Please note that the following SAUCE patches were reverted: * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: Add helper function for creating VM worker threads" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation" * UBUNTU: SAUCE: Revert "kvm: x86, powerpc: do not allow clearing largepages debugfs entry" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure" * UBUNTU: SAUCE: Revert "x86/tsx: Add config options to set tsx=on|off|auto" * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add documentation for TSX Async Abort" * UBUNTU: SAUCE: Revert "x86/tsx: Add "auto" option to the tsx= cmdline parameter" * UBUNTU: SAUCE: Revert "kvm/x86: Export MDS_NO=0 to guests when TSX is enabled" * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add sysfs reporting for TSX Async Abort" * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add mitigation for TSX Async Abort" * UBUNTU: SAUCE: Revert "x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default" * UBUNTU: SAUCE: Revert "x86/cpu: Add a helper function x86_read_arch_cap_msr()" * UBUNTU: SAUCE: Revert "x86/msr: Add the IA32_TSX_CTRL MSR" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Add support for backward jumps" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Use explicit goto for error paths" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Add gen9 BCS cmdparsing" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Allow parsing of unsized batches" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Add support for mandatory cmdparsing" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Remove Master tables from cmdparser" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Disable Secure Batches for gen6+" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Rename gen7 cmdparser tables"
In favor of their upstream stable versions: * drm/i915: Rename gen7 cmdparser tables * drm/i915: Disable Secure Batches for gen6+ * drm/i915: Remove Master tables from cmdparser * drm/i915: Add support for mandatory cmdparsing * drm/i915: Support ro ppgtt mapped cmdparser shadow buffers * drm/i915: Allow parsing of unsized batches * drm/i915: Add gen9 BCS cmdparsing * drm/i915/cmdparser: Use explicit goto for error paths * drm/i915/cmdparser: Add support for backward jumps * drm/i915/cmdparser: Ignore Length operands during command matching * drm/i915: Lower RM timeout to avoid DSI hard hangs * drm/i915/gen8+: Add RC6 CTX corruption WA * drm/i915/cmdparser: Fix jump whitelist clearing * x86/msr: Add the IA32_TSX_CTRL MSR * x86/cpu: Add a helper function x86_read_arch_cap_msr() * x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default * x86/speculation/taa: Add mitigation for TSX Async Abort * x86/speculation/taa: Add sysfs reporting for TSX Async Abort * kvm/x86: Export MDS_NO=0 to guests when TSX is enabled * x86/tsx: Add "auto" option to the tsx= cmdline parameter * x86/speculation/taa: Add documentation for TSX Async Abort * x86/tsx: Add config options to set tsx=on|off|auto * x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs * x86/bugs: Add ITLB_MULTIHIT bug infrastructure * x86/cpu: Add Tremont to the cpu vulnerability whitelist * cpu/speculation: Uninline and export CPU mitigations helpers * Documentation: Add ITLB_MULTIHIT documentation * kvm: x86, powerpc: do not allow clearing largepages debugfs entry * kvm: mmu: ITLB_MULTIHIT mitigation * kvm: Add helper function for creating VM worker threads * kvm: x86: mmu: Recovery of shattered NX large pages ** Description changed: - - SRU Justification - - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: - - 5.3.11 upstream stable release - from git://git.kernel.org/ + SRU Justification + + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: + + * bonding: fix state transition issue in link monitoring + * CDC-NCM: handle incomplete transfer of MTU + * ipv4: Fix table id reference in fib_sync_down_addr + * net: ethernet: octeon_mgmt: Account for second possible VLAN header + * net: fix data-race in neigh_event_send() + * net: qualcomm: rmnet: Fix potential UAF when unregistering + * net/tls: fix sk_msg trim on fallback to copy mode + * net: usb: qmi_wwan: add support for DW5821e with eSIM support + * NFC: fdp: