[SRU][Bionic][PULL] Bionic upstream stable patchset 2023-04-05

Kamal Mostafa kamal at canonical.com
Wed Apr 5 19:47:00 UTC 2023


This pull request (71 commits) includes the following Bionic stable
patchsets:

	Bionic update: upstream stable patchset 2023-04-05
		Ported from the following upstream stable releases:
			v4.14.306, v4.19.273
			v4.14.307, v4.19.274
			           v4.19.275
	https://bugs.launchpad.net/bugs/2015399

Note also that the 'stable-next' branch head contains this and all prior
pending upstream stable releases, rebased to master-next:

   git://git.launchpad.net/~ubuntu-kernel-stable/+git/bionic stable-next

 -Kamal

---

The following changes since commit 025d833de04de960c0900c71d4999dbf9bc9e137:

  media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (2023-03-28 11:46:00 +0200)

are available in the Git repository at:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/bionic tags/bionic-stable-2023-04-05

for you to fetch changes up to 9bcf246704b15a658a51ea79d1e580b16d6e6ade:

  UBUNTU: Upstream stable to v4.14.307, v4.19.275 (2023-04-05 12:23:21 -0700)

----------------------------------------------------------------
Alan Stern (1):
      net: USB: Fix wrong-direction WARNING in plusb.c

Alexander Egorenkov (2):
      watchdog: diag288_wdt: do not use stack buffers for hardware data
      watchdog: diag288_wdt: fix __diag288() inline assembly

Amit Engel (1):
      nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association

Andreas Kemnade (2):
      iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
      iio:adc:twl6030: Enable measurement of VAC

Andrew Morton (1):
      revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"

Ard Biesheuvel (1):
      efi: Accept version 2 of memory attributes table

Artemii Karasev (2):
      ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
      ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()

Bitterblue Smith (1):
      wifi: rtl8xxxu: gen2: Turn on the rate control

Bo Liu (1):
      ALSA: hda/conexant: add a new hda codec SN6180

Cristian Ciocaltea (1):
      net: stmmac: Restrict warning on disabling DMA store and fwd mode

Damien Le Moal (1):
      ata: libata: Fix sata_down_spd_limit() when no link speed is reported

Dan Carpenter (1):
      ALSA: pci: lx6464es: fix a debug loop

Dave Hansen (1):
      uaccess: Add speculation barrier to copy_from_user()

Dean Luick (1):
      IB/hfi1: Restore allocated resources on failed copyout

Dmitry Perchanov (1):
      iio: hid: fix the retval in accel_3d_capture_sample

Fedor Pchelkin (2):
      squashfs: harden sanity check in squashfs_read_xattr_id_table
      net: openvswitch: fix flow memory leak in ovs_flow_cmd_new

George Kennedy (1):
      vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF

Greg Kroah-Hartman (1):
      kvm: initialize all of the kvm_debugregs structure before sending it to userspace

Guillaume Nault (2):
      ipv6: Fix datagram socket connection with DSCP.
      ipv6: Fix tcp socket connection with DSCP.

Guo Ren (1):
      riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte

Heiner Kallweit (2):
      net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
      arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive

Helge Deller (2):
      parisc: Fix return code of pdc_iodc_print()
      parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case

Hyunwoo Kim (3):
      netrom: Fix use-after-free caused by accept on already connected socket
      net/x25: Fix to not accept on connected socket
      net/rose: Fix to not accept on connected socket

Ilpo Järvinen (2):
      serial: 8250_dma: Fix DMA Rx completion race
      serial: 8250_dma: Fix DMA Rx rearm race

Jason A. Donenfeld (1):
      random: always mix cycle counter in add_latent_entropy()

Jason Xing (1):
      i40e: add double of VLAN header when computing the max MTU

Jiasheng Jiang (1):
      dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size

Joel Stanley (1):
      pinctrl: aspeed: Fix confusing types in return value

Josef Bacik (1):
      btrfs: limit device extents to the device size

Kamal Mostafa (2):
      UBUNTU: Upstream stable to v4.14.306, v4.19.273
      UBUNTU: Upstream stable to v4.14.307, v4.19.275

Kuniyuki Iwashima (1):
      dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.

