** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        v5.4.73 upstream stable release
+        from git://git.kernel.org/
  
-        v5.4.73 upstream stable release
-        from git://git.kernel.org/
+ ibmveth: Switch order of ibmveth_helper calls.
+ ibmveth: Identify ingress large send packets.
+ ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
+ mlx4: handle non-napi callers to napi_poll
+ net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
+ net: fec: Fix PHY init after phy_reset_after_clk_enable()
+ net: fix pos incrementment in ipv6_route_seq_next
+ net/smc: fix valid DMBE buffer sizes
+ net/tls: sendfile fails with ktls offload
+ net: usb: qmi_wwan: add Cellient MPL200 card
+ tipc: fix the skb_unshare() in tipc_buf_append()
+ socket: fix option SO_TIMESTAMPING_NEW
+ can: m_can_platform: don't call m_can_class_suspend in runtime suspend
+ can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
+ net: j1939: j1939_session_fresh_new(): fix missing initialization of skbcnt
+ net/ipv4: always honour route mtu during forwarding
+ net_sched: remove a redundant goto chain check
+ r8169: fix data corruption issue on RTL8402
+ cxgb4: handle 4-tuple PEDIT to NAT mode translation
+ binder: fix UAF when releasing todo list
+ ALSA: bebob: potential info leak in hwdep_read()
+ ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close
+ nvme-pci: disable the write zeros command for Intel 600P/P3100
+ chelsio/chtls: fix socket lock
+ chelsio/chtls: correct netdevice for vlan interface
+ chelsio/chtls: correct function return and return type
+ ibmvnic: save changed mac address to adapter->mac_addr
+ net: ftgmac100: Fix Aspeed ast2600 TX hang issue
+ net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
+ net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup
+ net: Properly typecast int values to set sk_max_pacing_rate
+ net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
+ nexthop: Fix performance regression in nexthop deletion
+ nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in 
nfc_genl_fw_download()
+ r8169: fix operation under forced interrupt threading
+ selftests: forwarding: Add missing 'rp_filter' configuration
+ tcp: fix to update snd_wl1 in bulk receiver fast path
+ icmp: randomize the global rate limiter
+ ALSA: hda/realtek - set mic to auto detect on a HP AIO machine
+ ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7
+ ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
+ cifs: remove bogus debug code
+ cifs: Return the error from crypt_message when enc/dec key not found.
+ SMB3: Resolve data corruption of TCP server info fields
+ KVM: nVMX: Reset the segment cache when stuffing guest segs
+ KVM: nVMX: Reload vmcs01 if getting vmcs12's pages fails
+ KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages
+ KVM: SVM: Initialize prev_ga_tag before use
+ ima: Don't ignore errors from crypto_shash_update()
+ crypto: algif_aead - Do not set MAY_BACKLOG on the async path
+ crypto: caam/qi - add fallback for XTS with more than 8B IV
+ EDAC/i5100: Fix error handling order in i5100_init_one()
+ EDAC/aspeed: Fix handling of platform_get_irq() error
+ EDAC/ti: Fix handling of platform_get_irq() error
+ perf/x86/intel/ds: Fix x86_pmu_stop warning for large PEBS
+ x86/fpu: Allow multiple bits in clearcpuid= parameter
+ drivers/perf: xgene_pmu: Fix uninitialized resource struct
+ drivers/perf: thunderx2_pmu: Fix memory resource error handling
+ sched/fair: Fix wrong cpu selecting from isolated domain
+ perf/x86/intel/uncore: Update Ice Lake uncore units
+ perf/x86/intel/uncore: Reduce the number of CBOX counters
+ x86/nmi: Fix nmi_handle() duration miscalculation
+ x86/events/amd/iommu: Fix sizeof mismatch
+ crypto: algif_skcipher - EBUSY on aio should be an error
+ crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
+ crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
+ crypto: picoxcell - Fix potential race condition bug
+ media: tuner-simple: fix regression in simple_set_radio_freq
+ media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()"
+ media: ov5640: Correct Bit Div register in clock tree diagram
+ media: m5mols: Check function pointer in m5mols_sensor_power
+ media: uvcvideo: Set media controller entity functions
+ media: uvcvideo: Silence shift-out-of-bounds warning
+ media: staging/intel-ipu3: css: Correctly reset some memory
+ media: omap3isp: Fix memleak in isp_probe
+ media: i2c: ov5640: Remain in power down for DVP mode unless streaming
+ media: i2c: ov5640: Separate out mipi configuration from s_power
+ media: i2c: ov5640: Enable data pins on poweron for DVP mode
+ media: rcar_drif: Fix fwnode reference leak when parsing DT
+ media: rcar_drif: Allocate v4l2_async_subdev dynamically
+ media: rcar-csi2: Allocate v4l2_async_subdev dynamically
+ crypto: omap-sham - fix digcnt register handling with export/import
+ hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
+ cypto: mediatek - fix leaks in mtk_desc_ring_alloc
+ media: mx2_emmaprp: Fix memleak in emmaprp_probe
+ media: tc358743: initialize variable
+ media: tc358743: cleanup tc358743_cec_isr
+ media: rcar-vin: Fix a reference count leak.
+ media: rockchip/rga: Fix a reference count leak.
+ media: platform: fcp: Fix a reference count leak.
+ media: camss: Fix a reference count leak.
