[ubuntu/focal-security] linux-raspi 5.4.0-1100.112 (Accepted)
Andy Whitcroft
apw at canonical.com
Tue Dec 12 10:38:20 UTC 2023
linux-raspi (5.4.0-1100.112) focal; urgency=medium
* focal/linux-raspi: 5.4.0-1100.112 -proposed tracker (LP: #2044521)
[ Ubuntu: 5.4.0-169.187 ]
* focal/linux: 5.4.0-169.187 -proposed tracker (LP: #2044375)
* USB bus error after upgrading to proposed kernel on lunar, jammy and focal
(LP: #2043197)
- USB: core: Fix oversight in SuperSpeed initialization
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
- [Packaging] update annotations scripts
linux-raspi (5.4.0-1099.111) focal; urgency=medium
* focal/linux-raspi: 5.4.0-1099.111 -proposed tracker (LP: #2041628)
* Focal update: v5.4.257 upstream stable release (LP: #2040284)
- [Config] raspi: Update annotations after CONFIG_IMA_TRUSTED_KEYRING removal
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
[ Ubuntu: 5.4.0-168.186 ]
* focal/linux: 5.4.0-168.186 -proposed tracker (LP: #2041652)
* Focal update: v5.4.257 upstream stable release (LP: #2040284)
- erofs: ensure that the post-EOF tails are all zeroed
- ARM: pxa: remove use of symbol_get()
- mmc: au1xmmc: force non-modular build and remove symbol_get usage
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition
- serial: sc16is7xx: fix bug when first setting GPIO direction
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- pinctrl: amd: Don't show `Invalid config param` errors
- 9p: virtio: make sure 'offs' is initialized in zc_request
- ASoC: da7219: Flush pending AAD IRQ when suspending
- ASoC: da7219: Check for failure reading AAD IRQ events
- ethernet: atheros: fix return value check in atl1c_tso_csum()
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- m68k: Fix invalid .section syntax
- s390/dasd: use correct number of retries for ERP requests
- s390/dasd: fix hanging device after request requeue
- fs/nls: make load_nls() take a const parameter
- ASoc: codecs: ES8316: Fix DMIC config
- ASoC: atmel: Fix the 8K sample parameter in I2SC master
- platform/x86: intel: hid: Always call BTNL ACPI method
- platform/x86: huawei-wmi: Silence ambient light sensor
- security: keys: perform capable check only on privileged operations
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
- net: usb: qmi_wwan: add Quectel EM05GV2
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
- scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
- bnx2x: fix page fault following EEH recovery
- sctp: handle invalid error codes without calling BUG()
- cifs: add a warning when the in-flight count goes negative
- scsi: storvsc: Always set no_report_opcodes
- ALSA: seq: oss: Fix racy open/close of MIDI devices
- platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE
notifications
- powerpc/32s: Fix assembler warning about r0
- udf: Check consistency of Space Bitmap Descriptor
- udf: Handle error when adding extent to a file
- Revert "net: macsec: preserve ingress frame ordering"
- reiserfs: Check the return value from __getblk()
- eventfd: Export eventfd_ctx_do_read()
- eventfd: prevent underflow for eventfd semaphores
- new helper: lookup_positive_unlocked()
- fs: Fix error checking for d_hash_and_lookup()
- tmpfs: verify {g,u}id mount options correctly
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
- x86/asm: Make more symbols local
- x86/boot: Annotate local functions
- x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used
- cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
- bpf: Clear the probe_addr for uprobe
- tcp: tcp_enter_quickack_mode() should be static
- regmap: rbtree: Use alloc_flags for memory allocations
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in
tegra_sflash_probe()
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
in case of OOM
- wifi: mwifiex: Fix OOB and integer underflow when rx packets
- mwifiex: switch from 'pci_' to 'dma_' API
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
- crypto: stm32 - Properly handle pm_runtime_get failing
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
- crypto: caam - fix unchecked return value error
- hwrng: iproc-rng200 - use semicolons rather than commas to separate
statements
- hwrng: iproc-rng200 - Implement suspend and resume calls
- lwt: Fix return values of BPF xmit ops
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
- fs: ocfs2: namei: check return value of ocfs2_add_entry()
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
- wifi: mwifiex: Fix missed return in oob checks failed path
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
- wifi: ath9k: protect WMI command response buffer replacement with a lock
- wifi: mwifiex: avoid possible NULL skb pointer dereference
- wifi: ath9k: use IS_ERR() with debugfs_create_dir()
- net: arcnet: Do not call kfree_skb() under local_irq_disable()
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer
- mlxsw: i2c: Limit single transaction buffer size
- netrom: Deny concurrent connect().