fix incorrect free object + * nfc: netlink: fix double device reference drop + * NFC: st21nfca: fix double free + * qede: fix NULL pointer deref in __qede_remove() + * net: mscc: ocelot: don't handle netdev events for other netdevs + * net: mscc: ocelot: fix NULL pointer on LAG slave removal + * net/tls: don't pay attention to sk_write_pending when pushing partial records + * net/tls: add a TX lock + * selftests/tls: add test for concurrent recv and send + * ipv6: fixes rt6_probe() and fib6_nh->last_probe init + * net: hns: Fix the stray netpoll locks causing deadlock in NAPI path + * net: prevent load/store tearing on sk->sk_stamp + * net: sched: prevent duplicate flower rules from tcf_proto destroy race + * net/smc: fix ethernet interface refcounting + * vsock/virtio: fix sock refcnt holding during the shutdown + * r8169: fix page read in r8168g_mdio_read + * ALSA: timer: Fix incorrectly assigned timer instance + * ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series + * ALSA: hda/ca0132 - Fix possible workqueue stall + * mm: memcontrol: fix NULL-ptr deref in percpu stats flush + * mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges + * mm, meminit: recalculate pcpu batch and high limits after init completes + * mm: thp: handle page cache THP correctly in PageTransCompoundMap + * mm, vmstat: hide /proc/pagetypeinfo from normal users + * dump_stack: avoid the livelock of the dump_lock + * mm: slab: make page_cgroup_ino() to recognize non-compound slab pages properly + * btrfs: Consider system chunk array size for new SYSTEM chunks + * btrfs: tree-checker: Fix wrong check on max devid + * btrfs: save i_size to avoid double evaluation of i_size_read in compress_file_range + * tools: gpio: Use !building_out_of_srctree to determine srctree + * pinctrl: intel: Avoid potential glitches if pin is in GPIO mode + * perf tools: Fix time sorting + * perf map: Use zalloc for map_groups + * drm/radeon: fix si_enable_smc_cac() failed issue + * HID: wacom: generic: Treat serial number and related fields as unsigned + * mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y + * soundwire: depend on ACPI + * soundwire: depend on ACPI || OF + * soundwire: bus: set initial value to port_status + * blkcg: make blkcg_print_stat() print stats only for online blkgs + * arm64: Do not mask out PTE_RDONLY in pte_same() + * ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address + * ceph: fix use-after-free in __ceph_remove_cap() + * ceph: fix RCU case handling in ceph_d_revalidate() + * ceph: add missing check in d_revalidate snapdir handling + * ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open + * ceph: don't allow copy_file_range when stripe_count != 1 + * iio: adc: stm32-adc: fix stopping dma + * iio: imu: adis16480: make sure provided frequency is positive + * iio: imu: inv_mpu6050: fix no data on MPU6050 + * iio: srf04: fix wrong limitation in distance measuring + * ARM: sunxi: Fix CPU powerdown on A83T + * ARM: dts: imx6-logicpd: Re-enable SNVS power key + * cpufreq: intel_pstate: Fix invalid EPB setting + * clone3: validate stack arguments + * netfilter: nf_tables: Align nft_expr private data to 64-bit + * netfilter: ipset: Fix an error code in ip_set_sockfn_get() + * intel_th: gth: Fix the window switching sequence + * intel_th: pci: Add Comet Lake PCH support + * intel_th: pci: Add Jasper Lake PCH support + * x86/dumpstack/64: Don't evaluate exception stacks before setup + * x86/apic/32: Avoid bogus LDR warnings + * SMB3: Fix persistent handles reconnect + * can: usb_8dev: fix use-after-free on disconnect + * can: flexcan: disable completely the ECC mechanism + * can: c_can: c_can_poll(): only read status register after status IRQ + * can: peak_usb: fix a potential out-of-sync while decoding packets + * can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak + * can: gs_usb: gs_can_open(): prevent memory leak + * can: dev: add missing of_node_put() after calling of_get_child_by_name() + * can: mcba_usb: fix use-after-free on disconnect + * can: peak_usb: fix slab info leak + * configfs: fix a deadlock in configfs_symlink() + * ALSA: usb-audio: More validations of descriptor units + * ALSA: usb-audio: Simplify parse_audio_unit() + * ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects + * ALSA: usb-audio: Remove superfluous bLength checks + * ALSA: usb-audio: Clean up check_input_term() + * ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() + * ALSA: usb-audio: remove some dead code + * ALSA: usb-audio: Fix copy&paste error in the validator + * usbip: Implement SG support to vhci-hcd and stub driver + * HID: google: add magnemite/masterball USB ids + * dmaengine: sprd: Fix the link-list pointer register configuration issue + * bpf: lwtunnel: Fix reroute supplying invalid dst + * dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer + * dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config + * dmaengine: sprd: Fix the possible memory leak issue + * HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() + * powerpc/32s: fix allow/prevent_user_access() when crossing segment boundaries. + * RDMA/mlx5: Clear old rate limit when closing QP + * iw_cxgb4: fix ECN check on the passive accept + * RDMA/siw: free siw_base_qp in kref release routine + * RDMA/qedr: Fix reported firmware version + * IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields + * net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow + * net/mlx5e: kTLS, Release reference on DUMPed fragments in shutdown flow + * net/mlx5e: TX, Fix consumer index of error cqe dump + * net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq + * net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump + * selftests/bpf: More compatible nc options in test_tc_edt + * scsi: qla2xxx: fixup incorrect usage of host_byte + * scsi: lpfc: Check queue pointer before use + * scsi: ufs-bsg: Wake the device before sending raw upiu commands + * ARC: [plat-hsdk]: Enable on-board SPI NOR flash IC + * RDMA/uverbs: Prevent potential underflow + * bpf: Fix use after free in subprog's jited symbol removal + * net: stmmac: Fix the problem of tso_xmit + * net: openvswitch: free vport unless register_netdevice() succeeds + * scsi: lpfc: Honor module parameter lpfc_use_adisc + * scsi: qla2xxx: Initialized mailbox to prevent driver load failure + * bpf: Fix use after free in bpf_get_prog_name + * iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc + * iwlwifi: pcie: fix all 9460 entries for qnj + * iwlwifi: pcie: 0x2720 is qu and 0x30DC is not + * netfilter: nf_flow_table: set timeout before insertion into hashes + * drm/v3d: Fix memory leak in v3d_submit_cl_ioctl + * xsk: Fix registration of Rx-only sockets + * net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag + * ipvs: don't ignore errors in case refcounting ip_vs module fails + * ipvs: move old_secure_tcp into struct netns_ipvs + * netfilter: nft_payload: fix missing check for matching length in offloads + * RDMA/nldev: Skip counter if port doesn't match + * bonding: fix unexpected IFF_BONDING bit unset + * bonding: use dynamic lockdep key instead of subclass + * macsec: fix refcnt leak in module exit routine + * virt_wifi: fix refcnt leak in module exit routine + * scsi: sd: define variable dif as unsigned int instead of bool + * usb: dwc3: select CONFIG_REGMAP_MMIO + * usb: fsl: Check memory resource before releasing it + * usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode. + * usb: gadget: composite: Fix possible double free memory bug + * usb: dwc3: pci: prevent memory leak in dwc3_pci_probe + * usb: gadget: configfs: fix concurrent issue between composite APIs + * usb: dwc3: remove the call trace of USBx_GFLADJ + * perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity + * perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) + * perf/x86/uncore: Fix event group support + * USB: Skip endpoints with 0 maxpacket length + * USB: ldusb: use unsigned size format specifiers + * usbip: tools: Fix read_usb_vudc_device() error path handling + * RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case + * RDMA/hns: Prevent memory leaks of eq->buf_list + * hwmon: (ina3221) Fix read timeout issue + * scsi: qla2xxx: stop timer in shutdown path + * sched/topology: Don't try to build empty sched domains + * sched/topology: Allow sched_asym_cpucapacity to be disabled + * nvme-multipath: fix possible io hang after ctrl reconnect + * fjes: Handle