[ubuntu/focal-security] linux-oracle-5.15 5.15.0-1018.23~20.04.1 (Accepted)
Andy Whitcroft
apw at canonical.com
Mon Sep 26 13:24:50 UTC 2022
linux-oracle-5.15 (5.15.0-1018.23~20.04.1) focal; urgency=medium
* focal/linux-oracle-5.15: 5.15.0-1018.23~20.04.1 -proposed tracker
(LP: #1987763)
[ Ubuntu: 5.15.0-1018.23 ]
* jammy/linux-oracle: 5.15.0-1018.23 -proposed tracker (LP: #1987764)
* Jammy update: v5.15.49 upstream stable release (LP: #1983149)
- [Config] updateconfigs for LIB_MEMNEQ
* jammy/linux: 5.15.0-48.54 -proposed tracker (LP: #1987775)
* System freeze after resuming from suspend due to PCI ASPM settings
(LP: #1980829)
- SAUCE: PCI/ASPM: Save/restore L1SS Capability for suspend/resume
- SAUCE: whitelist platforms that needs save/restore ASPM L1SS for
suspend/resume
* [SRU][J/OEM-5.17][PATCH 0/1] Fix oled brightness set above frame-average
luminance (LP: #1978986)
- SAUCE: drm: New function to get luminance range based on static hdr metadata
- SAUCE: drm/amdgpu_dm: Rely on split out luminance calculation function
- SAUCE: drm/i915: Use luminance range calculated during edid parsing
* Jammy: Add OVS Internal Port HW Offload to mlx5 driver (LP: #1983498)
- net/mlx5e: Refactor rx handler of represetor device
- net/mlx5e: Use generic name for the forwarding dev pointer
- net/mlx5: E-Switch, Add ovs internal port mapping to metadata support
- net/mlx5e: Support accept action
- net/mlx5e: Accept action skbedit in the tc actions list
- net/mlx5e: Offload tc rules that redirect to ovs internal port
- net/mlx5e: Offload internal port as encap route device
- net/mlx5e: Enable TC offload for ingress MACVLAN
- net/mlx5e: Add indirect tc offload of ovs internal port
- net/mlx5e: Term table handling of internal port rules
- net/mlx5: Support internal port as decap route device
- net/mlx5: Fix some error handling paths in 'mlx5e_tc_add_fdb_flow()'
- net/mlx5e: TC, Fix memory leak with rules with internal port
- net/mlx5e: Fix skb memory leak when TC classifier action offloads are
disabled
- net/mlx5e: Fix nullptr on deleting mirroring rule
- net/mlx5e: Avoid implicit modify hdr for decap drop rule
- net/mlx5e: Fix wrong source vport matching on tunnel rule
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported
* Remove unused variable from i915 psr (LP: #1986798)
- SAUCE: drm/i915/display/psr: Remove unused variable
* refactoring of overlayfs fix to properly support shiftfs (LP: #1983640)
- SAUCE: overlayfs: remove CONFIG_AUFS_FS dependency
* Jammy update: v5.15.53 upstream stable release (LP: #1986728)
- Revert "drm/amdgpu/display: set vblank_disable_immediate for DC"
- drm/amdgpu: To flush tlb for MMHUB of RAVEN series
- ksmbd: set the range of bytes to zero without extending file size in
FSCTL_ZERO_DATA
- ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA
- ksmbd: use vfs_llseek instead of dereferencing NULL
- ipv6: take care of disable_policy when restoring routes
- net: phy: Don't trigger state machine while in suspend
- nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX
S40G)
- nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1
- nvdimm: Fix badblocks clear off-by-one error
- powerpc/prom_init: Fix kernel config grep
- powerpc/book3e: Fix PUD allocation size in map_kernel_page()
- powerpc/bpf: Fix use of user_pt_regs in uapi
- dm raid: fix accesses beyond end of raid member array
- dm raid: fix KASAN warning in raid5_add_disks
- s390/archrandom: simplify back to earlier design and initialize earlier
- SUNRPC: Fix READ_PLUS crasher
- net: rose: fix UAF bugs caused by timer handler
- net: usb: ax88179_178a: Fix packet receiving
- virtio-net: fix race between ndo_open() and virtio_device_ready()
- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test
- net: dsa: bcm_sf2: force pause link settings
- net: tun: unlink NAPI from device on destruction
- net: tun: stop NAPI when detaching queues
- net: dp83822: disable false carrier interrupt
- net: dp83822: disable rx error interrupt
- RDMA/qedr: Fix reporting QP timeout attribute
- RDMA/cm: Fix memory leak in ib_cm_insert_listen
- linux/dim: Fix divide by 0 in RDMA DIM
- net: usb: asix: do not force pause frames support
- usbnet: fix memory allocation in helpers
- selftests: mptcp: more stable diag tests
- net: ipv6: unexport __init-annotated seg6_hmac_net_init()
- NFSD: restore EINVAL error translation in nfsd_commit()
- vfs: fix copy_file_range() regression in cross-fs copies
- caif_virtio: fix race between virtio_device_ready() and ndo_open()
- PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events
- vdpa/mlx5: Update Control VQ callback information