+ media: s5p-mfc: Fix a reference count leak
+ media: stm32-dcmi: Fix a reference count leak
+ media: ti-vpe: Fix a missing check and reference count leak
+ regulator: resolve supply after creating regulator
+ pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
+ spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath()
+ spi: spi-s3c64xx: Check return values
+ blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
+ ath10k: provide survey info as accumulated data
+ drm/vkms: fix xrgb on compute crc
+ Bluetooth: hci_uart: Cancel init work before unregistering
+ drm/amd/display: Fix wrong return value in dm_update_plane_state()
+ drm: panel: Fix bus format for OrtusTech COM43H4M85ULC panel
+ ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
+ ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
+ ath10k: Fix the size used in a 'dma_free_coherent()' call in an error 
handling path
+ wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
+ ASoC: qcom: lpass-platform: fix memory leak
+ ASoC: qcom: lpass-cpu: fix concurrency issue
+ brcmfmac: check ndev pointer
+ mwifiex: Do not use GFP_KERNEL in atomic context
+ staging: rtl8192u: Do not use GFP_KERNEL in atomic context
+ drm/gma500: fix error check
+ scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
+ scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg()
+ scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
+ scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
+ backlight: sky81452-backlight: Fix refcount imbalance on error
+ staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent()
+ VMCI: check return value of get_user_pages_fast() for errors
+ mm/error_inject: Fix allow_error_inject function signatures.
+ drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel
+ drm/crc-debugfs: Fix memleak in crc_control_write
+ binder: Remove bogus warning on failed same-process transaction
+ tty: serial: earlycon dependency
+ pty: do tty_flip_buffer_push without port->lock in pty_write
+ pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
+ pwm: lpss: Add range limit check for the base_unit register value
+ drivers/virt/fsl_hypervisor: Fix error handling path
+ video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
+ video: fbdev: sis: fix null ptr dereference
+ video: fbdev: radeon: Fix memleak in radeonfb_pci_register
+ ASoC: fsl: imx-es8328: add missing put_device() call in imx_es8328_probe()
+ HID: roccat: add bounds checking in kone_sysfs_write_settings()
+ drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check()
+ drm/panfrost: Ensure GPU quirks are always initialised
+ iomap: Clear page error before beginning a write
+ pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
+ pinctrl: mcp23s08: Fix mcp23x17 precious range
+ net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
+ scsi: mpt3sas: Fix sync irqs
+ net: stmmac: use netif_tx_start|stop_all_queues() function
+ cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
+ drm: mxsfb: check framebuffer pitch
+ coresight: etm4x: Handle unreachable sink in perf mode
+ xhci: don't create endpoint debugfs entry before ring buffer is set.
+ net: dsa: rtl8366: Check validity of passed VLANs
+ net: dsa: rtl8366: Refactor VLAN/PVID init
+ net: dsa: rtl8366: Skip PVID setting if not requested
+ net: wilc1000: clean up resource in error path of init mon interface
+ ASoC: tlv320aic32x4: Fix bdiv clock rate derivation
+ net: dsa: rtl8366rb: Support all 4096 VLANs
+ spi: omap2-mcspi: Improve performance waiting for CHSTAT
+ ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
+ dmaengine: dmatest: Check list for emptiness before access its last entry
+ misc: mic: scif: Fix error handling path
+ ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
+ usb: dwc2: Fix parameter type in function pointer prototype
+ quota: clear padding in v2r1_mem2diskdqb()
+ slimbus: core: check get_addr before removing laddr ida
+ slimbus: core: do not enter to clock pause mode in core
+ slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback
+ ASoC: fsl_sai: Instantiate snd_soc_dai_driver
+ HID: hid-input: fix stylus battery reporting
+ nvmem: core: fix possibly memleak when use nvmem_cell_info_to_nvmem_cell()
+ nl80211: fix OBSS PD min and max offset validation
+ coresight: etm: perf: Fix warning caused by etm_setup_aux failure
+ ibmvnic: set up 200GBPS speed
+ qtnfmac: fix resource leaks on unsupported iftype error return path
+ iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling
+ net: enic: Cure the enic api locking trainwreck
+ mfd: sm501: Fix leaks in probe()
+ iwlwifi: mvm: split a print to avoid a WARNING in ROC
+ usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
+ usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
+ nl80211: fix non-split wiphy information
+ usb: dwc2: Fix INTR OUT transfers in DDMA mode.
+ scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
+ scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
+ ipmi_si: Fix wrong return value in try_smi_init()
+ platform/x86: mlx-platform: Remove PSU EEPROM configuration
+ mwifiex: fix double free
+ ipvs: clear skb->tstamp in forwarding path
+ net: korina: fix kfree of rx/tx descriptor array
+ netfilter: nf_log: missing vlan offload tag and proto
+ mm/swapfile.c: fix potential memory leak in sys_swapon
+ mm/memcg: fix device private memcg accounting
+ mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
+ fs: fix NULL dereference due to data race in prepend_path()
+ selftests/ftrace: Change synthetic event name for inter-event-combined test
+ i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
+ IB/mlx4: Fix starvation in paravirt mux/demux
+ IB/mlx4: Adjust delayed work when a dup is observed
+ powerpc/pseries: Fix missing of_node_put() in rng_init()
+ powerpc/icp-hv: Fix missing of_node_put() in success path
+ RDMA/ucma: Fix locking for ctx->events_reported
+ RDMA/ucma: Add missing locking around rdma_leave_multicast()
+ mtd: lpddr: fix excessive stack usage with clang
+ RDMA/hns: Add a check for current state before modifying QP
+ RDMA/umem: Fix signature of stub ib_umem_find_best_pgsz()
+ powerpc/pseries: explicitly reschedule during drmem_lmb list traversal
+ pseries/drmem: don't cache node id in drmem_lmb struct
+ RDMA/mlx5: Fix potential race between destroy and CQE poll
+ mtd: mtdoops: Don't write panic data twice
+ ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
+ arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER
+ ida: Free allocated bitmap in error path
+ xfs: limit entries returned when counting fsmap records
+ xfs: fix deadlock and streamline xfs_getfsmap performance
+ xfs: fix high key handling in the rt allocator's query_range function
+ RDMA/umem: Fix ib_umem_find_best_pgsz() for mappings that cross a page 
boundary
+ RDMA/umem: Prevent small pages from being returned by ib_umem_find_best_pgsz()
+ RDMA/qedr: Fix qp structure memory leak
+ RDMA/qedr: Fix use of uninitialized field
+ RDMA/qedr: Fix return code if accept is called on a destroyed qp
+ RDMA/qedr: Fix inline size returned for iWARP
+ powerpc/book3s64/hash/4k: Support large linear mapping range with 4K
+ powerpc/tau: Use appropriate temperature sample interval
+ powerpc/tau: Convert from timer to workqueue
+ powerpc/tau: Remove duplicated set_thresholds() call
+ powerpc/tau: Check processor type before enabling TAU interrupt
+ powerpc/tau: Disable TAU between measurements
+ powerpc/64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
+ RDMA/cma: Remove dead code for kernel rdmacm multicast
+ RDMA/cma: Consolidate the destruction of a cma_multicast in one place
+ perf intel-pt: Fix "context_switch event has no tid" error
+ RDMA/hns: Set the unsupported wr opcode
+ RDMA/mlx5: Disable IB_DEVICE_MEM_MGT_EXTENSIONS if IB_WR_REG_MR can't work
+ i40iw: Add support to make destroy QP synchronous
+ perf stat: Skip duration_time in setup_system_wide
+ RDMA/hns: Fix the wrong value of rnr_retry when querying qp
+ RDMA/hns: Fix missing sq_sig_type when querying QP
+ mtd: rawnand: vf610: disable clk on error handling path in probe
+ mtd: spinand: gigadevice: Only one dummy byte in QUADIO
+ mtd: spinand: gigadevice: Add QE Bit
+ kdb: Fix pager search for multi-line strings
+ overflow: Include header file with SIZE_MAX declaration
+ RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces
+ powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints
+ powerpc/perf/hv-gpci: Fix starting index value
+ i3c: master: Fix error return in cdns_i3c_master_probe()
+ cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
+ IB/rdmavt: Fix sizeof mismatch
+ RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt()
+ maiblox: mediatek: Fix handling of platform_get_irq() error
+ selftests/powerpc: Fix eeh-basic.sh exit codes
+ f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
+ RDMA/rxe: Handle skb_clone() failure in rxe_recv.c
+ mm/page_owner: change split_page_owner to take a count
+ lib/crc32.c: fix trivial typo in preprocessor condition
+ ramfs: fix nommu mmap with gaps in the page cache
+ rapidio: fix error handling path
+ rapidio: fix the missed put_device() for rio_mport_add_riodev
+ mailbox: avoid timer start from callback
+ i2c: rcar: Auto select RESET_CONTROLLER
+ clk: meson: g12a: mark fclk_div2 as critical
+ PCI: aardvark: Check for errors from pci_bridge_emul_init() call
+ PCI: iproc: Set affinity mask on MSI interrupts
+ rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge()
+ PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY
+ vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn
+ clk: qcom: gcc-sdm660: Fix wrong parent_map
+ clk: keystone: sci-clk: fix parsing assigned-clock data during probe
+ pwm: img: Fix null pointer access in probe
+ clk: rockchip: Initialize hw to error to avoid undefined behavior
+ clk: mediatek: add UART0 clock support
+ module: statically initialize init section freeing data
+ clk: at91: clk-main: update key before writing AT91_CKGR_MOR
+ clk: bcm2835: add missing release if devm_clk_hw_register fails
+ watchdog: Fix memleak in watchdog_cdev_register
+ watchdog: Use put_device on error
+ watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3
+ svcrdma: fix bounce buffers for unaligned offsets and multiple pages
+ ext4: limit entries returned when counting fsmap records
+ vfio/pci: Clear token on bypass registration failure
+ vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages
+ clk: imx8mq: Fix usdhc parents order
+ SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
+ Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
+ Input: stmfts - fix a & vs && typo
+ Input: ep93xx_keypad - fix handling of platform_get_irq() error
+ Input: omap4-keypad - fix handling of platform_get_irq() error
