[ubuntu/jammy-proposed] linux 5.15.0-54.60 (Accepted)
Andy Whitcroft
apw at canonical.com
Tue Nov 15 13:50:56 UTC 2022
linux (5.15.0-54.60) jammy; urgency=medium
* jammy/linux: 5.15.0-54.60 -proposed tracker (LP: #1996342)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- debian/dkms-versions -- update from kernel-versions (main/2022.11.14)
* TEE Support for CCP driver (LP: #1991608)
- crypto: ccp: Add support for TEE for PCI ID 0x14CA
* alsa: soc: the kernel print UBSAN calltrace on the machine with cs35l41
codec (LP: #1996121)
- ASoC: cs35l41: Add one more variable in the debug log
- ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t
* Fix ath11k deadlock on WCN6855 (LP: #1995041)
- wifi: ath11k: avoid deadlock during regulatory update in
ath11k_regd_update()
* [UBUNTU 20.04] boot: Add s390x secure boot trailer (LP: #1996071)
- s390/boot: add secure boot trailer
* Fix rfkill causing soft blocked wifi (LP: #1996198)
- platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
* Fix Thunderbolt device hotplug fail when connect via thunderbolt dock
(LP: #1991366)
- PCI: Fix used_buses calculation in pci_scan_child_bus_extend()
- PCI: Pass available buses even if the bridge is already configured
- PCI: Move pci_assign_unassigned_root_bus_resources()
- PCI: Distribute available resources for root buses, too
- PCI: Fix whitespace and indentation
- PCI: Fix typo in pci_scan_child_bus_extend()
* md: Replace snprintf with scnprintf (LP: #1993315)
- md: Replace snprintf with scnprintf
* input/keyboard: the keyboard on some Asus laptops can't work (LP: #1992266)
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA
- ACPI: resource: Add ASUS model S5402ZA to quirks
* Fix Turbostat is not working for fam: 6 model: 191: stepping: 2 CPU
(LP: #1991365)
- tools/power turbostat: Add support for RPL-S
* pcieport 0000:00:1b.0: PCIe Bus Error: severity=Uncorrected (Non-Fatal),
type=Transaction Layer, (Requester ID) (LP: #1988797)
- PCI/PTM: Cache PTM Capability offset
- PCI/PTM: Add pci_upstream_ptm() helper
- PCI/PTM: Separate configuration and enable
- PCI/PTM: Add pci_suspend_ptm() and pci_resume_ptm()
- PCI/PTM: Move pci_ptm_info() body into its only caller
- PCI/PTM: Preserve RsvdP bits in PTM Control register
- PCI/PTM: Reorder functions in logical order
- PCI/PTM: Consolidate PTM interface declarations
- PCI/PM: Always disable PTM for all devices during suspend
- PCI/PM: Simplify pci_pm_suspend_noirq()
* Fix RPL-S support on powercap/intel_rapl (LP: #1990161)
- x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define
- x86/cpu: Add new Alderlake and Raptorlake CPU model numbers
- x86/cpu: Add new Raptor Lake CPU model number
- powercap: intel_rapl: add support for RaptorLake
- powercap: intel_rapl: Add support for RAPTORLAKE_P
- powercap: intel_rapl: Add support for RAPTORLAKE_S
* AMD Yellow Carp system hang on HDMI plug in/out over HP hook2 docking
(LP: #1991974)
- drm/amd/display: Fix for link encoder access for MST.
- drm/amd/display: Fix MST link encoder availability check.
- drm/amd/display: FEC configuration for dpia links
- drm/amd/display: FEC configuration for dpia links in MST mode
- drm/amd/display: Add work around for tunneled MST.