- s390: remove unneeded 'select BUILD_BIN2C'
- netfilter: nft_dynset: restore set element counter when failing to update
- net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup()
- net/sched: act_api: Notify user space if any actions were flushed before
error
- net: asix: fix "can't send until first packet is send" issue
- net: bonding: fix possible NULL deref in rlb code
- net: phy: ax88772a: fix lost pause advertisement configuration
- net: bonding: fix use-after-free after 802.3ad slave unbind
- powerpc/memhotplug: Add add_pages override for PPC
- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value
- NFC: nxp-nci: Don't issue a zero length i2c_master_read()
- tipc: move bc link creation back to tipc_node_create
- epic100: fix use after free on rmmod
- io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio
- ACPI: video: Change how we determine if brightness key-presses are handled
- tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
- ipv6/sit: fix ipip6_tunnel_get_prl return value
- ipv6: fix lockdep splat in in6_dump_addrs()
- mlxsw: spectrum_router: Fix rollback in tunnel next hop init
- net: tun: avoid disabling NAPI twice
- MAINTAINERS: add Leah as xfs maintainer for 5.15.y
- tcp: add a missing nf_reset_ct() in 3WHS handling
- selftests/bpf: Add test_verifier support to fixup kfunc call insns
- selftests/rseq: remove ARRAY_SIZE define from individual tests
- selftests/rseq: introduce own copy of rseq uapi header
- selftests/rseq: Remove useless assignment to cpu variable
- selftests/rseq: Remove volatile from __rseq_abi
- selftests/rseq: Introduce rseq_get_abi() helper
- selftests/rseq: Introduce thread pointer getters
- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35
- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian
- selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for
load/store
- selftests/rseq: Fix ppc32 offsets by using long rather than off_t
- selftests/rseq: Fix warnings about #if checks of undefined tokens
- selftests/rseq: Remove arm/mips asm goto compiler work-around
- selftests/rseq: Fix: work-around asm goto compiler bugs
- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread
area
- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread
area
- selftests/rseq: Change type of rseq_offset to ptrdiff_t
- xen/blkfront: fix leaking data in shared pages
- xen/netfront: fix leaking data in shared pages
- xen/netfront: force data bouncing when backend is untrusted
- xen/blkfront: force data bouncing when backend is untrusted
- xen-netfront: restore __skb_queue_tail() positioning in
xennet_get_responses()
- xen/arm: Fix race in RB-tree based P2M accounting
- net: usb: qmi_wwan: add Telit 0x1070 composition
- clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from
ixp4xx_timer_setup()
- fsi: occ: Force sequence numbering per OCC
- net: fix IFF_TX_SKB_NO_LINEAR definition
- drm/i915/gem: add missing else
- drm/msm/gem: Fix error return on fence id alloc fail
- drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c
- platform/x86: panasonic-laptop: de-obfuscate button codes
- platform/x86: panasonic-laptop: sort includes alphabetically
- platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug"
- platform/x86: panasonic-laptop: don't report duplicate brightness key-
presses
- platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute
keypresses
- drm/fourcc: fix integer type usage in uapi header
- hwmon: (occ) Remove sequence numbering and checksum calculation
- hwmon: (occ) Prevent power cap command overwriting poll response
- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add()
fails
- Linux 5.15.53
* Jammy update: v5.15.52 upstream stable release (LP: #1986724)
- tick/nohz: unexport __init-annotated tick_nohz_full_setup()
- xfs: use kmem_cache_free() for kmem_cache objects
- xfs: punch out data fork delalloc blocks on COW writeback failure
- xfs: Fix the free logic of state in xfs_attr_node_hasname
- xfs: remove all COW fork extents when remounting readonly
- xfs: check sb_meta_uuid for dabuf buffer recovery
- xfs: prevent UAF in xfs_log_item_in_current_chkpt
- xfs: only bother with sync_filesystem during readonly remount
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete
- fs: add is_idmapped_mnt() helper
- fs: move mapping helpers
- fs: tweak fsuidgid_has_mapping()
- fs: account for filesystem mappings
- docs: update mapping documentation
- fs: use low-level mapping helpers
- fs: remove unused low-level mapping helpers
- fs: port higher-level mapping helpers
- fs: add i_user_ns() helper
- fs: support mapped mounts of mapped filesystems
- fs: fix acl translation
