[ubuntu/focal-security] linux-iot 5.4.0-1004.6 (Accepted)
Andy Whitcroft
apw at canonical.com
Thu Sep 29 08:57:52 UTC 2022
linux-iot (5.4.0-1004.6) focal; urgency=medium
* focal/linux-iot: 5.4.0-1004.6 -proposed tracker (LP: #1987805)
[ Ubuntu: 5.4.0-126.142 ]
* focal/linux: 5.4.0-126.142 -proposed tracker (LP: #1987819)
* [SRU] fnic driver on needs to be updated to 1.6.0.53 on Focal (LP: #1984011)
- scsi: fnic: Change shost_printk() to FNIC_FCS_DBG()
- scsi: fnic: Avoid looping in TRANS ETH on unload
- scsi: fnic: Change shost_printk() to FNIC_MAIN_DBG()
- scsi: fnic: Set scsi_set_resid() only for underflow
- scsi: fnic: Validate io_req before others
* Focal update: v5.4.203 upstream stable release (LP: #1986999)
- drm: remove drm_fb_helper_modinit
- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete
- kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
- net: mscc: ocelot: allow unregistered IP multicast flooding
- ARM: 8989/1: use .fpu assembler directives instead of assembler arguments
- ARM: 8990/1: use VFP assembler mnemonics in register load/store macros
- ARM: 8971/1: replace the sole use of a symbol with its definition
- crypto: arm/sha256-neon - avoid ADRL pseudo instruction
- crypto: arm/sha512-neon - avoid ADRL pseudo instruction
- ARM: 8933/1: replace Sun/Solaris style flag on section directive
- ARM: 8929/1: use APSR_nzcv instead of r15 as mrc operand
- ARM: OMAP2+: drop unnecessary adrl
- ARM: 9029/1: Make iwmmxt.S support Clang's integrated assembler
- crypto: arm - use Kconfig based compiler checks for crypto opcodes
- crypto: arm/ghash-ce - define fpu before fpu registers are referenced
- Linux 5.4.203
* Focal update: v5.4.202 upstream stable release (LP: #1986995)
- random: schedule mix_interrupt_randomness() less often
- ALSA: hda/via: Fix missing beep setup
- ALSA: hda/conexant: Fix missing beep setup
- ALSA: hda/realtek - ALC897 headset MIC no sound
- ALSA: hda/realtek: Add quirk for Clevo PD70PNT
- net: openvswitch: fix parsing of nw_proto for IPv6 fragments
- mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
- ata: libata: add qc->flags in ata_qc_complete_template tracepoint
- dm era: commit metadata in postsuspend after worker stops
- dm mirror log: clear log bits up to BITS_PER_LONG boundary
- random: quiet urandom warning ratelimit suppression message
- USB: serial: option: add Telit LE910Cx 0x1250 composition
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: option: add Quectel RM500K module support
- bpf: Fix request_sock leak in sk lookup helpers
- phy: aquantia: Fix AN when higher speeds than 1G are not advertised
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
- net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
- drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf
- erspan: do not assume transport header is always set
- net/tls: fix tls_sk_proto_close executed repeatedly
- udmabuf: add back sanity check
- x86/xen: Remove undefined behavior in setup_features()
- MIPS: Remove repetitive increase irq_err_count
- afs: Fix dynamic root getattr
- ice: ethtool: advertise 1000M speeds properly
- regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
- igb: Make DMA faster when CPU is active on the PCIe link
- virtio_net: fix xdp_rxq_info bug after suspend/resume
- Revert "net/tls: fix tls_sk_proto_close executed repeatedly"
- gpio: winbond: Fix error code in winbond_gpio_get()
- s390/cpumf: Handle events cycles and instructions identical
- iio: adc: vf610: fix conversion mode sysfs node name
- xhci: turn off port power in shutdown
- usb: chipidea: udc: check request status before setting device address
- iio:chemical:ccs811: rearrange iio trigger get and register
- iio:accel:bma180: rearrange iio trigger get and register
- iio:accel:mxc4005: rearrange iio trigger get and register
- iio: accel: mma8452: ignore the return value of reset operation
- iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
- iio: trigger: sysfs: fix use-after-free on remove
- iio: adc: stm32: fix maximum clock rate for stm32mp15x
- iio: adc: axp288: Override TS pin bias current for some models
- xtensa: xtfpga: Fix refcount leak bug in setup
- xtensa: Fix refcount leak bug in time.c
- parisc: Enable ARCH_HAS_STRICT_MODULE_RWX
- powerpc: Enable execve syscall exit tracepoint
- powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
- powerpc/powernv: wire up rng during setup_arch
- ARM: dts: imx6qdl: correct PU regulator ramp delay
- ARM: exynos: Fix refcount leak in exynos_map_pmu
- soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
- ARM: Fix refcount leak in axxia_boot_secondary
- ARM: cns3xxx: Fix refcount leak in cns3xxx_init
- modpost: fix section mismatch check for exported init/exit sections
- random: update comment from copy_to_user() -> copy_to_iter()
- kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)
- powerpc/pseries: wire up rng during setup_arch()
- Linux 5.4.202
* Focal update: v5.4.201 upstream stable release (LP: #1986993)
- dm: remove special-casing of bio-based immutable singleton target on NVMe
- usb: gadget: u_ether: fix regression in setting fixed MAC address
- tcp: add some entropy in __inet_hash_connect()
- tcp: use different parts of the port_offset for index and offset
- tcp: add small random increments to the source port
- tcp: dynamically allocate the perturb table used by source ports
- tcp: increase source port perturb table to 2^16
- tcp: drop the hash_32() part from the index calculation
- arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
- Linux 5.4.201
* Focal update: v5.4.200 upstream stable release (LP: #1983152)
- Revert "UBUNTU: SAUCE: random: Make getrandom() ready earlier"
- 9p: missing chunk of "fs/9p: Don't update file type when updating file
attributes"
- bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()
- nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION
- crypto: blake2s - generic C library implementation and selftest
- lib/crypto: blake2s: move hmac construction into wireguard
- lib/crypto: sha1: re-roll loops to reduce code size
- compat_ioctl: remove /dev/random commands
- random: don't forget compat_ioctl on urandom
- random: Don't wake crng_init_wait when crng_init == 1
- random: Add a urandom_read_nowait() for random APIs that don't warn
- random: add GRND_INSECURE to return best-effort non-cryptographic bytes
- random: ignore GRND_RANDOM in getentropy(2)
- random: make /dev/random be almost like /dev/urandom
- random: remove the blocking pool
- random: delete code to pull data into pools
- random: remove kernel.random.read_wakeup_threshold
- random: remove unnecessary unlikely()
- random: convert to ENTROPY_BITS for better code readability
- random: Add and use pr_fmt()
- random: fix typo in add_timer_randomness()
- random: remove some dead code of poolinfo
- random: split primary/secondary crng init paths
- random: avoid warnings for !CONFIG_NUMA builds
- x86: Remove arch_has_random, arch_has_random_seed
- powerpc: Remove arch_has_random, arch_has_random_seed
- s390: Remove arch_has_random, arch_has_random_seed
- linux/random.h: Remove arch_has_random, arch_has_random_seed
- linux/random.h: Use false with bool
- linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
- powerpc: Use bool in archrandom.h
- random: add arch_get_random_*long_early()
- random: avoid arch_get_random_seed_long() when collecting IRQ randomness
- random: remove dead code left over from blocking pool
- MAINTAINERS: co-maintain random.c
- crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
- crypto: blake2s - adjust include guard naming
- random: document add_hwgenerator_randomness() with other input functions
- random: remove unused irq_flags argument from add_interrupt_randomness()
- random: use BLAKE2s instead of SHA1 in extraction
- random: do not sign extend bytes for rotation when mixing
- random: do not re-init if crng_reseed completes before primary init
- random: mix bootloader randomness into pool
- random: harmonize "crng init done" messages
- random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
- random: initialize ChaCha20 constants with correct endianness
- random: early initialization of ChaCha constants
- random: avoid superfluous call to RDRAND in CRNG extraction
- random: don't reset crng_init_cnt on urandom_read()
- random: fix typo in comments
- random: cleanup poolinfo abstraction
- random: cleanup integer types
- random: remove incomplete last_data logic
- random: remove unused extract_entropy() reserved argument
- random: rather than entropy_store abstraction, use global
- random: remove unused OUTPUT_POOL constants
- random: de-duplicate INPUT_POOL constants
- random: prepend remaining pool constants with POOL_
- random: cleanup fractional entropy shift constants
- random: access input_pool_data directly rather than through pointer
- random: selectively clang-format where it makes sense
- random: simplify arithmetic function flow in account()
- random: continually use hwgenerator randomness
- random: access primary_pool directly rather than through pointer
- random: only call crng_finalize_init() for primary_crng
- random: use computational hash for entropy extraction
- random: simplify entropy debiting
- random: use linear min-entropy accumulation crediting
- random: always wake up entropy writers after extraction
- random: make credit_entropy_bits() always safe
- random: remove use_input_pool parameter from crng_reseed()
- random: remove batched entropy locking
- random: fix locking in crng_fast_load()
- random: use RDSEED instead of RDRAND in entropy extraction
- random: get rid of secondary crngs
- random: inline leaves of rand_initialize()
- random: ensure early RDSEED goes through mixer on init
- random: do not xor RDRAND when writing into /dev/random
- random: absorb fast pool into input pool after fast load
- random: use simpler fast key erasure flow on per-cpu keys
- random: use hash function for crng_slow_load()
- random: make more consistent use of integer types
- random: remove outdated INT_MAX >> 6 check in urandom_read()
- random: zero buffer after reading entropy from userspace
- random: fix locking for crng_init in crng_reseed()
- random: tie batched entropy generation to base_crng generation
- random: remove ifdef'd out interrupt bench
- random: remove unused tracepoints
- random: add proper SPDX header
- random: deobfuscate irq u32/u64 contributions
- random: introduce drain_entropy() helper to declutter crng_reseed()
- random: remove useless header comment
- random: remove whitespace and reorder includes
- random: group initialization wait functions
- random: group crng functions
- random: group entropy extraction functions
- random: group entropy collection functions
- random: group userspace read/write functions
- random: group sysctl functions
- random: rewrite header introductory comment
- random: defer fast pool mixing to worker
- random: do not take pool spinlock at boot
- random: unify early init crng load accounting
- random: check for crng_init == 0 in add_device_randomness()
- random: pull add_hwgenerator_randomness() declaration into random.h
- random: clear fast pool, crng, and batches in cpuhp bring up
- random: round-robin registers as ulong, not u32
- random: only wake up writers after zap if threshold was passed
- random: cleanup UUID handling
- random: unify cycles_t and jiffies usage and types
- random: do crng pre-init loading in worker rather than irq
- random: give sysctl_random_min_urandom_seed a more sensible value
- random: don't let 644 read-only sysctls be written to
- random: replace custom notifier chain with standard one
- random: use SipHash as interrupt entropy accumulator
- random: make consistent usage of crng_ready()
- random: reseed more often immediately after booting
- random: check for signal and try earlier when generating entropy
- random: skip fast_init if hwrng provides large chunk of entropy
- random: treat bootloader trust toggle the same way as cpu trust toggle
- random: re-add removed comment about get_random_{u32,u64} reseeding
- random: mix build-time latent entropy into pool at init
- random: do not split fast init input in add_hwgenerator_randomness()
- random: do not allow user to keep crng key around on stack
- random: check for signal_pending() outside of need_resched() check
- random: check for signals every PAGE_SIZE chunk of /dev/[u]random
- random: allow partial reads if later user copies fail
- random: make random_get_entropy() return an unsigned long
- random: document crng_fast_key_erasure() destination possibility
- random: fix sysctl documentation nits
- init: call time_init() before rand_initialize()
- ia64: define get_cycles macro for arch-override
- s390: define get_cycles macro for arch-override
- parisc: define get_cycles macro for arch-override
- alpha: define get_cycles macro for arch-override
- powerpc: define get_cycles macro for arch-override
- timekeeping: Add raw clock fallback for random_get_entropy()
- m68k: use fallback for random_get_entropy() instead of zero
- mips: use fallback for random_get_entropy() instead of just c0 random
- arm: use fallback for random_get_entropy() instead of zero
- nios2: use fallback for random_get_entropy() instead of zero
- x86/tsc: Use fallback for random_get_entropy() instead of zero
- um: use fallback for random_get_entropy() instead of zero
- sparc: use fallback for random_get_entropy() instead of zero
- xtensa: use fallback for random_get_entropy() instead of zero
- random: insist on random_get_entropy() existing in order to simplify
- random: do not use batches when !crng_ready()
- random: use first 128 bits of input as fast init
- random: do not pretend to handle premature next security model
- random: order timer entropy functions below interrupt functions
- random: do not use input pool from hard IRQs
- random: help compiler out with fast_mix() by using simpler arguments
- siphash: use one source of truth for siphash permutations
- random: use symbolic constants for crng_init states
- random: avoid initializing twice in credit race
- random: move initialization out of reseeding hot path
- random: remove ratelimiting for in-kernel unseeded randomness
- random: use proper jiffies comparison macro
- random: handle latent entropy and command line from random_init()
- random: credit architectural init the exact amount
- random: use static branch for crng_ready()
- random: remove extern from functions in header
- random: use proper return types on get_random_{int,long}_wait()
- random: make consistent use of buf and len
- random: move initialization functions out of hot pages
- random: move randomize_page() into mm where it belongs
- random: unify batched entropy implementations
- random: convert to using fops->read_iter()
- random: convert to using fops->write_iter()
- random: wire up fops->splice_{read,write}_iter()
- random: check for signals after page of pool writes
- Revert "random: use static branch for crng_ready()"
- crypto: drbg - always seeded with SP800-90B compliant noise source
- crypto: drbg - prepare for more fine-grained tracking of seeding state
- crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
- crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
- crypto: drbg - always try to free Jitter RNG instance
- crypto: drbg - make reseeding from get_random_bytes() synchronous
- random: avoid checking crng_ready() twice in random_init()
- random: mark bootloader randomness code as __init
- random: account for arch randomness in bits
- powerpc/kasan: Silence KASAN warnings in __get_wchan()
- ASoC: nau8822: Add operation for internal PLL off and on
- dma-debug: make things less spammy under memory pressure
- ASoC: cs42l52: Fix TLV scales for mixer controls
- ASoC: cs35l36: Update digital volume TLV
- ASoC: cs53l30: Correct number of volume levels on SX controls
- ASoC: cs42l52: Correct TLV for Bypass Volume
- ASoC: cs42l56: Correct typo in minimum level for SX volume controls
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
- ASoC: wm8962: Fix suspend while playing music
- ASoC: es8328: Fix event generation for deemphasis control
- ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
- scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
- scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
- scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd
completion
- scsi: ipr: Fix missing/incorrect resource cleanup in error case
- scsi: pmcraid: Fix missing resource cleanup in error case
- ALSA: hda/realtek - Add HW8326 support
- virtio-mmio: fix missing put_device() when vm_cmdline_parent registration
failed
- nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
- ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
- net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface
netdev[napi]_alloc_frag
- random: credit cpu and bootloader seeds by default
- pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
- clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
- i40e: Fix adding ADQ filter to TC0
- i40e: Fix calculating the number of queue pairs
- i40e: Fix call trace in setup_tx_descriptors
- tty: goldfish: Fix free_irq() on remove
- misc: atmel-ssc: Fix IRQ check in ssc_probe
- mlxsw: spectrum_cnt: Reorder counter pools
- net: bgmac: Fix an erroneous kfree() in bgmac_remove()
- arm64: ftrace: fix branch range checks
- certs/blacklist_hashes.c: fix const confusion in certs blacklist
- faddr2line: Fix overlapping text section failures, the sequel
- irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
- irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions
- irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
- i2c: designware: Use standard optional ref clock implementation
- comedi: vmk80xx: fix expression for tx buffer size
- USB: serial: option: add support for Cinterion MV31 with new baseline
- USB: serial: io_ti: add Agilent E5805A support
- usb: dwc2: Fix memory leak in dwc2_hcd_init
- usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
- serial: 8250: Store to lsr_save_flags after lsr read
- dm mirror log: round up region bitmap size to BITS_PER_LONG
- ext4: fix bug_on ext4_mb_use_inode_pa
- ext4: make variable "count" signed
- ext4: add reserved GDT blocks check
- ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine
- virtio-pci: Remove wrong address verification in vp_del_vqs()
- net/sched: act_police: more accurate MTU policing
- net: openvswitch: fix leak of nested actions
- arm64: kprobes: Use BRK instead of single-step when executing instructions
out-of-line
- RISC-V: fix barrier() use in <vdso/processor.h>
- riscv: Less inefficient gcc tishift helpers (and export their symbols)
- powerpc/mm: Switch obsolete dssall to .long
- Linux 5.4.200
* Focal update: v5.4.199 upstream stable release (LP: #1983150)
- Linux 5.4.199
* Focal update: v5.4.198 upstream stable release (LP: #1982409)
- binfmt_flat: do not stop relocating GOT entries prematurely on riscv
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
- USB: serial: option: add Quectel BG95 modem
- USB: new quirk for Dell Gen 2 devices
- perf/x86/intel: Fix event constraints for ICL
- ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
- ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
- ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
- btrfs: add "0x" prefix for unsupported optional features
- btrfs: repair super block num_devices automatically
- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
- b43legacy: Fix assigning negative value to unsigned variable
- b43: Fix assigning negative value to unsigned variable
- ipw2x00: Fix potential NULL dereference in libipw_xmit()
- ipv6: fix locking issues with loops over idev->addr_list
- fbcon: Consistently protect deferred_takeover with console_lock()
- ACPICA: Avoid cache flush inside virtual machines
- drm/komeda: return early if drm_universal_plane_init() fails.