* Jammy update: v5.15.74 upstream stable release (LP: #1995638)
- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
- nilfs2: fix use-after-free bug of struct nilfs_root
- nilfs2: fix leak of nilfs_root in case of writer thread creation failure
- nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
- ceph: don't truncate file in atomic_open
- random: restore O_NONBLOCK support
- random: clamp credited irq bits to maximum mixed
- ALSA: hda: Fix position reporting on Poulsbo
- efi: Correct Macmini DMI match in uefi cert quirk
- USB: serial: qcserial: add new usb-id for Dell branded EM7455
- Revert "powerpc/rtas: Implement reentrant rtas call"
- Revert "crypto: qat - reduce size of mapped region"
- random: avoid reading two cache lines on irq randomness
- random: use expired timer rather than wq for mixing fast pool
- Input: xpad - add supported devices as contributed on github
- Input: xpad - fix wireless 360 controller breaking after suspend
- misc: pci_endpoint_test: Aggregate params checking for xfer
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
- Linux 5.15.74
* Jammy update: v5.15.73 upstream stable release (LP: #1995637)
- Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
- docs: update mediator information in CoC docs
- xsk: Inherit need_wakeup flag for shared sockets
- mm: gup: fix the fast GUP race against THP collapse
- powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush
- firmware: arm_scmi: Improve checks in the info_get operations
- firmware: arm_scmi: Harden accesses to the sensor domains
- firmware: arm_scmi: Add SCMI PM driver remove routine
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API
failure
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
- scsi: qedf: Fix a UAF bug in __qedf_probe()
- net/ieee802154: fix uninit value bug in dgram_sendmsg
- net: marvell: prestera: add support for for Aldrin2
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream
- um: Cleanup syscall_handler_t cast in syscalls_32.h
- um: Cleanup compiler warning in arch/x86/um/tls_32.c
- arch: um: Mark the stack non-executable to fix a binutils warning
- net: atlantic: fix potential memory leak in aq_ndev_close()
- drm/amd/display: Fix double cursor on non-video RGB MPO
- drm/amd/display: Assume an LTTPR is always present on fixed_vs links
- drm/amd/display: update gamut remap if plane has changed
- drm/amd/display: skip audio setup when audio stream is enabled
- mmc: core: Replace with already defined values for readability
- mmc: core: Terminate infinite loop in SD-UHS voltage switch
- perf parse-events: Identify broken modifiers
- mm/huge_memory: minor cleanup for split_huge_pages_all
- mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all()
- wifi: cfg80211: fix MCS divisor value
- net/mlx5: Disable irq when locking lag_lock
- usb: mon: make mmapped memory read only
- USB: serial: ftdi_sio: fix 300 bps rate for SIO
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
- Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
- Linux 5.15.73
* Jammy update: v5.15.72 upstream stable release (LP: #1995517)
- ALSA: hda: Do disconnect jacks at codec unbind
- ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation
- ALSA: hda: Fix Nvidia dp infoframe
- cgroup: reduce dependency on cgroup_mutex
- cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
- uas: add no-uas quirk for Hiksemi usb_disk
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
- uas: ignore UAS for Thinkplus chips
- usb: typec: ucsi: Remove incorrect warning
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
- Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address
- can: c_can: don't cache TX messages for C_CAN cores
- clk: ingenic-tcu: Properly enable registers before accessing timers
- x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd
- ARM: dts: integrator: Tag PCI host with device_type
- ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
- mm/damon/dbgfs: fix memory leak when using debugfs_lookup()
- net: mt7531: only do PLL once after the reset
- Revert "firmware: arm_scmi: Add clock management to the SCMI power domain"
- drm/i915/gt: Restrict forced preemption to the active context
- drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV
- vduse: prevent uninitialized memory accesses
- libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
- mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
- mmc: hsq: Fix data stomping during mmc recovery
- mm/page_alloc: fix race condition between build_all_zonelists and page
allocation
- mm: prevent page_frag_alloc() from corrupting the memory
- mm: fix dereferencing possible ERR_PTR
- mm/migrate_device.c: flush TLB while holding PTL