workqueue allocation failure + * net: hisilicon: Fix "Trying to free already-free IRQ" + * wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle + * net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up + * net: mscc: ocelot: refuse to overwrite the port's native vlan + * iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 + * mt76: dma: fix buffer unmap with non-linear skbs + * drm/amdgpu/sdma5: do not execute 0-sized IBs (v2) + * drm/sched: Set error to s_fence if HW job submission failed. + * drm/amdgpu: If amdgpu_ib_schedule fails return back the error. + * drm/amd/display: do not synchronize "drr" displays + * drm/amd/display: add 50us buffer as WA for pstate switch in active + * drm/amd/display: Passive DP->HDMI dongle detection fix + * dc.c:use kzalloc without test + * SUNRPC: The TCP back channel mustn't disappear while requests are outstanding + * SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding + * SUNRPC: Destroy the back channel when we destroy the host transport + * hv_netvsc: Fix error handling in netvsc_attach() + * efi/tpm: Return -EINVAL when determining tpm final events log size fails + * efi: libstub/arm: Account for firmware reserved memory at the base of RAM + * x86, efi: Never relocate kernel below lowest acceptable address + * arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo + * usb: dwc3: gadget: fix race when disabling ep with cancelled xfers + * arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core + * arm64: Brahma-B53 is SSB and spectre v2 safe + * arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core + * NFSv4: Don't allow a cached open with a revoked delegation + * net: ethernet: arc: add the missed clk_disable_unprepare + * igb: Fix constant media auto sense switching when no cable is connected + * e1000: fix memory leaks + * gve: Fixes DMA synchronization. + * ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() + * pinctrl: cherryview: Fix irq_valid_mask calculation + * clk: imx8m: Use SYS_PLL1_800M as intermediate parent of CLK_ARM + * timekeeping/vsyscall: Update VDSO data unconditionally + * mm/filemap.c: don't initiate writeback if mapping has no dirty pages + * cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead + * ARM: dts: stm32: change joystick pinctrl definition on stm32mp157c-ev1 + * ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing + * usbip: Fix free of unallocated memory in vhci tx + * bonding: fix using uninitialized mode_lock + * netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets + * arm64: errata: Update stale comment + * net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: Add helper function for creating VM worker threads" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation" + * UBUNTU: SAUCE: Revert "kvm: x86, powerpc: do not allow clearing largepages debugfs entry" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure" + * UBUNTU: SAUCE: Revert "x86/tsx: Add config options to set tsx=on|off|auto" + * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add documentation for TSX Async Abort" + * UBUNTU: SAUCE: Revert "x86/tsx: Add "auto" option to the tsx= cmdline parameter" + * UBUNTU: SAUCE: Revert "kvm/x86: Export MDS_NO=0 to guests when TSX is enabled" + * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add sysfs reporting for TSX Async Abort" + * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add mitigation for TSX Async Abort" + * UBUNTU: SAUCE: Revert "x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default" + * UBUNTU: SAUCE: Revert "x86/cpu: Add a helper function x86_read_arch_cap_msr()" + * UBUNTU: SAUCE: Revert "x86/msr: Add the IA32_TSX_CTRL MSR" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Add support for backward jumps" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Use explicit goto for error paths" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Add gen9 BCS cmdparsing" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Allow parsing of unsized batches" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Add support for mandatory cmdparsing" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Remove Master tables from cmdparser" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Disable