- fs: account for group membership
- rtw88: 8821c: support RFE type4 wifi NIC
- rtw88: rtw8821c: enable rfe 6 devices
- net: mscc: ocelot: allow unregistered IP multicast flooding to CPU
- io_uring: fix not locked access to fixed buf table
- Linux 5.15.52
* Jammy update: v5.15.51 upstream stable release (LP: #1986718)
- random: schedule mix_interrupt_randomness() less often
- random: quiet urandom warning ratelimit suppression message
- ALSA: hda/via: Fix missing beep setup
- ALSA: hda/conexant: Fix missing beep setup
- ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop
- ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly
- ALSA: hda/realtek: Add quirk for Clevo PD70PNT
- ALSA: hda/realtek: Add quirk for Clevo NS50PU
- net: openvswitch: fix parsing of nw_proto for IPv6 fragments
- 9p: Fix refcounting during full path walks for fid lookups
- 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl
- 9p: fix fid refcount leak in v9fs_vfs_get_link
- btrfs: fix hang during unmount when block group reclaim task is running
- btrfs: prevent remounting to v1 space cache for subpage mount
- btrfs: add error messages to all unrecognized mount options
- scsi: ibmvfc: Store vhost pointer during subcrq allocation
- scsi: ibmvfc: Allocate/free queue resource only during probe/remove
- mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
- mmc: mediatek: wait dma stop bit reset to 0
- xen/gntdev: Avoid blocking in unmap_grant_pages()
- MAINTAINERS: Add new IOMMU development mailing list
- ata: libata: add qc->flags in ata_qc_complete_template tracepoint
- dm era: commit metadata in postsuspend after worker stops
- dm mirror log: clear log bits up to BITS_PER_LONG boundary
- tracing/kprobes: Check whether get_kretprobe() returns NULL in
kretprobe_dispatcher()
- drm/i915: Implement w/a 22010492432 for adl-s
- USB: serial: pl2303: add support for more HXN (G) types
- USB: serial: option: add Telit LE910Cx 0x1250 composition
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: option: add Quectel RM500K module support
- drm/msm: Ensure mmap offset is initialized
- drm/msm: Fix double pm_runtime_disable() call
- netfilter: use get_random_u32 instead of prandom
- scsi: scsi_debug: Fix zone transition to full condition
- drm/msm: Switch ordering of runpm put vs devfreq_idle
- scsi: iscsi: Exclude zero from the endpoint ID range
- xsk: Fix generic transmit when completion queue reservation fails
- drm/msm: use for_each_sgtable_sg to iterate over scatterlist
- bpf: Fix request_sock leak in sk lookup helpers
- drm/sun4i: Fix crash during suspend after component bind failure
- bpf, x86: Fix tail call count offset calculation on bpf2bpf call
- scsi: storvsc: Correct reporting of Hyper-V I/O size limits
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised
- KVM: arm64: Prevent kmemleak from accessing pKVM memory
- net: Write lock dev_base_lock without disabling bottom halves.
- net: fix data-race in dev_isalive()
- tipc: fix use-after-free Read in tipc_named_reinit
- igb: fix a use-after-free issue in igb_clean_tx_ring
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
- ethtool: Fix get module eeprom fallback
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
- drm/msm/dp: check core_initialized before disable interrupts at
dp_display_unbind()
- drm/msm/dp: Drop now unused hpd_high member
- drm/msm/dp: dp_link_parse_sink_count() return immediately if aux read failed
- drm/msm/dp: do not initialize phy until plugin interrupt received
- drm/msm/dp: force link training for display resolution change
- perf arm-spe: Don't set data source if it's not a memory operation
- erspan: do not assume transport header is always set
- net/tls: fix tls_sk_proto_close executed repeatedly
- udmabuf: add back sanity check
- selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh
- xen-blkfront: Handle NULL gendisk
- x86/xen: Remove undefined behavior in setup_features()
- MIPS: Remove repetitive increase irq_err_count
- afs: Fix dynamic root getattr
- ice: ethtool: advertise 1000M speeds properly
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
- regmap-irq: Fix offset/index mismatch in read_sub_irq_data()
- virtio_net: fix xdp_rxq_info bug after suspend/resume
- Revert "net/tls: fix tls_sk_proto_close executed repeatedly"
- sock: redo the psock vs ULP protection check
- nvme-pci: add NO APST quirk for Kioxia device
- nvme: move the Samsung X5 quirk entry to the core quirks
- gpio: winbond: Fix error code in winbond_gpio_get()
- s390/cpumf: Handle events cycles and instructions identical
- iio: mma8452: fix probe fail when device tree compatible is used.
