APPLIED/CMNT: [SRU][Bionic][PULL] Bionic upstream stable patchset 2022-10-18

Luke Nowakowski-Krijger luke.nowakowskikrijger at canonical.com
Wed Nov 9 12:35:36 UTC 2022


Applied to bionic/linux master-next

One patch was skipped (netfilter: nf_conntrack_irc: Fix forged IP logic) as
it was already included in commit 29b366360fab (Fix CVE-2022-2663
(netfilter: nf_conntrack_irc: Fix forged IP logic)).

Thanks!

- Luke

On Tue, Oct 18, 2022 at 10:54 PM Kamal Mostafa <kamal at canonical.com> wrote:

> This pull request (75 commits) includes the following Bionic stable
> patchsets:
>
>         Bionic update: upstream stable patchset 2022-10-18
>                 Ported from the following upstream stable releases:
>                         v4.14.293, v4.19.258
>                         v4.14.294, v4.19.259
>         https://bugs.launchpad.net/bugs/1993349
>
> Note also that the 'stable-next' branch head contains this and all prior
> pending upstream stable releases, rebased to master-next:
>
>    git://git.launchpad.net/~ubuntu-kernel-stable/+git/bionic stable-next
>
>  -Kamal
>
> ---
>
> The following changes since commit
> 22f3392ae313d1fb50a0346dd0394408b886d65f:
>
>   UBUNTU: Upstream stable to v4.14.292, v4.19.257 (2022-10-18 11:31:44
> -0700)
>
> are available in the Git repository at:
>
>   git://git.launchpad.net/~ubuntu-kernel-stable/+git/bionic
> tags/bionic-stable-2022-10-18
>
> for you to fetch changes up to 158dde6d5d2901145e92660f462501d4f47acc30:
>
>   UBUNTU: Upstream stable to v4.14.294, v4.19.259 (2022-10-18 12:25:12
> -0700)
>
> ----------------------------------------------------------------
> Alan Stern (1):
>       USB: core: Prevent nested device-reset calls
>
> Andy Shevchenko (1):
>       platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
>
> Armin Wolf (1):
>       hwmon: (gpio-fan) Fix array out of bounds access
>
> Brian Norris (1):
>       tracefs: Only clobber mode/uid/gid on remount if asked
>
> Candice Li (1):
>       drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
>
> Carlos Llamas (1):
>       binder: fix UAF of ref->proc caused by race condition
>
> Chen-Yu Tsai (2):
>       clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
>       clk: core: Fix runtime PM sequence in clk_core_unprepare()
>
> Christian A. Ehrhardt (1):
>       kprobes: Prohibit probes in gate area
>
> Colin Ian King (1):
>       drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
>
> Cong Wang (1):
>       kcm: fix strp_init() order and cleanup
>
> Dan Carpenter (3):
>       wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
>       staging: rtl8712: fix use after free bugs
>       tipc: fix shift wrapping bug in map_get()
>
> David Leadbeater (1):
>       netfilter: nf_conntrack_irc: Fix forged IP logic
>
> David Lebrun (1):
>       ipv6: sr: fix out-of-bounds read when setting HMAC data.
>
> Dongxiang Ke (1):
>       ALSA: usb-audio: Fix an out-of-bounds bug in
> __snd_usb_parse_audio_interface()
>
> Douglas Anderson (1):
>       drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
>
> Duoming Zhou (1):
>       ethernet: rocker: fix sleep in atomic context bug in
> neigh_timer_handler
>
> Enguerrand de Ribaucourt (2):
>       net: dp83822: disable false carrier interrupt
>       net: dp83822: disable rx error interrupt
>
> Eric Dumazet (1):
>       tcp: annotate data-race around challenge_timestamp
>
> Gerald Schaefer (1):
>       s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
>
> Hans de Goede (1):
>       platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot
> keymap fixes
>
> Harsh Modi (1):
>       netfilter: br_netfilter: Drop dst references before setting.
>
> Heiner Kallweit (1):
>       usb: dwc2: fix wrong order of phy_power_on and phy_init
>
> Helge Deller (2):
>       vt: Clear selection before changing the font
>       parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
>
> Hyunwoo Kim (1):
>       efi: capsule-loader: Fix use-after-free in efi_capsule_write
>
> Isaac J. Manjarres (1):
>       driver core: Don't probe devices after bus_type.match() probe
> deferral
>
> Ivan Vecera (1):
>       i40e: Fix kernel crash during module removal
