<div dir="ltr"><div>Applied to bionic/linux master-next</div><div> </div><div>One patch was skipped (netfilter: nf_conntrack_irc: Fix forged IP logic) as it was already included in commit 29b366360fab (Fix CVE-2022-2663 (netfilter: nf_conntrack_irc: Fix forged IP logic)).</div><div> </div><div>Thanks! </div><div> </div><div>- Luke </div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Oct 18, 2022 at 10:54 PM Kamal Mostafa <<a href="mailto:kamal@canonical.com">kamal@canonical.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">This pull request (75 commits) includes the following Bionic stable patchsets: Bionic update: upstream stable patchset 2022-10-18 Ported from the following upstream stable releases: v4.14.293, v4.19.258 v4.14.294, v4.19.259 <a href="https://bugs.launchpad.net/bugs/1993349" rel="noreferrer" target="_blank">https://bugs.launchpad.net/bugs/1993349</a> Note also that the 'stable-next' branch head contains this and all prior pending upstream stable releases, rebased to master-next: git://<a href="http://git.launchpad.net/~ubuntu-kernel-stable/+git/bionic" rel="noreferrer" target="_blank">git.launchpad.net/~ubuntu-kernel-stable/+git/bionic</a> stable-next -Kamal --- The following changes since commit 22f3392ae313d1fb50a0346dd0394408b886d65f: UBUNTU: Upstream stable to v4.14.292, v4.19.257 (2022-10-18 11:31:44 -0700) are available in the Git repository at: git://<a href="http://git.launchpad.net/~ubuntu-kernel-stable/+git/bionic" rel="noreferrer" target="_blank">git.launchpad.net/~ubuntu-kernel-stable/+git/bionic</a> tags/bionic-stable-2022-10-18 for you to fetch changes up to 158dde6d5d2901145e92660f462501d4f47acc30: UBUNTU: Upstream stable to v4.14.294, v4.19.259 (2022-10-18 12:25:12 -0700) ---------------------------------------------------------------- Alan Stern (1): USB: core: Prevent nested device-reset calls Andy Shevchenko (1): platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask Armin Wolf (1): hwmon: (gpio-fan) Fix array out of bounds access Brian Norris (1): tracefs: Only clobber mode/uid/gid on remount if asked Candice Li (1): drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. Carlos Llamas (1): binder: fix UAF of ref->proc caused by race condition Chen-Yu Tsai (2): clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops clk: core: Fix runtime PM sequence in clk_core_unprepare() Christian A. Ehrhardt (1): kprobes: Prohibit probes in gate area Colin Ian King (1): drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" Cong Wang (1): kcm: fix strp_init() order and cleanup Dan Carpenter (3): wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() staging: rtl8712: fix use after free bugs tipc: fix shift wrapping bug in map_get() David Leadbeater (1): netfilter: nf_conntrack_irc: Fix forged IP logic David Lebrun (1): ipv6: sr: fix out-of-bounds read when setting HMAC data. Dongxiang Ke (1): ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() Douglas Anderson (1): drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg Duoming Zhou (1): ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler Enguerrand de Ribaucourt (2): net: dp83822: disable false carrier interrupt net: dp83822: disable rx error interrupt Eric Dumazet (1): tcp: annotate data-race around challenge_timestamp Gerald Schaefer (1): s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages Hans de Goede (1): platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes Harsh Modi (1): netfilter: br_netfilter: Drop dst references before setting. Heiner Kallweit (1): usb: dwc2: fix wrong order of phy_power_on and phy_init Helge Deller (2): vt: Clear selection before changing the font parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines Hyunwoo Kim (1): efi: capsule-loader: Fix use-after-free in efi_capsule_write Isaac J. Manjarres (1): driver core: Don't probe devices after bus_type.match() probe deferral Ivan Vecera (1): i40e: Fix kernel crash during module removal Jann Horn (1): mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() Jason Wang (1): HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo Johan Hovold (4): USB: serial: cp210x: add Decagon UCA device id usb: dwc3: fix PHY disable sequence USB: serial: ch341: fix lost character on LCR updates USB: serial: ch341: fix disabled rx timer on older devices John Fastabend (1): bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() Josh Poimboeuf (1): s390: fix nospec table alignments Kai-Heng Feng (1): tg3: Disable tg3 device on system reboot to avoid triggering AER Kamal Mostafa (2): UBUNTU: Upstream stable to v4.14.293, v4.19.258 UBUNTU: Upstream stable to v4.14.294, v4.19.259 Krishna Kurapati (1): usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS Li Qiong (2): parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() ieee802154: cc2520: add rc code in cc2520_tx() Liang He (1): soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs Linus Torvalds (1): fs: only do a memory barrier for the first set_buffer_uptodate() Mathias Nyman (1): xhci: Add grace period after xHC start to prevent premature runtime suspend. Mika Westerberg (1): thunderbolt: Use the actual buffer in tb_async_error() Miquel Raynal (1): net: mac802154: Fix a condition in the receive path Neal Cardwell (1): tcp: fix early ETIMEDOUT after spurious non-SACK RTO NeilBrown (1): SUNRPC: use _bh spinlocking on ->transport_lock Niek Nooijens (1): USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id Pattara Teerapong (1): ALSA: aloop: Fix random zeros in capture data when using jiffies timer Peter Robinson (1): Input: rk805-pwrkey - fix module autoloading Rob Clark (1): drm/msm/rd: Fix FIFO-full deadlock Shenwei Wang (1): serial: fsl_lpuart: RS485 RTS polariy is inverse Siddh Raman Pant (1): wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected Slark Xiao (1): USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode Sreekanth Reddy (1): scsi: mpt3sas: Fix use-after-free warning Stanislav Fomichev (1): selftests/bpf: Fix test_align verifier log patterns Stanislaw Gruszka (1): wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() Takashi Iwai (2): ALSA: seq: oss: Fix data-race for max_midi_devs access ALSA: seq: Fix data-race at module auto-loading Tasos Sahanidis (1): ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() Thierry GUIBERT (1): USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) Toke Høiland-Jørgensen (2): sch_sfb: Don't assume the skb is still around after enqueueing to child sch_sfb: Also store skb len before calling child enqueue Witold Lipieta (1): usb-storage: Add ignore-residue quirk for NXP PN7462AU Yan Xinyu (1): USB: serial: option: add support for OPPO R11 diag port Yang Ling (1): MIPS: loongson32: ls1c: Fix hang during startup Yang Yingliang (1): fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() Yee Lee (1): Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" Yonglin Tan (1): USB: serial: option: add Quectel EM060K modem Zhenneng Li (1): drm/radeon: add a force flush to delay work when radeon arch/mips/loongson32/ls1c/board.c | 1 - arch/parisc/kernel/head.S | 43 ++++++++++++++++++++++- arch/s390/include/asm/hugetlb.h | 6 ++-- arch/s390/kernel/vmlinux.lds.S | 1 + debian.master/upstream-stable | 4 +-- drivers/android/binder.c | 12 +++++++ drivers/base/dd.c | 10 ++++++ drivers/clk/clk.c | 31 +++++++++++++++-- drivers/firmware/efi/capsule-loader.c | 31 ++++------------- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 3 +- drivers/gpu/drm/i915/gvt/handlers.c | 2 +- drivers/gpu/drm/msm/dsi/dsi_cfg.c | 2 +- drivers/gpu/drm/msm/msm_rd.c | 3 ++ drivers/gpu/drm/radeon/radeon_device.c | 3 ++ drivers/hid/intel-ish-hid/ishtp-hid.h | 2 +- drivers/hwmon/gpio-fan.c | 3 ++ drivers/input/misc/rk805-pwrkey.c | 1 + drivers/net/ethernet/broadcom/tg3.c | 8 +++-- drivers/net/ethernet/intel/i40e/i40e_client.c | 5 ++- drivers/net/ethernet/rocker/rocker_ofdpa.c | 2 +- drivers/net/ieee802154/cc2520.c | 1 + drivers/net/phy/dp83822.c | 4 +-- drivers/net/wireless/intel/iwlegacy/4965-rs.c | 5 +-- drivers/parisc/ccio-dma.c | 11 ++++-- drivers/platform/x86/acer-wmi.c | 9 ++++- drivers/platform/x86/pmc_atom.c | 2 +- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 2 +- drivers/soc/bcm/brcmstb/pm/pm-arm.c | 50 +++++++++++++++++++++------ drivers/staging/rtl8712/rtl8712_cmd.c | 36 ------------------- drivers/thunderbolt/ctl.c | 2 +- drivers/tty/serial/fsl_lpuart.c | 4 +-- drivers/tty/vt/vt.c | 12 ++++--- drivers/usb/class/cdc-acm.c | 3 ++ drivers/usb/core/hub.c | 10 ++++++ drivers/usb/dwc2/platform.c | 8 ++--- drivers/usb/dwc3/core.c | 20 +++++------ drivers/usb/gadget/function/storage_common.c | 6 ++-- drivers/usb/host/xhci-hub.c | 11 ++++++ drivers/usb/host/xhci.c | 4 ++- drivers/usb/host/xhci.h | 2 +- drivers/usb/serial/ch341.c | 15 ++++++-- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/ftdi_sio.c | 2 ++ drivers/usb/serial/ftdi_sio_ids.h | 6 ++++ drivers/usb/serial/option.c | 15 ++++++++ drivers/usb/storage/unusual_devs.h | 7 ++++ drivers/video/fbdev/chipsfb.c | 1 + fs/tracefs/inode.c | 31 ++++++++++++----- include/linux/buffer_head.h | 11 ++++++ include/linux/platform_data/x86/pmc_atom.h | 6 ++-- include/linux/usb.h | 2 ++ kernel/bpf/verifier.c | 1 + kernel/kprobes.c | 1 + mm/kmemleak.c | 8 ++--- mm/mmap.c | 9 +++-- net/bridge/br_netfilter_hooks.c | 2 ++ net/bridge/br_netfilter_ipv6.c | 1 + net/ipv4/tcp_input.c | 29 +++++++++++----- net/ipv6/seg6.c | 5 +++ net/kcm/kcmsock.c | 15 ++++---- net/mac80211/ibss.c | 4 +++ net/mac802154/rx.c | 2 +- net/netfilter/nf_conntrack_irc.c | 5 +-- net/sched/sch_sfb.c | 13 ++++--- net/sunrpc/xprt.c | 4 +-- net/tipc/monitor.c | 2 +- net/wireless/debugfs.c | 3 +- sound/core/seq/oss/seq_oss_midi.c | 2 ++ sound/core/seq/seq_clientmgr.c | 12 +++---- sound/drivers/aloop.c | 7 ++-- sound/pci/emu10k1/emupcm.c | 2 +- sound/usb/stream.c | 2 +- tools/testing/selftests/bpf/test_align.c | 27 ++++++++------- 73 files changed, 431 insertions(+), 197 deletions(-) -- kernel-team mailing list <a href="mailto:kernel-team@lists.ubuntu.com" target="_blank">kernel-team@lists.ubuntu.com</a> <a href="https://lists.ubuntu.com/mailman/listinfo/kernel-team" rel="noreferrer" target="_blank">https://lists.ubuntu.com/mailman/listinfo/kernel-team</a> </blockquote></div></div>