- iio: magnetometer: yas530: Fix memchr_inv() misuse
- iio: adc: vf610: fix conversion mode sysfs node name
- usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC
- xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI
- xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI
- usb: gadget: Fix non-unique driver names in raw-gadget driver
- USB: gadget: Fix double-free bug in raw_gadget driver
- usb: chipidea: udc: check request status before setting device address
- dt-bindings: usb: ohci: Increase the number of PHYs
- dt-bindings: usb: ehci: Increase the number of PHYs
- btrfs: don't set lock_owner when locking extent buffer for reading
- btrfs: fix deadlock with fsync+fiemap+transaction commit
- f2fs: attach inline_data after setting compression
- iio:humidity:hts221: rearrange iio trigger get and register
- iio:chemical:ccs811: rearrange iio trigger get and register
- iio:accel:kxcjk-1013: rearrange iio trigger get and register
- iio:accel:bma180: rearrange iio trigger get and register
- iio:accel:mxc4005: rearrange iio trigger get and register
- iio: accel: mma8452: ignore the return value of reset operation
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
- iio: trigger: sysfs: fix use-after-free on remove
- iio: adc: stm32: fix maximum clock rate for stm32mp15x
- iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value)
- iio: afe: rescale: Fix boolean logic bug
- iio: adc: stm32: Fix ADCs iteration in irq handler
- iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs
message
- iio: adc: axp288: Override TS pin bias current for some models
- iio: adc: rzg2l_adc: add missing fwnode_handle_put() in
rzg2l_adc_parse_properties()
- iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client
- iio: adc: ti-ads131e08: add missing fwnode_handle_put() in
ads131e08_alloc_channels()
- xtensa: xtfpga: Fix refcount leak bug in setup
- xtensa: Fix refcount leak bug in time.c
- parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI
- parisc: Enable ARCH_HAS_STRICT_MODULE_RWX
- powerpc/microwatt: wire up rng during setup_arch()
- powerpc: Enable execve syscall exit tracepoint
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
- powerpc/powernv: wire up rng during setup_arch
- drm/msm/dp: Always clear mask bits to disable interrupts at
dp_ctrl_reset_irq_ctrl()
- ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node
- ARM: dts: imx6qdl: correct PU regulator ramp delay
- arm64: dts: ti: k3-am64-main: Remove support for HS400 speed mode
- ARM: exynos: Fix refcount leak in exynos_map_pmu
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
- ARM: Fix refcount leak in axxia_boot_secondary
- memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init
- modpost: fix section mismatch check for exported init/exit sections
- ARM: dts: bcm2711-rpi-400: Fix GPIO line names
- random: update comment from copy_to_user() -> copy_to_iter()
- perf build-id: Fix caching files with a wrong build ID
- dma-direct: use the correct size for dma_set_encrypted()
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)
- powerpc/pseries: wire up rng during setup_arch()
- Linux 5.15.51
* Jammy update: v5.15.50 upstream stable release (LP: #1986715)
- net: mana: Add handling of CQE_RX_TRUNCATED
- zonefs: fix zonefs_iomap_begin() for reads
- usb: gadget: u_ether: fix regression in setting fixed MAC address
- bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs
- selftests/bpf: Add selftest for calling global functions from freplace
- serial: core: Initialize rs485 RTS polarity already on probe
- arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
- Linux 5.15.50
* Jammy update: v5.15.49 upstream stable release (LP: #1983149)
- Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping"
