[ubuntu/jammy-security] linux-azure 5.15.0-1038.45 (Accepted)
Steve Langasek
steve.langasek at canonical.com
Thu May 18 15:10:30 UTC 2023
linux-azure (5.15.0-1038.45) jammy; urgency=medium
* jammy/linux-azure: 5.15.0-1038.45 -proposed tracker (LP: #2016511)
* Azure: Enable MANA Jumbo Frame Support (LP: #2016898)
- net: mana: Use napi_build_skb in RX path
- net: mana: Refactor RX buffer allocation code to prepare for various MTU
- net: mana: Enable RX path to handle various MTU sizes
- net: mana: Add support for jumbo frame
* Azure: smb3: allow deferred close timeout to be configurable (LP: #2013349)
- smb3: allow deferred close timeout to be configurable
- smb3: lower default deferred close timeout to address perf regression
- keys: Do not cache key in task struct if key is requested from kernel thread
[ Ubuntu: 5.15.0-72.79 ]
* jammy/linux: 5.15.0-72.79 -proposed tracker (LP: #2016548)
* Add split lock detection for EMR (LP: #2015855)
- x86/split_lock: Enumerate architectural split lock disable bit
* selftest: fib_tests: Always cleanup before exit (LP: #2015956)
- selftest: fib_tests: Always cleanup before exit
* Add support for intel EMR cpu (LP: #2015372)
- platform/x86: intel-uncore-freq: add Emerald Rapids support
- perf/x86/intel/cstate: Add Emerald Rapids
- perf/x86/rapl: Add support for Intel Emerald Rapids
- intel_idle: add Emerald Rapids Xeon support
- tools/power/x86/intel-speed-select: Add Emerald Rapid quirk
- tools/power turbostat: Introduce support for EMR
- powercap: intel_rapl: add support for Emerald Rapids
- EDAC/i10nm: Add Intel Emerald Rapids server support
* Kernel livepatch ftrace graph fix (LP: #2013603)
- kprobes: treewide: Remove trampoline_address from
kretprobe_trampoline_handler()
- kprobes: treewide: Make it harder to refer kretprobe_trampoline directly
- kprobes: Add kretprobe_find_ret_addr() for searching return address
- s390/unwind: recover kretprobe modified return address in stacktrace
- s390/unwind: fix fgraph return address recovery
* Jammy update: v5.15.98 upstream stable release (LP: #2015600)
- Linux 5.15.98
* Jammy update: v5.15.97 upstream stable release (LP: #2015599)
- ionic: refactor use of ionic_rx_fill()
- Fix XFRM-I support for nested ESP tunnels
- arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc
- ARM: dts: rockchip: add power-domains property to dp node on rk3288
- HID: elecom: add support for TrackBall 056E:011C
- ACPI: NFIT: fix a potential deadlock during NFIT teardown
- btrfs: send: limit number of clones and allocated memory size
- ASoC: rt715-sdca: fix clock stop prepare timeout issue
- IB/hfi1: Assign npages earlier
- neigh: make sure used and confirmed times are valid
- HID: core: Fix deadloop in hid_apply_multiplier.
- x86/cpu: Add Lunar Lake M
- staging: mt7621-dts: change palmbus address to lower case
- bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
- net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
- vc_screen: don't clobber return value in vcs_read
- scripts/tags.sh: Invoke 'realpath' via 'xargs'
- scripts/tags.sh: fix incompatibility with PCRE2
- usb: dwc3: pci: add support for the Intel Meteor Lake-M
- USB: serial: option: add support for VW/Skoda "Carstick LTE"
- usb: gadget: u_serial: Add null pointer check in gserial_resume
- USB: core: Don't hold device lock while reading the "descriptors" sysfs file
- Linux 5.15.97
* Jammy update: v5.15.96 upstream stable release (LP: #2015595)
- drm/etnaviv: don't truncate physical page address
- wifi: rtl8xxxu: gen2: Turn on the rate control
- drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink
- clk: mxl: Switch from direct readl/writel based IO to regmap based IO
- clk: mxl: Remove redundant spinlocks
- clk: mxl: Add option to override gate clks
- clk: mxl: Fix a clk entry by adding relevant flags
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
- clk: mxl: syscon_node_to_regmap() returns error pointers
- random: always mix cycle counter in add_latent_entropy()
- KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
- KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid
- can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
- powerpc: use generic version of arch_is_kernel_initmem_freed()
- powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned
- powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary
- powerpc/64s/radix: Fix crash with unaligned relocated kernel
- powerpc/64s/radix: Fix RWX mapping with relocated kernel
- drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
- uaccess: Add speculation barrier to copy_from_user()
- binder: read pre-translated fds from sender buffer
- binder: defer copies of pre-patched txn data
- binder: fix pointer cast warning
- binder: Address corner cases in deferred copy and fixup
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
- nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
- wifi: mwifiex: Add missing compatible string for SD8787
- audit: update the mailing list in MAINTAINERS
- ext4: Fix function prototype mismatch for ext4_feat_ktype
- bpf: add missing header file include
- Linux 5.15.96
* Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)
- [Debian] autoreconstruct - fix restoration of execute permissions
* kernel: fix __clear_user() inline assembly constraints (LP: #2013088)
- s390/uaccess: add missing earlyclobber annotations to __clear_user()
* Kernel crash during Mellanox performance testing (LP: #2015097)
- net/mlx5: fs, refactor software deletion rule
* expoline.o is packaged unconditionally for s390x (LP: #2013209)
- [Packaging] Copy expoline.o only when produced by the build
* Intel E810 NICs driver in causing hangs when booting and bonds configured
(LP: #2004262)
- ice: avoid bonding causing auxiliary plug/unplug under RTNL lock
* Jammy update: v5.15.95 upstream stable release (LP: #2013118)
- mptcp: fix locking for in-kernel listener creation