- ALSA: jack: Access input_dev under mutex
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA
direction
- tools/power turbostat: fix ICX DRAM power numbers
- drm/amd/pm: fix double free in si_parse_power_table()
- ath9k: fix QCA9561 PA bias level
- media: venus: hfi: avoid null dereference in deinit
- media: pci: cx23885: Fix the error handling in cx23885_initdev()
- media: cx25821: Fix the warning when removing the module
- md/bitmap: don't set sb values if can't pass sanity check
- mmc: jz4740: Apply DMA engine limits to maximum segment size
- scsi: megaraid: Fix error check return value of register_chrdev()
- drm/plane: Move range check for format_count earlier
- drm/amd/pm: fix the compile warning
- arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
- drm: msm: fix error check return value of irq_of_parse_and_map()
- ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
- net/mlx5: fs, delete the FTE when there are no rules attached to it
- ASoC: dapm: Don't fold register value changes into notifications
- mlxsw: spectrum_dcb: Do not warn about priority changes
- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver
- s390/preempt: disable __preempt_count_add() optimization for
PROFILE_ALL_BRANCHES
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode
- dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
- ipmi:ssif: Check for NULL msg when handling events and messages
- ipmi: Fix pr_fmt to avoid compilation issues
- rtlwifi: Use pr_warn instead of WARN_ONCE
- media: coda: limit frame interval enumeration to supported encoder frame
sizes
- media: cec-adap.c: fix is_configuring state
- openrisc: start CPU timer early in boot
- nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
- ASoC: rt5645: Fix errorenous cleanup order
- nbd: Fix hung on disconnect request if socket is closed before
- net: phy: micrel: Allow probing without .driver_data
- media: exynos4-is: Fix compile warning
- ASoC: max98357a: remove dependency on GPIOLIB
- rxrpc: Return an error to sendmsg if call failed
- eth: tg3: silence the GCC 12 array-bounds warning
- selftests/bpf: fix btf_dump/btf_dump due to recent clang change
- IB/rdmavt: add missing locks in rvt_ruc_loopback
- ARM: dts: ox820: align interrupt controller node name with dtschema
- PM / devfreq: rk3399_dmc: Disable edev on remove()
- fs: jfs: fix possible NULL pointer dereference in dbFree()
- ARM: OMAP1: clock: Fix UART rate reporting algorithm
- powerpc/fadump: Fix fadump to work with a different endian capture kernel
- fat: add ratelimit to fat*_ent_bread()
- ARM: versatile: Add missing of_node_put in dcscb_init
- ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
- ARM: hisi: Add missing of_node_put after of_find_compatible_node
- PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
- powerpc/xics: fix refcount leak in icp_opal_init()
- powerpc/powernv: fix missing of_node_put in uv_init()
- macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
- powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
- RDMA/hfi1: Prevent panic when SDMA is disabled
- drm: fix EDID struct for old ARM OABI format
- ath9k: fix ar9003_get_eepmisc
- drm/edid: fix invalid EDID extension block filtering
- drm/bridge: adv7511: clean up CEC adapter when probe fails
- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
- x86/delay: Fix the wrong asm constraint in delay_loop()
- drm/mediatek: Fix mtk_cec_mask()
- drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
- drm/vc4: txp: Force alpha to be 0xff if it's disabled
- bpf: Fix excessive memory allocation in stack_map_alloc()
- nl80211: show SSID for P2P_GO interfaces
- drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
- drm: mali-dp: potential dereference of null pointer
- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
- NFC: NULL out the dev->rfkill to prevent UAF
- efi: Add missing prototype for efi_capsule_setup_info
- drbd: fix duplicate array initializer
- HID: hid-led: fix maximum brightness for Dream Cheeky
- HID: elan: Fix potential double free in elan_input_configured
- drm/bridge: Fix error handling in analogix_dp_probe
- sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
- spi: img-spfi: Fix pm_runtime_get_sync() error checking
- cpufreq: Fix possible race in cpufreq online error path
- ath9k_htc: fix potential out of bounds access with invalid
rxstatus->rs_keyix
- inotify: show inotify mask flags in proc fdinfo
- fsnotify: fix wrong lockdep annotations
- of: overlay: do not break notify on NOTIFY_{OK|STOP}
- scsi: ufs: core: Exclude UECxx from SFR dump list
- x86/pm: Fix false positive kmemleak report in msr_build_context()
- x86/speculation: Add missing prototype for unpriv_ebpf_notify()
- ASoC: rk3328: fix disabling mclk on pclk probe failure
- perf tools: Add missing headers needed by util/data.h
- drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free
during pm runtime resume
- drm/msm/dsi: fix error checks and return values for DSI xmit functions
- drm/msm/hdmi: check return value after calling
platform_get_resource_byname()
- drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
- virtio_blk: fix the discard_granularity and discard_alignment queue limits
- x86: Fix return value of __setup handlers
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
- x86/mm: Cleanup the control_va_addr_alignment() __setup handler
- regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
- drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is
detected
- drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is
detected
- drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
- media: uvcvideo: Fix missing check to determine if element is found in list
- iomap: iomap_write_failed fix
- Revert "cpufreq: Fix possible race in cpufreq online error path"
- perf/amd/ibs: Use interrupt regs ip for stack unwinding
- ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
- scripts/faddr2line: Fix overlapping text section failures
- media: aspeed: Fix an error handling path in aspeed_video_probe()
- media: st-delta: Fix PM disable depth imbalance in delta_probe
- media: exynos4-is: Change clk_disable to clk_disable_unprepare
- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
- media: vsp1: Fix offset calculation for plane cropping
- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
- m68k: math-emu: Fix dependencies of math emulation support
- sctp: read sk->sk_bound_dev_if once in sctp_rcv()
- media: ov7670: remove ov7670_power_off from ov7670_remove
- ext4: reject the 'commit' option on ext2 filesystems
- drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
- thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
- ASoC: wm2000: fix missing clk_disable_unprepare() on error in
wm2000_anc_transition()
- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
- rxrpc: Fix listen() setting the bar too high for the prealloc rings
- rxrpc: Don't try to resend the request if we're receiving the reply
- rxrpc: Fix overlapping ACK accounting
- rxrpc: Don't let ack.previousPacket regress
- rxrpc: Fix decision on when to generate an IDLE ACK
- net/smc: postpone sk_refcnt increment in connect()
- arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
- ARM: dts: suniv: F1C100: fix watchdog compatible
- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
- PCI: cadence: Fix find_first_zero_bit() limit
- PCI: rockchip: Fix find_first_zero_bit() limit
- KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
- can: xilinx_can: mark bit timing constants as const
- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
- ARM: dts: bcm2835-rpi-b: Fix GPIO line names
- misc: ocxl: fix possible double free in ocxl_file_register_afu
- crypto: marvell/cesa - ECB does not IV
- arm: mediatek: select arch timer for mt7629
- powerpc/fadump: fix PT_LOAD segment for boot memory area
- mfd: ipaq-micro: Fix error check return value of platform_get_irq()
- scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
- firmware: arm_scmi: Fix list protocols enumeration in the base protocol
- nvdimm: Allow overwrite in the presence of disabled dimms
- pinctrl: mvebu: Fix irq_of_parse_and_map() return value
- drivers/base/node.c: fix compaction sysfs file leak
- dax: fix cache flush on PMD-mapped pages
- powerpc/8xx: export 'cpm_setbrg' for modules
- powerpc/idle: Fix return value of __setup() handler
- powerpc/4xx/cpm: Fix return value of __setup() handler
- proc: fix dentry/inode overinstantiating under /proc/${pid}/net
- ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
- PCI: imx6: Fix PERST# start-up sequence
- tty: fix deadlock caused by calling printk() under tty_port->lock
- crypto: cryptd - Protect per-CPU resource by disabling BH.