- nfsd: Replace use of rwsem with errseq_t
- arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3
- arm64: dts: imx8mn-beacon: Enable RTS-CTS on UART3
- powerpc/kasan: Silence KASAN warnings in __get_wchan()
- ASoC: nau8822: Add operation for internal PLL off and on
- drm/amd/display: Read Golden Settings Table from VBIOS
- drm/amdkfd: Use mmget_not_zero in MMU notifier
- dma-debug: make things less spammy under memory pressure
- ASoC: cs42l52: Fix TLV scales for mixer controls
- ASoC: cs35l36: Update digital volume TLV
- ASoC: cs53l30: Correct number of volume levels on SX controls
- ASoC: cs42l52: Correct TLV for Bypass Volume
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls
- ASoC: cs42l51: Correct minimum value for SX volume control
- drm/amdkfd: add pinned BOs to kfd_bo_list
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
- quota: Prevent memory allocation recursion while holding dq_lock
- ASoC: wm8962: Fix suspend while playing music
- ASoC: es8328: Fix event generation for deemphasis control
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
- Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to
dmi_use_low_level_irq
- scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
- scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
- scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd
completion
- scsi: mpt3sas: Fix out-of-bounds compiler warning
- scsi: ipr: Fix missing/incorrect resource cleanup in error case
- scsi: pmcraid: Fix missing resource cleanup in error case
- ALSA: hda/realtek - Add HW8326 support
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration
failed
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
- ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
- net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface
netdev[napi]_alloc_frag
- gcc-12: disable '-Wdangling-pointer' warning for now
- mellanox: mlx5: avoid uninitialized variable warning with gcc-12
- MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error.
- random: credit cpu and bootloader seeds by default
- gpio: dwapb: Don't print error on -EPROBE_DEFER
- platform/x86: gigabyte-wmi: Add Z690M AORUS ELITE AX DDR4 support
- platform/x86: gigabyte-wmi: Add support for B450M DS3H-CF
- platform/x86/intel: hid: Add Surface Go to VGBS allow list
- staging: r8188eu: fix rtw_alloc_hwxmits error detection for now
- staging: r8188eu: Use zeroing allocator in wpa_set_encryption()
- staging: r8188eu: Fix warning of array overflow in ioctl_linux.c
- pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
- pNFS: Avoid a live lock condition in pnfs_update_layout()
- sunrpc: set cl_max_connect when cloning an rpc_clnt
- clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
- i40e: Fix adding ADQ filter to TC0
- i40e: Fix calculating the number of queue pairs
- i40e: Fix call trace in setup_tx_descriptors
- Drivers: hv: vmbus: Release cpu lock in error case
- tty: goldfish: Fix free_irq() on remove
- misc: atmel-ssc: Fix IRQ check in ssc_probe
- io_uring: fix races with file table unregister
- io_uring: fix races with buffer table unregister
- drm/i915/reset: Fix error_state_read ptr + offset use
- net: hns3: split function hclge_update_port_base_vlan_cfg()
- net: hns3: set port base vlan tbl_sta to false before removing old vlan
- net: hns3: don't push link state to VF if unalive
- net: hns3: fix tm port shapping of fibre port is incorrect after driver
initialization
- nvme: add device name to warning in uuid_show()
- mlxsw: spectrum_cnt: Reorder counter pools
- net: bgmac: Fix an erroneous kfree() in bgmac_remove()
- net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg
- arm64: ftrace: fix branch range checks
- arm64: ftrace: consistently handle PLTs.