+ Input: twl4030_keypad - fix handling of platform_get_irq() error
+ Input: sun4i-ps2 - fix handling of platform_get_irq() error
+ KVM: x86: emulating RDPID failure shall return #UD rather than #GP
+ scsi: bfa: Fix error return in bfad_pci_init()
+ netfilter: conntrack: connection timeout after re-register
+ netfilter: ebtables: Fixes dropping of small packets in bridge nat
+ netfilter: nf_fwd_netdev: clear timestamp in forwarding path
+ arm64: dts: meson: vim3: correct led polarity
+ ARM: dts: imx6sl: fix rng node
+ ARM: at91: pm: of_node_put() after its usage
+ ARM: s3c24xx: fix mmc gpio lookup tables
+ ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
+ arm64: dts: allwinner: h5: remove Mali GPU PMU module
+ memory: omap-gpmc: Fix a couple off by ones
+ memory: omap-gpmc: Fix build error without CONFIG_OF
+ memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
+ arm64: dts: imx8mq: Add missing interrupts to GPC
+ arm64: dts: qcom: msm8916: Remove one more thermal trip point unit name
+ arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec
+ arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts
+ arm64: dts: renesas: r8a77990: Fix MSIOF1 DMA channels
+ arm64: dts: renesas: r8a774c0: Fix MSIOF1 DMA channels
+ arm64: dts: actions: limit address range for pinctrl node
+ ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers
+ soc: fsl: qbman: Fix return value on success
+ ARM: OMAP2+: Restore MPU power domain if cpu_cluster_pm_enter() fails
+ arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
+ ARM: dts: meson8: remove two invalid interrupt lines from the GPU node
+ lightnvm: fix out-of-bounds write to array devices->info[]
+ powerpc/powernv/dump: Fix race while processing OPAL dump
+ powerpc/pseries: Avoid using addr_to_pfn in real mode
+ nvmet: fix uninitialized work for zero kato
+ NTB: hw: amd: fix an issue about leak system resources
+ sched/features: Fix !CONFIG_JUMP_LABEL case
+ perf: correct SNOOPX field offset
+ i2c: core: Restore acpi_walk_dep_device_list() getting called after 
registering the ACPI i2c devs
+ md/bitmap: fix memory leak of temporary bitmap
+ block: ratelimit handle_bad_sector() message
+ crypto: ccp - fix error handling
+ x86/asm: Replace __force_order with a memory clobber
+ x86/mce: Add Skylake quirk for patrol scrub reported errors
+ media: firewire: fix memory leak
+ media: ati_remote: sanity check for both endpoints
+ media: st-delta: Fix reference count leak in delta_run_work
+ media: sti: Fix reference count leaks
+ media: exynos4-is: Fix several reference count leaks due to 
pm_runtime_get_sync
+ media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
+ media: exynos4-is: Fix a reference count leak
+ media: vsp1: Fix runtime PM imbalance on error
+ media: platform: s3c-camif: Fix runtime PM imbalance on error
+ media: platform: sti: hva: Fix runtime PM imbalance on error
+ media: bdisp: Fix runtime PM imbalance on error
+ media: media/pci: prevent memory leak in bttv_probe
+ x86/mce: Make mce_rdmsrl() panic on an inaccessible MSR
+ media: uvcvideo: Ensure all probed info is returned to v4l2
+ mmc: sdio: Check for CISTPL_VERS_1 buffer size
+ media: saa7134: avoid a shift overflow
+ media: venus: fixes for list corruption
+ fs: dlm: fix configfs memory leak
+ media: venus: core: Fix runtime PM imbalance in venus_probe
+ ntfs: add check for mft record size in superblock
+ ip_gre: set dev->hard_header_len and dev->needed_headroom properly
+ mac80211: handle lack of sband->bitrates in rates
+ PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
+ scsi: mvumi: Fix error return in mvumi_io_attach()
+ scsi: target: core: Add CONTROL field for trace events
+ mic: vop: copy data to kernel space then write to io memory
+ misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
+ usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc
+ usb: gadget: function: printer: fix use-after-free in __lock_acquire
+ udf: Limit sparing table size
+ udf: Avoid accessing uninitialized data on failed inode read
+ rtw88: increse the size of rx buffer size
+ USB: cdc-acm: handle broken union descriptors
+ usb: dwc3: simple: add support for Hikey 970
+ can: flexcan: flexcan_chip_stop(): add error handling and propagate error 
value
+ ath9k: hif_usb: fix race condition between usb_get_urb() and 
usb_kill_anchored_urbs()
+ drm/panfrost: add amlogic reset quirk callback
+ bpf: Limit caller's stack depth 256 for subprogs with tailcalls
+ misc: rtsx: Fix memory leak in rtsx_pci_probe
+ reiserfs: only call unlock_new_inode() if I_NEW
+ opp: Prevent memory leak in dev_pm_opp_attach_genpd()
+ xfs: make sure the rt allocator doesn't run off the end
+ usb: ohci: Default to per-port over-current protection
+ Bluetooth: Only mark socket zapped after unlocking
+ drm/msm/a6xx: fix a potential overflow issue
+ iomap: fix WARN_ON_ONCE() from unprivileged users
+ scsi: ibmvfc: Fix error return in ibmvfc_probe()
+ scsi: qla2xxx: Warn if done() or free() are called on an already freed srb
+ selftests/bpf: Fix test_sysctl_loop{1, 2} failure due to clang change
+ brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
+ rtl8xxxu: prevent potential memory leak
+ Fix use after free in get_capset_info callback.
+ HID: ite: Add USB id match for Acer One S1003 keyboard dock
+ scsi: qedf: Return SUCCESS if stale rport is encountered
+ scsi: qedi: Protect active command list to avoid list corruption
+ scsi: qedi: Fix list_del corruption while removing active I/O
+ fbmem: add margin check to fb_check_caps()
+ tty: ipwireless: fix error handling
+ Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb
+ ipvs: Fix uninit-value in do_ip_vs_set_ctl()
+ reiserfs: Fix memory leak in reiserfs_parse_options()
+ mwifiex: don't call del_timer_sync() on uninitialized timer
+ ALSA: hda/ca0132 - Add AE-7 microphone selection commands.
+ ALSA: hda/ca0132 - Add new quirk ID for SoundBlaster AE-7.