- drm/bridge: tc358764: Fix debug print parameter order
- quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
- quota: factor out dquot_write_dquot()
- quota: rename dquot_active() to inode_quota_active()
- quota: add new helper dquot_active()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
- ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
- ARM: dts: BCM53573: Add cells sizes to PCIe node
- ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
- drm/etnaviv: fix dumping of active MMU context
- ARM: dts: s3c6410: move fixed clocks under root node in Mini6410
- ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410
- ARM: dts: s3c64xx: align pinctrl with dtschema
- ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
- ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210
- ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210
- ARM: dts: s5pv210: correct ethernet unit address in SMDKV210
- ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
- ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
- drm: adv7511: Fix low refresh rate register for ADV7533/5
- ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
- arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
- md/bitmap: don't set max_write_behind if there is no write mostly device
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
- drm/tegra: Remove superfluous error messages around platform_get_irq()
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
- of: unittest: fix null pointer dereferencing in
of_unittest_find_node_by_name()
- drm/armada: Fix off-by-one error in armada_overlay_get_property()
- drm/panel: simple: Add missing connector type and pixel format for AUO
T215HVN01
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
- [Config] Update annotations after CONFIG_IMA_TRUSTED_KEYRING removal
- drm/msm/mdp5: Don't leak some plane state
- smackfs: Prevent underflow in smk_set_cipso()
- audit: fix possible soft lockup in __audit_inode_child()
- drm/mediatek: Fix potential memory leak if vmap() fail
- of: unittest: Fix overlay type in apply/revert check
- ALSA: ac97: Fix possible error value of *rac97
- ipmi:ssif: Add check for kstrdup
- ipmi:ssif: Fix a memory leak when scanning for an adapter
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
- clk: sunxi-ng: Modify mismatched function name
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset
- PCI: pciehp: Use RMW accessors for changing LNKCTL
- PCI/ASPM: Use RMW accessors for changing LNKCTL
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
- powerpc/fadump: reset dump area size if fadump memory reserve fails
- PCI: Add #defines for Enter Compliance, Transmit Margin
- drm/amdgpu: Correct Transmit Margin masks
- drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions
- drm/amdgpu: Prefer pcie_capability_read_word()
- drm/amdgpu: Use RMW accessors for changing LNKCTL
- drm/radeon: Correct Transmit Margin masks
- drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions
- drm/radeon: Prefer pcie_capability_read_word()
- drm/radeon: Use RMW accessors for changing LNKCTL
- wifi: ath10k: Use RMW accessors for changing LNKCTL
- nfs/blocklayout: Use the passed in gfp flags
- powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
- jfs: validate max amount of blocks before allocation.