>
> Jann Horn (1):
>       mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
>
> Jason Wang (1):
>       HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
>
> Johan Hovold (4):
>       USB: serial: cp210x: add Decagon UCA device id
>       usb: dwc3: fix PHY disable sequence
>       USB: serial: ch341: fix lost character on LCR updates
>       USB: serial: ch341: fix disabled rx timer on older devices
>
> John Fastabend (1):
>       bpf: Verifer, adjust_scalar_min_max_vals to always call
> update_reg_bounds()
>
> Josh Poimboeuf (1):
>       s390: fix nospec table alignments
>
> Kai-Heng Feng (1):
>       tg3: Disable tg3 device on system reboot to avoid triggering AER
>
> Kamal Mostafa (2):
>       UBUNTU: Upstream stable to v4.14.293, v4.19.258
>       UBUNTU: Upstream stable to v4.14.294, v4.19.259
>
> Krishna Kurapati (1):
>       usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
>
> Li Qiong (2):
>       parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
>       ieee802154: cc2520: add rc code in cc2520_tx()
>
> Liang He (1):
>       soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
>
> Linus Torvalds (1):
>       fs: only do a memory barrier for the first set_buffer_uptodate()
>
> Mathias Nyman (1):
>       xhci: Add grace period after xHC start to prevent premature runtime
> suspend.
>
> Mika Westerberg (1):
>       thunderbolt: Use the actual buffer in tb_async_error()
>
> Miquel Raynal (1):
>       net: mac802154: Fix a condition in the receive path
>
> Neal Cardwell (1):
>       tcp: fix early ETIMEDOUT after spurious non-SACK RTO
>
> NeilBrown (1):
>       SUNRPC: use _bh spinlocking on ->transport_lock
>
> Niek Nooijens (1):
>       USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
>
> Pattara Teerapong (1):
>       ALSA: aloop: Fix random zeros in capture data when using jiffies
> timer
>
> Peter Robinson (1):
>       Input: rk805-pwrkey - fix module autoloading
>
> Rob Clark (1):
>       drm/msm/rd: Fix FIFO-full deadlock
>
> Shenwei Wang (1):
>       serial: fsl_lpuart: RS485 RTS polariy is inverse
>
> Siddh Raman Pant (1):
>       wifi: mac80211: Don't finalize CSA in IBSS mode if state is
> disconnected
>
> Slark Xiao (1):
>       USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
>
> Sreekanth Reddy (1):
>       scsi: mpt3sas: Fix use-after-free warning
>
> Stanislav Fomichev (1):
>       selftests/bpf: Fix test_align verifier log patterns
>
> Stanislaw Gruszka (1):
>       wifi: iwlegacy: 4965: corrected fix for potential off-by-one
> overflow in il4965_rs_fill_link_cmd()
>
> Takashi Iwai (2):
>       ALSA: seq: oss: Fix data-race for max_midi_devs access
>       ALSA: seq: Fix data-race at module auto-loading
>
> Tasos Sahanidis (1):
>       ALSA: emu10k1: Fix out of bounds access in
> snd_emu10k1_pcm_channel_alloc()
>
> Thierry GUIBERT (1):
>       USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
>
> Toke Høiland-Jørgensen (2):
>       sch_sfb: Don't assume the skb is still around after enqueueing to
> child
>       sch_sfb: Also store skb len before calling child enqueue
>
> Witold Lipieta (1):
>       usb-storage: Add ignore-residue quirk for NXP PN7462AU
>
> Yan Xinyu (1):
>       USB: serial: option: add support for OPPO R11 diag port
>
> Yang Ling (1):
>       MIPS: loongson32: ls1c: Fix hang during startup
>
> Yang Yingliang (1):
>       fbdev: chipsfb: Add missing pci_disable_device() in
> chipsfb_pci_init()
>
> Yee Lee (1):
>       Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
>
> Yonglin Tan (1):
>       USB: serial: option: add Quectel EM060K modem
>
> Zhenneng Li (1):
>       drm/radeon: add a force flush to delay work when radeon
>
>  arch/mips/loongson32/ls1c/board.c             |  1 -
>  arch/parisc/kernel/head.S                     | 43 ++++++++++++++++++++++-
>  arch/s390/include/asm/hugetlb.h               |  6 ++--
>  arch/s390/kernel/vmlinux.lds.S                |  1 +
>  debian.master/upstream-stable                 |  4 +--
>  drivers/android/binder.c                      | 12 +++++++
>  drivers/base/dd.c                             | 10 ++++++