- kprobes: treewide: Cleanup the error messages for kprobes
- riscv: kprobe: Fixup misaligned load text
- ACPI / x86: Add support for LPS0 callback handler
- ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers
- ASoC: Intel: sof_cs42l42: always set dpcm_capture for amplifiers
- selftests/bpf: Verify copy_register_state() preserves parent/live fields
- ALSA: hda: Do not unset preset when cleaning up codec
- bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
- ASoC: cs42l56: fix DT probe
- tools/virtio: fix the vringh test for virtio ring changes
- net/rose: Fix to not accept on connected socket
- net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
- drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED
- net: sched: sch: Bounds check priority
- s390/decompressor: specify __decompress() buf len to avoid overflow
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
- drm/amd/display: Properly handle additional cases where DCN is not supported
- platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match
- nvmem: core: add error handling for dev_set_name
- nvmem: core: fix cleanup after dev_set_name()
- nvmem: core: fix registration vs use race
- nvmem: core: fix return value
- xfs: zero inode fork buffer at allocation
- xfs: fix potential log item leak
- xfs: detect self referencing btree sibling pointers
- xfs: set XFS_FEAT_NLINK correctly
- xfs: validate v5 feature fields
- xfs: avoid unnecessary runtime sibling pointer endian conversions
- xfs: don't assert fail on perag references on teardown
- xfs: assert in xfs_btree_del_cursor should take into account error
- xfs: purge dquots after inode walk fails during quotacheck
- xfs: don't leak btree cursor when insrec fails after a split
- mptcp: do not wait for bare sockets' timeout
- aio: fix mremap after fork null-deref
- drm/amd/display: Fail atomic_check early on normalize_zpos error
- platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled
- platform/x86: amd-pmc: Correct usage of SMU version
- platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN
- netfilter: nft_tproxy: restrict to prerouting hook
- tcp: Fix listen() regression in 5.15.88.
- mmc: jz4740: Work around bug on JZ4760(B)
- mmc: sdio: fix possible resource leaks in some error paths
- mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ALSA: hda/conexant: add a new hda codec SN6180
- ALSA: hda/realtek - fixed wrong gpio assigned
- sched/psi: Fix use-after-free in ep_remove_wait_queue()
- hugetlb: check for undefined shift on 32 bit architectures
- of: reserved_mem: Have kmemleak ignore dynamically allocated reserved mem
- selftest/lkdtm: Skip stack-entropy test if lkdtm is not available
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
- ixgbe: allow to increase MTU to 3K with XDP enabled
- i40e: add double of VLAN header when computing the max MTU
- net: bgmac: fix BCM5358 support by setting correct flags
- net: ethernet: ti: am65-cpsw: Add RX DMA Channel Teardown Quirk
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
- bnxt_en: Fix mqprio and XDP ring checking logic
- net: stmmac: Restrict warning on disabling DMA store and fwd mode
- ixgbe: add double of VLAN header when computing the max MTU
- ipv6: Fix datagram socket connection with DSCP.
- ipv6: Fix tcp socket connection with DSCP.
- nilfs2: fix underflow in second superblock position calculations
- mm/filemap: fix page end in filemap_get_read_batch
- drm/i915/gen11: Moving WAs to icl_gt_workarounds_init()
- drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list
- flow_offload: fill flags to action structure
- net/sched: act_ctinfo: use percpu stats
- i40e: Add checking for null for nlmsg_find_attr()
- kvm: initialize all of the kvm_debugregs structure before sending it to
userspace
- alarmtimer: Prevent starvation by small intervals and SIG_IGN
- ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
- net: sched: sch: Fix off by one in htb_activate_prios()
- platform/x86/amd: pmc: add CONFIG_SERIO dependency
- Linux 5.15.95
* CVE-2023-1075
- net/tls: tls_is_tx_ready() checked list_entry
* devlink_port_split from ubuntu_kernel_selftests.net fails on hirsute
(KeyError: 'flavour') (LP: #1937133)
- selftests: net: devlink_port_split.py: skip test if no suitable device
available
* Connection timeout due to conntrack limits (LP: #2011616)
- netfilter: conntrack: adopt safer max chain length
* Jammy update: v5.15.94 upstream stable release (LP: #2012673)
- mm/migration: return errno when isolate_huge_page failed
- migrate: hugetlb: check for hugetlb shared PMD in node migration
- btrfs: limit device extents to the device size
- btrfs: zlib: zero-initialize zlib workspace
- ALSA: hda/realtek: Add Positivo N14KP6-TG
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and
trace_pipe_raw
- of/address: Return an error when no valid dma-ranges are found
- can: j1939: do not wait 250 ms if the same addr was already claimed
- xfrm: compat: change expression for switch in xfrm_xlate64
- IB/hfi1: Restore allocated resources on failed copyout
- xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- RDMA/irdma: Fix potential NULL-ptr-dereference
- RDMA/usnic: use iommu_map_atomic() under spin_lock()
- xfrm: fix bug with DSCP copy to v6 from v4 tunnel
- net: phylink: move phy_device_free() to correctly release phy device
- bonding: fix error checking in bond_debug_reregister()
- net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
- ionic: clean interrupt before enabling queue to avoid credit race
- uapi: add missing ip/ipv6 header dependencies for linux/stddef.h
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- net: dsa: mt7530: don't change PVC_EG_TAG when CPU port becomes VLAN-aware
- net: mscc: ocelot: fix VCAP filters not matching on MAC with "protocol
802.1Q"
- net/mlx5e: Move repeating clear_bit in mlx5e_rx_reporter_err_rq_cqe_recover
- net/mlx5e: Introduce the mlx5e_flush_rq function