- fs: lockd: avoid possible wrong NULL parameter
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling
- media: v4l2-fwnode: simplify v4l2_fwnode_parse_link
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
- drivers: usb: smsusb: fix error handling code in smsusb_init_device
- media: dib7000p: Fix potential division by zero
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- media: cx24120: Add retval check for cx24120_message_send()
- media: mediatek: vcodec: Return NULL if no vdec_fb is found
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
- scsi: be2iscsi: Add length check when parsing nlattrs
- scsi: qla4xxx: Add length check when parsing nlattrs
- serial: sprd: getting port index via serial aliases only
- serial: sprd: remove redundant sprd_port cleanup
- serial: sprd: Assign sprd_port after initialized to avoid wrong access
- serial: sprd: Fix DMA buffer leak issue
- x86/APM: drop the duplicate APM_MINOR_DEV macro
- scsi: qedf: Do not touch __user pointer in
qedf_dbg_stop_io_on_error_cmd_read() directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
directly
- coresight: tmc: Explicit type conversions to prevent integer overflow
- dma-buf/sync_file: Fix docs syntax
- driver core: test_async: fix an error code
- IB/uverbs: Fix an potential error pointer dereference
- iommu/vt-d: Fix to flush cache of PASID directory table
- media: go7007: Remove redundant if statement
- USB: gadget: f_mass_storage: Fix unused variable warning
- media: i2c: ov5640: Configure HVP lines in s_power callback
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
- media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
- media: ov2680: Remove auto-gain and auto-exposure controls
- media: ov2680: Fix ov2680_bayer_order()
- media: ov2680: Fix vflip / hflip set functions
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
- scsi: core: Use 32-bit hostnum in scsi_host_lookup()
- scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
- amba: bus: fix refcount leak
- Revert "IB/isert: Fix incorrect release of isert connection"
- RDMA/siw: Balance the reference of cep->kref in the error path
- RDMA/siw: Correct wrong debug message
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
- HID: multitouch: Correct devm device reference for hidinput input_dev name
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
- tracing: Fix race issue between cpu buffer write and swap
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
- rpmsg: glink: Add check for kstrdup
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
- um: Fix hostaudio build errors
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
- cpufreq: Fix the race condition while updating the transition_task of policy
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
- skbuff: skb_segment, Call zero copy functions before using skbuff frags
- PM / devfreq: Fix leak in devfreq_dev_release()
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
- ipmi_si: fix a memleak in try_smi_init()
- ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
- backlight/gpio_backlight: Compare against struct fb_info.device
- backlight/bd6107: Compare against struct fb_info.device
- backlight/lv5207lp: Compare against struct fb_info.device
- xtensa: PMU: fix base address for the newer hardware
- media: dvb: symbol fixup for dvb_attach()
- ntb: Drop packets when qp link is down
- ntb: Clean up tx tail index on link down
- ntb: Fix calculation ntb_transport_tx_free_entry()
- Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
- procfs: block chmod on /proc/thread-self/comm
- parisc: Fix /proc/cpuinfo output for lscpu
- dlm: fix plock lookup when using multiple lockspaces
- dccp: Fix out of bounds access in DCCP error handler
- X.509: if signature is unsupported skip validation
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
- fsverity: skip PKCS#7 parser when keyring is empty
- pstore/ram: Check start of empty przs during init
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
- crypto: stm32 - fix loop iterating through scatterlist for DMA
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
- sc16is7xx: Set iobase to device index
- serial: sc16is7xx: fix broken port 0 uart init
- usb: typec: tcpci: clear the fault status bit
- udf: initialize newblock to 0
- drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create
- net/ipv6: SKB symmetric hash should incorporate transport ports
- scsi: qla2xxx: fix inconsistent TMF timeout
- scsi: qla2xxx: Fix erroneous link up failure
- scsi: qla2xxx: Turn off noisy message log
- scsi: qla2xxx: Remove unsupported ql2xenabledif option
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
- drm/ast: Fix DRAM init on AST2200
- lib/test_meminit: allocate pages up to order MAX_ORDER
- parisc: led: Fix LAN receive and transmit LEDs
- parisc: led: Reduce CPU overhead for disk & lan LED computation
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
- soc: qcom: qmi_encdec: Restrict string length in decode
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
- kconfig: fix possible buffer overflow
- perf annotate bpf: Don't enclose non-debug code with an assert()
- x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
- pwm: lpc32xx: Remove handling of PWM channels
- sctp: annotate data-races around sk->sk_wmem_queued
- ipv4: annotate data-races around fi->fib_dead
- net: read sk->sk_family once in sk_mc_loop()
- igb: disable virtualization features on 82580
- veth: Fixing transmit return status for dropped packets
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
- af_unix: Fix data-races around user->unix_inflight.