- Input: sparcspkr - fix refcount leak in bbc_beep_probe
- powerpc/64: Only WARN if __pa()/__va() called with bad addresses
- powerpc/perf: Fix the threshold compare group constraint for power9
- macintosh: via-pmu and via-cuda need RTC_LIB
- powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
- mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
- mailbox: forward the hrtimer if not queued and under a lock
- RDMA/hfi1: Prevent use of lock before it is initialized
- Input: stmfts - do not leave device disabled in stmfts_input_open
- f2fs: fix dereference of stale list iterator after loop body
- iommu/mediatek: Add list_del in mtk_iommu_remove
- i2c: at91: use dma safe buffers
- i2c: at91: Initialize dma_buf in at91_twi_xfer()
- NFS: Do not report EINTR/ERESTARTSYS as mapping errors
- NFS: Do not report flush errors in nfs_write_end()
- NFS: Don't report errors from nfs_pageio_complete() more than once
- NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
- dmaengine: stm32-mdma: remove GISR1 register
- iommu/amd: Increase timeout waiting for GA log enablement
- perf c2c: Use stdio interface if slang is not supported
- perf jevents: Fix event syntax error caused by ExtSel
- f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
- f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
- f2fs: fix to clear dirty inode in f2fs_evict_inode()
- f2fs: fix deadloop in foreground GC
- f2fs: don't need inode lock for system hidden quota
- f2fs: fix fallocate to use file_modified to update permissions consistently
- wifi: mac80211: fix use-after-free in chanctx code
- iwlwifi: mvm: fix assert 1F04 upon reconfig
- fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped
pages
- efi: Do not import certificates from UEFI Secure Boot for T2 Macs
- bfq: Split shared queues on move between cgroups
- bfq: Update cgroup information before merging bio
- bfq: Track whether bfq_group is still online
- ext4: fix use-after-free in ext4_rename_dir_prepare
- ext4: fix warning in ext4_handle_inode_extension
- ext4: fix bug_on in ext4_writepages
- ext4: verify dir block before splitting it
- ext4: avoid cycles in directory h-tree
- ACPI: property: Release subnode properties with data nodes
- tracing: Fix potential double free in create_var_ref()
- PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
- PCI: qcom: Fix runtime PM imbalance on probe errors
- PCI: qcom: Fix unbalanced PHY init on probe errors
- mm, compaction: fast_find_migrateblock() should return pfn in the target
zone
- dlm: fix plock invalid read
- dlm: fix missing lkb refcount handling
- ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
- scsi: dc395x: Fix a missing check on list iterator
- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
- drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
- drm/nouveau/clk: Fix an incorrect NULL check on list iterator
- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
- md: fix an incorrect NULL check in does_sb_need_changing
- md: fix an incorrect NULL check in md_reload_sb
- mtd: cfi_cmdset_0002: Move and rename
chip_check/chip_ready/chip_good_for_write
- media: coda: Fix reported H264 profile
- media: coda: Add more H264 levels for CODA960
- Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
- RDMA/hfi1: Fix potential integer multiplication overflow errors
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
A38x, A39x
- irqchip: irq-xtensa-mx: fix initial IRQ affinity
- mac80211: upgrade passive scan to active scan on DFS channels after beacon
rx
- um: chan_user: Fix winch_tramp() return value
- um: Fix out-of-bounds read in LDT setup
- iommu/msm: Fix an incorrect NULL check on list iterator
- nodemask.h: fix compilation error with GCC12
- hugetlb: fix huge_pmd_unshare address update
- rtl818x: Prevent using not initialized queues
- ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
- carl9170: tx: fix an incorrect use of list iterator
- serial: pch: don't overwrite xmit->buf[0] by x_char
- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
- gma500: fix an incorrect NULL check on list iterator
- arm64: dts: qcom: ipq8074: fix the sleep clock frequency
- phy: qcom-qmp: fix struct clk leak on probe errors
- ARM: pxa: maybe fix gpio lookup tables
- docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
- dt-bindings: gpio: altera: correct interrupt-cells
- blk-iolatency: Fix inflight count imbalances and IO hangs on offline
- phy: qcom-qmp: fix reset-controller leak on probe errors
- Kconfig: add config option for asm goto w/ outputs
- RDMA/rxe: Generate a completion for unsupported/invalid opcode
- MIPS: IP27: Remove incorrect `cpu_has_fpu' override
- bfq: Avoid merging queues with different parents
- bfq: Drop pointless unlock-lock pair
- bfq: Remove pointless bfq_init_rq() calls
- bfq: Get rid of __bio_blkcg() usage
- bfq: Make sure bfqg for which we are queueing requests is online
- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
- md: bcache: check the return value of kzalloc() in detached_dev_do_request()
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
- staging: greybus: codecs: fix type confusion of list iterator variable
- iio: adc: ad7124: Remove shift from scan_type
- tty: goldfish: Use tty_port_destroy() to destroy port
- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
and ida_simple_get
- usb: usbip: fix a refcount leak in stub_probe()
- usb: usbip: add missing device lock on tweak configuration cmd
- USB: storage: karma: fix rio_karma_init return
- usb: musb: Fix missing of_node_put() in omap2430_probe
- staging: fieldbus: Fix the error handling path in
anybuss_host_common_probe()
- pwm: lp3943: Fix duty calculation in case period was clamped
- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
- firmware: stratix10-svc: fix a missing check on list iterator
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
- iio: adc: sc27xx: fix read big scale voltage not right
- iio: adc: sc27xx: Fine tune the scale calibration values
- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
- serial: sifive: Report actual baud base rather than fixed 115200
- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
- soc: rockchip: Fix refcount leak in rockchip_grf_init
- clocksource/drivers/riscv: Events are stopped during CPU suspend
- rtc: mt6397: check return value after calling platform_get_resource()
- serial: meson: acquire port->lock in startup()
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
- serial: digicolor-usart: Don't allow CS5-6
- serial: rda-uart: Don't allow CS5-6
- serial: txx9: Don't allow CS5-6
- serial: sh-sci: Don't allow CS5-6
- serial: sifive: Sanitize CSIZE and c_iflag
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
- serial: stm32-usart: Correct CSIZE, bits, and parity
- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
- bus: ti-sysc: Fix warnings for unbind for serial
- driver: base: fix UAF when driver_attach failed
- driver core: fix deadlock in __device_attach
- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
- modpost: fix removing numeric suffixes
- jffs2: fix memory leak in jffs2_do_fill_super
- ubi: ubi_create_volume: Fix use-after-free when volume creation failed
- nfp: only report pause frame configuration for physical device
- net/mlx5: Don't use already freed action pointer
- net/mlx5e: Update netdev features after changing XDP state
- net: sched: add barrier to fix packet stuck problem for lockless qdisc
- tcp: tcp_rtx_synack() can be called from process context
- afs: Fix infinite loop found by xfstest generic/676
- tipc: check attribute length for bearer name
- perf c2c: Fix sorting in percent_rmt_hitm_cmp()
- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
- tracing: Fix sleeping function called from invalid context on RT kernel
- tracing: Avoid adding tracer option before update_tracer_options
- f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
- i2c: cadence: Increase timeout per message if necessary
- m68knommu: set ZERO_PAGE() to the allocated zeroed page
- m68knommu: fix undefined reference to `_init_sp'
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
- NFSv4: Don't hold the layoutget locks across multiple RPC calls
- video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
- xprtrdma: treat all calls not a bcall when bc_serv is NULL
- netfilter: nat: really support inet nat without l3 address
- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
- netfilter: nf_tables: memleak flow rule from commit path
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
- af_unix: Fix a data-race in unix_dgram_peer_wake_me().
- bpf, arm64: Clear prog->jited_len along prog->jited
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
- SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
- net: mdio: unexport __init-annotated mdio_bus_init()
- net: xfrm: unexport __init-annotated xfrm4_protocol_init()
- net: ipv6: unexport __init-annotated seg6_hmac_init()
- net/mlx5: Rearm the FW tracer after each tracer event
- net/mlx5: fs, fail conflicting actions
- ip_gre: test csum_start instead of transport header
- net: altera: Fix refcount leak in altera_tse_mdio_create
- drm: imx: fix compiler warning with gcc-12
- iio: dummy: iio_simple_dummy: check the return value of kstrdup()
- iio: st_sensors: Add a local lock for protecting odr
- lkdtm/usercopy: Expand size of "out of frame" object
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
- tty: Fix a possible resource leak in icom_probe
- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
- USB: host: isp116x: check return value after calling platform_get_resource()
- drivers: tty: serial: Fix deadlock in sa1100_set_termios()
- drivers: usb: host: Fix deadlock in oxu_bus_suspend()
- USB: hcd-pci: Fully suspend across freeze/thaw cycle
- usb: dwc2: gadget: don't reset gadget's driver->bus
- misc: rtsx: set NULL intfdata when probe fails
- extcon: Modify extcon device to be created after driver data is set
- clocksource/drivers/sp804: Avoid error on multiple instances
- staging: rtl8712: fix uninit-value in usb_read8() and friends
- staging: rtl8712: fix uninit-value in r871xu_drv_init()
- serial: msm_serial: disable interrupts in __msm_console_write()
- kernfs: Separate kernfs_pr_cont_buf and rename_lock.
- watchdog: wdat_wdt: Stop watchdog when rebooting the system
- md: protect md_unregister_thread from reentrancy
- scsi: myrb: Fix up null pointer access on myrb_cleanup()
- ceph: allow ceph.dir.rctime xattr to be updatable
- drm/radeon: fix a possible null pointer dereference
- modpost: fix undefined behavior of is_arm_mapping_symbol()
- x86/cpu: Elide KCSAN for cpu_has() and friends
- nbd: call genl_unregister_family() first in nbd_cleanup()
- nbd: fix race between nbd_alloc_config() and module removal
- cifs: version operations for smb20 unneeded when legacy support disabled
- nodemask: Fix return values to be unsigned
- vringh: Fix loop descriptors check in the indirect cases
- scripts/gdb: change kernel config dumping method
- ALSA: hda/conexant - Fix loopback issue with CX20632
- cifs: return errors during session setup during reconnects
- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
- mmc: block: Fix CQE recovery reset success
- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
- ixgbe: fix bcast packets Rx on VF after promisc removal
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
- powerpc/32: Fix overread/overwrite of thread_struct via ptrace
- md/raid0: Ignore RAID0 layout if the second zone has only one device
- mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
- Linux 5.4.198
* Focal update: v5.4.197 upstream stable release (LP: #1981758)
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
- staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
- Input: goodix - fix spurious key release events
- tcp: change source port randomizarion at connect() time
- secure_seq: use the 64 bits of the siphash for port offset calculation
- media: vim2m: Register video device after setting up internals
- media: vim2m: initialize the media device earlier
- ACPI: sysfs: Make sparse happy about address space in use
- ACPI: sysfs: Fix BERT error region memory mapping
- pinctrl: sunxi: fix f1c100s uart2 function
- net: af_key: check encryption module availability consistency
- net: ftgmac100: Disable hardware checksum on AST2600
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI
controllers
- assoc_array: Fix BUG_ON during garbage collect
- cfg80211: set custom regdomain after wiphy registration
- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
- exec: Force single empty string when argv is empty
- netfilter: conntrack: re-fetch conntrack after insertion
- crypto: ecrdsa - Fix incorrect use of vli_cmp
- zsmalloc: fix races between asynchronous zspage free and page migration
- dm integrity: fix error code in dm_integrity_ctr()
- dm crypt: make printing of the key constant-time
- dm stats: add cond_resched when looping over entries
- dm verity: set DM_TARGET_IMMUTABLE feature flag
- raid5: introduce MD_BROKEN
- HID: multitouch: Add support for Google Whiskers Touchpad
- tpm: Fix buffer access in tpm2_get_tpm_pt()
- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
- docs: submitting-patches: Fix crossref to 'The canonical patch format'
- NFS: Memory allocation failures are not server fatal errors
- NFSD: Fix possible sleep during nfsd4_release_lockowner()
- bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
- Linux 5.4.197
* Focal update: v5.4.196 upstream stable release (LP: #1981111)
- x86/xen: Make the boot CPU idle task reliable
- x86/xen: Make the secondary CPU idle tasks reliable
- rtc: fix use-after-free on device removal
- um: Cleanup syscall_handler_t definition/cast, fix warning
- Input: add bounds checking to input_set_capability()
- Input: stmfts - fix reference leak in stmfts_input_open
- crypto: stm32 - fix reference leak in stm32_crc_remove
- crypto: x86/chacha20 - Avoid spurious jumps to other functions
- ALSA: hda/realtek: Enable headset mic on Lenovo P360
- nvme-multipath: fix hang when disk goes live over reconnect
- rtc: mc146818-lib: Fix the AltCentury for AMD platforms
- MIPS: lantiq: check the return value of kzalloc()
- drbd: remove usage of list iterator variable after loop
- platform/chrome: cros_ec_debugfs: detach log reader wq from devm
- ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
- nilfs2: fix lockdep warnings in page operations for btree nodes
- nilfs2: fix lockdep warnings during disk space reclamation
- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC
- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD
- mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
- SUNRPC: Clean up scheduling of autoclose
- SUNRPC: Prevent immediate close+reconnect
- SUNRPC: Don't call connect() more than once on a TCP socket
- ALSA: wavefront: Proper check of get_user() error
- perf: Fix sys_perf_event_open() race against self
- Fix double fget() in vhost_net_set_backend()
- PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
- KVM: x86/mmu: Update number of zapped pages even if page list is stable
- crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
- drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
- ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi
- ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group
- net: macb: Increment rx bd head after allocating skb and buffer
- net/sched: act_pedit: sanitize shift argument before usage
- net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
- net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
- ice: fix possible under reporting of ethtool Tx and Rx statistics
- clk: at91: generated: consider range when calculating best rate
- net/qla3xxx: Fix a test in ql_reset_work()
- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
- net/mlx5e: Properly block LRO when XDP is enabled
- ARM: 9196/1: spectre-bhb: enable for Cortex-A15
- ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
- igb: skip phy status check where unavailable
- net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
- gpio: gpio-vf610: do not touch other bits when set the target bit