Secure Batches for gen6+" + * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Rename gen7 cmdparser tables" + * drm/i915: Rename gen7 cmdparser tables + * drm/i915: Disable Secure Batches for gen6+ + * drm/i915: Remove Master tables from cmdparser + * drm/i915: Add support for mandatory cmdparsing + * drm/i915: Support ro ppgtt mapped cmdparser shadow buffers + * drm/i915: Allow parsing of unsized batches + * drm/i915: Add gen9 BCS cmdparsing + * drm/i915/cmdparser: Use explicit goto for error paths + * drm/i915/cmdparser: Add support for backward jumps + * drm/i915/cmdparser: Ignore Length operands during command matching + * drm/i915: Lower RM timeout to avoid DSI hard hangs + * drm/i915/gen8+: Add RC6 CTX corruption WA + * drm/i915/cmdparser: Fix jump whitelist clearing + * x86/msr: Add the IA32_TSX_CTRL MSR + * x86/cpu: Add a helper function x86_read_arch_cap_msr() + * x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default + * x86/speculation/taa: Add mitigation for TSX Async Abort + * x86/speculation/taa: Add sysfs reporting for TSX Async Abort + * kvm/x86: Export MDS_NO=0 to guests when TSX is enabled + * x86/tsx: Add "auto" option to the tsx= cmdline parameter + * x86/speculation/taa: Add documentation for TSX Async Abort + * x86/tsx: Add config options to set tsx=on|off|auto + * x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs + * x86/bugs: Add ITLB_MULTIHIT bug infrastructure + * x86/cpu: Add Tremont to the cpu vulnerability whitelist + * cpu/speculation: Uninline and export CPU mitigations helpers + * Documentation: Add ITLB_MULTIHIT documentation + * kvm: x86, powerpc: do not allow clearing largepages debugfs entry + * kvm: mmu: ITLB_MULTIHIT mitigation + * kvm: Add helper function for creating VM worker threads + * kvm: x86: mmu: Recovery of shattered NX large pages + * Linux 5.3.11 + * UBUNTU: upstream stable to v5.3.11 + + + 5.3.11 upstream stable release + from git://git.kernel.org/ -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1852338 Title: Eoan update: 5.3.11 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Eoan: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: * bonding: fix state transition issue in link monitoring * CDC-NCM: handle incomplete transfer of MTU * ipv4: Fix table id reference in fib_sync_down_addr * net: ethernet: octeon_mgmt: Account for second possible VLAN header * net: fix data-race in neigh_event_send() * net: qualcomm: rmnet: Fix potential UAF when unregistering * net/tls: fix sk_msg trim on fallback to copy mode * net: usb: qmi_wwan: add support for DW5821e with eSIM support * NFC: fdp: fix incorrect free object * nfc: netlink: fix double device reference drop * NFC: st21nfca: fix double free * qede: fix NULL pointer deref in __qede_remove() * net: mscc: ocelot: don't handle netdev events for other netdevs * net: mscc: ocelot: fix NULL pointer on LAG slave removal * net/tls: don't pay attention to sk_write_pending when pushing partial records * net/tls: add a TX lock * selftests/tls: add test for concurrent recv and send * ipv6: fixes rt6_probe() and fib6_nh->last_probe init * net: hns: Fix the stray netpoll locks causing deadlock in NAPI path * net: prevent load/store tearing on sk->sk_stamp * net: sched: prevent duplicate flower rules from tcf_proto destroy race * net/smc: fix ethernet interface refcounting * vsock/virtio: fix sock refcnt holding during the shutdown * r8169: fix page read in r8168g_mdio_read * ALSA: timer: Fix incorrectly assigned timer instance * ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series * ALSA: hda/ca0132 - Fix possible workqueue stall * mm: memcontrol: fix NULL-ptr deref in percpu stats flush * mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges * mm, meminit: recalculate pcpu batch and high limits after init completes * mm: thp: handle page cache THP correctly in PageTransCompoundMap * mm, vmstat: hide /proc/pagetypeinfo from normal users * dump_stack: avoid the livelock of the dump_lock * mm: slab: make page_cgroup_ino() to recognize non-compound slab pages properly * btrfs: Consider system chunk array size for new SYSTEM chunks * btrfs: tree-checker: Fix wrong check on max devid * btrfs: save i_size to avoid