- mm: fix madivse_pageout mishandling on non-LRU page
- mm,hwpoison: check mm when killing accessing process
- media: dvb_vb2: fix possible out of bound access
- media: rkvdec: Disable H.264 error detection
- media: v4l2-compat-ioctl32.c: zero buffer passed to
v4l2_compat_get_array_args()
- swiotlb: max mapping size takes min align mask into account
- ARM: dts: am33xx: Fix MMCHS0 dma properties
- reset: imx7: Fix the iMX8MP PCIe PHY PERST support
- ARM: dts: am5748: keep usb4_tm disabled
- soc: sunxi: sram: Actually claim SRAM regions
- soc: sunxi: sram: Prevent the driver from being unbound
- soc: sunxi_sram: Make use of the helper function
devm_platform_ioremap_resource()
- soc: sunxi: sram: Fix probe function ordering issues
- soc: sunxi: sram: Fix debugfs info for A64 SRAM C
- ASoC: imx-card: Fix refcount issue with of_node_put
- arm64: dts: qcom: sm8350: fix UFS PHY serdes size
- ASoC: tas2770: Reinit regcache on reset
- drm/bridge: lt8912b: add vsync hsync
- drm/bridge: lt8912b: set hdmi or dvi mode
- drm/bridge: lt8912b: fix corrupted image output
- Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in
suspend/resume time"
- Input: melfas_mip4 - fix return value check in mip4_probe()
- gpio: mvebu: Fix check for pwm support on non-A8K platforms
- usbnet: Fix memory leak in usbnet_disconnect()
- net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
- cxgb4: fix missing unlock on ETHOFLD desc collect fail path
- net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe
- nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
- wifi: mac80211: fix regression with non-QoS drivers
- net: stmmac: power up/down serdes in stmmac_open/release
- net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume()
- selftests: Fix the if conditions of in test_extra_filter()
- vdpa/ifcvf: fix the calculation of queuepair
- fs: split off setxattr_copy and do_setxattr function from setxattr
- clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
- clk: iproc: Do not rely on node name for correct PLL setup
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
- x86/alternative: Fix race in try_get_desc()
- drm/i915/gem: Really move i915_gem_context.link under ref protection
- Linux 5.15.72
* Jammy update: v5.15.71 upstream stable release (LP: #1995420)
- drm/amdgpu: Separate vf2pf work item init from virt data exchange
- drm/amdgpu: make sure to init common IP before gmc
- staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179)
- staging: r8188eu: Add Rosewill USB-N150 Nano to device tables
- usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind
- usb: dwc3: Issue core soft reset before enabling run/stop
- usb: dwc3: gadget: Prevent repeat pullup()
- usb: dwc3: gadget: Refactor pullup()
- usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
- usb: add quirks for Lenovo OneLink+ Dock
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- Revert "usb: add quirks for Lenovo OneLink+ Dock"
- Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
- drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
- USB: core: Fix RST error in hub.c
- USB: serial: option: add Quectel BG95 0x0203 composition
- USB: serial: option: add Quectel RM520N
- ALSA: core: Fix double-free at snd_card_new()
- ALSA: hda/tegra: set depop delay for tegra
- ALSA: hda: add Intel 5 Series / 3400 PCI DID
- ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
- ALSA: hda/realtek: Re-arrange quirk table entries
- ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
- ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
- ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
- ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
- iommu/vt-d: Check correct capability for sagaw determination
- btrfs: fix hang during unmount when stopping block group reclaim worker
- btrfs: fix hang during unmount when stopping a space reclaim worker
- media: flexcop-usb: fix endpoint type check
- usb: dwc3: core: leave default DMA if the controller does not support 64-bit
DMA
- efi: x86: Wipe setup_data on pure EFI boot
- efi: libstub: check Shim mode using MokSBStateRT
- wifi: mt76: fix reading current per-tid starting sequence number for
aggregation
- gpio: mockup: fix NULL pointer dereference when removing debugfs
- gpio: mockup: Fix potential resource leakage when register a chip
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- riscv: fix a nasty sigreturn bug...
- kasan: call kasan_malloc() from __kmalloc_*track_caller()
- can: flexcan: flexcan_mailbox_read() fix return value for drop = true
- net: mana: Add rmb after checking owner bits
- mm/slub: fix to return errno if kmalloc() fails
- mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.
- KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled
- arm64: topology: fix possible overflow in amu_fie_setup()
- vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment
- xfs: reorder iunlink remove operation in xfs_ifree
- xfs: fix xfs_ifree() error handling to not leak perag ref
- xfs: validate inode fork size against fork format
- firmware: arm_scmi: Harden accesses to the reset domains
- firmware: arm_scmi: Fix the asynchronous reset requests
- arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
- arm64: dts: rockchip: Fix typo in lisense text for PX30.Core
- drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
- arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
- dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
- netfilter: nf_conntrack_irc: Tighten matching on DCC message
- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
- ice: Don't double unplug aux on peer initiated reset
- iavf: Fix cached head and tail value for iavf_get_tx_pending
- ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
- net: core: fix flow symmetric hash
- net: phy: aquantia: wait for the suspend/resume operations to finish
- scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()
- scsi: mpt3sas: Fix return value check of dma_get_required_mask()
- net: bonding: Share lacpdu_mcast_addr definition
- net: bonding: Unsync device addresses on ndo_stop
- net: team: Unsync device addresses on ndo_stop
- drm/panel: simple: Fix innolux_g121i1_l01 bus_format
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
- MIPS: Loongson32: Fix PHY-mode being left unspecified
- um: fix default console kernel parameter
- iavf: Fix bad page state
- mlxbf_gige: clear MDIO gateway lock after read
- i40e: Fix set max_tx_rate when it is lower than 1 Mbps
- sfc: fix TX channel offset when using legacy interrupts
- sfc: fix null pointer dereference in efx_hard_start_xmit
- drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled
- drm/hisilicon: Add depends on MMU
- of: mdio: Add of_node_put() when breaking out of for_each_xx
- net: ipa: properly limit modem routing table use
- wireguard: ratelimiter: disable timings test by default
- wireguard: netlink: avoid variable-sized memcpy on sockaddr
- net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
- net: enetc: deny offload of tc-based TSN features on VF interfaces
- net/sched: taprio: avoid disabling offload when it was never enabled
- net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child
qdiscs
- netfilter: nf_tables: fix nft_counters_enabled underflow at
nf_tables_addchain()
- netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- netfilter: ebtables: fix memory leak when blob is malformed
- net: ravb: Fix PHY state warning splat during system resume
- net: sh_eth: Fix PHY state warning splat during system resume
- can: gs_usb: gs_can_open(): fix race dev->can.state condition
- perf stat: Fix BPF program section name
- perf jit: Include program header in ELF files
- perf kcore_copy: Do not check /proc/modules is unchanged
- perf tools: Honor namespace when synthesizing build-ids
- drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
- net/smc: Stop the CLC flow if no link to map buffers on
- bonding: fix NULL deref in bond_rr_gen_slave_id
- net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
- net: sched: fix possible refcount leak in tc_new_tfilter()
- bnxt: prevent skb UAF after handing over to PTP worker
- selftests: forwarding: add shebang for sch_red.sh
- KVM: x86/mmu: Fold rmap_recycle into rmap_add
- serial: fsl_lpuart: Reset prior to registration
- serial: Create uart_xmit_advance()
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
- serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer
memory region
- drm/gma500: Fix BUG: sleeping function called from invalid context errors
- drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid
cards
- drm/amdgpu: use dirty framebuffer helper
- drm/amd/display: Limit user regamma to a valid value
- drm/amd/display: Reduce number of arguments of dml31's
CalculateWatermarksAndDRAMSpeedChangeSupport()
- drm/amd/display: Reduce number of arguments of dml31's
CalculateFlipSchedule()
- drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
- drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
- fsdax: Fix infinite loop in dax_iomap_rw()
- workqueue: don't skip lockdep work dependency in cancel_work_sync()
- i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
- i2c: mlxbf: incorrect base address passed during io write
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- i2c: mlxbf: Fix frequency calculation
- drm/amdgpu: don't register a dirty callback for non-atomic
- NFSv4: Fixes for nfs4_inode_return_delegation()
- devdax: Fix soft-reservation memory description
- ext4: make directory inode spreading reflect flexbg size
- ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
- ext4: limit the number of retries after discarding preallocations blocks
- ext4: make mballoc try target group first even with mb_optimize_scan
- ext4: avoid unnecessary spreading of allocations among groups
- ext4: use locality group preallocation for small closed files
- Linux 5.15.71
- Revert "drm/amdgpu: use dirty framebuffer helper"
* Jammy update: v5.15.70 upstream stable release (LP: #1995415)
- drm/tegra: vic: Fix build warning when CONFIG_PM=n
- serial: atmel: remove redundant assignment in rs485_config
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled
- of: fdt: fix off-by-one error in unflatten_dt_nodes()
- pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map
- pinctrl: qcom: sc8180x: Fix wrong pin numbers
- pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH
- pinctrl: sunxi: Fix name for A100 R_PIO
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
- drm/meson: Correct OSD1 global alpha value
- drm/meson: Fix OSD1 RGB to YCbCr coefficient
- block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for
nowait
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
- of/device: Fix up of_dma_configure_id() stub
- cifs: revalidate mapping when doing direct writes
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
- cifs: always initialize struct msghdr smb_msg completely
- parisc: Allow CONFIG_64BIT with ARCH=parisc
- tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
- drm/amdgpu: Don't enable LTR if not supported
- drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
- binder: remove inaccurate mmap_assert_locked()
- arm64: dts: juno: Add missing MHU secure-irq
- ASoC: nau8824: Fix semaphore unbalance at error paths
- regulator: pfuze100: Fix the global-out-of-bounds access in
pfuze100_regulator_probe()
- scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE
- rxrpc: Fix local destruction being repeated
- rxrpc: Fix calc of resend age
- wifi: mac80211_hwsim: check length for virtio packets
- ALSA: hda/sigmatel: Keep power up while beep is enabled
- ALSA: hda/tegra: Align BDL entry to 4KB boundary
- net: usb: qmi_wwan: add Quectel RM520N
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
- drm/panfrost: devfreq: set opp to the recommended one to configure regulator
- mksysmap: Fix the mismatch of 'L0' symbols in System.map
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
- net: Find dst with sk's xfrm policy not ctl_sk
- KVM: SEV: add cache flush to solve SEV cache incoherency issues
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change
- Linux 5.15.70
* Jammy update: v5.15.69 upstream stable release (LP: #1993010)
- NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests
- ACPI: resource: skip IRQ override on AMD Zen platforms
- ARM: dts: imx: align SPI NOR node name with dtschema
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible
- ARM: dts: at91: fix low limit for CPU regulator
- ARM: dts: at91: sama7g5ek: specify proper regulator output ranges
- lockdep: Fix -Wunused-parameter for _THIS_IP_
- x86/mm: Force-inline __phys_addr_nodebug()
- task_stack, x86/cea: Force-inline stack helpers
- tracing: hold caller_addr to hardirq_{enable,disable}_ip
- tracefs: Only clobber mode/uid/gid on remount if asked
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
- Input: goodix - add support for GT1158
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 2
- drm/msm/rd: Fix FIFO-full deadlock
- dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message
- tg3: Disable tg3 device on system reboot to avoid triggering AER
- gpio: mockup: remove gpio debugfs when remove device
- ieee802154: cc2520: add rc code in cc2520_tx()
- Input: iforce - add support for Boeder Force Feedback Wheel
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0
- net: dsa: hellcreek: Print warning only once
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
- usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
- soc: fsl: select FSL_GUTS driver for DPIO
- usb: gadget: f_uac2: clean up some inconsistent indenting
- usb: gadget: f_uac2: fix superspeed transfer
- RDMA/irdma: Use s/g array in post send only when its valid
- Input: goodix - add compatible string for GT1158
- Linux 5.15.69
* Jammy update: v5.15.68 upstream stable release (LP: #1993003)
- net: wwan: iosm: remove pointless null check
- efi: libstub: Disable struct randomization
- efi: capsule-loader: Fix use-after-free in efi_capsule_write
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
- fs: only do a memory barrier for the first set_buffer_uptodate()
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
- scsi: megaraid_sas: Fix double kfree()
- drm/gem: Fix GEM handle release errors
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to
psp_hw_fini
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