- gpio: mvebu/pwm: Refuse requests with inverted polarity
- perf bench numa: Address compiler error on s390
- scsi: qla2xxx: Fix missed DMA unmap for aborted commands
- mac80211: fix rx reordering with non explicit / psmp ack policy
- selftests: add ping test with ping_group_range tuned
- ethernet: tulip: fix missing pci_disable_device() on error in
tulip_init_one()
- net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
- net: atlantic: verify hw_head_ lies within TX buffer ring
- Input: ili210x - fix reset timing
- block: return ELEVATOR_DISCARD_MERGE if possible
- net: stmmac: disable Split Header (SPH) for Intel platforms
- firmware_loader: use kernel credentials when reading firmware
- ARM: dts: imx7: Use audio_mclk_post_div instead audio_mclk_root_clk
- Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
- x86/xen: fix booting 32-bit pv guest
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe()
- afs: Fix afs_getattr() to refetch file status if callback break occurred
- Linux 5.4.196
* CVE-2022-36946
- netfilter: nf_queue: do not allow packet truncation below transport header
offset
* CVE-2021-33655
- fbcon: Disallow setting font bigger than screen size
- fbcon: Prevent that screen size is smaller than font size
- fbmem: Check virtual screen sizes in fb_set_var()
[ Ubuntu: 5.4.0-125.141 ]
* focal/linux: 5.4.0-125.141 -proposed tracker (LP: #1983947)
* nbd: requests can become stuck when disconnecting from server with qemu-nbd
(LP: #1896350)
- blk-mq: blk-mq: provide forced completion method
- blk-mq: move failure injection out of blk_mq_complete_request
- nbd: don't handle response without a corresponding request message
- nbd: make sure request completion won't concurrent
- nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
- nbd: fix io hung while disconnecting device
* CVE-2021-33656
- vt: drop old FONT ioctls
* CVE-2021-33061
- ixgbe: add the ability for the PF to disable VF link state
- ixgbe: add improvement for MDD response functionality
- ixgbevf: add disable link state
[ Ubuntu: 5.4.0-124.140 ]
* CVE-2022-2586
- SAUCE: netfilter: nf_tables: do not allow SET_ID to refer to another table
- SAUCE: netfilter: nf_tables: do not allow RULE_ID to refer to another chain
* CVE-2022-2588
- SAUCE: net_sched: cls_route: remove from list when handle is 0
* CVE-2022-34918
- netfilter: nf_tables: stricter validation of element data
[ Ubuntu: 5.4.0-123.139 ]
* focal/linux: 5.4.0-123.139 -proposed tracker (LP: #1981284)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.07.11)
* Hairpin traffic does not work with centralized NAT gw (LP: #1967856)
- net: openvswitch: fix misuse of the cached connection on tuple changes
* [UBUNTU 20.04] Include patches to avoid self-detected stall with Secure
Execution (LP: #1979296)
- KVM: s390: pv: add macros for UVC CC values
- KVM: s390: pv: avoid stalls when making pages secure
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
* Focal update: v5.4.195 upstream stable release (LP: #1980407)
- batman-adv: Don't skb_split skbuffs with frag_list
- hwmon: (tmp401) Add OF device ID table
- mac80211: Reset MBSSID parameters upon connection
- net: Fix features skip in for_each_netdev_feature()
- ipv4: drop dst in multicast routing path
- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name()
- netlink: do not reset transport header in netlink_recvmsg()
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
- dim: initialize all struct fields
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY
- s390/ctcm: fix variable dereferenced before check
- s390/ctcm: fix potential memory leak
- s390/lcs: fix variable dereferenced before check
- net/sched: act_pedit: really ensure the skb is writable
- net/smc: non blocking recvmsg() return -EAGAIN when no data and
signal_pending
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
- gfs2: Fix filesystem block deallocation for short writes
- hwmon: (f71882fg) Fix negative temperature
- ASoC: max98090: Reject invalid values in custom control put()
- ASoC: max98090: Generate notifications on changes for custom control
- ASoC: ops: Validate input values in snd_soc_put_volsw_range()
- s390: disable -Warray-bounds
- net: emaclite: Don't advertise 1000BASE-T and do auto negotiation
- tcp: resalt the secret every 10 seconds
- tty: n_gsm: fix mux activation issues in gsm_config()
- usb: cdc-wdm: fix reading stuck on device close
- usb: typec: tcpci: Don't skip cleanup in .remove() on error
- USB: serial: pl2303: add device id for HP LM930 Display
- USB: serial: qcserial: add support for Sierra Wireless EM7590
- USB: serial: option: add Fibocom L610 modem
- USB: serial: option: add Fibocom MA510 modem
- slimbus: qcom: Fix IRQ check in qcom_slim_probe
- serial: 8250_mtk: Fix UART_EFR register address
- serial: 8250_mtk: Fix register address for XON/XOFF character
- drm/nouveau/tegra: Stop using iommu_present()
- i40e: i40e_main: fix a missing check on list iterator
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
- drm/vmwgfx: Initialize drm_mode_fb_cmd2
- MIPS: fix build with gcc-12
- net: phy: Fix race condition on link status change
- arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map
- ping: fix address binding wrt vrf
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
- Linux 5.4.195
* Focal update: v5.4.194 upstream stable release (LP: #1980399)
- MIPS: Use address-of operator on section symbols
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version,
environment} types
- drm/i915: Cast remain to unsigned long in eb_relocate_vma
- nfp: bpf: silence bitwise vs. logical OR warning
- can: grcan: grcan_probe(): fix broken system id check for errata workaround
needs
- can: grcan: only use the NAPI poll budget for RX
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL
- [Config] updateconfigs for ARCH_HAS_HOLES_MEMORYMODEL
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
- x86/asm: Allow to pass macros to __ASM_FORM()
- x86: xen: kvm: Gather the definition of emulate prefixes
- x86: xen: insn: Decode Xen and KVM emulate-prefix signature
- x86: kprobes: Prohibit probing on instruction which has emulate prefix
- KVM: x86/svm: Account for family 17h event renumberings in
amd_pmc_perf_hw_id
- Bluetooth: Fix the creation of hdev->name
- mm: fix missing cache flush for all tail pages of compound page
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
__mcopy_atomic()
- Linux 5.4.194
* Focal update: v5.4.193 upstream stable release (LP: #1979566)
- MIPS: Fix CP0 counter erratum detection for R4k CPUs
- parisc: Merge model and model name into one line in /proc/cpuinfo
- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
- Revert "SUNRPC: attempt AF_LOCAL connect on setup"
- firewire: fix potential uaf in outbound_phy_packet_callback()
- firewire: remove check of list iterator against head past the loop body
- firewire: core: extend card->lock in fw_core_handle_bus_reset
- ACPICA: Always create namespace nodes using acpi_ns_create_node()
- genirq: Synchronize interrupt thread startup
- ASoC: da7219: Fix change notifications for tone generator frequency
- ASoC: wm8958: Fix change notifications for DSP controls
- ASoC: meson: Fix event generation for G12A tohdmi mux
- s390/dasd: fix data corruption for ESE devices
- s390/dasd: prevent double format of tracks for ESE devices
- s390/dasd: Fix read for ESE with blksize < 4k
- s390/dasd: Fix read inconsistency for ESE DASD devices
- can: grcan: grcan_close(): fix deadlock
- can: grcan: use ofdev->dev when allocating DMA memory
- nfc: replace improper check device_is_registered() in netlink related
functions
- NFC: netlink: fix sleep in atomic bug when firmware download timeout
- hwmon: (adt7470) Fix warning on module removal
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback
- RDMA/siw: Fix a condition race issue in MPA request processing
- net: ethernet: mediatek: add missing of_node_put() in mtk_sgmii_init()
- net: stmmac: dwmac-sun8i: add missing of_node_put() in
sun8i_dwmac_register_mdio_mux()
- net: emaclite: Add error handling for of_address_to_resource()
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while interface is
operational
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
- smsc911x: allow using IRQ0
- btrfs: always log symlinks in full mode
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
- drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu
- NFSv4: Don't invalidate inode attributes on delegation return
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised
- net: ipv6: ensure we call ipv6_mc_down() at most once
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
- mm: fix unexpected zeroed page mapping with zram swap
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
- ALSA: pcm: Fix races among concurrent read/write and buffer changes
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
- ALSA: pcm: Fix races among concurrent prealloc proc writes
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- tcp: make sure treq->af_specific is initialized
- dm: fix mempool NULL pointer race when completing IO
- dm: interlock pending dm_io and dm_wait_for_bios_completion
- PCI: aardvark: Clear all MSIs at setup
- PCI: aardvark: Fix reading MSI interrupt number
- mmc: rtsx: add 74 Clocks in power on flow
- Linux 5.4.193
* CVE-2022-1679
- SAUCE: ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
* CVE-2022-28893
- SUNRPC: Ensure we flush any closed sockets before xs_xprt_free()
- SUNRPC: Don't leak sockets in xs_local_connect()
* CVE-2022-1734
- nfc: nfcmrvl: main: reorder destructive operations in
nfcmrvl_nci_unregister_dev to avoid bugs
* CVE-2022-1652
- floppy: use a statically allocated error counter
linux-iot (5.4.0-1003.5) focal; urgency=medium
* focal/linux-iot: 5.4.0-1003.5 -proposed tracker (LP: #1981441)
* Focal update: upstream stable patchset v5.4.192 (LP: #1979014)
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- [Config] updateconfigs for NVM, NVM_PBLK
* Enable Ethernet controller : Aquantia Corp. Device [1d6a:14c0]
(LP: #1980371)
- net: aquantia: PTP skeleton declarations and callbacks
- net: aquantia: add support for Phy access
- net: atlantic: update company name in the driver description
- net: atlantic: add A2 device IDs
- net: atlantic: add defines for 10M and EEE 100M link mode
- net: atlantic: add hw_soft_reset, hw_prepare to hw_ops
- net: atlantic: move IS_CHIP_FEATURE to aq_hw.h
- net: atlantic: A2 driver-firmware interface
- net: atlantic: minimal A2 HW bindings required for fw_ops
- net: atlantic: minimal A2 fw_ops
- net: atlantic: A2 hw_ops skeleton
- net: atlantic: HW bindings for A2 RFP
- net: atlantic: add A2 RPF hw_ops
- net: atlantic: HW bindings for basic A2 init/deinit hw_ops
- net: atlantic: common functions needed for basic A2 init/deinit hw_ops
- net: aquantia: add basic ptp_clock callbacks
- net: aquantia: add PTP rings infrastructure
- net: atlantic: basic A2 init/deinit hw_ops
- net: atlantic: A2 ingress / egress hw configuration
- atlantic: Increase delay for fw transactions
[ Ubuntu: 5.4.0-122.138 ]
* focal/linux: 5.4.0-122.138 -proposed tracker (LP: #1979489)
* Remove SAUCE patches from test_vxlan_under_vrf.sh in net of
ubuntu_kernel_selftests (LP: #1975691)
- Revert "UBUNTU: SAUCE: selftests: net: Don't fail test_vxlan_under_vrf on
xfail"
- Revert "UBUNTU: SAUCE: selftests: net: Make test for VXLAN underlay in non-
default VRF an expected failure"
* Enable Asus USB-BT500 Bluetooth dongle(0b05:190e) (LP: #1976613)
- Bluetooth: btusb: Add flag to define wideband speech capability
- Bluetooth: btrtl: Add support for RTL8761B
- Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
* [UBUNTU 20.04] rcu stalls with many storage key guests (LP: #1975582)
- s390/gmap: voluntarily schedule during key setting
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
* Ubuntu 5.4.0-117.132-generic 5.4.189 has BUG: kernel NULL pointer
dereference, address: 0000000000000034 (LP: #1978719)
- mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas()
* Focal update: upstream stable patchset v5.4.192 (LP: #1979014)
- floppy: disable FDRAWCMD by default
- [Config] updateconfigs for BLK_DEV_FD_RAWCMD
- hamradio: defer 6pack kfree after unregister_netdev
- hamradio: remove needs_free_netdev to avoid UAF
- lightnvm: disable the subsystem
- [Config] updateconfigs for NVM, NVM_PBLK
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host
- USB: quirks: add a Realtek card reader
- USB: quirks: add STRING quirk for VCOM device
- USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
- xhci: stop polling roothubs after shutdown
- xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
- iio: dac: ad5592r: Fix the missing return value.
- iio: dac: ad5446: Fix read_raw not returning set value
- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
- usb: misc: fix improper handling of refcount in uss720_probe()
- usb: typec: ucsi: Fix role swapping
- usb: gadget: uvc: Fix crash when encoding data for usb request
- usb: gadget: configfs: clear deactivation flag in
configfs_composite_unbind()
- usb: dwc3: core: Fix tx/rx threshold settings
- usb: dwc3: gadget: Return proper request status
- serial: imx: fix overrun interrupts in DMA mode
- serial: 8250: Also set sticky MCR bits in console restoration
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
- arch_topology: Do not set llc_sibling if llc_id is invalid
- hex2bin: make the function hex_to_bin constant-time
- hex2bin: fix access beyond string end
- video: fbdev: udlfb: properly check endpoint type
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
- mtd: rawnand: fix ecc parameters for mt7622
- USB: Fix xhci event ring dequeue pointer ERDP update issue
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
- phy: samsung: exynos5250-sata: fix missing device put in probe error paths
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
- ARM: dts: Fix mmc order for omap3-gta04
- ARM: dts: am3517-evm: Fix misc pinmuxing
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
- ipvs: correctly print the memory size of ip_vs_conn_tab
- mtd: rawnand: Fix return value check of wait_for_completion_timeout
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt
hook
- tcp: md5: incorrect tcp_header_len for incoming connections
- tcp: ensure to use the most recently sent skb when filling the rate sample
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event
- ARM: dts: imx6ull-colibri: fix vqmmc regulator
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
- pinctrl: pistachio: fix use of irq_of_parse_and_map()
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
- net: hns3: add validity check for message data length
- net/smc: sync err code when tcp connection was refused
- ip_gre: Make o_seqno start from 0 in native mode
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
- clk: sunxi: sun9i-mmc: check return value after calling
platform_get_resource()
- net: bcmgenet: hide status block before TX timestamping
- net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
- drm/amd/display: Fix memory leak in dcn21_clock_source_create
- tls: Skip tls_append_frag on zero copy size
- bnx2x: fix napi API usage sequence
- ixgbe: ensure IPsec VF<->PF compatibility
- tcp: fix F-RTO may not work correctly when receiving DSACK
- ASoC: wm8731: Disable the regulator when probing fails
- ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
- cifs: destage any unwritten data to the server before calling
copychunk_write
- drivers: net: hippi: Fix deadlock in rr_close()
- net: ethernet: stmmac: fix write to sgmii_adapter_base
- x86/cpu: Load microcode during restore_processor_state()
- tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
- tty: n_gsm: fix malformed counter for out of frame data
- netfilter: nft_socket: only do sk lookups when indev is available
- tty: n_gsm: fix insufficient txframe size
- tty: n_gsm: fix missing explicit ldisc flush
- tty: n_gsm: fix wrong command retry handling
- tty: n_gsm: fix wrong command frame length field encoding
- tty: n_gsm: fix incorrect UA handling