double evaluation of i_size_read in compress_file_range * tools: gpio: Use !building_out_of_srctree to determine srctree * pinctrl: intel: Avoid potential glitches if pin is in GPIO mode * perf tools: Fix time sorting * perf map: Use zalloc for map_groups * drm/radeon: fix si_enable_smc_cac() failed issue * HID: wacom: generic: Treat serial number and related fields as unsigned * mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y * soundwire: depend on ACPI * soundwire: depend on ACPI || OF * soundwire: bus: set initial value to port_status * blkcg: make blkcg_print_stat() print stats only for online blkgs * arm64: Do not mask out PTE_RDONLY in pte_same() * ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address * ceph: fix use-after-free in __ceph_remove_cap() * ceph: fix RCU case handling in ceph_d_revalidate() * ceph: add missing check in d_revalidate snapdir handling * ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open * ceph: don't allow copy_file_range when stripe_count != 1 * iio: adc: stm32-adc: fix stopping dma * iio: imu: adis16480: make sure provided frequency is positive * iio: imu: inv_mpu6050: fix no data on MPU6050 * iio: srf04: fix wrong limitation in distance measuring * ARM: sunxi: Fix CPU powerdown on A83T * ARM: dts: imx6-logicpd: Re-enable SNVS power key * cpufreq: intel_pstate: Fix invalid EPB setting * clone3: validate stack arguments * netfilter: nf_tables: Align nft_expr private data to 64-bit * netfilter: ipset: Fix an error code in ip_set_sockfn_get() * intel_th: gth: Fix the window switching sequence * intel_th: pci: Add Comet Lake PCH support * intel_th: pci: Add Jasper Lake PCH support * x86/dumpstack/64: Don't evaluate exception stacks before setup * x86/apic/32: Avoid bogus LDR warnings * SMB3: Fix persistent handles reconnect * can: usb_8dev: fix use-after-free on disconnect * can: flexcan: disable completely the ECC mechanism * can: c_can: c_can_poll(): only read status register after status IRQ * can: peak_usb: fix a potential out-of-sync while decoding packets * can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak * can: gs_usb: gs_can_open(): prevent memory leak * can: dev: add missing of_node_put() after calling of_get_child_by_name() * can: mcba_usb: fix use-after-free on disconnect * can: peak_usb: fix slab info leak * configfs: fix a deadlock in configfs_symlink() * ALSA: usb-audio: More validations of descriptor units * ALSA: usb-audio: Simplify parse_audio_unit() * ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects * ALSA: usb-audio: Remove superfluous bLength checks * ALSA: usb-audio: Clean up check_input_term() * ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() * ALSA: usb-audio: remove some dead code * ALSA: usb-audio: Fix copy&paste error in the validator * usbip: Implement SG support to vhci-hcd and stub driver * HID: google: add magnemite/masterball USB ids * dmaengine: sprd: Fix the link-list pointer register configuration issue * bpf: lwtunnel: Fix reroute supplying invalid dst * dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer * dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config * dmaengine: sprd: Fix the possible memory leak issue * HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() * powerpc/32s: fix allow/prevent_user_access() when crossing segment boundaries. * RDMA/mlx5: Clear old rate limit when closing QP * iw_cxgb4: fix ECN check on the passive accept * RDMA/siw: free siw_base_qp in kref release routine * RDMA/qedr: Fix reported firmware version * IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields * net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow * net/mlx5e: kTLS, Release reference on DUMPed fragments in shutdown flow * net/mlx5e: TX, Fix consumer index of error cqe dump * net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq * net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump * selftests/bpf: More compatible nc options in test_tc_edt * scsi: qla2xxx: fixup incorrect usage of host_byte * scsi: lpfc: Check queue pointer before use * scsi: ufs-bsg: Wake the device before sending raw upiu commands * ARC: [plat-hsdk]: Enable on-board SPI NOR flash IC * RDMA/uverbs: Prevent potential underflow * bpf: Fix use after free in subprog's jited symbol removal * net: stmmac: Fix the problem of tso_xmit * net: openvswitch: free vport unless register_netdevice() succeeds * scsi: lpfc: Honor module parameter lpfc_use_adisc * scsi: qla2xxx: Initialized mailbox to prevent driver load failure * bpf: Fix use after free in bpf_get_prog_name * iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc * iwlwifi: pcie: fix all 9460 entries for qnj * iwlwifi: pcie: 0x2720 is qu and 0x30DC is not * netfilter: nf_flow_table: set timeout before insertion into hashes * drm/v3d: Fix memory leak in v3d_submit_cl_ioctl * xsk: Fix registration of Rx-only sockets * net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag * ipvs: don't ignore errors in case refcounting ip_vs module fails * ipvs: move old_secure_tcp into struct netns_ipvs * netfilter: nft_payload: fix missing check for matching length in offloads * RDMA/nldev: Skip counter if port doesn't match * bonding: fix unexpected IFF_BONDING bit unset * bonding: use dynamic lockdep key instead of subclass * macsec: fix refcnt leak in module exit routine * virt_wifi: fix refcnt leak in module exit routine * scsi: sd: define variable dif as unsigned int instead of bool * usb: dwc3: select CONFIG_REGMAP_MMIO * usb: fsl: Check memory resource before releasing it * usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode. * usb: gadget: composite: Fix possible double free memory bug * usb: dwc3: pci: prevent memory leak in dwc3_pci_probe * usb: gadget: configfs: fix concurrent issue between composite APIs * usb: dwc3: remove the call trace of USBx_GFLADJ * perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity * perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) * perf/x86/uncore: Fix event group support * USB: Skip endpoints with 0 maxpacket length * USB: ldusb: use unsigned size format specifiers * usbip: tools: Fix read_usb_vudc_device() error path handling * RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case * RDMA/hns: Prevent memory leaks of eq->buf_list * hwmon: (ina3221) Fix read timeout issue * scsi: qla2xxx: stop timer in shutdown path * sched/topology: Don't try to build empty sched domains * sched/topology: Allow sched_asym_cpucapacity to be disabled * nvme-multipath: fix possible io hang after ctrl reconnect * fjes: Handle workqueue allocation failure * net: hisilicon: Fix "Trying to free already-free IRQ" * wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle * net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up * net: mscc: ocelot: refuse to overwrite the port's native vlan * iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 * mt76: dma: fix buffer unmap with non-linear skbs * drm/amdgpu/sdma5: do not execute 0-sized IBs (v2) * drm/sched: Set error to s_fence if HW job submission failed. * drm/amdgpu: If amdgpu_ib_schedule fails return back the error. * drm/amd/display: do not synchronize "drr" displays * drm/amd/display: add 50us buffer as WA for pstate switch in active * drm/amd/display: Passive DP->HDMI dongle detection fix * dc.c:use kzalloc without test * SUNRPC: The TCP back channel mustn't disappear while requests are outstanding * SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding * SUNRPC: Destroy the back channel when we destroy the host transport * hv_netvsc: Fix error handling in netvsc_attach() * efi/tpm: Return -EINVAL when determining tpm final events log size fails * efi: libstub/arm: Account for firmware reserved memory at the base of RAM * x86, efi: Never relocate kernel below lowest acceptable address * arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo * usb: dwc3: gadget: fix race when disabling ep with cancelled xfers * arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core * arm64: Brahma-B53 is SSB and spectre v2 safe * arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core * NFSv4: Don't allow a cached open with a revoked delegation * net: ethernet: arc: add the missed clk_disable_unprepare * igb: Fix constant media auto sense switching when no cable is connected * e1000: fix memory leaks * gve: Fixes DMA synchronization. * ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() * pinctrl: cherryview: Fix irq_valid_mask