- certs/blacklist_hashes.c: fix const confusion in certs blacklist
- init: Initialize noop_backing_dev_info early
- block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
- faddr2line: Fix overlapping text section failures, the sequel
- i2c: npcm7xx: Add check for platform_driver_register
- irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
- irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions
- irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
- irqchip/realtek-rtl: Fix refcount leak in map_interrupts
- sched: Fix balance_push() vs __sched_setscheduler()
- i2c: designware: Use standard optional ref clock implementation
- mei: hbm: drop capability response on early shutdown
- mei: me: add raptor lake point S DID
- comedi: vmk80xx: fix expression for tx buffer size
- [Config] updateconfigs for LIB_MEMNEQ
- crypto: memneq - move into lib/
- USB: serial: option: add support for Cinterion MV31 with new baseline
- USB: serial: io_ti: add Agilent E5805A support
- usb: dwc2: Fix memory leak in dwc2_hcd_init
- usb: cdnsp: Fixed setting last_trb incorrectly
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
- usb: gadget: f_fs: change ep->status safe in ffs_epfile_io()
- usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io()
- tty: n_gsm: Debug output allocation must use GFP_ATOMIC
- serial: 8250: Store to lsr_save_flags after lsr read
- bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
- dm mirror log: round up region bitmap size to BITS_PER_LONG
- drm/amd/display: Cap OLED brightness per max frame-average luminance
- cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle
- ext4: fix super block checksum incorrect after mount
- ext4: fix bug_on ext4_mb_use_inode_pa
- ext4: make variable "count" signed
- ext4: add reserved GDT blocks check
- KVM: arm64: Don't read a HW interrupt pending state in user context
- virtio-pci: Remove wrong address verification in vp_del_vqs()
- powerpc/book3e: get rid of #include <generated/compile.h>
- clk: imx8mp: fix usb_root_clk parent
- Linux 5.15.49
* Jammy update: v5.15.48 upstream stable release (LP: #1983146)
- Linux 5.15.48
- Upstream stable to v5.15.48
* Jammy update: v5.15.47 upstream stable release (LP: #1982968)
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
- staging: greybus: codecs: fix type confusion of list iterator variable
- iio: adc: ad7124: Remove shift from scan_type
- lkdtm/bugs: Check for the NULL pointer after calling kmalloc
- lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP
- tty: goldfish: Use tty_port_destroy() to destroy port
- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
- tty: n_tty: Restore EOF push handling behavior
- serial: 8250_aspeed_vuart: Fix potential NULL dereference in
aspeed_vuart_probe
- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
and ida_simple_get
- remoteproc: imx_rproc: Ignore create mem entry for resource table
- usb: usbip: fix a refcount leak in stub_probe()
- usb: usbip: add missing device lock on tweak configuration cmd
- USB: storage: karma: fix rio_karma_init return
- usb: musb: Fix missing of_node_put() in omap2430_probe
- staging: fieldbus: Fix the error handling path in
anybuss_host_common_probe()
- pwm: lp3943: Fix duty calculation in case period was clamped
- pwm: raspberrypi-poe: Fix endianness in firmware struct
- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
- usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
- misc: fastrpc: fix an incorrect NULL check on list iterator
- firmware: stratix10-svc: fix a missing check on list iterator
- usb: typec: mux: Check dev_set_name() return value
- rpmsg: virtio: Fix possible double free in rpmsg_probe()
- rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev()
- rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
- iio: proximity: vl53l0x: Fix return value check of
wait_for_completion_timeout
- iio: adc: sc27xx: fix read big scale voltage not right
- iio: adc: sc27xx: Fine tune the scale calibration values
- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
- pvpanic: Fix typos in the comments
- misc/pvpanic: Convert regular spinlock into trylock on panic path
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
- power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD" DMI
quirk
- serial: sifive: Report actual baud base rather than fixed 115200
- export: fix string handling of namespace in EXPORT_SYMBOL_NS
- soundwire: intel: prevent pm_runtime resume prior to system suspend
- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
- ksmbd: fix reference count leak in smb_check_perm_dacl()
- extcon: ptn5150: Add queue work sync before driver release
- soc: rockchip: Fix refcount leak in rockchip_grf_init
- clocksource/drivers/riscv: Events are stopped during CPU suspend
- ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1
- rtc: mt6397: check return value after calling platform_get_resource()
- rtc: ftrtc010: Use platform_get_irq() to get the interrupt
- rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe
- staging: r8188eu: add check for kzalloc
- tty: n_gsm: Don't ignore write return value in gsmld_output()
- tty: n_gsm: Fix packet data hex dump output
- serial: meson: acquire port->lock in startup()
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
- serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE
- serial: digicolor-usart: Don't allow CS5-6
- serial: rda-uart: Don't allow CS5-6
- serial: txx9: Don't allow CS5-6
- serial: sh-sci: Don't allow CS5-6
- serial: sifive: Sanitize CSIZE and c_iflag
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
- serial: stm32-usart: Correct CSIZE, bits, and parity
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
- bus: ti-sysc: Fix warnings for unbind for serial
- driver: base: fix UAF when driver_attach failed
- driver core: fix deadlock in __device_attach
- watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking
- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
- blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
- net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
- modpost: fix removing numeric suffixes
- jffs2: fix memory leak in jffs2_do_fill_super
- ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty
- ubi: ubi_create_volume: Fix use-after-free when volume creation failed
- selftests/bpf: fix selftest after random: Urandom_read tracepoint removal
- selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read
- bpf: Fix probe read error in ___bpf_prog_run()
- block: take destination bvec offsets into account in bio_copy_data_iter
- riscv: read-only pages should not be writable
- net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct
smc_wr_tx_pend_priv *"
- tcp: add accessors to read/set tp->snd_cwnd
- nfp: only report pause frame configuration for physical device
- sfc: fix considering that all channels have TX queues
- sfc: fix wrong tx channel offset with efx_separate_tx_channels
- block: make bioset_exit() fully resilient against being called twice
- vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
- virtio: pci: Fix an error handling path in vp_modern_probe()
- net/mlx5: Don't use already freed action pointer
- net/mlx5: CT: Fix header-rewrite re-use for tupels
- net/mlx5: correct ECE offset in query qp output
- net/mlx5e: Update netdev features after changing XDP state
- net: sched: add barrier to fix packet stuck problem for lockless qdisc
- tcp: tcp_rtx_synack() can be called from process context
- vdpa: ifcvf: set pci driver data in probe
- octeontx2-af: fix error code in is_valid_offset()
- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag
- regulator: mt6315-regulator: fix invalid allowed mode
- gpio: pca953x: use the correct register address to do regcache sync
- afs: Fix infinite loop found by xfstest generic/676
- scsi: sd: Fix potential NULL pointer dereference
- tipc: check attribute length for bearer name
- driver core: Fix wait_for_device_probe() & deferred_probe_timeout
interaction
- perf c2c: Fix sorting in percent_rmt_hitm_cmp()
- dmaengine: idxd: set DMA_INTERRUPT cap bit
- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
- bootconfig: Make the bootconfig.o as a normal object file
- tracing: Make tp_printk work on syscall tracepoints
- tracing: Fix sleeping function called from invalid context on RT kernel
- tracing: Avoid adding tracer option before update_tracer_options
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()
- iommu/arm-smmu-v3: check return value after calling platform_get_resource()
- f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
- i2c: cadence: Increase timeout per message if necessary
- m68knommu: set ZERO_PAGE() to the allocated zeroed page
- m68knommu: fix undefined reference to `_init_sp'
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
- NFSv4: Don't hold the layoutget locks across multiple RPC calls
- video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1
- video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
- RISC-V: use memcpy for kexec_file mode
- m68knommu: fix undefined reference to `mach_get_rtc_pll'
- f2fs: fix to tag gcing flag on page during file defragment
- xprtrdma: treat all calls not a bcall when bc_serv is NULL
- drm/bridge: sn65dsi83: Fix an error handling path in sn65dsi83_probe()
- drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid
- netfilter: nat: really support inet nat without l3 address
- netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net
path
- netfilter: nf_tables: delete flowtable hooks via transaction list
- powerpc/kasan: Force thread size increase with KASAN
- SUNRPC: Trap RDMA segment overflows
- netfilter: nf_tables: always initialize flowtable hook list in transaction
- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
- netfilter: nf_tables: release new hooks on unsupported flowtable flags
- netfilter: nf_tables: memleak flow rule from commit path
- netfilter: nf_tables: bail out early if hardware offload is not supported
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
- stmmac: intel: Fix an error handling path in intel_eth_pci_probe()
- af_unix: Fix a data-race in unix_dgram_peer_wake_me().
- bpf, arm64: Clear prog->jited_len along prog->jited
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
- i40e: xsk: Move tmp desc array from driver to pool
- xsk: Fix handling of invalid descriptors in XSK TX batching API
- SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
- net: mdio: unexport __init-annotated mdio_bus_init()
- net: xfrm: unexport __init-annotated xfrm4_protocol_init()
- net: ipv6: unexport __init-annotated seg6_hmac_init()
- net/mlx5: Lag, filter non compatible devices
- net/mlx5: Fix mlx5_get_next_dev() peer device matching
- net/mlx5: Rearm the FW tracer after each tracer event
- net/mlx5: fs, fail conflicting actions
- ip_gre: test csum_start instead of transport header
- net: altera: Fix refcount leak in altera_tse_mdio_create
- net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete
- tcp: use alloc_large_system_hash() to allocate table_perturb
- drm: imx: fix compiler warning with gcc-12
- nfp: flower: restructure flow-key for gre+vlan combination
- iov_iter: Fix iter_xarray_get_pages{,_alloc}()
- iio: dummy: iio_simple_dummy: check the return value of kstrdup()
- staging: rtl8712: fix a potential memory leak in r871xu_drv_init()
- iio: st_sensors: Add a local lock for protecting odr
- lkdtm/usercopy: Expand size of "out of frame" object
- drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()
- drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
- tty: Fix a possible resource leak in icom_probe
- thunderbolt: Use different lane for second DisplayPort tunnel
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
- USB: host: isp116x: check return value after calling platform_get_resource()
- drivers: tty: serial: Fix deadlock in sa1100_set_termios()
- drivers: usb: host: Fix deadlock in oxu_bus_suspend()
- USB: hcd-pci: Fully suspend across freeze/thaw cycle
- char: xillybus: fix a refcount leak in cleanup_dev()
- sysrq: do not omit current cpu when showing backtrace of all active CPUs
- usb: dwc2: gadget: don't reset gadget's driver->bus
- soundwire: qcom: adjust autoenumeration timeout
- misc: rtsx: set NULL intfdata when probe fails
- extcon: Fix extcon_get_extcon_dev() error handling
- extcon: Modify extcon device to be created after driver data is set
- clocksource/drivers/sp804: Avoid error on multiple instances
- staging: rtl8712: fix uninit-value in usb_read8() and friends
- staging: rtl8712: fix uninit-value in r871xu_drv_init()
- serial: msm_serial: disable interrupts in __msm_console_write()
- kernfs: Separate kernfs_pr_cont_buf and rename_lock.