- drm/radeon: add a force flush to delay work when radeon
- scsi: ufs: core: Reduce the power mode change timeout
- Revert "parisc: Show error if wrong 32/64-bit compiler is being used"
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned
fw_level
- netfilter: conntrack: work around exceeded receive window
- cpufreq: check only freq_table in __resolve_freq()
- net/core/skbuff: Check the return value of skb_copy_bits()
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- fbdev: fbcon: Destroy mutex on freeing struct fb_info
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer
- ALSA: usb-audio: Fix an out-of-bounds bug in
__snd_usb_parse_audio_interface()
- tracing: Fix to check event_mutex is held while accessing trigger list
- btrfs: zoned: set pseudo max append zone limit in zone emulation mode
- vfio/type1: Unpin zero pages
- kprobes: Prohibit probes in gate area
- debugfs: add debugfs_lookup_and_remove()
- sched/debug: fix dentry leak in update_sched_domain_debugfs
- drm/amd/display: fix memory leak when using debugfs_lookup()
- nvmet: fix a use-after-free
- scsi: mpt3sas: Fix use-after-free warning
- scsi: lpfc: Add missing destroy_workqueue() in error path
- NFS: Further optimisations for 'ls -l'
- NFS: Save some space in the inode
- NFS: Fix another fsync() issue after a server reboot
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an
empty subtree
- cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
- ASoC: qcom: sm8250: add missing module owner
- RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg
- RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
- soc: imx: gpcv2: Assert reset before ungating clock
- regulator: core: Clean up on enable failure
- tee: fix compiler warning in tee_shm_register()
- RDMA/cma: Fix arguments order in net device validation
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
- RDMA/hns: Fix supported page size
- RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
- wifi: wilc1000: fix DMA on stack objects
- ARM: at91: pm: fix self-refresh for sama7g5
- ARM: at91: pm: fix DDR recalibration when resuming from backup and self-
refresh
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time
- netfilter: br_netfilter: Drop dst references before setting.
- netfilter: nf_tables: clean up hook list when offload flags check fails
- RDMA/srp: Set scmnd->result only when scmnd is not NULL
- ALSA: usb-audio: Inform the delayed registration more properly
- ALSA: usb-audio: Register card again for iface over delayed_register option
- rxrpc: Fix ICMP/ICMP6 error handling
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
- afs: Use the operation issue time instead of the reply time for callbacks
- Revert "net: phy: meson-gxl: improve link-up behavior"
- sch_sfb: Don't assume the skb is still around after enqueueing to child
- tipc: fix shift wrapping bug in map_get()
- net: introduce __skb_fill_page_desc_noacc
- tcp: TX zerocopy should not sense pfmemalloc status
- ice: use bitmap_free instead of devm_kfree
- i40e: Fix kernel crash during module removal
- iavf: Detach device during reset task
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed
- RDMA/siw: Pass a pointer to virt_to_page()
- ipv6: sr: fix out-of-bounds read when setting HMAC data.
- IB/core: Fix a nested dead lock as part of ODP flow
- RDMA/mlx5: Set local port to one when accessing counters
- erofs: fix pcluster use-after-free on UP platforms
- nvme-tcp: fix UAF when detecting digest errors
- nvme-tcp: fix regression that causes sporadic requests to time out
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO
- nvmet: fix mar and mor off-by-one errors
- RDMA/irdma: Report the correct max cqes from query device
- RDMA/irdma: Return correct WC error for bind operation failure
- RDMA/irdma: Report RNR NAK generation in device caps
- sch_sfb: Also store skb len before calling child enqueue
- perf script: Fix Cannot print 'iregs' field for hybrid systems
- hwmon: (tps23861) fix byte order in resistance register
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion
- MIPS: loongson32: ls1c: Fix hang during startup
- kbuild: disable header exports for UML in a straightforward way
- i40e: Refactor tc mqprio checks
- i40e: Fix ADQ rate limiting for PF
- swiotlb: avoid potential left shift overflow
- iommu/amd: use full 64-bit value in build_completion_wait()
- s390/boot: fix absolute zero lowcore corruption on boot
- hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined
- hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used
sensors
- hwmon: (mr75203) fix voltage equation for negative source input
- hwmon: (mr75203) fix multi-channel voltage reading
- hwmon: (mr75203) enable polling for all VM channels
- arm64/bti: Disable in kernel BTI when cross section thunks are broken
- [Config] updateconfigs for ARM64_BTI_KERNEL
- iommu/vt-d: Correctly calculate sagaw value of IOMMU