+ scsi: smartpqi: Avoid crashing kernel for controller issues
+ brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
+ usb: core: Solve race condition in anchor cleanup functions
+ scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config()
+ dmaengine: dw: Add DMA-channels mask cell support
+ dmaengine: dw: Activate FIFO-mode for memory peripherals only
+ ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
+ net: korina: cast KSEG0 address to pointer in kfree
+ s390/qeth: don't let HW override the configured port role
+ tty: serial: lpuart: fix lpuart32_write usage
+ tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
+ usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
+ USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
+ usb: cdns3: gadget: free interrupt after gadget has deleted
+ eeprom: at25: set minimum read/write access stride to 1
+ usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
+ Linux 5.4.73
+ UBUNTU: upstream stable to v5.4.73

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1902115

Title:
  Focal update: v5.4.73 upstream stable release

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Focal:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.4.73 upstream stable release
         from git://git.kernel.org/

  ibmveth: Switch order of ibmveth_helper calls.
  ibmveth: Identify ingress large send packets.
  ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
  mlx4: handle non-napi callers to napi_poll
  net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
  net: fec: Fix PHY init after phy_reset_after_clk_enable()
  net: fix pos incrementment in ipv6_route_seq_next
  net/smc: fix valid DMBE buffer sizes
  net/tls: sendfile fails with ktls offload
  net: usb: qmi_wwan: add Cellient MPL200 card
  tipc: fix the skb_unshare() in tipc_buf_append()
  socket: fix option SO_TIMESTAMPING_NEW
  can: m_can_platform: don't call m_can_class_suspend in runtime suspend
  can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt
  net: j1939: j1939_session_fresh_new(): fix missing initialization of skbcnt
  net/ipv4: always honour route mtu during forwarding
  net_sched: remove a redundant goto chain check
  r8169: fix data corruption issue on RTL8402
  cxgb4: handle 4-tuple PEDIT to NAT mode translation
  binder: fix UAF when releasing todo list
  ALSA: bebob: potential info leak in hwdep_read()
  ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close
  nvme-pci: disable the write zeros command for Intel 600P/P3100
  chelsio/chtls: fix socket lock
  chelsio/chtls: correct netdevice for vlan interface
  chelsio/chtls: correct function return and return type
  ibmvnic: save changed mac address to adapter->mac_addr
  net: ftgmac100: Fix Aspeed ast2600 TX hang issue
  net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
  net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup
  net: Properly typecast int values to set sk_max_pacing_rate
  net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
  nexthop: Fix performance regression in nexthop deletion
  nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in 
nfc_genl_fw_download()
  r8169: fix operation under forced interrupt threading
  selftests: forwarding: Add missing 'rp_filter' configuration
  tcp: fix to update snd_wl1 in bulk receiver fast path
  icmp: randomize the global rate limiter
  ALSA: hda/realtek - set mic to auto detect on a HP AIO machine
  ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7
  ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
  cifs: remove bogus debug code
  cifs: Return the error from crypt_message when enc/dec key not found.
  SMB3: Resolve data corruption of TCP server info fields
  KVM: nVMX: Reset the segment cache when stuffing guest segs
  KVM: nVMX: Reload vmcs01 if getting vmcs12's pages fails
  KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages
  KVM: SVM: Initialize prev_ga_tag before use
  ima: Don't ignore errors from crypto_shash_update()
  crypto: algif_aead - Do not set MAY_BACKLOG on the async path
  crypto: caam/qi - add fallback for XTS with more than 8B IV
  EDAC/i5100: Fix error handling order in i5100_init_one()
  EDAC/aspeed: Fix handling of platform_get_irq() error
  EDAC/ti: Fix handling of platform_get_irq() error
  perf/x86/intel/ds: Fix x86_pmu_stop warning for large PEBS
  x86/fpu: Allow multiple bits in clearcpuid= parameter
  drivers/perf: xgene_pmu: Fix uninitialized resource struct
  drivers/perf: thunderx2_pmu: Fix memory resource error handling
  sched/fair: Fix wrong cpu selecting from isolated domain
  perf/x86/intel/uncore: Update Ice Lake uncore units
  perf/x86/intel/uncore: Reduce the number of CBOX counters
  x86/nmi: Fix nmi_handle() duration miscalculation
  x86/events/amd/iommu: Fix sizeof mismatch
  crypto: algif_skcipher - EBUSY on aio should be an error
  crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
  crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
  crypto: picoxcell - Fix potential race condition bug
  media: tuner-simple: fix regression in simple_set_radio_freq
  media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()"
  media: ov5640: Correct Bit Div register in clock tree diagram
  media: m5mols: Check function pointer in m5mols_sensor_power
  media: uvcvideo: Set media controller entity functions
  media: uvcvideo: Silence shift-out-of-bounds warning
  media: staging/intel-ipu3: css: Correctly reset some memory
  media: omap3isp: Fix memleak in isp_probe
  media: i2c: ov5640: Remain in power down for DVP mode unless streaming
  media: i2c: ov5640: Separate out mipi configuration from s_power
  media: i2c: ov5640: Enable data pins on poweron for DVP mode
  media: rcar_drif: Fix fwnode reference leak when parsing DT
  media: rcar_drif: Allocate v4l2_async_subdev dynamically
  media: rcar-csi2: Allocate v4l2_async_subdev dynamically
  crypto: omap-sham - fix digcnt register handling with export/import
  hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
  cypto: mediatek - fix leaks in mtk_desc_ring_alloc
  media: mx2_emmaprp: Fix memleak in emmaprp_probe
  media: tc358743: initialize variable
  media: tc358743: cleanup tc358743_cec_isr
  media: rcar-vin: Fix a reference count leak.
  media: rockchip/rga: Fix a reference count leak.
  media: platform: fcp: Fix a reference count leak.
  media: camss: Fix a reference count leak.