- hugetlbfs: get unmapped area below TASK_UNMAPPED_BASE for hugetlbfs
- mm, hugetlb: allow for "high" userspace addresses
- Linux 5.4.192
* CVE-2022-1789
- KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
* Focal update: v5.4.191 upstream stable release (LP: #1976116)
- etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
- mm: page_alloc: fix building error on -Werror=array-compare
- tracing: Dump stacktrace trigger to the corresponding instance
- gfs2: assign rgrp glock before compute_bitstructs
- tcp: fix race condition when creating child sockets from syncookies
- tcp: Fix potential use-after-free due to double kfree()
- ALSA: usb-audio: Clear MIDI port active flag after draining
- ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
- ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
- dmaengine: imx-sdma: Fix error checking in sdma_event_remap
- dmaengine: mediatek:Fix PM usage reference leak of
mtk_uart_apdma_alloc_chan_resources
- igc: Fix infinite loop in release_swfw_sync
- igc: Fix BUG: scheduling while atomic
- rxrpc: Restore removed timer deletion
- net/smc: Fix sock leak when release after smc_shutdown()
- net/packet: fix packet_sock xmit return value checking
- net/sched: cls_u32: fix possible leak in u32_init_knode()
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using
netdev_master_upper_dev_get_rcu
- netlink: reset network and mac headers in netlink_dump()
- selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
- ARM: vexpress/spc: Avoid negative array index when !SMP
- reset: tegra-bpmp: Restore Handle errors in BPMP response
- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be
negative
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the
constant
- vxlan: fix error return code in vxlan_fdb_append
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT
- mt76: Fix undefined behavior due to shift overflowing the constant
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
- dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
- drm/msm/mdp5: check the return of kzalloc()
- net: macb: Restart tx only if queue pointer is lagging
- scsi: qedi: Fix failed disconnect handling
- stat: fix inconsistency between struct stat and struct compat_stat
- EDAC/synopsys: Read the error count from the correct register
- oom_kill.c: futex: delay the OOM reaper to allow time for proper futex
cleanup
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading
- dma: at_xdmac: fix a missing check on list iterator
- drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
- drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
- KVM: PPC: Fix TCE handling for VFIO
- drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- powerpc/perf: Fix power9 event alternatives
- xtensa: patch_text: Fixup last cpu should be master
- xtensa: fix a7 clobbering in coprocessor context load/store
- openvswitch: fix OOB access in reserve_sfa_size()
- ASoC: soc-dapm: fix two incorrect uses of list iterator
- e1000e: Fix possible overflow in LTR decoding
- ARC: entry: fix syscall_trace_exit argument
- arm_pmu: Validate single/group leader events
- ext4: fix symlink file size not match to file content
- ext4: fix use-after-free in ext4_search_dir
- ext4, doc: fix incorrect h_reserved size
- ext4: fix overhead calculation to account for the reserved gdt blocks
- ext4: force overhead calculation if the s_overhead_cluster makes no sense
- jbd2: fix a potential race while discarding reserved buffers after an abort
- spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and
controller
- staging: ion: Prevent incorrect reference counting behavour
- block/compat_ioctl: fix range check in BLKGETSIZE
- Linux 5.4.191
* Focal update: v5.4.190 upstream stable release (LP: #1973085)
- memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
- net/sched: flower: fix parsing of ethertype following VLAN header
- veth: Ensure eth header is in skb's linear part
- gpiolib: acpi: use correct format characters
- mlxsw: i2c: Fix initialization error flow
- net/sched: fix initialization order when updating chain 0 head
- net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
- net/sched: taprio: Check if socket flags are valid
- cfg80211: hold bss_lock while updating nontrans_list
- drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init()
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
- sctp: Initialize daddr on peeled off socket
- testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
- nfc: nci: add flush_workqueue to prevent uaf
- cifs: potential buffer overflow in handling symlinks
- drm/amd: Add USBC connector ID
- drm/amd/display: fix audio format not updated after edid updated
- drm/amd/display: Update VTEM Infopacket definition
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS
- drm/amdkfd: Check for potential null return of kmalloc_array()
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
- scsi: target: tcmu: Fix possible page UAF
- scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
- gpu: ipu-v3: Fix dev_dbg frequency output
- regulator: wm8994: Add an off-on delay for WM8994 variant
- arm64: alternatives: mark patch_alternative() as `noinstr`
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
- drm/amd/display: Fix allocate_mst_payload assert on resume
- powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit
- scsi: mvsas: Add PCI ID of RocketRaid 2640
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
- drivers: net: slip: fix NPD bug in sl_tx_timeout()
- perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant
- mm, page_alloc: fix build_zonerefs_node()
- mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
- gcc-plugins: latent_entropy: use /dev/urandom
- ath9k: Properly clear TX status area before reporting to mac80211
- ath9k: Fix usage of driver-private space in tx_info
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
- btrfs: mark resumed async balance as writing
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
- ipv6: fix panic when forwarding a pkt with no in6 dev
- drm/amd/display: don't ignore alpha property on pre-multiplied mode
- genirq/affinity: Consider that CPUs on nodes can be unbalanced
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
- ARM: davinci: da850-evm: Avoid NULL pointer dereference
- dm integrity: fix memory corruption when tag_size is less than digest size
- smp: Fix offline cpu check in flush_smp_call_function_queue()
- i2c: pasemi: Wait for write xfers to finish
- dma-direct: avoid redundant memory sync for swiotlb
- ax25: add refcount in ax25_dev to avoid UAF bugs
- ax25: fix reference count leaks of ax25_dev
- ax25: fix UAF bugs of net_device caused by rebinding operation
- ax25: Fix refcount leaks caused by ax25_cb_del()
- ax25: fix UAF bug in ax25_send_control()
- ax25: fix NPD bug in ax25_disconnect
- ax25: Fix NULL pointer dereferences in ax25 timers
- ax25: Fix UAF bugs in ax25 timers
- Linux 5.4.190
[ Ubuntu: 5.4.0-121.137 ]
* focal/linux: 5.4.0-121.137 -proposed tracker (LP: #1978666)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2022.05.30)
* CVE-2022-28388
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
path
* test_vxlan_under_vrf.sh in net from ubuntu_kernel_selftests failed (Check VM
connectivity through VXLAN (underlay in the default VRF) [FAIL])
(LP: #1871015)
- selftests: net: test_vxlan_under_vrf: fix HV connectivity test
* [UBUNTU 20.04] CPU-MF: add extended counter set definitions for new IBM z16
(LP: #1974433)
- s390/cpumf: add new extended counter set for IBM z16
* [UBUNTU 20.04] KVM nesting support leaks too much memory, might result in
stalls during cleanup (LP: #1974017)
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead
* [UBUNTU 20.04] Null Pointer issue in nfs code running Ubuntu on IBM Z
(LP: #1968096)
- NFS: Fix up nfs_ctx_key_to_expire()
[ Ubuntu: 5.4.0-120.136 ]
* CVE-2022-21123 // CVE-2022-21125 // CVE-2022-21166
- cpu/speculation: Add prototype for cpu_show_srbds()
- x86/cpu: Add Jasper Lake to Intel family
- x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel
CPU family
- x86/cpu: Add another Alder Lake CPU to the Intel family
- Documentation: Add documentation for Processor MMIO Stale Data
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
- x86/speculation: Add a common function for MD_CLEAR mitigation update
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
- x86/speculation/srbds: Update SRBDS mitigation selection
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
- KVM: x86/speculation: Disable Fill buffer clear within guests
- x86/speculation/mmio: Print SMT warning
[ Ubuntu: 5.4.0-117.132 ]
* CVE-2022-1966
- netfilter: nf_tables: add nft_set_elem_expr_alloc()
- netfilter: nf_tables: disallow non-stateful expression in sets earlier
linux-iot (5.4.0-1002.4) focal; urgency=medium
* focal/linux-iot: 5.4.0-1002.4 -proposed tracker (LP: #1975448)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/master)
[ Ubuntu: 5.4.0-115.129 ]
* CVE-2022-21499
- SAUCE: debug: Lock down kgdb
[ Ubuntu: 5.4.0-114.128 ]
* focal/linux: 5.4.0-114.128 -proposed tracker (LP: #1974391)
* 32 GT/s PCI link speeds reporting "Unknown speed" in sysfs (LP: #1970798)
- PCI: Add 32 GT/s decoding in some macros
- PCI: Add pci_speed_string()
- PCI: Use pci_speed_string() for all PCI/PCI-X/PCIe strings
- PCI: Add PCIE_LNKCAP2_SLS2SPEED() macro
* issuing invalid ioctl to /dev/vsock may spam dmesg (LP: #1971480)
- vsock: remove ratelimit unknown ioctl message
* config CONFIG_HISI_PMU for kunpeng920 (LP: #1956086)
- drivers/perf: hisi: Permit modular builds of HiSilicon uncore drivers
- [Config] CONFIG_HISI_PMU=m
* Focal update: v5.4.189 upstream stable release (LP: #1971497)
- swiotlb: fix info leak with DMA_FROM_DEVICE
- USB: serial: pl2303: add IBM device IDs
- USB: serial: simple: add Nokia phone driver
- netdevice: add the case if dev is NULL
- HID: logitech-dj: add new lightspeed receiver id
- xfrm: fix tunnel model fragmentation behavior
- virtio_console: break out of buf poll on remove
- ethernet: sun: Free the coherent when failing in probing
- spi: Fix invalid sgs value
- net:mcf8390: Use platform_get_irq() to get the interrupt
- spi: Fix erroneous sgs value with min_t()
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function
pfkey_register
- net: dsa: microchip: add spi_device_id tables
- iommu/iova: Improve 32-bit free space estimate
- tpm: fix reference counting for struct tpm_chip
- block: Add a helper to validate the block size
- virtio-blk: Use blk_validate_block_size() to validate block size
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
- xhci: fix runtime PM imbalance in USB2 resume
- xhci: make xhci_handshake timeout for xhci_reset() adjustable
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
- coresight: Fix TRCCONFIGR.QE sysfs interface
- iio: afe: rescale: use s64 for temporary scale calculations
- iio: inkern: apply consumer scale on IIO_VAL_INT cases
- iio: inkern: apply consumer scale when no channel scale is available
- iio: inkern: make a best effort on offset calculation
- greybus: svc: fix an error handling bug in gb_svc_hello()
- clk: uniphier: Fix fixed-rate initialization
- KEYS: fix length validation in keyctl_pkey_params_get_2()
- Documentation: add link to stable release candidate tree
- Documentation: update stable tree link
- HID: intel-ish-hid: Use dma_alloc_coherent for firmware update
- SUNRPC: avoid race between mod_timer() and del_timer_sync()
- NFSD: prevent underflow in nfssvc_decode_writeargs()
- NFSD: prevent integer overflow on 32 bit systems
- f2fs: fix to unlock page correctly in error path of is_alive()
- f2fs: quota: fix loop condition at f2fs_quota_sync()
- f2fs: fix to do sanity check on .cp_pack_total_block_count
- pinctrl: samsung: drop pin banks references on error paths
- spi: mxic: Fix the transmit path
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
- jffs2: fix memory leak in jffs2_do_mount_fs
- jffs2: fix memory leak in jffs2_scan_medium
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
- mm: invalidate hwpoison page cache page in fault path
- mempolicy: mbind_range() set_policy() after vma_merge()
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
- qed: display VF trust config
- qed: validate and restrict untrusted VFs vlan promisc mode
- riscv: Fix fill_callchain return value
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
- ALSA: cs4236: fix an incorrect NULL check on list iterator
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
- mm,hwpoison: unmap poisoned page before invalidation
- mm/kmemleak: reset tag when compare object pointer
- drbd: fix potential silent data corruption
- powerpc/kvm: Fix kvm_use_magic_page
- udp: call udp_encap_enable for v6 sockets when enabling encap
- ACPI: properties: Consistently return -ENOENT if there are no more
references
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
- mailbox: tegra-hsp: Flush whole channel
- block: don't merge across cgroup boundaries if blkcg is enabled
- drm/edid: check basic audio support on CEA extension block
- video: fbdev: sm712fb: Fix crash in smtcfb_read()
- video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5250
- ARM: dts: exynos: add missing HDMI supplies on SMDK5420
- carl9170: fix missing bit-wise or operator for tx_params
- thermal: int340x: Increase bitmap size
- lib/raid6/test: fix multiple definition linking error
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
- crypto: rsa-pkcs1pad - restore signature length check
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
- DEC: Limit PMAX memory probing to R3k systems
- media: davinci: vpif: fix unbalanced runtime PM get
- xtensa: fix stop_machine_cpuslocked call in patch_text
- xtensa: fix xtensa_wsr always writing 0
- brcmfmac: firmware: Allocate space for default boardrev in nvram
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
- brcmfmac: pcie: Fix crashes due to early IRQs
- PCI: pciehp: Clear cmd_busy bit in polling mode
- regulator: qcom_smd: fix for_each_child.cocci warnings
- crypto: authenc - Fix sleep in atomic context in decrypt_tail
- crypto: mxs-dcp - Fix scatterlist processing
- spi: tegra114: Add missing IRQ check in tegra_spi_probe
- selftests/x86: Add validity check and allow field splitting
- audit: log AUDIT_TIME_* records only from rules
- crypto: ccree - don't attempt 0 len DMA mappings
- spi: pxa2xx-pci: Balance reference count for PCI DMA device
- hwmon: (pmbus) Add mutex to regulator ops
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
- block: don't delete queue kobject before its children
- PM: hibernate: fix __setup handler error handling
- PM: suspend: fix return value of __setup handler
- hwrng: atmel - disable trng on failure path
- crypto: vmx - add missing dependencies
- clocksource/drivers/timer-of: Check return value of of_iomap in
timer_of_base_init()
- ACPI: APEI: fix return value of __setup handlers
- crypto: ccp - ccp_dmaengine_unregister release dma channels
- hwmon: (pmbus) Add Vin unit off handling
- clocksource: acpi_pm: fix return value of __setup handler
- sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
- perf/core: Fix address filter parser for multiple filters
- perf/x86/intel/pt: Fix address filter config for 32-bit kernel
- f2fs: fix missing free nid in f2fs_handle_failed_inode
- f2fs: fix to avoid potential deadlock
- media: bttv: fix WARNING regression on tunerless devices
- media: coda: Fix missing put_device() call in coda_get_vdoa_data
- media: hantro: Fix overfill bottom register field name
- media: aspeed: Correct value for h-total-pixels
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
- video: fbdev: atmel_lcdfb: fix an error code in atmel_lcdfb_probe()
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
- ARM: dts: qcom: ipq4019: fix sleep clock
- soc: qcom: rpmpd: Check for null return of devm_kcalloc
- soc: qcom: aoss: remove spurious IRQF_ONESHOT flags
- arm64: dts: qcom: sm8150: Correct TCS configuration for apps rsc
- soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
- ARM: dts: imx: Add missing LVDS decoder on M53Menlo
- media: video/hdmi: handle short reads of hdmi info frame.