- [Config] updateconfigs for ARM64_ERRATUM_2457168
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly
- drm/bridge: display-connector: implement bus fmts callbacks
- perf machine: Use path__join() to compose a path instead of snprintf(dir,
'/', filename)
- ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency
- Linux 5.15.68
* Jammy update: v5.15.67 upstream stable release (LP: #1991841)
- Linux 5.15.67
* Jammy update: v5.15.66 upstream stable release (LP: #1991840)
- drm/msm/dsi: fix the inconsistent indenting
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
- drm/msm/dsi: Fix number of regulators for SDM660
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
- iio: adc: mcp3911: make use of the sign bit
- skmsg: Fix wrong last sg check in sk_msg_recvmsg()
- bpf: Restrict bpf_sys_bpf to CAP_PERFMON
- bpf, cgroup: Fix kernel BUG in purge_effective_progs
- ieee802154/adf7242: defer destroy_workqueue call
- drm/i915/backlight: extract backlight code to a separate file
- drm/i915/display: avoid warnings when registering dual panel backlight
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
- Revert "xhci: turn off port power in shutdown"
- net: sparx5: fix handling uneven length packets in manual extraction
- net: smsc911x: Stop and start PHY during suspend and resume
- openvswitch: fix memory leak at failed datapath creation
- net: dsa: xrs700x: Use irqsave variant for u64 stats update
- net: sched: tbf: don't call qdisc_put() while holding tree lock
- net/sched: fix netdevice reference leaks in attach_default_qdiscs()
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
- mlxbf_gige: compute MDIO period based on i1clk
- kcm: fix strp_init() order and cleanup
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
- tcp: annotate data-race around challenge_timestamp
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
- net/smc: Remove redundant refcount increase
- soundwire: qcom: fix device status array range
- serial: fsl_lpuart: RS485 RTS polariy is inverse
- staging: rtl8712: fix use after free bugs
- staging: r8188eu: add firmware dependency
- powerpc: align syscall table for ppc32
- vt: Clear selection before changing the font
- musb: fix USB_MUSB_TUSB6010 dependency
- tty: serial: lpuart: disable flow control while waiting for the transmit
engine to complete
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
- iio: ad7292: Prevent regulator double disable
- iio: adc: mcp3911: use correct formula for AD conversion
- misc: fastrpc: fix memory corruption on probe
- misc: fastrpc: fix memory corruption on open
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
- mmc: core: Fix UHS-I SD 1.8V workaround branch
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure
- binder: fix UAF of ref->proc caused by race condition
- binder: fix alloc->vma_vm_mm null-ptr dereference
- cifs: fix small mempool leak in SMB2_negotiate()
- KVM: VMX: Heed the 'msr' argument in msr_write_intercepted()
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
- clk: core: Fix runtime PM sequence in clk_core_unprepare()
- Input: rk805-pwrkey - fix module autoloading
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc()
- clk: bcm: rpi: Prevent out-of-bounds access
- clk: bcm: rpi: Add missing newline
- hwmon: (gpio-fan) Fix array out of bounds access
- gpio: pca953x: Add mutex_lock for regcache sync in PM
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
- mm: pagewalk: Fix race between unmap and page walker
- xen-blkback: Advertise feature-persistent as user requested
- xen-blkfront: Advertise feature-persistent as user requested
- xen-blkfront: Cache feature_persistent value before advertisement
- thunderbolt: Use the actual buffer in tb_async_error()
- usb: dwc3: pci: Add support for Intel Raptor Lake
- media: mceusb: Use new usb_control_msg_*() routines
- xhci: Add grace period after xHC start to prevent premature runtime suspend.
- USB: serial: cp210x: add Decagon UCA device id
- USB: serial: option: add support for OPPO R11 diag port
- USB: serial: option: add Quectel EM060K modem
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device
- usb: typec: tcpm: Return ENOTSUPP for power supply prop writes
- usb: dwc2: fix wrong order of phy_power_on and phy_init
- usb: cdns3: fix issue with rearming ISO OUT endpoint
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
- s390: fix nospec table alignments
- USB: core: Prevent nested device-reset calls
- usb: xhci-mtk: relax TT periodic bandwidth allocation
- usb: xhci-mtk: fix bandwidth release issue
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
- driver core: Don't probe devices after bus_type.match() probe deferral
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
- wifi: mac80211: Fix UAF in ieee80211_scan_rx()
- net: Use u64_stats_fetch_begin_irq() for stats fetch.