- af_unix: Fix data-race around unix_tot_inflight.
- af_unix: Fix data-races around sk->sk_shutdown.
- af_unix: Fix data race around sk->sk_err.
- kcm: Destroy mutex in kcm_exit_net()
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
- s390/zcrypt: don't leak memory if dev_set_name() fails
- idr: fix param name in idr_alloc_cyclic() doc
- ip_tunnels: use DEV_STATS_INC()
- net: hns3: fix the port information display when sfp is absent
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
- ata: sata_gemini: Add missing MODULE_DESCRIPTION
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION
- fuse: nlookup missing decrement in fuse_direntplus_link
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super
- mtd: rawnand: brcmnand: Fix crash during the panic_write
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
- mtd: rawnand: brcmnand: Fix potential false time out warning
- perf hists browser: Fix hierarchy mode header
- perf tools: Handle old data in PERF_RECORD_ATTR
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling
- usb: typec: tcpm: Refactor tcpm_handle_vdm_request
- usb: typec: bus: verify partner exists in typec_altmode_attention
- ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
- clk: imx8mm: Move 1443X/1416X PLL clock structure to common place
- net: ipv4: fix one memleak in __inet_del_ifa()
- net: ethernet: mvpp2_main: fix possible OOB write in
mvpp2_ethtool_get_rxnfc()
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
mtk_hwlro_get_fdir_all()
- r8152: check budget for r8152_poll()
- kcm: Fix memory leak in error path of kcm_sendmsg()
- platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
- mlxbf-tmfifo: sparse tags for config access
- platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
- net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
- ixgbe: fix timestamp configuration code
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
- drm/amd/display: Fix a bug when searching for insert_above_mpcc
- parisc: Drop loops_per_jiffy from per_cpu struct
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode
- btrfs: output extra debug info if we failed to find an inline backref
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
- kernel/fork: beware of __put_task_struct() calling context
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler
- devlink: remove reload failed checks in params get/set callbacks
- wifi: ath9k: fix printk specifier
- wifi: mwifiex: fix fortify warning
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
- tpm_tis: Resend command to recover from data transfer errors
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
- alx: fix OOB-read compiler warning
- wifi: mac80211_hwsim: drop short frames
- drm/exynos: fix a possible null-pointer dereference due to data race in
exynos_drm_crtc_atomic_disable()
- bus: ti-sysc: Configure uart quirks for k3 SoC
- md: raid1: fix potential OOB in raid1_remove_disk()
- ext2: fix datatype of block number in ext2_xattr_set2()
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
- media: anysee: fix null-ptr-deref in anysee_master_xfer
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
- media: tuners: qt1010: replace BUG_ON with a regular error
- media: pci: cx23885: replace BUG with error return
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
- serial: cpm_uart: Avoid suspicious locking
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
- kobject: Add sanity check for kset->kobj.ktype in kset_register()
- tools features: Add feature test to check if libbfd has buildid support
- perf jevents: Make build dependency on test JSONs
- perf tools: Add an option to build without libbfd
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
- btrfs: add a helper to read the superblock metadata_uuid
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
- selftests: tracing: Fix to unmount tracefs for recovering environment
- md/raid1: fix error: ISO C90 forbids mixed declarations
- attr: block mode changes of symlinks
- btrfs: fix lockdep splat and potential deadlock after failure running
delayed items
- tracing: Have current_trace inc the trace array ref count
- tracing: Have option files inc the trace array ref count
- nfsd: fix change_info in NFSv4 RENAME replies
- tracefs: Add missing lockdown check to tracefs_create_dir()
- i2c: aspeed: Reset the i2c controller when timeout occurs