>  drivers/clk/clk.c                             | 31 +++++++++++++++--
>  drivers/firmware/efi/capsule-loader.c         | 31 ++++-------------
>  drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c         |  3 +-
>  drivers/gpu/drm/i915/gvt/handlers.c           |  2 +-
>  drivers/gpu/drm/msm/dsi/dsi_cfg.c             |  2 +-
>  drivers/gpu/drm/msm/msm_rd.c                  |  3 ++
>  drivers/gpu/drm/radeon/radeon_device.c        |  3 ++
>  drivers/hid/intel-ish-hid/ishtp-hid.h         |  2 +-
>  drivers/hwmon/gpio-fan.c                      |  3 ++
>  drivers/input/misc/rk805-pwrkey.c             |  1 +
>  drivers/net/ethernet/broadcom/tg3.c           |  8 +++--
>  drivers/net/ethernet/intel/i40e/i40e_client.c |  5 ++-
>  drivers/net/ethernet/rocker/rocker_ofdpa.c    |  2 +-
>  drivers/net/ieee802154/cc2520.c               |  1 +
>  drivers/net/phy/dp83822.c                     |  4 +--
>  drivers/net/wireless/intel/iwlegacy/4965-rs.c |  5 +--
>  drivers/parisc/ccio-dma.c                     | 11 ++++--
>  drivers/platform/x86/acer-wmi.c               |  9 ++++-
>  drivers/platform/x86/pmc_atom.c               |  2 +-
>  drivers/scsi/mpt3sas/mpt3sas_scsih.c          |  2 +-
>  drivers/soc/bcm/brcmstb/pm/pm-arm.c           | 50
> +++++++++++++++++++++------
>  drivers/staging/rtl8712/rtl8712_cmd.c         | 36 -------------------
>  drivers/thunderbolt/ctl.c                     |  2 +-
>  drivers/tty/serial/fsl_lpuart.c               |  4 +--
>  drivers/tty/vt/vt.c                           | 12 ++++---
>  drivers/usb/class/cdc-acm.c                   |  3 ++
>  drivers/usb/core/hub.c                        | 10 ++++++
>  drivers/usb/dwc2/platform.c                   |  8 ++---
>  drivers/usb/dwc3/core.c                       | 20 +++++------
>  drivers/usb/gadget/function/storage_common.c  |  6 ++--
>  drivers/usb/host/xhci-hub.c                   | 11 ++++++
>  drivers/usb/host/xhci.c                       |  4 ++-
>  drivers/usb/host/xhci.h                       |  2 +-
>  drivers/usb/serial/ch341.c                    | 15 ++++++--
>  drivers/usb/serial/cp210x.c                   |  1 +
>  drivers/usb/serial/ftdi_sio.c                 |  2 ++
>  drivers/usb/serial/ftdi_sio_ids.h             |  6 ++++
>  drivers/usb/serial/option.c                   | 15 ++++++++
>  drivers/usb/storage/unusual_devs.h            |  7 ++++
>  drivers/video/fbdev/chipsfb.c                 |  1 +
>  fs/tracefs/inode.c                            | 31 ++++++++++++-----
>  include/linux/buffer_head.h                   | 11 ++++++
>  include/linux/platform_data/x86/pmc_atom.h    |  6 ++--
>  include/linux/usb.h                           |  2 ++
>  kernel/bpf/verifier.c                         |  1 +
>  kernel/kprobes.c                              |  1 +
>  mm/kmemleak.c                                 |  8 ++---
>  mm/mmap.c                                     |  9 +++--
>  net/bridge/br_netfilter_hooks.c               |  2 ++
>  net/bridge/br_netfilter_ipv6.c                |  1 +
>  net/ipv4/tcp_input.c                          | 29 +++++++++++-----
>  net/ipv6/seg6.c                               |  5 +++
>  net/kcm/kcmsock.c                             | 15 ++++----
>  net/mac80211/ibss.c                           |  4 +++
>  net/mac802154/rx.c                            |  2 +-
>  net/netfilter/nf_conntrack_irc.c              |  5 +--
>  net/sched/sch_sfb.c                           | 13 ++++---
>  net/sunrpc/xprt.c                             |  4 +--
>  net/tipc/monitor.c                            |  2 +-
>  net/wireless/debugfs.c                        |  3 +-
>  sound/core/seq/oss/seq_oss_midi.c             |  2 ++
>  sound/core/seq/seq_clientmgr.c                | 12 +++----
>  sound/drivers/aloop.c                         |  7 ++--
>  sound/pci/emu10k1/emupcm.c                    |  2 +-
>  sound/usb/stream.c                            |  2 +-
>  tools/testing/selftests/bpf/test_align.c      | 27 ++++++++-------
>  73 files changed, 431 insertions(+), 197 deletions(-)
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20221109/4f06de64/attachment-0001.html>


More information about the kernel-team mailing list