- net: mac802154: Fix a condition in the receive path
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
- ALSA: seq: oss: Fix data-race for max_midi_devs access
- ALSA: seq: Fix data-race at module auto-loading
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
- drm/i915: Skip wm/ddb readout for disabled pipes
- tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
- kbuild: Add skip_encoding_btf_enum64 option to pahole
- usb: dwc3: fix PHY disable sequence
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
- usb: dwc3: disable USB core PHY management
- USB: serial: ch341: fix lost character on LCR updates
- USB: serial: ch341: fix disabled rx timer on older devices
- Linux 5.15.66
* Jammy update: v5.15.65 upstream stable release (LP: #1991831)
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
- drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled
- ACPI: thermal: drop an always true check
- drm/vc4: hdmi: Rework power up
- drm/vc4: hdmi: Depends on CONFIG_PM
- firmware: tegra: bpmp: Do only aligned access to IPC memory area
- crypto: lib - remove unneeded selection of XOR_BLOCKS
- Drivers: hv: balloon: Support status report for larger page sizes
- mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte
- [Config] updateconfigs for ARM64_ERRATUM_2441009
- arm64: errata: Add Cortex-A510 to the repeat tlbi list
- io_uring: Remove unused function req_ref_put
- kbuild: Fix include path in scripts/Makefile.modpost
- Bluetooth: L2CAP: Fix build errors in some archs
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
- udmabuf: Set the DMA mask for the udmabuf device (v2)
- media: pvrusb2: fix memory leak in pvr_probe
- HID: hidraw: fix memory leak in hidraw_release()
- net: fix refcount bug in sk_psock_get (2)
- fbdev: fb_pm2fb: Avoid potential divide by zero error
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is
dead
- bpf: Don't redirect packets with invalid pkt_len
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
- ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5
- HID: add Lenovo Yoga C630 battery quirk
- HID: AMD_SFH: Add a DMI quirk entry for Chromebooks
- HID: asus: ROG NKey: Ignore portion of 0x5a report
- HID: thrustmaster: Add sparco wheel and fix array length
- drm/i915/gt: Skip TLB invalidations once wedged
- mmc: mtk-sd: Clear interrupts when cqe off/disable
- mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs
- mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx
- mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC
- btrfs: remove root argument from btrfs_unlink_inode()
- btrfs: remove no longer needed logic for replaying directory deletes
- btrfs: add and use helper for unlinking inode during log replay
- btrfs: fix warning during log replay when bumping inode link count
- fs/ntfs3: Fix work with fragmented xattr
- ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path
- drm/amd/display: Avoid MPC infinite loop
- drm/amd/display: Fix HDMI VSIF V3 incorrect issue
- drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
- drm/amd/display: clear optc underflow before turn off odm clock
- ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not
configured
- neigh: fix possible DoS due to net iface start/stop loop
- s390/hypfs: avoid error message under KVM
- ksmbd: don't remove dos attribute xattr on O_TRUNC open
- drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
- drm/amd/display: Fix pixel clock programming
- drm/amdgpu: Increase tlb flush timeout for sriov
- drm/amd/display: avoid doing vm_init multiple time
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
- testing: selftests: nft_flowtable.sh: use random netns names
- btrfs: move lockdep class helpers to locking.c
- btrfs: fix lockdep splat with reloc root extent buffers
- btrfs: tree-checker: check for overlapping extent items
- kprobes: don't call disarm_kprobe() for disabled kprobes
- btrfs: fix space cache corruption and potential double allocations
- android: binder: fix lockdep check on clearing vma
- net/af_packet: check len when min_header_len equals to 0
- net: neigh: don't call kfree_skb() under spin_lock_irqsave()
- Linux 5.15.65
* CVE-2022-2663
- netfilter: nf_conntrack_irc: Fix forged IP logic
* CVE-2022-3061
- video: fbdev: i740fb: Error out if 'pixclock' equals zero
Date: 2022-11-14 13:45:08.530647+00:00
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux/5.15.0-54.60
-------------- next part --------------
Sorry, changesfile not available.
More information about the jammy-changes
mailing list