipv6: make exception cache less predictible
- ipv4: make exception cache less predictible
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
- net: qualcomm: fix QCA7000 checksum handling
- octeontx2-af: Fix loop in free and unmap counter
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4
- bpf: Fix leakage due to insufficient speculative store bypass mitigation
- bpf: verifier: Allocate idmap scratch in verifier env
- bpf: Fix pointer arithmetic mask tightening under state pruning
- tty: Fix data race between tiocsti() and flush_to_ldisc()
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error
- KVM: s390: index kvm->arch.idle_mask by vcpu_idx
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
adjusted
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
- fuse: truncate pagecache on atomic_o_trunc
- fuse: flush extending writes
- IMA: remove -Wmissing-prototypes warning
- IMA: remove the dependency on CRYPTO_MD5
- fbmem: don't allow too huge resolutions
- backlight: pwm_bl: Improve bootloader/kernel device handover
- clk: kirkwood: Fix a clocking boot regression
- Linux 5.4.146
* AMD A8-7680 (amdgpu): broken Xorg acceleration and hibernation
(LP: #1920674) // Focal update: v5.4.146 upstream stable release
(LP: #1946024)
- drm/amdgpu/acp: Make PM domain really work
* Focal update: v5.4.145 upstream stable release (LP: #1945517)
- fscrypt: add fscrypt_symlink_getattr() for computing st_size
- ext4: report correct st_size for encrypted symlinks
- f2fs: report correct st_size for encrypted symlinks
- ubifs: report correct st_size for encrypted symlinks
- kthread: Fix PF_KTHREAD vs to_kthread() race
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
- gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V
formats
- reset: reset-zynqmp: Fixed the argument data type
- qed: Fix the VF msix vectors flow
- net: macb: Add a NULL check on desc_ptp
- qede: Fix memset corruption
- perf/x86/intel/pt: Fix mask of num_address_ranges
- perf/x86/amd/ibs: Work around erratum #1197
- perf/x86/amd/power: Assign pmu.module
- cryptoloop: add a deprecation warning
- ARM: 8918/2: only build return_address() if needed
- ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
- ARC: wireup clone3 syscall
- media: stkwebcam: fix memory leak in stk_camera_probe
- igmp: Add ip_mc_list lock in ip_check_mc_rcu
- USB: serial: mos7720: improve OOM-handling in read_mos_reg()
- ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing
table (v2)
- powerpc/boot: Delete unneeded .globl _zimage_start
- net: ll_temac: Remove left-over debug message
- mm/page_alloc: speed up the iteration of max_order
- Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
ASPM"
- x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating
- Revert "btrfs: compression: don't try to compress if we don't have enough
pages"
- ALSA: usb-audio: Add registration quirk for JBL Quantum 800
- usb: host: xhci-rcar: Don't reload firmware after the completion
- usb: mtu3: use @mult for HS isoc or intr
- usb: mtu3: fix the wrong HS mult value
- xhci: fix unsafe memory usage in xhci tracing
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
- PCI: Call Max Payload Size-related fixup quirks early
- Linux 5.4.145
* Focal update: v5.4.144 upstream stable release (LP: #1944756)
- net: qrtr: fix another OOB Read in qrtr_endpoint_post
- ARC: Fix CONFIG_STACKDEPOT
- netfilter: conntrack: collect all entries in one cycle
- once: Fix panic when module unload
- ovl: fix uninitialized pointer read in ovl_lookup_real_one()
- mmc: sdhci-msm: Update the software timeout value for sdhc
- mm, oom: make the calculation of oom badness more accurate
- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX
and TX error counters
- Revert "USB: serial: ch341: fix character loss at high transfer rates"
- USB: serial: option: add new VID/PID to support Fibocom FG150
- usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
- usb: dwc3: gadget: Stop EP0 transfers during pullup disable
- scsi: core: Fix hang of freezing queue between blocking and running device
- RDMA/bnxt_re: Add missing spin lock initialization
- IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
- e1000e: Fix the max snoop/no-snoop latency for 10M
- RDMA/efa: Free IRQ vectors on error flow
- ip_gre: add validation for csum_start
- xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
- net: marvell: fix MVNETA_TX_IN_PRGRS bit number
- rtnetlink: Return correct error on changing device netns
- net: hns3: clear hardware resource when loading driver
- net: hns3: fix duplicate node in VLAN list
- net: hns3: fix get wrong pfc_en when query PFC configuration
- drm/i915: Fix syncmap memory leak
- usb: gadget: u_audio: fix race condition on endpoint stop
- perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
- opp: remove WARN when no valid OPPs remain
- virtio: Improve vq->broken access to avoid any compiler optimization
- virtio_pci: Support surprise removal of virtio pci device
- vringh: Use wiov->used to check for read/write desc order
- qed: qed ll2 race condition fixes
- qed: Fix null-pointer dereference in qed_rdma_create_qp()
- drm: Copy drm_wait_vblank to user before returning
- drm/nouveau/disp: power down unused DP links during init
- net/rds: dma_map_sg is entitled to merge entries