- net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change
- net/mlx5: Bridge, fix ageing of peer FDB entries
- net/mlx5e: IPoIB, Show unknown speed instead of error
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
- net/mlx5: Serialize module cleanup with reload and remove
- igc: Add ndo_tx_timeout support
- rds: rds_rm_zerocopy_callback() use list_first_entry()
- selftests: forwarding: lib: quote the sysctl values
- ALSA: pci: lx6464es: fix a debug loop
- riscv: stacktrace: Fix missing the first frame
- ASoC: topology: Return -ENOMEM on memory allocation failure
- pinctrl: mediatek: Fix the drive register definition of some Pins
- pinctrl: aspeed: Fix confusing types in return value
- pinctrl: single: fix potential NULL dereference
- spi: dw: Fix wrong FIFO level setting for long xfers
- pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
- cifs: Fix use-after-free in rdata->read_into_pages()
- net: USB: Fix wrong-direction WARNING in plusb.c
- mptcp: be careful on subflow status propagation on errors
- btrfs: free device in btrfs_close_devices for a single device filesystem
- usb: core: add quirk for Alcor Link AK9563 smartcard reader
- usb: typec: altmodes/displayport: Fix probe pin assign check
- clk: ingenic: jz4760: Update M/N/OD calculation algorithm
- ceph: flush cap releases when the session is flushed
- riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
- powerpc/64s/interrupt: Fix interrupt exit race with security mitigation
switch
- rtmutex: Ensure that the top waiter is always woken up
- arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
- arm64: dts: meson-g12-common: Make mmc host controller interrupts level-
sensitive
- arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
- Fix page corruption caused by racy check in __free_pages
- drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini
- drm/i915: Initialize the obj flags for shmem objects
- drm/i915: Fix VBT DSI DVO port handling
- x86/speculation: Identify processors vulnerable to SMT RSB predictions
- KVM: x86: Mitigate the cross-thread return address predictions bug
- Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions
- Linux 5.15.94
* Jammy update: v5.15.93 upstream stable release (LP: #2012665)
- firewire: fix memory leak for payload of request subaction to IEC 61883-1
FCP region
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
- ASoC: Intel: boards: fix spelling in comments
- ASoC: Intel: bytcht_es8316: move comment to the right place
- ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
- ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use
- ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use
- bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- bpf: Support <8-byte scalar spill and refill
- bpf: Fix to preserve reg parent/live fields when copying range info
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
- drm/vc4: hdmi: make CEC adapter name unique
- scsi: Revert "scsi: core: map PQ=1, PDT=other values to
SCSI_SCAN_TARGET_PRESENT"
- vhost/net: Clear the pending messages when the backend is removed
- WRITE is "data source", not destination...
- READ is "data destination", not source...
- fix iov_iter_bvec() "direction" argument
- fix "direction" argument of iov_iter_kvec()
- ice: Prevent set_channel from changing queues while RDMA active
- qede: execute xdp_do_flush() before napi_complete_done()
- virtio-net: execute xdp_do_flush() before napi_complete_done()
- dpaa_eth: execute xdp_do_flush() before napi_complete_done()
- dpaa2-eth: execute xdp_do_flush() before napi_complete_done()
- sfc: correctly advertise tunneled IPv6 segmentation
- net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
- block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
- block, bfq: replace 0/1 with false/true in bic apis
- block, bfq: fix uaf for bfqq in bic_set_bfqq()
- netrom: Fix use-after-free caused by accept on already connected socket
- drm/i915/guc: Fix locking when searching for a hung request
- drm/i915/adlp: Fix typo for reference clock
- netfilter: br_netfilter: disable sabotage_in hook after first suppression
- squashfs: harden sanity check in squashfs_read_xattr_id_table
- net: phy: meson-gxl: Add generic dummy stubs for MMD register access
- ip/ip6_gre: Fix changing addr gen mode not generating IPv6 link local
address
- ip/ip6_gre: Fix non-point-to-point tunnel not generating IPv6 link local
address
- riscv: kprobe: Fixup kernel panic when probing an illegal position
- igc: return an error if the mac type is unknown in
igc_ptp_systim_to_hwtstamp()
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported
- selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning
- selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided
- selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy
benchmarking
- virtio-net: Keep stop() to follow mirror sequence of open()
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- efi: fix potential NULL deref in efi_mem_reserve_persistent
- i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU
- i2c: mxs: suppress probe-deferral error message
- scsi: target: core: Fix warning on RT kernels
- perf/x86/intel: Add Emerald Rapids
- scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
- i2c: rk3x: fix a bunch of kernel-doc warnings
- platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF
- net/x25: Fix to not accept on connected socket
- drm/amd/display: Fix timing not changning when freesync video is enabled
- iio: adc: stm32-dfsdm: fill module aliases
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
- fbcon: Check font dimension limits
- net: qrtr: free memory on error path in radix_tree_insert()
- watchdog: diag288_wdt: do not use stack buffers for hardware data
- watchdog: diag288_wdt: fix __diag288() inline assembly
- ALSA: hda/realtek: Add Acer Predator PH315-54
- efi: Accept version 2 of memory attributes table