Linus Torvalds (1):
      bpf: add missing header file include

Longlong Xia (1):
      mm/swapfile: add cond_resched() in get_swap_pages()

Lukas Wunner (1):
      wifi: mwifiex: Add missing compatible string for SD8787

Mark Pearson (1):
      usb: core: add quirk for Alcor Link AK9563 smartcard reader

Maurizio Lombardi (1):
      scsi: target: core: Fix warning on RT kernels

Maxim Korotkov (1):
      pinctrl: single: fix potential NULL dereference

Mike Christie (1):
      scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress

Mike Kravetz (3):
      mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
      migrate: hugetlb: check for hugetlb shared PMD in node migration
      hugetlb: check for undefined shift on 32 bit architectures

Miko Larsson (1):
      net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path

Natalia Petrova (1):
      i40e: Add checking for null for nlmsg_find_attr()

Phillip Lougher (1):
      Squashfs: fix handling and sanity checking of xattr_ids count

Rafał Miłecki (1):
      net: bgmac: fix BCM5358 support by setting correct flags

Ryusuke Konishi (1):
      nilfs2: fix underflow in second superblock position calculations

Samuel Thibault (1):
      fbcon: Check font dimension limits

Sean Anderson (2):
      powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
      powerpc: dts: t208x: Disable 10G on MAC1 and MAC2

Seth Jenkins (1):
      aio: fix mremap after fork null-deref

Shunsuke Mie (1):
      tools/virtio: fix the vringh test for virtio ring changes

Srinivas Pandruvada (1):
      thermal: intel: int340x: Protect trip temperature from concurrent updates

Takashi Sakamoto (1):
      firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region

Thomas Gleixner (1):
      alarmtimer: Prevent starvation by small intervals and SIG_IGN

Thomas Weißschuh (1):
      vc_screen: don't clobber return value in vcs_read

Udipto Goswami (1):
      usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait

Xin Long (1):
      sctp: do not check hb_timer.expires when resetting hb_timer

Xiongfeng Wang (1):
      iio: adc: berlin2-adc: Add missing of_node_put() in error path

Yang Yingliang (1):
      mmc: sdio: fix possible resource leaks in some error paths

Yuan Can (1):
      bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()