calculation * clk: imx8m: Use SYS_PLL1_800M as intermediate parent of CLK_ARM * timekeeping/vsyscall: Update VDSO data unconditionally * mm/filemap.c: don't initiate writeback if mapping has no dirty pages * cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead * ARM: dts: stm32: change joystick pinctrl definition on stm32mp157c-ev1 * ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing * usbip: Fix free of unallocated memory in vhci tx * bonding: fix using uninitialized mode_lock * netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets * arm64: errata: Update stale comment * net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: Add helper function for creating VM worker threads" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation" * UBUNTU: SAUCE: Revert "kvm: x86, powerpc: do not allow clearing largepages debugfs entry" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure" * UBUNTU: SAUCE: Revert "x86/tsx: Add config options to set tsx=on|off|auto" * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add documentation for TSX Async Abort" * UBUNTU: SAUCE: Revert "x86/tsx: Add "auto" option to the tsx= cmdline parameter" * UBUNTU: SAUCE: Revert "kvm/x86: Export MDS_NO=0 to guests when TSX is enabled" * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add sysfs reporting for TSX Async Abort" * UBUNTU: SAUCE: Revert "x86/speculation/taa: Add mitigation for TSX Async Abort" * UBUNTU: SAUCE: Revert "x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default" * UBUNTU: SAUCE: Revert "x86/cpu: Add a helper function x86_read_arch_cap_msr()" * UBUNTU: SAUCE: Revert "x86/msr: Add the IA32_TSX_CTRL MSR" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Add support for backward jumps" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915/cmdparser: Use explicit goto for error paths" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Add gen9 BCS cmdparsing" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Allow parsing of unsized batches" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Add support for mandatory cmdparsing" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Remove Master tables from cmdparser" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Disable Secure Batches for gen6+" * UBUNTU: SAUCE: Revert "UBUNTU: SAUCE: drm/i915: Rename gen7 cmdparser tables" * drm/i915: Rename gen7 cmdparser tables * drm/i915: Disable Secure Batches for gen6+ * drm/i915: Remove Master tables from cmdparser * drm/i915: Add support for mandatory cmdparsing * drm/i915: Support ro ppgtt mapped cmdparser shadow buffers * drm/i915: Allow parsing of unsized batches * drm/i915: Add gen9 BCS cmdparsing * drm/i915/cmdparser: Use explicit goto for error paths * drm/i915/cmdparser: Add support for backward jumps * drm/i915/cmdparser: Ignore Length operands during command matching * drm/i915: Lower RM timeout to avoid DSI hard hangs * drm/i915/gen8+: Add RC6 CTX corruption WA * drm/i915/cmdparser: Fix jump whitelist clearing * x86/msr: Add the IA32_TSX_CTRL MSR * x86/cpu: Add a helper function x86_read_arch_cap_msr() * x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default * x86/speculation/taa: Add mitigation for TSX Async Abort * x86/speculation/taa: Add sysfs reporting for TSX Async Abort * kvm/x86: Export MDS_NO=0 to guests when TSX is enabled * x86/tsx: Add "auto" option to the tsx= cmdline parameter * x86/speculation/taa: Add documentation for TSX Async Abort * x86/tsx: Add config options to set tsx=on|off|auto * x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs * x86/bugs: Add ITLB_MULTIHIT bug infrastructure * x86/cpu: Add Tremont to the cpu vulnerability whitelist * cpu/speculation: Uninline and export CPU mitigations helpers * Documentation: Add ITLB_MULTIHIT documentation * kvm: x86, powerpc: do not allow clearing largepages debugfs entry * kvm: mmu: ITLB_MULTIHIT mitigation * kvm: Add helper function for creating VM worker threads * kvm: x86: mmu: Recovery of shattered NX large pages * Linux 5.3.11 * UBUNTU: upstream stable to v5.3.11 5.3.11 upstream stable release from git://git.kernel.org/ To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1852338/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