- iio: hid: fix the retval in accel_3d_capture_sample
- iio: hid: fix the retval in gyro_3d_capture_sample
- iio: adc: berlin2-adc: Add missing of_node_put() in error path
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
- iio: imu: fxos8700: fix ACCEL measurement range selection
- iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
- iio: imu: fxos8700: fix IMU data bits returned to user space
- iio: imu: fxos8700: fix map label of channel type to MAGN sensor
- iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
- iio: imu: fxos8700: fix incorrect ODR mode readback
- iio: imu: fxos8700: fix failed initialization ODR mode assignment
- iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
- iio: imu: fxos8700: fix MAGN sensor scale and unit
- nvmem: qcom-spmi-sdam: fix module autoloading
- parisc: Fix return code of pdc_iodc_print()
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
- riscv: disable generation of unwind tables
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
- usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints
- kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup()
- x86/debug: Fix stack recursion caused by wrongly ordered DR7 accesses
- fpga: stratix10-soc: Fix return value check in s10_ops_write_init()
- mm/swapfile: add cond_resched() in get_swap_pages()
- highmem: round down the address passed to kunmap_flush_on_unmap()
- Squashfs: fix handling and sanity checking of xattr_ids count
- drm/i915: Fix potential bit_17 double-free
- nvmem: core: initialise nvmem->id early
- nvmem: core: remove nvmem_config wp_gpio
- nvmem: core: fix cell removal on error
- serial: 8250_dma: Fix DMA Rx completion race
- serial: 8250_dma: Fix DMA Rx rearm race
- phy: qcom-qmp-combo: disable runtime PM on unbind
- phy: qcom-qmp-combo: fix memleak on probe deferral
- phy: qcom-qmp-usb: fix memleak on probe deferral
- phy: qcom-qmp-combo: fix broken power on
- phy: qcom-qmp-combo: fix runtime suspend
- bpf: Fix incorrect state pruning for <8B spill/fill
- bpf: Do not reject when the stack read size is different from the tracked
scalar size
- iio:adc:twl6030: Enable measurement of VAC
- powerpc/imc-pmu: Revert nest_init_lock to being a mutex
- fs/ntfs3: Validate attribute data and valid sizes
- ovl: Use "buf" flexible array for memcpy() destination
- fbdev: smscufx: fix error handling code in ufx_usb_probe
- f2fs: fix to do sanity check on i_extra_isize in is_alive()
- wifi: brcmfmac: Check the count value of channel spec to prevent out-of-
bounds reads
- gfs2: Cosmetic gfs2_dinode_{in,out} cleanup
- gfs2: Always check inode size of inline inodes
- bpf: Skip invalid kfunc call in backtrack_insn
- Linux 5.15.93
* CVE-2023-1118
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
* [SRU][Ubuntu 22.04.1]: Observed "Array Index out of bounds" Call Trace
multiple times on Ubuntu 22.04.1 OS during boot (LP: #2008157)
- scsi: megaraid_sas: Replace one-element array with flexible-array member in
MR_FW_RAID_MAP
- scsi: megaraid_sas: Replace one-element array with flexible-array member in
MR_FW_RAID_MAP_DYNAMIC
- scsi: megaraid_sas: Replace one-element array with flexible-array member in
MR_DRV_RAID_MAP
- scsi: megaraid_sas: Replace one-element array with flexible-array member in
MR_PD_CFG_SEQ_NUM_SYNC
- scsi: megaraid_sas: Use struct_size() in code related to struct
MR_FW_RAID_MAP
- scsi: megaraid_sas: Use struct_size() in code related to struct
MR_PD_CFG_SEQ_NUM_SYNC
* Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo
child qdiscs" (LP: #2011926)
- Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo
child qdiscs"
linux-azure (5.15.0-1037.44) jammy; urgency=medium
* jammy/linux-azure: 5.15.0-1037.44 -proposed tracker (LP: #2016785)
* CVE-2023-1829
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
[ Ubuntu: 5.15.0-71.78 ]
* jammy/linux: 5.15.0-71.78 -proposed tracker (LP: #2016820)
* CVE-2023-1872
- io_uring: add missing lock in io_get_file_fixed
- io_uring: ensure that io_init_req() passes in the right issue_flags
* CVE-2023-1829
- net/sched: Retire tcindex classifier
- [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available
linux-azure (5.15.0-1036.43) jammy; urgency=medium
* jammy/linux-azure: 5.15.0-1036.43 -proposed tracker (LP: #2011883)
[ Ubuntu: 5.15.0-70.77 ]
* jammy/linux: 5.15.0-70.77 -proposed tracker (LP: #2011918)
* CVE-2023-26545
- net: mpls: fix stale pointer if allocation fails during device rename
* CVE-2023-1281
- net/sched: tcindex: update imperfect hash filters respecting rcu
* [SRU][Ubuntu 22.04.1] mpi3mr: Add management application interface(BSG)
support (LP: #1971151)
- scsi: mpi3mr: Add bsg device support
- scsi: mpi3mr: Add support for driver commands
- scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi
header
- scsi: mpi3mr: Add support for MPT commands
- scsi: mpi3mr: Add support for PEL commands
- scsi: mpi3mr: Expose adapter state to sysfs
- scsi: mpi3mr: Add support for NVMe passthrough
- scsi: mpi3mr: Update driver version to 8.0.0.69.0
- scsi: mpi3mr: Increase I/O timeout value to 60s
- scsi: mpi3mr: Hidden drives not removed during soft reset
- scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR
- scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init()
- scsi: mpi3mr: Return error if dma_alloc_coherent() fails
- scsi: mpi3mr: Add shost related sysfs attributes
- scsi: mpi3mr: Add target device related sysfs attributes
- scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings
- scsi: mpi3mr: Fix kernel-doc
* cpufreq: intel_pstate: Update Balance performance EPP for Sapphire Rapids
(LP: #2008519)
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
* Fail to output sound to external monitor which connects via docking station
(LP: #2009024)
- [Config] Enable CONFIG_SND_HDA_INTEL_HDMI_SILENT_STREAM
* Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
- wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read