- watchdog: wdat_wdt: Stop watchdog when rebooting the system
- md: protect md_unregister_thread from reentrancy
- scsi: myrb: Fix up null pointer access on myrb_cleanup()
- ceph: allow ceph.dir.rctime xattr to be updatable
- ceph: flush the mdlog for filesystem sync
- drm/amd/display: Check if modulo is 0 before dividing.
- drm/radeon: fix a possible null pointer dereference
- drm/amd/pm: Fix missing thermal throttler status
- um: line: Use separate IRQs per line
- modpost: fix undefined behavior of is_arm_mapping_symbol()
- x86/cpu: Elide KCSAN for cpu_has() and friends
- jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds
- nbd: call genl_unregister_family() first in nbd_cleanup()
- nbd: fix race between nbd_alloc_config() and module removal
- cifs: version operations for smb20 unneeded when legacy support disabled
- drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate
- nodemask: Fix return values to be unsigned
- vringh: Fix loop descriptors check in the indirect cases
- scripts/gdb: change kernel config dumping method
- ALSA: usb-audio: Skip generic sync EP parse for secondary EP
- ALSA: usb-audio: Set up (implicit) sync for Saffire 6
- ALSA: hda/conexant - Fix loopback issue with CX20632
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga
DuetITL 2021
- ALSA: hda/realtek: Add quirk for HP Dev One
- cifs: return errors during session setup during reconnects
- cifs: fix reconnect on smb3 mount types
- KEYS: trusted: tpm2: Fix migratable logic
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
- mmc: block: Fix CQE recovery reset success
- net: phy: dp83867: retrigger SGMII AN when link change
- writeback: Fix inode->i_io_list not be protected by inode->i_lock error
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
- nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION
- ixgbe: fix bcast packets Rx on VF after promisc removal
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
- vduse: Fix NULL pointer dereference on sysfs access
- powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK
- drm/bridge: analogix_dp: Support PSR-exit to disable transition
- drm/atomic: Force bridge self-refresh-exit on CRTC switch
- drm/amdgpu: update VCN codec support for Yellow Carp
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace
- powerpc/mm: Switch obsolete dssall to .long
- drm/ast: Create threshold values for AST2600
- random: avoid checking crng_ready() twice in random_init()
- random: mark bootloader randomness code as __init
- random: account for arch randomness in bits
- md/raid0: Ignore RAID0 layout if the second zone has only one device
- net/sched: act_police: more accurate MTU policing
- PCI: qcom: Fix pipe clock imbalance
- zonefs: fix handling of explicit_open option on mount
- iov_iter: fix build issue due to possible type mis-match
- dmaengine: idxd: add missing callback function to support DMA_INTERRUPT
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
- xsk: Fix possible crash when multiple sockets are created
- Linux 5.15.47
* CVE-2022-36946
- netfilter: nf_queue: do not allow packet truncation below transport header
offset
* CVE-2021-33655
- fbcon: Disallow setting font bigger than screen size
- fbcon: Prevent that screen size is smaller than font size
- fbmem: Check virtual screen sizes in fb_set_var()
Date: 2022-09-08 12:16:08.938503+00:00
Changed-By: Juerg Haefliger <juerg.haefliger at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-oracle-5.15/5.15.0-1018.23~20.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list