- media: em28xx: initialize refcount before kref_get
- media: usb: go7007: s2250-board: fix leak in probe()
- uaccess: fix nios2 and microblaze get_user_8()
- ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
- ASoC: ti: davinci-i2s: Add check for clk_enable()
- ALSA: spi: Add check for clk_enable()
- arm64: dts: ns2: Fix spi-cpol and spi-cpha property
- arm64: dts: broadcom: Fix sata nodename
- printk: fix return value of printk.devkmsg __setup handler
- ASoC: mxs-saif: Handle errors for clk_enable
- ASoC: atmel_ssc_dai: Handle errors for clk_enable
- ASoC: soc-compress: prevent the potentially use of null pointer
- memory: emif: Add check for setup_interrupts
- memory: emif: check the pointer temp in get_device_details()
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- arm64: dts: rockchip: Fix SDIO regulator supply properties on rk3399-firefly
- media: stk1160: If start stream fails, return buffers with
VB2_BUF_STATE_QUEUED
- ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
- ASoC: wm8350: Handle error for wm8350_register_irq
- ASoC: fsi: Add check for clk_enable
- video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
- ivtv: fix incorrect device_caps for ivtvfb
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
- ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
- ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
- ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in
msm8916_wcd_digital_probe
- mmc: davinci_mmc: Handle error for clk_enable
- ASoC: msm8916-wcd-analog: Fix error handling in pm8916_wcd_analog_spmi_probe
- drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
- drm/bridge: Add missing pm_runtime_disable() in __dw_mipi_dsi_probe
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
- udmabuf: validate ubuf->pagecount
- Bluetooth: hci_serdev: call init_rwsem() before p->open()
- mtd: onenand: Check for error irq
- mtd: rawnand: gpmi: fix controller timings setting
- drm/edid: Don't clear formats if using deep color
- drm/amd/display: Fix a NULL pointer dereference in
amdgpu_dm_connector_add_common_modes()
- ath9k_htc: fix uninit value bugs
- KVM: PPC: Fix vmx/vsx mixup in mmio emulation
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
- power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
- ray_cs: Check ioremap return value
- powerpc/perf: Don't use perf_hw_context for trace IMC PMU
- mt76: mt7603: check sta_rates pointer in mt7603_sta_rate_tbl_update
- mt76: mt7615: check sta_rates pointer in mt7615_sta_rate_tbl_update
- net: dsa: mv88e6xxx: Enable port policy support on 6097
- PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated bridge
- power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
- iommu/ipmmu-vmsa: Check for error num after setting mask
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
- IB/cma: Allow XRC INI QPs to set their local ACK timeout
- dax: make sure inodes are flushed before destroy cache
- iwlwifi: Fix -EIO error code that is never returned
- iwlwifi: mvm: Fix an error code in iwl_mvm_up()
- dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
- scsi: pm8001: Fix abort all task initialization
- drm/amd/display: Remove vupdate_int_entry definition
- TOMOYO: fix __setup handlers return values
- ext2: correct max file size computing
- drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false
return
- scsi: hisi_sas: Change permission of parameter prot_mask
- drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
- bpf, arm64: Call build_prologue() first in first JIT pass
- bpf, arm64: Feed byte-offset into bpf line info
- libbpf: Skip forward declaration when counting duplicated type names
- powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
- KVM: x86: Fix emulation in writing cr8
- KVM: x86/emulator: Defer not-present segment check in
__load_segment_descriptor()
- hv_balloon: rate-limit "Unhandled message" warning
- i2c: xiic: Make bus names unique
- power: supply: wm8350-power: Handle error for wm8350_register_irq
- power: supply: wm8350-power: Add missing free in free_charger_irq
- PCI: Reduce warnings on possible RW1C corruption
- mips: DEC: honor CONFIG_MIPS_FP_SUPPORT=n
- powerpc/sysdev: fix incorrect use to determine if list is empty
- mfd: mc13xxx: Add check for mc13xxx_irq_request
- selftests/bpf: Make test_lwt_ip_encap more stable and faster
- powerpc: 8xx: fix a return value error in mpc8xx_pic_init
- vxcan: enable local echo for sent CAN frames
- MIPS: RB532: fix return value of __setup handler
- mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
- bpf, sockmap: Fix more uncharged while msg has more_data
- bpf, sockmap: Fix double uncharge the mem of sk_msg
- USB: storage: ums-realtek: fix error code in rts51x_read_mem()
- Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
- af_netlink: Fix shift out of bounds in group mask calculation
- i2c: mux: demux-pinctrl: do not deactivate a master that is not active
- selftests/bpf/test_lirc_mode2.sh: Exit with proper code
- tcp: ensure PMTU updates are processed during fastopen
- openvswitch: always update flow key after nat
- tipc: fix the timer expires after interval 100ms
- mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
- mxser: fix xmit_buf leak in activate when LSR == 0xff
- pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
- misc: alcor_pci: Fix an error handling path
- staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
- pinctrl: renesas: r8a77470: Reduce size for narrow VIN1 channel
- clk: qcom: ipq8074: Use floor ops for SDCC1 clock
- phy: dphy: Correct lpx parameter and its derivatives(ta_{get,go,sure})
- serial: 8250_mid: Balance reference count for PCI DMA device
- serial: 8250: Fix race condition in RTS-after-send handling
- iio: adc: Add check for devm_request_threaded_irq
- NFS: Return valid errors from nfs2/3_decode_dirent()
- dma-debug: fix return value of __setup handlers
- clk: imx7d: Remove audio_mclk_root_clk
- clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
- clk: qcom: clk-rcg2: Update the frac table for pixel clock
- remoteproc: qcom: Fix missing of_node_put in adsp_alloc_memory_region
- remoteproc: qcom_wcnss: Add missing of_node_put() in
wcnss_alloc_memory_region
- clk: actions: Terminate clk_div_table with sentinel element
- clk: loongson1: Terminate clk_div_table with sentinel element
- clk: clps711x: Terminate clk_div_table with sentinel element
- clk: tegra: tegra124-emc: Fix missing put_device() call in
emc_ensure_emc_driver
- NFS: remove unneeded check in decode_devicenotify_args()
- staging: mt7621-dts: fix LEDs and pinctrl on GB-PC1 devicetree
- pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
- pinctrl: mediatek: paris: Fix "argument" argument type for mtk_pinconf_get()
- pinctrl: mediatek: paris: Fix pingroup pin config state readback
- pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
- pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
- tty: hvc: fix return value of __setup handler
- kgdboc: fix return value of __setup handler
- kgdbts: fix return value of __setup handler
- firmware: google: Properly state IOMEM dependency
- driver core: dd: fix return value of __setup handler
- jfs: fix divide error in dbNextAG
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
- clk: qcom: gcc-msm8994: Fix gpll4 width
- clk: Initialize orphan req_rate
- xen: fix is_xen_pmu()
- net: phy: broadcom: Fix brcm_fet_config_init()
- selftests: test_vxlan_under_vrf: Fix broken test case
- qlcnic: dcb: default to returning -EOPNOTSUPP
- net/x25: Fix null-ptr-deref caused by x25_disconnect
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
- net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list iterator
- lib/test: use after free in register_test_dev_kmod()
- LSM: general protection fault in legacy_parse_param
- gcc-plugins/stackleak: Exactly match strings instead of prefixes
- pinctrl: npcm: Fix broken references to chip->parent_device
- block, bfq: don't move oom_bfqq
- selinux: use correct type for context length
- loop: use sysfs_emit() in the sysfs xxx show()
- Fix incorrect type in assignment of ipv6 port for audit
- irqchip/qcom-pdc: Fix broken locking
- irqchip/nvic: Release nvic_base upon failure
- bfq: fix use-after-free in bfq_dispatch_request
- ACPICA: Avoid walking the ACPI Namespace if it is not there
- lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
- Revert "Revert "block, bfq: honor already-setup queue merges""
- ACPI/APEI: Limit printable size of BERT table data
- PM: core: keep irq flags in device_pm_check_callbacks()
- spi: tegra20: Use of_device_get_match_data()
- ext4: don't BUG if someone dirty pages without asking ext4 first
- ntfs: add sanity check on allocation size
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
- video: fbdev: w100fb: Reset global state
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero
- video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
- ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
- ARM: dts: bcm2837: Add the missing L1/L2 cache information
- ASoC: madera: Add dependencies on MFD
- video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
- video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of
snprintf()
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
- ASoC: soc-core: skip zero num_dai component in searching dai name
- media: cx88-mpeg: clear interrupt status register before streaming video
- ARM: tegra: tamonten: Fix I2C3 pad setting
- ARM: mmp: Fix failure to remove sram device
- video: fbdev: sm712fb: Fix crash in smtcfb_write()
- media: Revert "media: em28xx: add missing em28xx_close_extension"
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup
- powerpc/lib/sstep: Fix 'sthcx' instruction
- powerpc/lib/sstep: Fix build errors with newer binutils
- powerpc: Fix build errors with newer binutils
- scsi: qla2xxx: Fix stuck session in gpdb
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
- scsi: qla2xxx: Fix warning for missing error code
- scsi: qla2xxx: Fix device reconnect in loop topology
- scsi: qla2xxx: Add devids and conditionals for 28xx
- scsi: qla2xxx: Check for firmware dump already collected
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- scsi: qla2xxx: Fix disk failure to rediscover
- scsi: qla2xxx: Fix incorrect reporting of task management failure
- scsi: qla2xxx: Fix hang due to session stuck
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
- scsi: qla2xxx: Fix N2N inconsistent PLOGI
- scsi: qla2xxx: Reduce false trigger to login
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing
- KVM: Prevent module exit until all VMs are freed
- KVM: x86: fix sending PV IPI
- ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- ubifs: rename_whiteout: correct old_dir size computing
- XArray: Fix xas_create_range() when multi-order entry present
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
- can: mcba_usb: properly check endpoint type
- XArray: Update the LRU list in xas_split()
- rtc: check if __rtc_read_time was successful
- gfs2: Make sure FITRIM minlen is rounded up to fs block size
- net: hns3: fix software vlan talbe of vlan 0 inconsistent with hardware
- pinctrl: pinconf-generic: Print arguments for bias-pull-*
- pinctrl: nuvoton: npcm7xx: Rename DS() macro to DSTR()
- pinctrl: nuvoton: npcm7xx: Use %zu printk format for ARRAY_SIZE()
- ASoC: mediatek: mt6358: add missing EXPORT_SYMBOLs
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- ARM: iop32x: offset IRQ numbers by 1
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- powerpc/kasan: Fix early region not updated correctly
- ASoC: soc-compress: Change the check for codec_dai
- mm/mmap: return 1 from stack_guard_gap __setup() handler
- mm/memcontrol: return 1 from cgroup.memory __setup() handler
- mm/usercopy: return 1 from hardened_usercopy __setup() handler
- bpf: Fix comment for helper bpf_current_task_under_cgroup()
- dt-bindings: mtd: nand-controller: Fix the reg property description
- dt-bindings: mtd: nand-controller: Fix a comment in the examples
- dt-bindings: spi: mxic: The interrupt property is not mandatory
- ubi: fastmap: Return error code if memory allocation fails in add_aeb()
- ASoC: topology: Allow TLV control to be either read or write
- ARM: dts: spear1340: Update serial node properties
- ARM: dts: spear13xx: Update SPI dma properties
- um: Fix uml_mconsole stop/go
- openvswitch: Fixed nd target mask field in the flow dump.
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
- KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
- ubifs: Rectify space amount budget for mkdir/tmpfile operations
- rtc: wm8350: Handle error for wm8350_register_irq
- riscv module: remove (NOLOAD)
- ARM: 9187/1: JIVE: fix return value of __setup handler
- KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
- drm: Add orientation quirk for GPD Win Max
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
- ptp: replace snprintf with sysfs_emit
- powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
- bpf: Make dst_port field in struct bpf_sock 16-bit wide
- scsi: mvsas: Replace snprintf() with sysfs_emit()
- scsi: bfa: Replace snprintf() with sysfs_emit()
- power: supply: axp20x_battery: properly report current when discharging
- ipv6: make mc_forwarding atomic
- powerpc: Set crashkernel offset to mid of RMA region
- drm/amdgpu: Fix recursive locking warning
- PCI: aardvark: Fix support for MSI interrupts
- iommu/arm-smmu-v3: fix event handling soft lockup
- usb: ehci: add pci device support for Aspeed platforms
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- power: supply: axp288-charger: Set Vhold to 4.4V
- ipv4: Invalidate neighbour for broadcast address upon address addition
- dm ioctl: prevent potential spectre v1 gadget
- drm/amdkfd: make CRAT table missing message informational only
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
- scsi: aha152x: Fix aha152x_setup() __setup handler return value
- net/smc: correct settings of RMB window update limit
- mips: ralink: fix a refcount leak in ill_acc_of_setup()
- macvtap: advertise link netns via netlink
- tuntap: add sanity checks about msg_controllen in sendmsg
- bnxt_en: Eliminate unintended link toggle during FW reset
- MIPS: fix fortify panic when copying asm exception handlers
- scsi: libfc: Fix use after free in fc_exch_abts_resp()
- usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
- xtensa: fix DTC warning unit_address_format
- Bluetooth: Fix use after free in hci_send_acl
- netlabel: fix out-of-bounds memory accesses
- init/main.c: return 1 from handled __setup() functions
- minix: fix bug when opening a file with O_DIRECT
- clk: si5341: fix reported clk_rate when output divider is 2
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors
- NFSv4: Protect the state recovery thread against direct reclaim
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
- clk: Enforce that disjoints limits are invalid
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory
- NFS: swap IO handling is slightly different for O_DIRECT IO
- NFS: swap-out must always use STABLE writes.
- serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
- virtio_console: eliminate anonymous module_init & module_exit
- jfs: prevent NULL deref in diFree
- SUNRPC: Fix socket waits for write buffer space
- parisc: Fix CPU affinity for Lasi, WAX and Dino chips
- parisc: Fix patch code locking and flushing
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
- Drivers: hv: vmbus: Fix potential crash on module unload
- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
- net/tls: fix slab-out-of-bounds bug in decrypt_internal
- net: ipv4: fix route with nexthop object delete warning
- net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
- drm/imx: Fix memory leak in imx_pd_connector_get_modes
- bnxt_en: reserve space inside receive page for skb_shared_info
- IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition
- dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
- ipv6: Fix stats accounting in ip6_pkt_drop
- net: openvswitch: don't send internal clone attribute to the userspace.