* Jammy update: v5.15.92 upstream stable release (LP: #2011472)
- ARM: dts: imx: Fix pca9547 i2c-mux node name
- ARM: dts: vf610: Fix pca9548 i2c-mux node names
- arm64: dts: freescale: Fix pca954x i2c-mux node names
- arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
- firmware: arm_scmi: Clear stale xfer->hdr.status
- bpf: Skip task with pid=1 in send_signal_common()
- erofs/zmap.c: Fix incorrect offset calculation
- blk-cgroup: fix missing pd_online_fn() while activating policy
- HID: playstation: sanity check DualSense calibration data.
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint()
- extcon: usbc-tusb320: fix kernel-doc warning
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
- tools: fix ARRAY_SIZE defines in tools and selftests hdrs
- selftests/vm: remove ARRAY_SIZE define from individual tests
- selftests: Provide local define of __cpuid_count()
- net: fix NULL pointer in skb_segment_list
- net: mctp: purge receive queues on sk destruction
- Linux 5.15.92
* Jammy update: v5.15.91 upstream stable release (LP: #2011467)
- memory: tegra: Remove clients SID override programming
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in
atmel_ramc_probe()
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe()
- dmaengine: ti: k3-udma: Do conditional decrement of
UDMA_CHAN_RT_PEER_BCNT_REG
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property
- ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
- ARM: dts: imx7d-pico: Use 'clock-frequency'
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
- arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
- ARM: imx: add missing of_node_put()
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity
- soc: imx8m: Fix incorrect check for of_clk_get_by_name()
- reset: uniphier-glue: Use reset_control_bulk API
- reset: uniphier-glue: Fix possible null-ptr-deref
- EDAC/highbank: Fix memory leak in highbank_mc_probe()
- firmware: arm_scmi: Harden shared memory access in fetch_response
- firmware: arm_scmi: Harden shared memory access in fetch_notification
- tomoyo: fix broken dependency on *.conf.default
- RDMA/core: Fix ib block iterator counter overflow
- IB/hfi1: Reject a zero-length user expected buffer
- IB/hfi1: Reserve user expected TIDs
- IB/hfi1: Fix expected receive setup error exit issues
- IB/hfi1: Immediately remove invalid memory from hardware
- IB/hfi1: Remove user expected buffer invalidate race
- affs: initialize fsdata in affs_truncate()
- PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
- arm64: dts: qcom: msm8992: Don't use sfpb mutex
- arm64: dts: qcom: msm8992-libra: Add CPU regulators
- arm64: dts: qcom: msm8992-libra: Fix the memory map
- phy: ti: fix Kconfig warning and operator precedence
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
- ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- amd-xgbe: Delay AN timeout during KR training
- bpf: Fix pointer-leak due to insufficient speculative store bypass
mitigation
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs
- net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
- sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
- gpio: use raw spinlock for gpio chip shadowed data
- gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
- gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
- pinctrl/rockchip: Use temporary variable for struct device
- pinctrl/rockchip: add error handling for pull/drive register getters
- pinctrl: rockchip: fix reading pull type on rk3568
- net: stmmac: Fix queue statistics reading
- net/sched: sch_taprio: fix possible use-after-free
- l2tp: Serialize access to sk_user_data with sk_callback_lock
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
- l2tp: convert l2tp_tunnel_list to idr
- l2tp: close all race conditions in l2tp_tunnel_register()
- octeontx2-pf: Avoid use of GFP_KERNEL in atomic context
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values()
- HID: check empty report_list in bigben_probe()
- net: stmmac: fix invalid call to mdiobus_get_phy()
- pinctrl: rockchip: fix mux route data for rk3568
- HID: revert CHERRY_MOUSE_000C quirk
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
- net: ipa: disable ipa interrupt during suspend
- net/mlx5: E-switch, Fix setting of reserved fields on
MODIFY_SCHEDULING_ELEMENT
- net: mlx5: eliminate anonymous module_init & module_exit
- drm/panfrost: fix GENERIC_ATOMIC64 dependency
- dmaengine: Fix double increment of client_count in dma_chan_get()
- net: macb: fix PTP TX timestamp failure due to packet padding
- virtio-net: correctly enable callback during start_xmit
- l2tp: prevent lockdep issue in l2tp_tunnel_register()
- HID: betop: check shape of output reports
- cifs: fix potential deadlock in cache_refresh_path()
- dmaengine: xilinx_dma: call of_node_put() when breaking out of
for_each_child_of_node()
- phy: phy-can-transceiver: Skip warning if no "max-bitrate"
- drm/amd/display: fix issues with driver unload
- nvme-pci: fix timeout request state check
- tcp: avoid the lookup process failing to get sk in ehash table
- octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt
- ptdma: pt_core_execute_cmd() should use spinlock
- device property: fix of node refcount leak in
fwnode_graph_get_next_endpoint()
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- driver core: Fix test_async_probe_init saves device in wrong array
- selftests/net: toeplitz: fix race on tpacket_v3 block close
- net: dsa: microchip: ksz9477: port map correction in ALU table entry
register
- thermal/core: Remove duplicate information when an error occurs
- thermal/core: Rename 'trips' to 'num_trips'
- thermal: Validate new state in cur_state_store()
- thermal/core: fix error code in __thermal_cooling_device_register()
- thermal: core: call put_device() only after device_register() fails
- net: stmmac: enable all safety features by default