 arch/arm64/boot/dts/amlogic/meson-gx.dtsi          |  6 +--
 arch/parisc/kernel/firmware.c                      |  5 ++-
 arch/parisc/kernel/ptrace.c                        | 15 +++++++-
 arch/powerpc/boot/dts/fsl/qoriq-fman3-0-10g-2.dtsi | 44 ++++++++++++++++++++++
 arch/powerpc/boot/dts/fsl/qoriq-fman3-0-10g-3.dtsi | 44 ++++++++++++++++++++++
 arch/powerpc/boot/dts/fsl/t2081si-post.dtsi        | 20 +++++++++-
 arch/riscv/mm/cacheflush.c                         |  4 +-
 arch/x86/kvm/x86.c                                 |  3 +-
 debian.master/upstream-stable                      |  4 +-
 drivers/ata/libata-core.c                          |  2 +-
 drivers/bus/sunxi-rsb.c                            |  8 +++-
 drivers/dma/sh/rcar-dmac.c                         |  5 ++-
 drivers/firewire/core-cdev.c                       |  4 +-
 drivers/firmware/efi/memattr.c                     |  2 +-
 drivers/iio/accel/hid-sensor-accel-3d.c            |  1 +
 drivers/iio/adc/berlin2-adc.c                      |  4 +-
 drivers/iio/adc/twl6030-gpadc.c                    | 32 ++++++++++++++++
 drivers/infiniband/hw/hfi1/file_ops.c              |  7 +++-
 drivers/mmc/core/sdio_bus.c                        | 17 +++++++--
 drivers/mmc/core/sdio_cis.c                        | 12 ------
 drivers/net/ethernet/broadcom/bgmac-bcma.c         |  6 +--
 drivers/net/ethernet/intel/i40e/i40e_main.c        |  4 +-
 .../net/ethernet/stmicro/stmmac/stmmac_platform.c  |  2 +-
 drivers/net/phy/meson-gxl.c                        |  2 +
 drivers/net/usb/kalmia.c                           |  8 ++--
 drivers/net/usb/plusb.c                            |  4 +-
 drivers/net/wireless/marvell/mwifiex/sdio.c        |  1 +
 .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c  |  8 +---
 drivers/nvme/target/fc.c                           |  4 +-
 drivers/pinctrl/aspeed/pinctrl-aspeed.c            |  2 +-
 drivers/pinctrl/pinctrl-single.c                   |  2 +
 drivers/scsi/iscsi_tcp.c                           |  9 +++--
 drivers/target/target_core_tmr.c                   |  4 +-
 .../thermal/int340x_thermal/int340x_thermal_zone.c | 18 +++++++--
 .../thermal/int340x_thermal/int340x_thermal_zone.h |  1 +
 drivers/tty/serial/8250/8250_dma.c                 | 26 +++++++++++--
 drivers/tty/vt/vc_screen.c                         | 10 +++--
 drivers/usb/core/quirks.c                          |  3 ++
 drivers/usb/gadget/function/f_fs.c                 |  4 +-
 drivers/video/fbdev/core/fbcon.c                   |  7 +++-
 drivers/watchdog/diag288_wdt.c                     | 15 ++++++--
 fs/aio.c                                           |  4 ++
 fs/btrfs/volumes.c                                 |  6 ++-
 fs/nilfs2/ioctl.c                                  |  7 ++++
 fs/nilfs2/super.c                                  |  9 +++++
 fs/nilfs2/the_nilfs.c                              |  8 +++-
 fs/proc/task_mmu.c                                 |  4 +-
 fs/squashfs/squashfs_fs.h                          |  2 +-
 fs/squashfs/squashfs_fs_sb.h                       |  2 +-
 fs/squashfs/xattr.h                                |  4 +-
 fs/squashfs/xattr_id.c                             |  2 +-
 include/linux/hugetlb.h                            | 18 ++++++++-
 include/linux/nospec.h                             |  4 ++
 include/linux/random.h                             |  6 +--
 include/net/sock.h                                 | 13 +++++++
 kernel/bpf/core.c                                  |  1 +
 kernel/time/alarmtimer.c                           | 33 ++++++++++++++--
 lib/usercopy.c                                     |  7 ++++
 mm/mempolicy.c                                     |  3 +-
 mm/swapfile.c                                      |  1 +
 net/dccp/ipv6.c                                    |  7 +---
 net/ipv6/datagram.c                                |  2 +-
 net/ipv6/tcp_ipv6.c                                | 11 ++----
 net/netrom/af_netrom.c                             |  5 +++
 net/openvswitch/datapath.c                         | 12 +++---
 net/rose/af_rose.c                                 |  8 ++++
 net/sctp/transport.c                               |  4 +-
 net/x25/af_x25.c                                   |  6 +++
 sound/pci/hda/patch_conexant.c                     |  1 +
 sound/pci/hda/patch_via.c                          |  3 ++
 sound/pci/lx6464es/lx_core.c                       | 11 +++---
 sound/synth/emux/emux_nrpn.c                       |  3 ++
 tools/virtio/linux/bug.h                           |  8 ++--
 tools/virtio/linux/build_bug.h                     |  7 ++++
 tools/virtio/linux/cpumask.h                       |  7 ++++
 tools/virtio/linux/gfp.h                           |  7 ++++
 tools/virtio/linux/kernel.h                        |  1 +
 tools/virtio/linux/kmsan.h                         | 12 ++++++
 tools/virtio/linux/scatterlist.h                   |  1 +
 tools/virtio/linux/topology.h                      |  7 ++++
 80 files changed, 506 insertions(+), 130 deletions(-)
 create mode 100644 arch/powerpc/boot/dts/fsl/qoriq-fman3-0-10g-2.dtsi
 create mode 100644 arch/powerpc/boot/dts/fsl/qoriq-fman3-0-10g-3.dtsi
 create mode 100644 tools/virtio/linux/build_bug.h
 create mode 100644 tools/virtio/linux/cpumask.h
 create mode 100644 tools/virtio/linux/gfp.h
 create mode 100644 tools/virtio/linux/kmsan.h
 create mode 100644 tools/virtio/linux/topology.h



More information about the kernel-team mailing list