- btrfs: fix race between marking inode needs to be logged and log syncing
- vt_kdsetmode: extend console locking
- bpf: Track contents of read-only maps as scalars
- bpf: Fix cast to pointer from integer of different size warning
- net: dsa: mt7530: fix VLAN traffic leaks again
- KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
- arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
- btrfs: fix NULL pointer dereference when deleting device by invalid id
- Revert "floppy: reintroduce O_NDELAY fix"
- Revert "parisc: Add assembly implementations for memset, strlen, strcpy,
strncpy and strcat"
- net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
- audit: move put_tree() to avoid trim_trees refcount underflow and UAF
- Linux 5.4.144
[ Ubuntu: 5.4.0-89.100 ]
* focal/linux: 5.4.0-89.100 -proposed tracker (LP: #1944901)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.27)
* ext4 journal recovery fails w/ data=journal + mmap (LP: #1847340)
- jbd2: introduce/export functions
jbd2_journal_submit|finish_inode_data_buffers()
- jbd2, ext4, ocfs2: introduce/use journal callbacks
j_submit|finish_inode_data_buffers()
- ext4: data=journal: fixes for ext4_page_mkwrite()
- ext4: data=journal: write-protect pages on j_submit_inode_data_buffers()
- ext4: fix mmap write protection for data=journal mode
* CVE-2021-40490
- ext4: fix race writing to an inline_data file while its xattrs are changing
* Obsolete patch "UBUNTU: SAUCE: ext4: fix directory index node split
corruption" (LP: #1942902)
- Revert "UBUNTU: SAUCE: ext4: fix directory index node split corruption"
* psock_snd.sh in net from ubuntu_kernel_selftests ADT failure with
focal/groovy/hirsute/impish (LP: #1892213)
- selftests/net: remove min gso test in packet_snd
* Focal update: v5.4.143 upstream stable release (LP: #1944212)
- ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
- x86/fpu: Make init_fpstate correct with optimized XSAVE
- ath: Use safer key clearing with key cache entries
- ath9k: Clear key cache explicitly on disabling hardware
- ath: Export ath_hw_keysetmac()
- ath: Modify ath_key_delete() to not need full key entry
- ath9k: Postpone key cache entry deletion for TXQ frames reference it
- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards
- media: zr364xx: propagate errors from zr364xx_start_readpipe()
- media: zr364xx: fix memory leaks in probe()
- media: drivers/media/usb: fix memory leak in zr364xx_probe
- USB: core: Avoid WARNings for 0-length descriptor requests
- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers
- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe()
- ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218
- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not
yet available
- scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry()
- scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach()
- scsi: core: Avoid printing an error if target_alloc() returns -ENXIO
- scsi: core: Fix capacity set to zero after offlinining device
- ARM: dts: nomadik: Fix up interrupt controller node names
- net: usb: lan78xx: don't modify phy_device state concurrently
- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X
- Bluetooth: hidp: use correct wait queue when removing ctrl_wait
- iommu: Check if group is NULL before remove device
- cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant
- dccp: add do-while-0 stubs for dccp_pr_debug macros
- virtio: Protect vqs list access
- vhost: Fix the calculation in vhost_overflow()
- bpf: Clear zext_dst of dead insns
- bnxt: don't lock the tx queue from napi poll
- bnxt: disable napi before canceling DIM
- net: 6pack: fix slab-out-of-bounds in decode_data
- ptp_pch: Restore dependency on PCI
- bnxt_en: Add missing DMA memory barriers
- vrf: Reset skb conntrack connection on VRF rcv
- virtio-net: support XDP when not more queues
- virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO
- net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32
- net: mdio-mux: Don't ignore memory allocation errors
- net: mdio-mux: Handle -EPROBE_DEFER correctly
- ovs: clear skb->tstamp in forwarding path
- i40e: Fix ATR queue selection
- iavf: Fix ping is lost after untrusted VF had tried to change MAC
- ovl: add splice file read write helper
- mmc: dw_mmc: Fix hang on data CRC error
- ALSA: hda - fix the 'Capture Switch' value change notifications
- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event
name
- slimbus: messaging: start transaction ids from 1 instead of zero
- slimbus: messaging: check for valid transaction id
- slimbus: ngd: reset dma setup during runtime pm
- ipack: tpci200: fix many double free issues in tpci200_pci_probe
- ipack: tpci200: fix memory leak in the tpci200_register
- btrfs: prevent rename2 from exchanging a subvol with a directory from
different parents
- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI
- ASoC: intel: atom: Fix breakage for PCM buffer address setup
- mm, memcg: avoid stale protection values when cgroup is above protection
- mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim
- fs: warn about impending deprecation of mandatory locks
- netfilter: nft_exthdr: fix endianness of tcp option cast
- Linux 5.4.143
* Focal update: v5.4.142 upstream stable release (LP: #1944202)
- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels
- iio: humidity: hdc100x: Add margin to the conversion time
- iio: adc: Fix incorrect exit of for-loop
- ASoC: xilinx: Fix reference to PCM buffer address
- ASoC: intel: atom: Fix reference to PCM buffer address
- i2c: dev: zero out array used for i2c reads from userspace
- ceph: reduce contention in ceph_check_delayed_caps()
- ACPI: NFIT: Fix support for virtual SPA ranges
- libnvdimm/region: Fix label activation vs errors
- ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi
- ieee802154: hwsim: fix GPF in hwsim_new_edge_nl
- ASoC: cs42l42: Correct definition of ADC Volume control
- ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J
- ASoC: cs42l42: Fix inversion of ADC Notch Switch control
- ASoC: cs42l42: Remove duplicate control for WNF filter frequency
- netfilter: nf_conntrack_bridge: Fix memory leak when error
- ASoC: cs42l42: Fix LRCLK frame start edge
- net: dsa: mt7530: add the missing RxUnicast MIB counter
- platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED
- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-
lookup tables
- net: phy: micrel: Fix link detection on ksz87xx switch"
- ppp: Fix generating ifname when empty IFLA_IFNAME is specified
- net: sched: act_mirred: Reset ct info when mirror/redirect skb
- iavf: Set RSS LUT and key in reset handle path
- psample: Add a fwd declaration for skbuff
- net/mlx5: Fix return value from tracer initialization
- drm/meson: fix colour distortion from HDR set during vendor u-boot
- net: dsa: microchip: Fix ksz_read64()
- net: Fix memory leak in ieee802154_raw_deliver
- net: igmp: fix data-race in igmp_ifc_timer_expire()
- net: dsa: lan9303: fix broken backpressure in .port_fdb_dump
- net: dsa: lantiq: fix broken backpressure in .port_fdb_dump
- net: dsa: sja1105: fix broken backpressure in .port_fdb_dump
- net: bridge: fix memleak in br_add_if()
- net: linkwatch: fix failure to restore device state across suspend/resume
- tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B
packets
- net: igmp: increase size of mr_ifc_count
- xen/events: Fix race in set_evtchn_to_irq
- vsock/virtio: avoid potential deadlock when vsock device remove
- nbd: Aovid double completion of a request
- powerpc/kprobes: Fix kprobe Oops happens in booke
- x86/tools: Fix objdump version check again
- genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP
- x86/msi: Force affinity setup before startup
- x86/ioapic: Force affinity setup before startup
- x86/resctrl: Fix default monitoring groups reporting
- genirq/msi: Ensure deactivation on teardown
- genirq/timings: Prevent potential array overflow in __irq_timings_store()
- PCI/MSI: Enable and mask MSI-X early
- PCI/MSI: Mask all unused MSI-X entries
- PCI/MSI: Enforce that MSI-X table entry is masked for update
- PCI/MSI: Enforce MSI[X] entry updates to be visible
- PCI/MSI: Do not set invalid bits in MSI mask
- PCI/MSI: Correct misleading comments
- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown()
- PCI/MSI: Protect msi_desc::masked for multi-MSI
- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation
- ceph: add some lockdep assertions around snaprealm handling
- ceph: clean up locking annotation for ceph_get_snap_realm and
__lookup_snap_realm
- ceph: take snap_empty_lock atomically with snaprealm refcount change
- vmlinux.lds.h: Handle clang's module.{c,d}tor sections
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width
- Linux 5.4.142
* Focal update: v5.4.141 upstream stable release (LP: #1943484)
- KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB
- tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag
- media: v4l2-mem2mem: always consider OUTPUT queue during poll
- tracing: Reject string operand in the histogram expression
- usb: dwc3: Stop active transfers before halting the controller
- usb: dwc3: gadget: Allow runtime suspend if UDC unbinded
- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup
- usb: dwc3: gadget: Prevent EP queuing while stopping transfers
- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable
- usb: dwc3: gadget: Disable gadget IRQ during pullup disable
- usb: dwc3: gadget: Avoid runtime resume if disabling pullup
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page
- USB:ehci:fix Kunpeng920 ehci hardware problem
- ALSA: hda: Add quirk for ASUS Flow x13
- ppp: Fix generating ppp unit id when ifname is not specified
- ovl: prevent private clone if bind mount is not allowed
- btrfs: make qgroup_free_reserved_data take btrfs_inode
- btrfs: make btrfs_qgroup_reserve_data take btrfs_inode
- btrfs: qgroup: allow to unreserve range without releasing other ranges
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT
- btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-
after-EDQUOT
- btrfs: fix lockdep splat when enabling and disabling qgroups
- net: xilinx_emaclite: Do not print real IOMEM pointer
- btrfs: qgroup: don't commit transaction when we already hold the handle
- btrfs: export and rename qgroup_reserve_meta
- btrfs: don't flush from btrfs_delayed_inode_reserve_metadata
- Linux 5.4.141
Date: 2022-09-12 14:09:09.370495+00:00
Changed-By: Jesse Sung <jesse.sung at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-xilinx-zynqmp/5.4.0-1018.21
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list