- tcp: fix rate_app_limited to default to 1
- scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
- kcsan: test: don't put the expect array on the stack
- cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
- ASoC: fsl_micfil: Correct the number of steps on SX controls
- net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
- s390/debug: add _ASM_S390_ prefix to header guard
- s390: expicitly align _edata and _end symbols on page boundary
- perf/x86/msr: Add Emerald Rapids
- perf/x86/intel/uncore: Add Emerald Rapids
- cpufreq: armada-37xx: stop using 0 as NULL pointer
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
- spi: spidev: remove debug messages that access spidev->spi without locking
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
- scsi: hisi_sas: Set a port invalid only if there are no devices attached
when refreshing port id
- r8152: add vendor/device ID pair for Microsoft Devkit
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
- lockref: stop doing cpu_relax in the cmpxchg loop
- firmware: coreboot: Check size of table entry and use flex-array
- drm/i915: Allow switching away via vga-switcheroo if uninitialized
- drm/i915: Remove unused variable
- x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- sysctl: add a new register_sysctl_init() interface
- kernel/panic: move panic sysctls to its own file
- panic: unset panic_on_warn inside panic()
- ubsan: no need to unset panic_on_warn in ubsan_epilogue()
- kasan: no need to unset panic_on_warn in end_report()
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- hexagon: Fix function name in die()
- h8300: Fix build errors from do_exit() to make_task_dead() transition
- csky: Fix function name in csky_alignment() and die()
- ia64: make IA64_MCA_RECOVERY bool instead of tristate
- panic: Separate sysctl logic from CONFIG_SMP
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- docs: Fix path paste-o for /sys/kernel/warn_count
- exit: Use READ_ONCE() for all oops/warn limit reads
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- drm/amdgpu: complete gfxoff allow signal during suspend without delay
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- KVM: SVM: fix tsc scaling cache logic
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- trace_events_hist: add check for return value of 'create_hist_field'
- ftrace/scripts: Update the instructions for ftrace-bisect.sh
- cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- i2c: mv64xxx: Remove shutdown method from driver
- i2c: mv64xxx: Add atomic_xfer method to driver
- ksmbd: add smbd max io size parameter
- ksmbd: add max connections parameter
- ksmbd: do not sign response to session request for guest login
- ksmbd: downgrade ndr version error message to debug
- ksmbd: limit pdu length size according to connection status
- ovl: fail on invalid uid/gid mapping at copy up
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
- KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation
- thermal: intel: int340x: Protect trip temperature from concurrent updates
- ipv6: fix reachability confirmation with proxy_ndp
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
- EDAC/device: Respect any driver-supplied workqueue polling value
- EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
- net: mana: Fix IRQ name - add PCI and queue number
- scsi: ufs: core: Fix devfreq deadlocks
- i2c: designware: use casting of u64 in clock multiplication to avoid
overflow
- netlink: prevent potential spectre v1 gadgets
- net: fix UaF in netns ops registration error path
- drm/i915/selftest: fix intel_selftest_modify_policy argument types
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
- netfilter: nft_set_rbtree: skip elements in transaction from garbage
collection
- netlink: annotate data races around nlk->portid
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- net/sched: sch_taprio: do not schedule in taprio_reset()
- sctp: fail if no bound addresses can be used for a given scope
- riscv/kprobe: Fix instruction simulation of JALR
- nvme: fix passthrough csi check
- gpio: mxc: Unlock on error path in mxc_flip_edge()
- ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables
- net: ravb: Fix lack of register setting after system resumed for Gen3
- net: ravb: Fix possible hang if RIS2_QFF1 happen
- net: mctp: mark socks as dead on unhash, prevent re-add
- thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: mdio-mux-meson-g12a: force internal PHY off on mux switch
- treewide: fix up files incorrectly marked executable
- tools: gpio: fix -c option of gpio-event-mon
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- cpufreq: governor: Use kobject release() method to free dbs_data
- kbuild: Allow kernel installation packaging to override pkg-config
- block: fix and cleanup bio_check_ro
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- netfilter: conntrack: unify established states for SCTP paths
- perf/x86/amd: fix potential integer overflow on shift of a int
- Linux 5.15.91
* Kernel livepatch support for for s390x (LP: #1639924)
- sched: Improve try_invoke_on_locked_down_task()
- sched,rcu: Rework try_invoke_on_locked_down_task()
- sched,livepatch: Use task_call_func()
- sched: Simplify wake_up_*idle*()
- sched,livepatch: Use wake_up_if_idle()
- sched: Improve wake_up_all_idle_cpus() take #2
- s390/entry: remove unused expoline thunk
- s390: remove unused expoline to BC instructions
- s390/nospec: generate single register thunks if possible
- s390/nospec: add an option to use thunk-extern
- s390/nospec: align and size extern thunks
- bug: Use normal relative pointers in 'struct bug_entry'
- s390/nospec: build expoline.o for modules_prepare target
- [Config] Enable EXPOLINE_EXTERN on s390x
- [Config] s390x: Removing UBSAN from configuration
* Do not sort the task scan result from /proc when synthesizing perf events
(LP: #2008971)