  media: s5p-mfc: Fix a reference count leak
  media: stm32-dcmi: Fix a reference count leak
  media: ti-vpe: Fix a missing check and reference count leak
  regulator: resolve supply after creating regulator
  pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
  spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath()
  spi: spi-s3c64xx: Check return values
  blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue
  ath10k: provide survey info as accumulated data
  drm/vkms: fix xrgb on compute crc
  Bluetooth: hci_uart: Cancel init work before unregistering
  drm/amd/display: Fix wrong return value in dm_update_plane_state()
  drm: panel: Fix bus format for OrtusTech COM43H4M85ULC panel
  ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
  ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
  ath10k: Fix the size used in a 'dma_free_coherent()' call in an error 
handling path
  wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
  ASoC: qcom: lpass-platform: fix memory leak
  ASoC: qcom: lpass-cpu: fix concurrency issue
  brcmfmac: check ndev pointer
  mwifiex: Do not use GFP_KERNEL in atomic context
  staging: rtl8192u: Do not use GFP_KERNEL in atomic context
  drm/gma500: fix error check
  scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
  scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg()
  scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
  scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
  backlight: sky81452-backlight: Fix refcount imbalance on error
  staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent()
  VMCI: check return value of get_user_pages_fast() for errors
  mm/error_inject: Fix allow_error_inject function signatures.
  drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel
  drm/crc-debugfs: Fix memleak in crc_control_write
  binder: Remove bogus warning on failed same-process transaction
  tty: serial: earlycon dependency
  pty: do tty_flip_buffer_push without port->lock in pty_write
  pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
  pwm: lpss: Add range limit check for the base_unit register value
  drivers/virt/fsl_hypervisor: Fix error handling path
  video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
  video: fbdev: sis: fix null ptr dereference
  video: fbdev: radeon: Fix memleak in radeonfb_pci_register
  ASoC: fsl: imx-es8328: add missing put_device() call in imx_es8328_probe()
  HID: roccat: add bounds checking in kone_sysfs_write_settings()
  drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check()
  drm/panfrost: Ensure GPU quirks are always initialised
  iomap: Clear page error before beginning a write
  pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
  pinctrl: mcp23s08: Fix mcp23x17 precious range
  net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
  scsi: mpt3sas: Fix sync irqs
  net: stmmac: use netif_tx_start|stop_all_queues() function
  cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
  drm: mxsfb: check framebuffer pitch
  coresight: etm4x: Handle unreachable sink in perf mode
  xhci: don't create endpoint debugfs entry before ring buffer is set.
  net: dsa: rtl8366: Check validity of passed VLANs
  net: dsa: rtl8366: Refactor VLAN/PVID init
  net: dsa: rtl8366: Skip PVID setting if not requested
  net: wilc1000: clean up resource in error path of init mon interface
  ASoC: tlv320aic32x4: Fix bdiv clock rate derivation
  net: dsa: rtl8366rb: Support all 4096 VLANs
  spi: omap2-mcspi: Improve performance waiting for CHSTAT
  ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
  dmaengine: dmatest: Check list for emptiness before access its last entry
  misc: mic: scif: Fix error handling path
  ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
  usb: dwc2: Fix parameter type in function pointer prototype
  quota: clear padding in v2r1_mem2diskdqb()
  slimbus: core: check get_addr before removing laddr ida
  slimbus: core: do not enter to clock pause mode in core
  slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback
  ASoC: fsl_sai: Instantiate snd_soc_dai_driver
  HID: hid-input: fix stylus battery reporting
  nvmem: core: fix possibly memleak when use nvmem_cell_info_to_nvmem_cell()
  nl80211: fix OBSS PD min and max offset validation
  coresight: etm: perf: Fix warning caused by etm_setup_aux failure
  ibmvnic: set up 200GBPS speed
  qtnfmac: fix resource leaks on unsupported iftype error return path
  iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling
  net: enic: Cure the enic api locking trainwreck
  mfd: sm501: Fix leaks in probe()
  iwlwifi: mvm: split a print to avoid a WARNING in ROC
  usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
  usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
  nl80211: fix non-split wiphy information
  usb: dwc2: Fix INTR OUT transfers in DDMA mode.
  scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
  scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
  ipmi_si: Fix wrong return value in try_smi_init()
  platform/x86: mlx-platform: Remove PSU EEPROM configuration
  mwifiex: fix double free
  ipvs: clear skb->tstamp in forwarding path
  net: korina: fix kfree of rx/tx descriptor array
  netfilter: nf_log: missing vlan offload tag and proto
  mm/swapfile.c: fix potential memory leak in sys_swapon
  mm/memcg: fix device private memcg accounting
  mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
  fs: fix NULL dereference due to data race in prepend_path()
  selftests/ftrace: Change synthetic event name for inter-event-combined test
  i3c: master add i3c_master_attach_boardinfo to preserve boardinfo
  IB/mlx4: Fix starvation in paravirt mux/demux
  IB/mlx4: Adjust delayed work when a dup is observed
  powerpc/pseries: Fix missing of_node_put() in rng_init()
  powerpc/icp-hv: Fix missing of_node_put() in success path
  RDMA/ucma: Fix locking for ctx->events_reported
  RDMA/ucma: Add missing locking around rdma_leave_multicast()
  mtd: lpddr: fix excessive stack usage with clang
  RDMA/hns: Add a check for current state before modifying QP
  RDMA/umem: Fix signature of stub ib_umem_find_best_pgsz()
  powerpc/pseries: explicitly reschedule during drmem_lmb list traversal
  pseries/drmem: don't cache node id in drmem_lmb struct
  RDMA/mlx5: Fix potential race between destroy and CQE poll
  mtd: mtdoops: Don't write panic data twice
  ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
  arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER
  ida: Free allocated bitmap in error path
  xfs: limit entries returned when counting fsmap records
  xfs: fix deadlock and streamline xfs_getfsmap performance
  xfs: fix high key handling in the rt allocator's query_range function
  RDMA/umem: Fix ib_umem_find_best_pgsz() for mappings that cross a page 
boundary
  RDMA/umem: Prevent small pages from being returned by ib_umem_find_best_pgsz()
  RDMA/qedr: Fix qp structure memory leak
  RDMA/qedr: Fix use of uninitialized field
  RDMA/qedr: Fix return code if accept is called on a destroyed qp
  RDMA/qedr: Fix inline size returned for iWARP
  powerpc/book3s64/hash/4k: Support large linear mapping range with 4K
  powerpc/tau: Use appropriate temperature sample interval
  powerpc/tau: Convert from timer to workqueue
  powerpc/tau: Remove duplicated set_thresholds() call
  powerpc/tau: Check processor type before enabling TAU interrupt
  powerpc/tau: Disable TAU between measurements
  powerpc/64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
  RDMA/cma: Remove dead code for kernel rdmacm multicast
  RDMA/cma: Consolidate the destruction of a cma_multicast in one place
  perf intel-pt: Fix "context_switch event has no tid" error
  RDMA/hns: Set the unsupported wr opcode
  RDMA/mlx5: Disable IB_DEVICE_MEM_MGT_EXTENSIONS if IB_WR_REG_MR can't work
  i40iw: Add support to make destroy QP synchronous
  perf stat: Skip duration_time in setup_system_wide
  RDMA/hns: Fix the wrong value of rnr_retry when querying qp
  RDMA/hns: Fix missing sq_sig_type when querying QP
  mtd: rawnand: vf610: disable clk on error handling path in probe
  mtd: spinand: gigadevice: Only one dummy byte in QUADIO
  mtd: spinand: gigadevice: Add QE Bit
  kdb: Fix pager search for multi-line strings
  overflow: Include header file with SIZE_MAX declaration
  RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces
  powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints
  powerpc/perf/hv-gpci: Fix starting index value
  i3c: master: Fix error return in cdns_i3c_master_probe()
  cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
  IB/rdmavt: Fix sizeof mismatch
  RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt()
  maiblox: mediatek: Fix handling of platform_get_irq() error
  selftests/powerpc: Fix eeh-basic.sh exit codes
  f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
  RDMA/rxe: Handle skb_clone() failure in rxe_recv.c
  mm/page_owner: change split_page_owner to take a count
  lib/crc32.c: fix trivial typo in preprocessor condition
  ramfs: fix nommu mmap with gaps in the page cache
  rapidio: fix error handling path
  rapidio: fix the missed put_device() for rio_mport_add_riodev
  mailbox: avoid timer start from callback
  i2c: rcar: Auto select RESET_CONTROLLER
  clk: meson: g12a: mark fclk_div2 as critical
  PCI: aardvark: Check for errors from pci_bridge_emul_init() call
  PCI: iproc: Set affinity mask on MSI interrupts
  rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge()
  PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY
  vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn
  clk: qcom: gcc-sdm660: Fix wrong parent_map
  clk: keystone: sci-clk: fix parsing assigned-clock data during probe
  pwm: img: Fix null pointer access in probe
  clk: rockchip: Initialize hw to error to avoid undefined behavior
  clk: mediatek: add UART0 clock support
  module: statically initialize init section freeing data
  clk: at91: clk-main: update key before writing AT91_CKGR_MOR
  clk: bcm2835: add missing release if devm_clk_hw_register fails
  watchdog: Fix memleak in watchdog_cdev_register
  watchdog: Use put_device on error
  watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3
  svcrdma: fix bounce buffers for unaligned offsets and multiple pages
  ext4: limit entries returned when counting fsmap records
  vfio/pci: Clear token on bypass registration failure
  vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages
  clk: imx8mq: Fix usdhc parents order
  SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
  Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
  Input: stmfts - fix a & vs && typo
  Input: ep93xx_keypad - fix handling of platform_get_irq() error
  Input: omap4-keypad - fix handling of platform_get_irq() error
  Input: twl4030_keypad - fix handling of platform_get_irq() error
  Input: sun4i-ps2 - fix handling of platform_get_irq() error
  KVM: x86: emulating RDPID failure shall return #UD rather than #GP
  scsi: bfa: Fix error return in bfad_pci_init()
  netfilter: conntrack: connection timeout after re-register
  netfilter: ebtables: Fixes dropping of small packets in bridge nat
  netfilter: nf_fwd_netdev: clear timestamp in forwarding path
  arm64: dts: meson: vim3: correct led polarity
  ARM: dts: imx6sl: fix rng node