- scsi: megaraid_sas: Fix deadlock on firmware crashdump
- ext4: fix rec_len verify error
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
- drm/amdgpu: fix amdgpu_cs_p1_user_fence
- Linux 5.4.257
* Focal update: v5.4.257 upstream stable release (LP: #2040284) //
CVE-2023-39189
- netfilter: nfnetlink_osf: avoid OOB read
* CVE-2023-45871
- igb: set max size RX buffer when store bad packet is enabled
* CVE-2023-39193
- netfilter: xt_sctp: validate the flag_info count
* CVE-2023-39192
- netfilter: xt_u32: validate user space input
* CVE-2023-31085
- ubi: Refuse attaching if mtd's erasesize is 0
* CVE-2023-5717
- perf: Disallow mis-matched inherited group reads
* CVE-2023-5178
- nvmet-tcp: move send/recv error handling in the send/recv methods instead of
call-sites
- nvmet-tcp: Fix a possible UAF in queue intialization setup
* CVE-2023-42754
- ipv4: fix null-deref in ipv4_link_failure
* Focal update: v5.4.256 upstream stable release (LP: #2039446)
- powerpc/pmac/smp: Avoid unused-variable warnings
- powerpc/pmac/smp: Drop unnecessary volatile qualifier
- Revert "MIPS: Alchemy: fix dbdma2"
- Linux 5.4.256
* Focal update: v5.4.255 upstream stable release (LP: #2039440)
- mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- selftests: forwarding: tc_flower: Relax success criterion
- macsec: Fix traffic counters/statistics
- macsec: use DEV_STATS_INC()
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- MIPS: dec: prom: Address -Warray-bounds warning
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- media: platform: mediatek: vpu: fix NULL ptr dereference
- usb: chipidea: imx: don't request QoS for imx8ulp
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- Bluetooth: L2CAP: Fix use-after-free
- drm/amdgpu: Fix potential fence use-after-free v2
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- powerpc/kasan: Disable KCOV in KASAN code
- IMA: allow/fix UML builds
- iio: add addac subdirectory
- iio: adc: stx104: Utilize iomap interface
- iio: adc: stx104: Implement and utilize register structures
- iio: stx104: Move to addac subdirectory
- iio: addac: stx104: Fix race condition for stx104_write_raw()
- iio: addac: stx104: Fix race condition when converting analog-to-digital
- iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
- PM-runtime: add tracepoints for usage_count changes
- PM: runtime: Add pm_runtime_get_if_active()
- ALSA: hda: Fix unhandled register update during auto-suspend period
- irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
- irqchip/mips-gic: Use raw spinlock for gic_lock
- interconnect: Move internal structs into a separate file
- interconnect: Add helpers for enabling/disabling a path
- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs
- USB: dwc3: qcom: fix NULL-deref on suspend
- mmc: bcm2835: fix deferred probing
- mmc: sunxi: fix deferred probing
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- net/ncsi: Fix gma flag setting after response
- nfsd4: kill warnings on testing stateids with mismatched clientids
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- virtio-mmio: convert to devm_platform_ioremap_resource
- virtio-mmio: Use to_virtio_mmio_device() to simply code
- virtio-mmio: don't break lifecycle of vm_dev
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- fbdev: mmp: fix value check in mmphw_probe()
- powerpc/rtas_flash: allow user copy to flash block cache objects
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- selftests: mirror_gre_changes: Tighten up the TTL test match
- ipvs: fix racy memcpy in proc_do_sync_threshold
- netfilter: nft_dynset: disallow object maps
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- bus: ti-sysc: Improve reset to work with modules with no sysconfig
- bus: ti-sysc: Flush posted write on enable before reset
- ARM: dts: imx7s: Drop dma-apb interrupt-names
- ARM: dts: imx: Adjust dma-apbh node name
- ARM: dts: imx: Set default tuning step for imx7d usdhc
- ARM: dts: imx: Set default tuning step for imx6sx usdhc
- ASoC: rt5665: add missed regulator_bulk_disable
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- virtio-net: set queues after driver_ok
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
- net: phy: broadcom: stub c45 read/write for 54810
- PCI: acpiphp: Reassign resources on bridge if necessary
- dlm: improve plock logging if interrupted
- dlm: replace usage of found with dedicated list iterator variable