- perf synthetic-events: Don't sort the task scan result from /proc
* linux: Staging modules should be unsigned (LP: #1642368)
- [Packaging] Move and update signature inclusion list
- SAUCE: Add selective signing of staging modules
- [Packaging] Add module-signature-check
- [Packaging] module-signature-check: Check debian.<foo>/signature-inclusion
- [Packaging] Introduce debian/scripts/sign-module
- SAUCE: Switch to using debian/scripts/sign-module
* Jammy update: v5.15.90 upstream stable release (LP: #2008933)
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
- pNFS/filelayout: Fix coalescing test for single DS
- tools/virtio: initialize spinlocks in vring_test.c
- virtio_pci: modify ENOENT to EINVAL
- vduse: Validate vq_num in vduse_validate_config()
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down()
- RDMA/srp: Move large values to a new enum for gcc13
- btrfs: always report error in run_one_delayed_ref()
- x86/asm: Fix an assembler warning with current binutils
- f2fs: let's avoid panic if extent_tree is not created
- perf/x86/rapl: Treat Tigerlake like Icelake
- fbdev: omapfb: avoid stack overflow warning
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
- wifi: mac80211: sdata can be NULL during AMPDU start
- Add exception protection processing for vd in axi_chan_handle_err function
- zonefs: Detect append writes at invalid locations
- nilfs2: fix general protection fault in nilfs_btree_insert()
- efi: fix userspace infinite retry read efivars after EFI runtime services
page fault
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform
- drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2)
- drm/amd: Delay removal of the firmware framebuffer
- hugetlb: unshare some PMDs when splitting VMAs
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
- eventpoll: add EPOLL_URING_WAKE poll wakeup flag
- eventfd: provide a eventfd_signal_mask() helper
- io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
- io_uring: improve send/recv error handling
- io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
- io_uring: add flag for disabling provided buffer recycling
- io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
- io_uring: allow re-poll if we made progress
- io_uring: fix async accept on O_NONBLOCK sockets
- io_uring: ensure that cached task references are always put on exit
- io_uring: remove duplicated calls to io_kiocb_ppos
- io_uring: update kiocb->ki_pos at execution time
- io_uring: do not recalculate ppos unnecessarily
- io_uring/rw: defer fsnotify calls to task context
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- xhci: Fix null pointer dereference when host dies
- xhci: Add update_hub_device override for PCI xHCI hosts
- xhci: Add a flag to disable USB3 lpm on a xhci root port level.
- usb: acpi: add helper to check port lpm capability using acpi _DSM
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
- prlimit: do_prlimit needs to have a speculation check
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- staging: vchiq_arm: fix enum vchiq_status return types
- USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100
- misc: fastrpc: Don't remove map on creater_process and device_release
- misc: fastrpc: Fix use-after-free race condition for maps
- usb: core: hub: disable autosuspend for TI TUSB8041
- comedi: adv_pci1760: Fix PWM instruction handling
- ACPI: PRM: Check whether EFI runtime is available
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
- btrfs: do not abort transaction on failure to write log tree when syncing
log
- btrfs: fix race between quota rescan and disable leading to NULL pointer
deref
- cifs: do not include page data when checking signature
- thunderbolt: Use correct function to calculate maximum USB3 link rate
- riscv: dts: sifive: fu740: fix size of pcie 32bit memory
- bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and
PERF_BPF_EVENT_PROG_UNLOAD
- staging: mt7621-dts: change some node hex addresses to lower case
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- tty: fix possible null-ptr-defer in spk_ttyio_release
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: cdns3: remove fetched trb from cache before dequeuing
- usb: host: ehci-fsl: Fix module alias
- usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail
- usb: typec: altmodes/displayport: Add pin assignment helper
- usb: typec: altmodes/displayport: Fix pin assignment calculation
- usb: gadget: g_webcam: Send color matching descriptor per frame
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
- dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
- serial: pch_uart: Pass correct sg to dma_unmap_sg()
- dmaengine: lgm: Move DT parsing after initialization
- dmaengine: tegra210-adma: fix global intr clear
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- serial: amba-pl011: fix high priority character transmission in rs486 mode
- serial: atmel: fix incorrect baudrate setup
- gsmi: fix null-deref in gsmi_get_variable
- mei: me: add meteor lake point M DID
- drm/i915: re-disable RC6p on Sandy Bridge
- drm/i915/display: Check source height is > 0
- drm/amd/display: Fix set scaling doesn's work
- drm/amd/display: Calculate output_color_space after pixel encoding
adjustment
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
- drm/amdgpu: drop experimental flag on aldebaran
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- arm64: efi: Execute runtime services from a dedicated stack
- efi: rt-wrapper: Add missing include
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
- tracing: Use alignof__(struct {type b;}) instead of offsetof()
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
- io_uring/net: fix fast_iov assignment in io_setup_async_msg()
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
- block: mq-deadline: Rename deadline_is_seq_writes()
- soc: qcom: apr: Make qcom,protection-domain optional again