  ARM: at91: pm: of_node_put() after its usage
  ARM: s3c24xx: fix mmc gpio lookup tables
  ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
  arm64: dts: allwinner: h5: remove Mali GPU PMU module
  memory: omap-gpmc: Fix a couple off by ones
  memory: omap-gpmc: Fix build error without CONFIG_OF
  memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
  arm64: dts: imx8mq: Add missing interrupts to GPC
  arm64: dts: qcom: msm8916: Remove one more thermal trip point unit name
  arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec
  arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts
  arm64: dts: renesas: r8a77990: Fix MSIOF1 DMA channels
  arm64: dts: renesas: r8a774c0: Fix MSIOF1 DMA channels
  arm64: dts: actions: limit address range for pinctrl node
  ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers
  soc: fsl: qbman: Fix return value on success
  ARM: OMAP2+: Restore MPU power domain if cpu_cluster_pm_enter() fails
  arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
  ARM: dts: meson8: remove two invalid interrupt lines from the GPU node
  lightnvm: fix out-of-bounds write to array devices->info[]
  powerpc/powernv/dump: Fix race while processing OPAL dump
  powerpc/pseries: Avoid using addr_to_pfn in real mode
  nvmet: fix uninitialized work for zero kato
  NTB: hw: amd: fix an issue about leak system resources
  sched/features: Fix !CONFIG_JUMP_LABEL case
  perf: correct SNOOPX field offset
  i2c: core: Restore acpi_walk_dep_device_list() getting called after 
registering the ACPI i2c devs
  md/bitmap: fix memory leak of temporary bitmap
  block: ratelimit handle_bad_sector() message
  crypto: ccp - fix error handling
  x86/asm: Replace __force_order with a memory clobber
  x86/mce: Add Skylake quirk for patrol scrub reported errors
  media: firewire: fix memory leak
  media: ati_remote: sanity check for both endpoints
  media: st-delta: Fix reference count leak in delta_run_work
  media: sti: Fix reference count leaks
  media: exynos4-is: Fix several reference count leaks due to 
pm_runtime_get_sync
  media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
  media: exynos4-is: Fix a reference count leak
  media: vsp1: Fix runtime PM imbalance on error
  media: platform: s3c-camif: Fix runtime PM imbalance on error
  media: platform: sti: hva: Fix runtime PM imbalance on error
  media: bdisp: Fix runtime PM imbalance on error
  media: media/pci: prevent memory leak in bttv_probe
  x86/mce: Make mce_rdmsrl() panic on an inaccessible MSR
  media: uvcvideo: Ensure all probed info is returned to v4l2
  mmc: sdio: Check for CISTPL_VERS_1 buffer size
  media: saa7134: avoid a shift overflow
  media: venus: fixes for list corruption
  fs: dlm: fix configfs memory leak
  media: venus: core: Fix runtime PM imbalance in venus_probe
  ntfs: add check for mft record size in superblock
  ip_gre: set dev->hard_header_len and dev->needed_headroom properly
  mac80211: handle lack of sband->bitrates in rates
  PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
  scsi: mvumi: Fix error return in mvumi_io_attach()
  scsi: target: core: Add CONTROL field for trace events
  mic: vop: copy data to kernel space then write to io memory
  misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
  usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc
  usb: gadget: function: printer: fix use-after-free in __lock_acquire
  udf: Limit sparing table size
  udf: Avoid accessing uninitialized data on failed inode read
  rtw88: increse the size of rx buffer size
  USB: cdc-acm: handle broken union descriptors
  usb: dwc3: simple: add support for Hikey 970
  can: flexcan: flexcan_chip_stop(): add error handling and propagate error 
value
  ath9k: hif_usb: fix race condition between usb_get_urb() and 
usb_kill_anchored_urbs()
  drm/panfrost: add amlogic reset quirk callback
  bpf: Limit caller's stack depth 256 for subprogs with tailcalls
  misc: rtsx: Fix memory leak in rtsx_pci_probe
  reiserfs: only call unlock_new_inode() if I_NEW
  opp: Prevent memory leak in dev_pm_opp_attach_genpd()
  xfs: make sure the rt allocator doesn't run off the end
  usb: ohci: Default to per-port over-current protection
  Bluetooth: Only mark socket zapped after unlocking
  drm/msm/a6xx: fix a potential overflow issue
  iomap: fix WARN_ON_ONCE() from unprivileged users
  scsi: ibmvfc: Fix error return in ibmvfc_probe()
  scsi: qla2xxx: Warn if done() or free() are called on an already freed srb
  selftests/bpf: Fix test_sysctl_loop{1, 2} failure due to clang change
  brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
  rtl8xxxu: prevent potential memory leak
  Fix use after free in get_capset_info callback.
  HID: ite: Add USB id match for Acer One S1003 keyboard dock
  scsi: qedf: Return SUCCESS if stale rport is encountered
  scsi: qedi: Protect active command list to avoid list corruption
  scsi: qedi: Fix list_del corruption while removing active I/O
  fbmem: add margin check to fb_check_caps()
  tty: ipwireless: fix error handling
  Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb
  ipvs: Fix uninit-value in do_ip_vs_set_ctl()
  reiserfs: Fix memory leak in reiserfs_parse_options()
  mwifiex: don't call del_timer_sync() on uninitialized timer
  ALSA: hda/ca0132 - Add AE-7 microphone selection commands.
  ALSA: hda/ca0132 - Add new quirk ID for SoundBlaster AE-7.
  scsi: smartpqi: Avoid crashing kernel for controller issues
  brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
  usb: core: Solve race condition in anchor cleanup functions
  scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config()
  dmaengine: dw: Add DMA-channels mask cell support
  dmaengine: dw: Activate FIFO-mode for memory peripherals only
  ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
  net: korina: cast KSEG0 address to pointer in kfree
  s390/qeth: don't let HW override the configured port role
  tty: serial: lpuart: fix lpuart32_write usage
  tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
  usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
  USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
  usb: cdns3: gadget: free interrupt after gadget has deleted
  eeprom: at25: set minimum read/write access stride to 1
  usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
  Linux 5.4.73
  UBUNTU: upstream stable to v5.4.73

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1902115/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to