- fs: dlm: add pid to debug log
- fs: dlm: change plock interrupted message to debug again
- fs: dlm: use dlm_plock_info for do_unlock_close
- fs: dlm: fix mismatch of plock results from userspace
- MIPS: cpu-features: Enable octeon_cache by cpu_type
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features
- fbdev: Improve performance of sys_imageblit()
- fbdev: Fix sys_imageblit() for arbitrary image widths
- fbdev: fix potential OOB read in fast_imageblit()
- dm integrity: increase RECALC_SECTORS to improve recalculate speed
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- ALSA: pcm: Set per-card upper limit of PCM buffer allocations
- ALSA: pcm: Use SG-buffer only when direct DMA is available
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- regmap: Account for register length in SMBus I/O limits
- ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger()
- ASoC: fsl_sai: Add new added registers and new bit definition
- ASoC: fsl_sai: Disable bit clock with transmitter
- drm/amd/display: do not wait for mpc idle if tg is disabled
- drm/amd/display: check TG is non-null before checking if enabled
- tracing: Fix memleak due to race between current_tracer and trace
- octeontx2-af: SDP: fix receive link config
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- net: bgmac: Fix return value check for fixed_phy_register()
- net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- igb: Avoid starting unnecessary workqueues
- net/sched: fix a qdisc modification with ambiguous command request
- net: remove bond_slave_has_mac_rcu()
- bonding: fix macvlan over alb bond support
- ibmveth: Use dcbf rather than dcbfl
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- radix tree: remove unused variable
- media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root
bus
- drm/display/dp: Fix the DP DSC Receiver cap size
- mm: allow a controlled amount of unfairness in the page lock
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- ALSA: pcm: Fix build error on m68k and others
- Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available"
- interconnect: Do not skip aggregation for disabled paths
- ALSA: pcm: Check for null pointer of pointer substream before dereferencing
it
- Documentation/sysctl: document page_lock_unfairness
- irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
- pinctrl: renesas: rza2: Add lock around
pinctrl_generic{{add,remove}_group,{add,remove}_function}
- dma-buf/sw_sync: Avoid recursive lock during fence signal
- Linux 5.4.255
* Focal update: v5.4.254 upstream stable release (LP: #2039291)
- mmc: moxart: read scr register without changing byte order
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- radix tree test suite: fix incorrect allocation size for pthreads
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- iio: cros_ec: Fix the allocation size for cros_ec_command
- binder: fix memory leak in binder_init()
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- usb: dwc3: Properly handle processing of pending events
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
- x86: Move gds_ucode_mitigated() declaration to header
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- selftests/rseq: Fix build with undefined __weak
- mISDN: Update parameter type of dsp_cmx_send()
- net/packet: annotate data-races around tp->status
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- IB/hfi1: Fix possible panic during hotplug remove
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- dmaengine: mcf-edma: Fix a potential un-allocated memory access
- net/mlx5: Allow 0 for total host VFs
- ibmvnic: Handle DMA unmapping of login buffs in release functions
- btrfs: don't stop integrity writeback too early
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: 53c700: Check that command slot is not NULL
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- alpha: remove __init annotation from exported page_is_ram()
- sch_netem: fix issues in netem_change() vs get_dist_table()
- Linux 5.4.254
* Focal update: v5.4.253 upstream stable release (LP: #2038652)
- jbd2: fix incorrect code style
- jbd2: fix kernel-doc markups
- jbd2: remove redundant buffer io error checks
- jbd2: recheck chechpointing non-dirty buffer
- jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- bcache: remove 'int n' from parameter list of bch_bucket_alloc_set()