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
- io_uring: Clean up a false-positive warning from GCC 9.3.0
- io_uring: fix double poll leak on repolling
- io_uring/rw: ensure kiocb_end_write() is always called
- io_uring/rw: remove leftover debug statement
- Linux 5.15.90
* Jammy update: v5.15.89 upstream stable release (LP: #2008929)
- ALSA: control-led: use strscpy in set_led_id()
- ALSA: hda/realtek - Turn on power early
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx
- KVM: arm64: Fix S1PTW handling on RO memslots
- KVM: arm64: nvhe: Fix build with profile optimization
- selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c
- efi: tpm: Avoid READ_ONCE() for accessing the event log
- docs: Fix the docs build with Sphinx 6.0
- net: stmmac: add aux timestamps fifo clearance wait
- perf auxtrace: Fix address filter duplicate symbol selection
- s390/kexec: fix ipl report address for kdump
- ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
- s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- drm/virtio: Fix GEM handle creation UAF
- drm/i915/gt: Reset twice
- net/mlx5e: Set action fwd flag when parsing tc action goto
- cifs: Fix uninitialized memory read for smb311 posix symlink create
- platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present
- platform/surface: aggregator: Ignore command messages not intended for us
- platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting
- dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint
- drm/msm/adreno: Make adreno quirks not overwrite each other
- dt-bindings: msm: dsi-controller-main: Fix power-domain constraint
- dt-bindings: msm: dsi-controller-main: Fix description of core clock
- dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode
- platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to
set_fn_lock_led_list[]
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux
transfer
- dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY
- dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during
probe
- ixgbe: fix pci device refcount leak
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- bus: mhi: host: Fix race between channel preparation and M0 event
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- iommu/iova: Fix alloc iova overflows issue
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
- sched/core: Fix use-after-free bug in dup_user_cpus_ptr()
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
- x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- x86/resctrl: Fix task CLOSID/RMID update race
- regulator: da9211: Use irq handler when ready
- scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile
- scsi: ufs: Stop using the clock scaling lock in the error handler
- scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery
- ASoC: wm8904: fix wrong outputs volume after power reactivation
- ALSA: usb-audio: Make sure to stop endpoints before closing EPs
- ALSA: usb-audio: Relax hw constraints for implicit fb sync
- tipc: fix unexpected link reset due to discovery messages
- octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- af_unix: selftest: Fix the size of the parameter to connect()
- tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list
- tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax`
- tools/nolibc: use pselect6 on RISCV
- tools/nolibc/std: move the standard type definitions to std.h
- tools/nolibc/types: split syscall-specific definitions into their own files
- tools/nolibc/arch: split arch-specific code into individual files
- tools/nolibc/arch: mark the _start symbol as weak
- tools/nolibc: Remove .global _start from the entry point code
- tools/nolibc: restore mips branch ordering in the _start block
- tools/nolibc: fix the O_* fcntl/open macro definitions for riscv
- net/sched: act_mpls: Fix warning during failed attribute validation
- net/mlx5: Fix ptp max frequency adjustment range
- net/mlx5e: Don't support encap rules with gbp option
- perf build: Properly guard libbpf includes
- igc: Fix PPS delta between two synchronized end-points
- platform/surface: aggregator: Add missing call to ssam_request_sync_free()
- Documentation: KVM: add API issues section
- KVM: x86: Do not return host topology information from
KVM_GET_SUPPORTED_CPUID
- io_uring: lock overflowing for IOPOLL
- arm64: atomics: format whitespace consistently
- arm64: atomics: remove LL/SC trampolines
- arm64: cmpxchg_double*: hazard against entire exchange variable
- efi: fix NULL-deref in init error path
- io_uring/io-wq: free worker if task_work creation is canceled
- io_uring/io-wq: only free worker if it was allocated for creation
- block: handle bio_split_to_limits() NULL return
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
- pinctrl: amd: Add dynamic debugging for active GPIOs
- Linux 5.15.89
* Jammy update: v5.15.88 upstream stable release (LP: #2008927)
- parisc: Align parisc MADV_XXX constants with all other architectures
- serial: fixup backport of "serial: Deassert Transmit Enable on probe in
driver-specific way"
- net: sched: disallow noqueue for qdisc classes
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
- ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
- Linux 5.15.88
* Fix selftests/ftracetests/Meta-selftests (LP: #2006453)
- selftests/ftrace: Fix bash specific "==" operator
[ Ubuntu: 5.15.0-69.76 ]
* jammy/linux: 5.15.0-69.76 -proposed tracker (LP: #2012092)
* NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
- NFS: Correct timing for assigning access cache timestamp
Date: 2023-04-24 15:37:44.393101+00:00
Changed-By: Tim Gardner <tim.gardner at canonical.com>
Signed-By: Steve Langasek <steve.langasek at canonical.com>
https://launchpad.net/ubuntu/+source/linux-azure/5.15.0-1038.45
-------------- next part --------------
Sorry, changesfile not available.
More information about the jammy-changes
mailing list