- rxrpc: fix a race in rxrpc_exit_net()
- qede: confirm skb is allocated before using
- spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
- drbd: Fix five use after free bugs in get_initial_state
- SUNRPC: Handle ENOMEM in call_transmit_status()
- SUNRPC: Handle low memory situations in call_status()
- perf tools: Fix perf's libperf_print callback
- perf session: Remap buf if there is no space for event
- Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
- mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is
complete
- lz4: fix LZ4_decompress_safe_partial read out of bound
- mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace
- x86/pm: Save the MSR validity status at context setup
- x86/speculation: Restore speculation related MSRs during S3 resume
- btrfs: fix qgroup reserve overflow the qgroup limit
- arm64: patch_text: Fixup last cpu should be master
- ata: sata_dwc_460ex: Fix crash due to OOB write
- perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
- irqchip/gic-v3: Fix GICR_CTLR.RWP polling
- tools build: Filter out options and warnings not supported by clang
- tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
- mmc: mmci_sdmmc: Replace sg_dma_xxx macros
- mmc: mmci: stm32: correctly check all elements of sg list
- mm: don't skip swap entry even if zap_details specified
- arm64: module: remove (NOLOAD) from linker script
- mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
- drm/amdkfd: add missing void argument to function kgd2kfd_init
- drm/amdkfd: Fix -Wstrict-prototypes from
amdgpu_amdkfd_gfx_10_0_get_functions()
- cgroup: Use open-time credentials for process migraton perm checks
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
- cgroup: Use open-time cgroup namespace for process migration perm checks
- selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
- selftests: cgroup: Test open-time credential usage for migration checks
- selftests: cgroup: Test open-time cgroup namespace usage for migration
checks
- cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function
- ACPI: processor idle: Check for architectural support for LPI
- Linux 5.4.189
* Focal update: v5.4.188 upstream stable release (LP: #1971496)
- nfsd: cleanup nfsd_file_lru_dispose()
- nfsd: Containerise filecache laundrette
- net: ipv6: fix skb_over_panic in __ip6_append_data
- tpm: Fix error handling in async work
- staging: fbtft: fb_st7789v: reset display before initialization
- thermal: int340x: fix memory leak in int3400_notify()
- llc: fix netdevice reference leaks in llc_ui_bind()
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- drivers: net: xgene: Fix regression in CRC stripping
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
- ALSA: oss: Fix PCM OSS buffer allocation overflow
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
- ALSA: hda/realtek: Add quirk for ASUS GA402
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- crypto: qat - disable registration of algorithms
- rcu: Don't deboost before reporting expedited quiescent state
- mac80211: fix potential double free on mesh join
- tpm: use try_get_ops() in tpm-space.c
- nds32: fix access_ok() checks in get/put_user
- llc: only change llc->dev when bind() succeeds
- Linux 5.4.188
* Focal update: v5.4.187 upstream stable release (LP: #1971493)
- crypto: qcom-rng - ensure buffer for generate is completely filled
- ocfs2: fix crash when initialize filecheck kobj fails
- efi: fix return value of __setup handlers
- net: phy: marvell: Fix invalid comparison in the resume and suspend
functions
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- hv_netvsc: Add check for kvmalloc_array
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- net: dsa: Add missing of_node_put() in dsa_port_parse_of
- arm64: fix clang warning about TRAMP_VALIAS
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- usb: usbtmc: Fix bug in pipe direction for control transfers
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- Linux 5.4.187
* Focal update: v5.4.186 upstream stable release (LP: #1969678)
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
- sctp: fix the processing for INIT chunk
- xfrm: Check if_id in xfrm_migrate
- xfrm: Fix xfrm migrate issues when address family changes
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
- arm64: dts: rockchip: reorder rk3399 hdmi clocks
- arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg"
- ARM: dts: rockchip: reorder rk322x hmdi clocks
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
- mac80211: refuse aggregations sessions before authorized
- MIPS: smp: fill in sibling and core maps earlier
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when
fully ready
- atm: firestream: check the return value of ioremap() in fs_init()
- iwlwifi: don't advertise TWT support
- drm/vrr: Set VRR capable prop only if it is attached to connector
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- tcp: make tcp_read_sock() more robust
- sfc: extend the locking on mcdi->seqno
- kselftest/vm: fix tests build with old libc
- fixup for "arm64 entry: Add macro for reading symbol address from the
trampoline"
- Linux 5.4.186
* Focal update: v5.4.185 upstream stable release (LP: #1969672)
- clk: qcom: gdsc: Add support to update GDSC transition delay
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
- net: qlogic: check the return value of dma_alloc_coherent() in
qed_vf_hw_prepare()
- qed: return status of qed_iov_get_link
- drm/sun4i: mixer: Fix P010 and P210 format numbers
- ARM: dts: aspeed: Fix AST2600 quad spi group
- ethernet: Fix error handling in xemaclite_of_probe
- net: ethernet: ti: cpts: Handle error for clk_enable
- net: ethernet: lpc_eth: Handle error for clk_enable
- ax25: Fix NULL pointer dereference in ax25_kill_by_device
- net/mlx5: Fix size field in bufferx_reg struct
- net/mlx5: Fix a race on command flush flow
- NFC: port100: fix use-after-free in port100_send_complete
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell.
- gpio: ts4900: Do not set DAT and OE together
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
- net: phy: DP83822: clear MISR2 register to disable interrupts
- sctp: fix kernel-infoleak for SCTP sockets
- net: bcmgenet: Don't claim WOL when its not available
- net-sysfs: add check for netdevice being present to speed_show
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
- Revert "xen-netback: Check for hotplug-status existence before watching"
- ipv6: prevent a possible race condition with lifetimes
- tracing: Ensure trace buffer is at least 4096 bytes large
- selftest/vm: fix map_fixed_noreplace test failure
- selftests/memfd: clean up mapping in mfd_fail_write
- ARM: Spectre-BHB: provide empty stub for non-config
- fuse: fix pipe buffer lifetime for direct_io
- staging: gdm724x: fix use after free in gdm_lte_rx()
- net: macb: Fix lost RX packet wakeup race in NAPI receive
- mmc: meson: Fix usage of meson_mmc_post_req()
- riscv: Fix auipc+jalr relocation range checks
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0
- virtio: unexport virtio_finalize_features
- virtio: acknowledge all features before access
- ARM: fix Thumb2 regression with Spectre BHB
- ext4: add check to prevent attempting to resize an fs with sparse_super2
- x86/cpufeatures: Mark two free bits in word 3
- x86/cpu: Add hardware-enforced cache coherency as a CPUID feature
- x86/mm/pat: Don't flush cache if hardware enforces cache coherency across
encryption domnains
- KVM: SVM: Don't flush cache if hardware enforces cache coherency across
encryption domains
- Linux 5.4.185
* Focal update: v5.4.184 upstream stable release (LP: #1969242)
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()
- ARM: report Spectre v2 status through sysfs
- ARM: early traps initialisation
- ARM: use LOADADDR() to get load address of sections
- [Config] updateconfigs for HARDEN_BRANCH_HISTORY
- ARM: Spectre-BHB workaround
- ARM: include unprivileged BPF status in Spectre V2 reporting
- ARM: fix build error when BPF_SYSCALL is disabled
- ARM: fix co-processor register typo
- ARM: Do not use NOCROSSREFS directive with ld.lld
- ARM: fix build warning in proc-v7-bugs.c
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
- xen/grant-table: add gnttab_try_end_foreign_access()
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
- xen/gntalloc: don't use gnttab_query_foreign_access()
- xen: remove gnttab_query_foreign_access()
- xen/9p: use alloc/free_pages_exact()
- xen/pvcalls: use alloc/free_pages_exact()
- xen/gnttab: fix gnttab_end_foreign_access() without page specified
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
- Linux 5.4.184
* Focal update: v5.4.183 upstream stable release (LP: #1969239)
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- i2c: bcm2835: Avoid clock stretching timeouts
- ASoC: rt5668: do not block workqueue if card is unbound
- ASoC: rt5682: do not block workqueue if card is unbound
- Input: clear BTN_RIGHT/MIDDLE on buttonpads
- cifs: fix double free race when mount fails in cifs_get_root()
- dmaengine: shdma: Fix runtime PM imbalance on error
- i2c: cadence: allow COMPILE_TEST
- i2c: qup: allow COMPILE_TEST
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- usb: gadget: don't release an existing dev->buf
- usb: gadget: clear related members when goto fail
- ata: pata_hpt37x: fix PCI clock detection
- ALSA: intel_hdmi: Fix reference to PCM buffer address
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- xfrm: enforce validity of offload input flags
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- block: Fix fsync always failed if once failed
- xen/netfront: destroy queues before real_num_tx_queues is zeroed
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
- ia64: ensure proper NUMA distance and possible map initialization
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- iavf: Fix missing check for running netdev
- net: sxgbe: fix return value of __setup handler
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
- efivars: Respect "block" flag in efivar_entry_set_safe()
- firmware: arm_scmi: Remove space in MODULE_ALIAS name
- ASoC: cs4265: Fix the duplicated control name
- can: gs_usb: change active_channels's type from atomic_t to u8
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output
- igc: igc_read_phy_reg_gpy: drop premature return
- ARM: Fix kgdb breakpoint for Thumb2
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
- igc: igc_write_phy_reg_gpy: drop premature return
- ibmvnic: free reset-work-item when flushing
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- soc: fsl: qe: Check of ioremap return value
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- nl80211: Handle nla_memdup failures in handle_nan_filter
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
- HID: add mapping for KEY_DICTATE
- HID: add mapping for KEY_ALL_APPLICATIONS
- tracing/histogram: Fix sorting on old "cpu" value
- tracing: Fix return value of __setup handlers
- btrfs: fix lost prealloc extents beyond eof after full fsync
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
- btrfs: add missing run of delayed items after unlink during log replay
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
- net: dcb: disable softirqs in dcbnl_flush_dev()
- hamradio: fix macro redefine warning
- Linux 5.4.183
* Focal update: v5.4.182 upstream stable release (LP: #1969236)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
- clk: jz4725b: fix mmc0 clock gating
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
- parisc/unaligned: Fix ldw() and stw() unalignment handlers
- drm/amdgpu: disable MMHUB PG for Picasso
- sr9700: sanity check for packet length
- USB: zaurus: support another broken Zaurus
- x86/fpu: Correct pkru/xstate inconsistency
- tee: export teedev_open() and teedev_close_context()
- optee: use driver internal tee_context for some rpc
- lan743x: fix deadlock in lan743x_phy_link_status_change()
- ping: remove pr_err from ping_lookup
- perf data: Fix double free in perf_session__delete()
- bpf: Do not try bpf_msg_push_data with len 0
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
- tipc: Fix end of loop tests for list_for_each_entry()
- gso: do not skip outer ip header in case of ipip and net_failover
- openvswitch: Fix setting ipv6 fields causing hw csum failure
- drm/edid: Always set RGB444
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
- net: ll_temac: check the return value of devm_kmalloc()
- net: Force inlining of checksum functions in net/checksum.h
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
- netfilter: nf_tables: fix memory leak during stateful obj update
- net/mlx5: Fix possible deadlock on rule deletion
- net/mlx5: Fix wrong limitation of metadata match on ecpf
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in
zynq_qspi_exec_mem_op()
- configfs: fix a race in configfs_{,un}register_subsystem()
- RDMA/ib_srp: Fix a deadlock
- tracing: Have traceon and traceoff trigger honor the instance
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path
- iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
- iio: Fix error handling for PM
- ata: pata_hpt37x: disable primary channel on HPT371
- Revert "USB: serial: ch341: add new Product ID for CH341A"
- usb: gadget: rndis: add spinlock for rndis response list
- tracefs: Set the group ownership in apply_options() not parse_options()
- USB: serial: option: add support for DW5829e
- USB: serial: option: add Telit LE910R1 compositions
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
- xhci: re-initialize the HC during resume if HCE was set
- xhci: Prevent futile URB re-submissions due to incorrect return value.
- tty: n_gsm: fix encoding of control signal octet bit DV
- tty: n_gsm: fix proper link termination after failed open
- tty: n_gsm: fix NULL pointer access due to DLCI release
- gpio: tegra186: Fix chip_data type confusion
- Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of
DEVINIT/PREOS/ACR"
- memblock: use kfree() to release kmalloced memblock regions
- fget: clarify and improve __fget_files() implementation
- Linux 5.4.182
* CVE-2022-28390
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
[ Ubuntu: 5.4.0-113.127 ]
* focal/linux: 5.4.0-113.127 -proposed tracker (LP: #1973980)
* CVE-2022-29581
- net/sched: cls_u32: fix netns refcount changes in u32_change()
* CVE-2022-1116
- io_uring: fix fs->users overflow
* ext4: limit length to bitmap_maxbytes (LP: #1972281)
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
option (LP: #1972740)
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
[ Ubuntu: 5.4.0-110.124 ]
* focal/linux: 5.4.0-110.124 -proposed tracker (LP: #1969053)
* net/mlx5e: Fix page DMA map/unmap attributes (LP: #1967292)
- net/mlx5e: Fix page DMA map/unmap attributes
* xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()
(LP: #1966803)
- xfs: Fix deadlock between AGI and AGF when target_ip exists in xfs_rename()
* LRMv6: add multi-architecture support (LP: #1968774)
- [Packaging] resync dkms-build{,--nvidia-N}
* xfrm interface cannot be changed anymore (LP: #1968591)
- xfrm: fix the if_id check in changelink
* Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
- [Debian] Use kernel-testing repo from launchpad
* vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
selector (got 50)) (LP: #1956315)
- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
* [SRU][Regression] Revert "PM: ACPI: reboot: Use S5 for reboot" which causes
Bus Fatal Error when rebooting system with BCM5720 NIC (LP: #1917471)
- Revert "PM: ACPI: reboot: Use S5 for reboot"
* Focal update: v5.4.181 upstream stable release (LP: #1967582)
- Makefile.extrawarn: Move -Wunaligned-access to W=1
- HID:Add support for UGTABLET WP5540
- Revert "svm: Add warning message for AVIC IPI invalid target"
- serial: parisc: GSC: fix build when IOSAPIC is not set
- parisc: Drop __init from map_pages declaration
- parisc: Fix data TLB miss in sba_unmap_sg
- parisc: Fix sglist access in ccio-dma.c
- btrfs: send: in case of IO error log it
- platform/x86: ISST: Fix possible circular locking dependency detected
- selftests: rtc: Increase test timeout so that all tests run
- net: ieee802154: at86rf230: Stop leaking skb's
- selftests/zram: Skip max_comp_streams interface on newer kernel
- selftests/zram01.sh: Fix compression ratio calculation
- selftests/zram: Adapt the situation that /dev/zram0 is being used
- ax25: improve the incomplete fix to avoid UAF and NPD bugs
- vfs: make freeze_super abort when sync_filesystem returns error
- quota: make dquot_quota_sync return errors from ->sync_fs
- nvme: fix a possible use-after-free in controller reset during load
- nvme-tcp: fix possible use-after-free in transport error_recovery work
- nvme-rdma: fix possible use-after-free in transport error_recovery work