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- btrfs: qgroup: catch reserved space leaks at unmount time
- btrfs: fix race between quota disable and relocation
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info
- ext4: Fix reusing stale buffer heads from last failed mounting
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- dlm: cleanup plock_op vs plock_xop
- dlm: rearrange async condition return
- fs: dlm: interrupt posix locks only when process is killed
- ftrace: Add information on number of page groups allocated
- ftrace: Check if pages were allocated before calling free_pages()
- ftrace: Store the order of pages allocated in ftrace_page
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
- pwm: meson: Remove redundant assignment to variable fin_freq
- pwm: meson: Simplify duplicated per-channel tracking
- pwm: meson: fix handling of period/duty if greater than UINT_MAX
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c
- scsi: qla2xxx: Array index may go out of bound
- uapi: General notification queue definitions
- keys: Fix linking a duplicate key to a keyring's assoc_array
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- vxlan: calculate correct header length for GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- serial: 8250_dw: Preserve original value of DLF register
- serial: sifive: Fix sifive_serial_console_setup() section
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- virtio-net: fix race between set queues and probe
- s390/dasd: fix hanging device after quiesce/resume
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- btrfs: qgroup: remove one-time use variables for quota_root checks
- btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading
- arm64: Add AMPERE1 to the Spectre-BHB affected list
- arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro
- perf: Fix function pointer case
- loop: Select I/O scheduler 'none' from inside add_disk()
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- KVM: s390: fix sthyi error handling
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- perf test uprobe_from_different_cu: Skip if there is no gcc
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- driver core: add device probe log helper
- net: ll_temac: Switch to use dev_err_probe() helper
- net: ll_temac: fix error checking of irq_of_parse_and_map()
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- mtd: spinand: toshiba: Fix ecc_get_status
- mtd: rawnand: meson: fix OOB available bytes for ECC
- fs/sysv: Null check to prevent null-ptr-deref bug
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- ext2: Drop fragment support
- test_firmware: prevent race conditions by a correct implementation of
locking
- test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
- mtd: rawnand: omap_elm: Fix incorrect type in assignment
- powerpc/mm/altmap: Fix altmap boundary check
- selftests/rseq: check if libc rseq support is registered
- selftests/rseq: Play nice with binaries statically linked against glibc
2.35+
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called
- PM: sleep: wakeirq: fix wake irq arming
- ceph: show tasks waiting on caps in debugfs caps file
- ceph: use kill_anon_super helper
- ceph: defer stopping mdsc delayed_work
- arm64: dts: stratix10: fix incorrect I2C property for SCL signal
- ARM: dts: imx6sll: Make ssi node name same as other platforms
- ARM: dts: imx: Align L2 cache-controller nodename with dtschema
- ARM: dts: imx: add usb alias
- ARM: dts: imx6sll: fixup of operating points
- ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
- driver core: Annotate dev_err_probe() with __must_check
- driver code: print symbolic error code
- drivers: core: fix kernel-doc markup for dev_err_probe()
- Revert "driver core: Annotate dev_err_probe() with __must_check"
- Linux 5.4.253
- Upstream stable to v5.4.253
* CVE-2023-37453
- USB: hub: Clean up use of port initialization schemes and retries
- USB: hub: Add Kconfig option to reduce number of port initialization retries
- USB: core: Unite old scheme and new scheme descriptor reads
- usb: hub: Check device descriptor before resusciation
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
Date: 2023-11-24 15:32:00.887942+00:00
Changed-By: Roxana Nicolescu <roxana.nicolescu at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1100.112
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list