- drm/amdgpu: fix logic inversion in check
- Revert "module, async: async_synchronize_full() on module init iff async is
used"
- ftrace: add ftrace_init_nop()
- module/ftrace: handle patchable-function-entry
- arm64: module: rework special section handling
- arm64: module/ftrace: intialize PLT at load time
- iwlwifi: fix use-after-free
- drm/radeon: Fix backlight control on iMac 12,1
- ext4: check for out-of-order index extents in ext4_valid_extent_entries()
- ext4: check for inconsistent extents between index and leaf block
- ext4: prevent partial update of the extent blocks
- taskstats: Cleanup the use of task->exit_code
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending
- vsock: remove vsock from connected table when connect is interrupted by a
signal
- mmc: block: fix read single on recovery logic
- iwlwifi: pcie: fix locking when "HW not ready"
- iwlwifi: pcie: gen2: fix locking when "HW not ready"
- netfilter: nft_synproxy: unregister hooks on init error path
- net: dsa: lan9303: fix reset on probe
- net: ieee802154: ca8210: Fix lifs/sifs periods
- ping: fix the dif and sdif check in ping_lookup
- bonding: force carrier update when releasing slave
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
- bonding: fix data-races around agg_select_timer
- libsubcmd: Fix use-after-free for realloc(..., 0)
- ALSA: hda: Fix regression on forced probe mask option
- ALSA: hda: Fix missing codec probe on Shenker Dock 15
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
- powerpc/lib/sstep: fix 'ptesync' build error
- mtd: rawnand: gpmi: don't leak PM reference in error path
- block/wbt: fix negative inflight counter when remove scsi device
- NFS: LOOKUP_DIRECTORY is also ok with symlinks
- NFS: Do not report writeback errors in nfs_getattr()
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe()
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
- EDAC: Fix calculation of returned address and next offset in
edac_align_ptr()
- net: sched: limit TC_ACT_REPEAT loops
- dmaengine: sh: rcar-dmac: Check for error num after setting mask
- copy_process(): Move fd_install() out of sighand->siglock critical section
- i2c: brcmstb: fix support for DSL and CM variants
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
- ARM: OMAP2+: hwmod: Add of_node_put() before break
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of
- irqchip/sifive-plic: Add missing thead,c900-plic match string
- netfilter: conntrack: don't refresh sctp entries in closed state
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610
- kconfig: let 'shell' return enough output for deep path names
- ata: libata-core: Disable TRIM on M88V29
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot
- net: usb: qmi_wwan: Add support for Dell DW5829e
- net: macb: Align the dma and coherent dma masks
- kconfig: fix failing to generate auto.conf
- Linux 5.4.181
* Focal update: v5.4.180 upstream stable release (LP: #1966118)
- integrity: check the return value of audit_log_start()
- ima: Remove ima_policy file before directory
- ima: Allow template selection with ima_template[_fmt]= after ima_hash=
- ima: Do not print policy rule with inactive LSM labels
- mmc: sdhci-of-esdhc: Check for error num after setting mask
- net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs
- net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
- NFS: Fix initialisation of nfs_client cl_flags field
- NFSD: Clamp WRITE offsets
- NFSD: Fix offset type in I/O trace points
- NFSv4 only print the label when its queried
- nfs: nfs4clinet: check the return value of kstrdup()
- NFSv4.1: Fix uninitialised variable in devicenotify
- NFSv4 remove zero number of fs_locations entries error check
- NFSv4 expose nfs_parse_server_name function
- drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
- net: sched: Clarify error message when qdisc kind is unknown
- scsi: target: iscsi: Make sure the np under each tpg is unique
- scsi: qedf: Fix refcount issue when LOGO is received during TMF
- scsi: myrs: Fix crash in error case
- PM: hibernate: Remove register_nosave_region_late()
- usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
- riscv: fix build with binutils 2.38
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
- ARM: socfpga: fix missing RESET_CONTROLLER
- nvme-tcp: fix bogus request completion when failing to send AER
- ACPI/IORT: Check node revision for PMCG resources
- PM: s2idle: ACPI: Fix wakeup interrupts handling
- net: bridge: fix stale eth hdr pointer in br_dev_xmit
- perf probe: Fix ppc64 'perf probe add events failed' case
- ARM: dts: meson: Fix the UART compatible strings
- staging: fbtft: Fix error path in fbtft_driver_module_init()
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
- usb: f_fs: Fix use-after-free for epfile
- misc: fastrpc: avoid double fput() on failed usercopy
- ixgbevf: Require large buffers for build_skb on 82599VF
- bonding: pair enable_port with slave_arr_updates
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
- nfp: flower: fix ida_idx not being released
- net: do not keep the dst cache when uncloning an skb dst and its metadata
- net: fix a memleak when uncloning an skb dst and its metadata
- veth: fix races around rq->rx_notify_masked
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
- tipc: rate limit warning for received illegal binding update
- net: amd-xgbe: disable interrupts during pci removal
- vt_ioctl: fix array_index_nospec in vt_setactivate
- vt_ioctl: add array_index_nospec to VT_ACTIVATE
- n_tty: wake up poll(POLLRDNORM) on receiving data
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
- usb: ulpi: Move of_node_put to ulpi_dev_release
- usb: ulpi: Call of_node_put correctly
- usb: dwc3: gadget: Prevent core from processing stale TRBs
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition
- USB: gadget: validate interface OS descriptor requests
- usb: gadget: rndis: check size of RNDIS_MSG_SET command
- usb: gadget: f_uac2: Define specific wTerminalType
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
- USB: serial: option: add ZTE MF286D modem
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
- USB: serial: cp210x: add NCR Retail IO box id
- USB: serial: cp210x: add CPI Bulk Coin Recycler id
- seccomp: Invalidate seccomp mode to catch death failures
- hwmon: (dell-smm) Speed up setting of fan speed
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
- perf: Fix list corruption in perf_cgroup_switch()
- Linux 5.4.180
* Focal update: v5.4.179 upstream stable release (LP: #1965591)
- moxart: fix potential use-after-free on remove path
- Linux 5.4.179
* CVE-2020-27820
- drm/nouveau: Add a dedicated mutex for the clients list
- drm/nouveau: clean up all clients on device removal
* CVE-2022-1016
- netfilter: nf_tables: initialize registers in nft_do_chain()
* CVE-2022-27223
- USB: gadget: validate endpoint index for xilinx udc
* CVE-2022-26490
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
* CVE-2021-26401
- x86/speculation: Use generic retpoline by default on AMD
- x86/speculation: Update link to AMD speculation whitepaper
- x86/speculation: Warn about Spectre v2 LFENCE mitigation
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
* CVE-2022-0001
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
reporting
[ Ubuntu: 5.4.0-109.123 ]
* focal/linux: 5.4.0-109.123 -proposed tracker (LP: #1968290)
* USB devices not detected during boot on USB 3.0 hubs (LP: #1968210)
- SAUCE: Revert "Revert "xhci: Set HCD flag to defer primary roothub
registration""
- SAUCE: Revert "Revert "usb: core: hcd: Add support for deferring roothub
registration""
[ Ubuntu: 5.4.0-108.122 ]
* focal/linux: 5.4.0-108.122 -proposed tracker (LP: #1966740)
* Packaging resync (LP: #1786013)
- [Packaging] resync dkms-build{,--nvidia-N} from LRMv5
- debian/dkms-versions -- update from kernel-versions (main/2022.03.21)
* Low RX performance for 40G Solarflare NICs (LP: #1964512)
- SAUCE: sfc: The size of the RX recycle ring should be more flexible
* [UBUNTU 20.04] KVM: Enable storage key checking for intercepted instruction
(LP: #1962831)
- selftests: kvm: add _vm_ioctl
- selftests: kvm: Introduce the TEST_FAIL macro
- KVM: selftests: Add GUEST_ASSERT variants to pass values to host
- KVM: s390: gaccess: Refactor gpa and length calculation
- KVM: s390: gaccess: Refactor access address range check
- KVM: s390: gaccess: Cleanup access to guest pages
- s390/uaccess: introduce bit field for OAC specifier
- s390/uaccess: fix compile error
- s390/uaccess: Add copy_from/to_user_key functions
- KVM: s390: Honor storage keys when accessing guest memory
- KVM: s390: handle_tprot: Honor storage keys
- KVM: s390: selftests: Test TEST PROTECTION emulation
- KVM: s390: Add optional storage key checking to MEMOP IOCTL
- KVM: s390: Add vm IOCTL for key checked guest absolute memory access
- KVM: s390: Rename existing vcpu memop functions
- KVM: s390: Add capability for storage key extension of MEM_OP IOCTL
- KVM: s390: Update api documentation for memop ioctl
- KVM: s390: Clarify key argument for MEM_OP in api docs
- KVM: s390: Add missing vm MEM_OP size check
* 【sec-0911】 fail to reset sec module (LP: #1943301)
- crypto: hisilicon/sec2 - Add workqueue for SEC driver.
- crypto: hisilicon/sec2 - update SEC initialization and reset
* Lots of hisi_qm zombie task slow down system after stress test
(LP: #1932117)
- crypto: hisilicon - Use one workqueue per qm instead of per qp
* Lots of hisi_qm zombie task slow down system after stress test
(LP: #1932117) // 【sec-0911】 fail to reset sec module (LP: #1943301)
- crypto: hisilicon - Unify hardware error init/uninit into QM
* [UBUNTU 20.04] Fix SIGP processing on KVM/s390 (LP: #1962578)
- KVM: s390: Simplify SIGP Set Arch handling
- KVM: s390: Add a routine for setting userspace CPU state
* Move virtual graphics drivers from linux-modules-extra to linux-modules
(LP: #1960633)
- [Packaging] Move VM DRM drivers into modules
* Focal update: v5.4.178 upstream stable release (LP: #1964634)
- audit: improve audit queue handling when "audit=1" on cmdline
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- ALSA: usb-audio: Simplify quirk entries with a macro
- ALSA: hda/realtek: Add quirk for ASUS GU603
- ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
quirks
- ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
chipset)
- ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
reboot from Windows
- btrfs: fix deadlock between quota disable and qgroup rescan worker
- drm/nouveau: fix off by one in BIOS boundary checking
- mm/kmemleak: avoid scanning potential huge holes
- block: bio-integrity: Advance seed correctly for larger interval sizes
- memcg: charge fs_context and legacy_fs_context
- IB/rdmavt: Validate remote_addr during loopback atomic tests
- RDMA/siw: Fix broken RDMA Read Fence/Resume logic.
- RDMA/mlx4: Don't continue event handler after memory allocation failure
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping()
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
- spi: bcm-qspi: check for valid cs before applying chip select
- spi: mediatek: Avoid NULL pointer crash in interrupt
- spi: meson-spicc: add IRQ check in meson_spicc_probe
- net: ieee802154: hwsim: Ensure proper channel selection at probe time
- net: ieee802154: mcr20a: Fix lifs/sifs periods
- net: ieee802154: ca8210: Stop leaking skb's
- net: ieee802154: Return meaningful error codes from the netlink helpers
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly
- net: stmmac: dump gmac4 DMA registers correctly
- net: stmmac: ensure PTP time register reads are consistent
- drm/i915/overlay: Prevent divide by zero bugs in scaling
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes
- ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name
- ASoC: max9759: fix underflow in speaker_gain_control_put()
- pinctrl: bcm2835: Fix a few error paths
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
- selftests: futex: Use variable MAKE instead of make
- rtc: cmos: Evaluate century appropriate
- EDAC/altera: Fix deferred probing
- EDAC/xgene: Fix deferred probing
- ext4: fix error handling in ext4_restore_inline_data()
- cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
- Linux 5.4.178
* Focal update: v5.4.177 upstream stable release (LP: #1964628)
- PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
- psi: Fix uaf issue when psi trigger is destroyed while being polled
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- net: amd-xgbe: ensure to reset the tx_timer_active flag
- net: amd-xgbe: Fix skb data length underflow
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- Linux 5.4.177
* Focal update: v5.4.176 upstream stable release (LP: #1962345)
- s390/hypfs: include z/VM guests with access control group set
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP
devices
- udf: Restore i_lenAlloc when inode expansion fails
- udf: Fix NULL ptr deref when converting from inline format
- PM: wakeup: simplify the output logic of pm_show_wakelocks()
- tracing/histogram: Fix a potential memory leak for kstrdup()
- tracing: Don't inc err_log entry count if entry allocation fails
- fsnotify: fix fsnotify hooks in pseudo filesystems
- drm/etnaviv: relax submit size limits
- arm64: errata: Fix exec handling in erratum 1418040 workaround
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: 8250: of: Fix mapped region size when using reg-offset property
- serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- ucsi_ccg: Check DEV_INT bit only when starting CCG4
- net: sfp: ignore disabled SFP node
- powerpc/32: Fix boot failure with GCC latent entropy plugin
- i40e: Increase delay to 1 s after global EMP reset
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- i40e: fix unsigned stat widths
- rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
- rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- ipv6_tunnel: Rate limit warning messages
- net: fix information leakage in /proc/net/ptype
- hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
- hwmon: (lm90) Mark alert as broken for MAX6680
- ping: fix the sk_bound_dev_if match in ping_lookup
- ipv4: avoid using shared IP generator for connected sockets
- hwmon: (lm90) Reduce maximum conversion rate for G781
- NFSv4: Handle case where the lookup of a directory fails
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file
- net-procfs: show net devices bound packet types
- drm/msm: Fix wrong size calculation
- drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
- ipv6: annotate accesses to fn->fn_sernum
- NFS: Ensure the server has an up to date ctime before hardlinking
- NFS: Ensure the server has an up to date ctime before renaming
- netfilter: conntrack: don't increment invalid counter on NF_REPEAT
- net: phy: broadcom: hook up soft_reset for BCM54616S
- phylib: fix potential use-after-free
- rxrpc: Adjust retransmission backoff
- hwmon: (lm90) Mark alert as broken for MAX6654
- ibmvnic: init ->running_cap_crqs early
- ibmvnic: don't spin in tasklet
- drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
- yam: fix a memory leak in yam_siocdevprivate()
- net: hns3: handle empty unknown interrupt for VF
- ipv4: raw: lock the socket in raw_bind()
- ipv4: tcp: send zero IPID in SYNACK messages
- ipv4: remove sparse error in ip_neigh_gw4()
- dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
- fsnotify: invalidate dcache before IN_DELETE event
- block: Fix wrong offset in bio_truncate()
- mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip()
- Linux 5.4.176
* Focal update: v5.4.175 upstream stable release (LP: #1962330)
- rcu: Tighten rcu_advance_cbs_nowake() checks
- pinctrl: bcm2835: Drop unused define
- pinctrl: bcm2835: Refactor platform data
- pinctrl: bcm2835: Add support for all GPIOs on BCM2711
- pinctrl: bcm2835: Match BCM7211 compatible string
- pinctrl: bcm2835: Add support for wake-up interrupts
- pinctrl: bcm2835: Change init order for gpio hogs
- ARM: dts: gpio-ranges property is now required
- mmc: sdhci-esdhc-imx: disable CMDQ support
- select: Fix indefinitely sleeping task in poll_schedule_timeout()
- Linux 5.4.175
[ Ubuntu: 5.4.0-107.121 ]
* focal/linux: 5.4.0-107.121 -proposed tracker (LP: #1966275)
* CVE-2022-27666
- esp: Fix possible buffer overflow in ESP transformation
* CVE-2022-1055
- net: sched: fix use-after-free in tc_new_tfilter()
* Pick fixup from v5.4.176 upstream stable release to address cert
failure with clock jitter test in NUC7i3DNHE (LP: #1964204)
- Bluetooth: refactor malicious adv data check
Date: 2022-09-06 04:28:08.551904+00:00
Changed-By: Jesse Sung <jesse.sung at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-iot/5.4.0-1004.6
-------------- next part --------------
Sorry, changesfile not available.
More information about the Focal-changes
mailing list