Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.0.12 upstream stable release
from git://git.kernel.org/
Linux 6.0.12
proc: proc_skip_spaces() shouldn't think it is working on C strings
proc: avoid integer type confusion in get_proc_long
ipc/sem: Fix dangling sem_array access in semtimedop race
powerpc/bpf/32: Fix Oops on tail call tests
Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
char: tpm: Protect tpm_pm_suspend with locks
Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
ACPI: HMAT: Fix initiator registration for single-initiator systems
ACPI: HMAT: remove unnecessary variable initialization
i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer
i2c: npcm7xx: Fix error handling in npcm_i2c_init()
i2c: Restore initial power state if probe fails
mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in
damon_sysfs_set_schemes()
mm/damon: introduce struct damos_access_pattern
ipv4: Fix route deletion when nexthop info is not specified
ipv4: Handle attempt to delete multipath route when fib_info contains an nh
reference
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
nvme: fix SRCU protection of nvme_ns_head list
riscv: kexec: Fixup irq controller broken in kexec crash path
riscv: fix race when vmap stack overflow
riscv: Sync efi page table's kernel mappings before switching
pinctrl: single: Fix potential division by zero
ASoC: tlv320adc3xxx: Fix build error for implicit function declaration
ASoC: ops: Fix bounds check for _sx controls
tracing: Free buffers when a used dynamic event is removed
tracing: Fix race where histograms can be called before the event
tracing/osnoise: Fix duration type
drm/i915: Never return 0 if not all requests retired
drm/i915: Fix negative value passed as remaining time
drm/amdgpu: enable Vangogh VCN indirect sram mode
drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
mmc: sdhci: Fix voltage switch delay
mmc: sdhci-sprd: Fix no reset data and command after voltage switch
mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
mmc: core: Fix ambiguous TRIM and DISCARD arg
mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse()
mmc: mmc_test: Fix removal of debugfs file
net: stmmac: Set MAC's flow control register to reflect current settings
mm: migrate: fix THP's mapcount on isolation
v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
pinctrl: intel: Save and restore pins in "direct IRQ" mode
x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
error-injection: Add prompt for function error injection
can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev
is down
ALSA: dice: fix regression for Lexicon I-ONIX FW810S
riscv: mm: Proper page permissions after initmem free
riscv: vdso: fix section overlapping under some conditions
hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
hwmon: (coretemp) Check for null before removing sysfs attrs
afs: Fix server->active leak in afs_put_server
net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
sctp: fix memory leak in sctp_stream_outq_migrate()
packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
net/mlx5: Lag, Fix for loop when checking lag
net: tun: Fix use-after-free in tun_detach()
afs: Fix fileserver probe RTT handling
net: mdiobus: fix unbalanced node reference count
net: hsr: Fix potential use-after-free
tipc: re-fetch skb cb after tipc_msg_validate
mptcp: fix sleep in atomic at close time
mptcp: don't orphan ssk in mptcp_close()
dsa: lan9303: Correct stat name
net: wwan: iosm: fix incorrect skb length
net: wwan: iosm: fix crash in peek throughput test
net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
net: wwan: iosm: fix kernel test robot reported error
net: ethernet: nixge: fix NULL dereference
net/9p: Fix a potential socket leak in p9_socket_open
net: net_netdev: Fix error handling in ntb_netdev_init_module()
net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()
net: phy: fix null-ptr-deref while probe() failed
wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
wifi: cfg80211: don't allow multi-BSSID in S1G
wifi: cfg80211: fix buffer overflow in elem comparison
aquantia: Do not purge addresses when setting the number of rings
qlcnic: fix sleep-in-atomic-context bugs caused by msleep
vfs: fix copy_file_range() averts filesystem freeze protection
can: m_can: Add check for devm_clk_get
can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
can: etas_es58x: es58x_init_netdev(): free netdev when register_candev()
can: cc770: cc770_isa_probe(): add missing free_cc770dev()
can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
net/mlx5e: Fix use-after-free when reverting termination table
net/mlx5: Fix uninitialized variable bug in outlen_write()
net/mlx5: E-switch, Fix duplicate lag creation
net/mlx5: E-switch, Destroy legacy fdb table when needed
net/mlx5: DR, Fix uninitialized var warning
e100: Fix possible use after free in e100_xmit_prepare
iavf: Fix error handling in iavf_init_module()
fm10k: Fix error handling in fm10k_init_module()
i40e: Fix error handling in i40e_init_module()
ixgbevf: Fix resource leak in ixgbevf_init_module()
clk: qcom: gcc-sc8280xp: add cxo as parent for three ufs ref clks
of: property: decrement node refcount in of_fwnode_get_reference_args()
nvmem: rmem: Fix return value check in rmem_read()
bpf: Do not copy spin lock field from user in bpf_selem_alloc
clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
hwmon: (i5500_temp) fix missing pci_disable_device()
hwmon: (ina3221) Fix shunt sum critical calculation
hwmon: (ltc2947) fix temperature scaling
libbpf: Handle size overflow for ringbuf mmap
ARM: at91: rm9200: fix usb device clock id
scripts/faddr2line: Fix regression in name resolution on ppc64le
bpf, perf: Use subprog name when reporting subprog ksymbol
libbpf: Use correct return pointer in attach_raw_tp
iio: light: rpr0521: add missing Kconfig dependencies
iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
iio: health: afe4403: Fix oob read in afe4403_read_raw
clk: qcom: gdsc: Remove direct runtime PM calls
clk: qcom: gdsc: add missing error handling
clk: samsung: exynos7885: Correct "div4" clock parents
drm/amd/pm: update driver if header for smu_13_0_7
drm/amd/pm: update driver-if header for smu_v13_0_10
drm/amd/pm: add smu_v13_0_10 driver if version
drm/amdgpu: fix userptr HMM range handling v2
drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos
drm/amdgpu: move setting the job resources
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
** Affects: linux-oem-6.0 (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux-oem-6.0 (Ubuntu Jammy)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux-oem-6.0 (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux-oem-6.0 (Ubuntu Jammy)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-6.0 in Ubuntu.
https://bugs.launchpad.net/bugs/2002670
Title:
Jammy update: v6.0.12 upstream stable release
Status in linux-oem-6.0 package in Ubuntu:
Confirmed
Status in linux-oem-6.0 source package in Jammy:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.0.12 upstream stable release
from git://git.kernel.org/
Linux 6.0.12
proc: proc_skip_spaces() shouldn't think it is working on C strings
proc: avoid integer type confusion in get_proc_long
ipc/sem: Fix dangling sem_array access in semtimedop race
powerpc/bpf/32: Fix Oops on tail call tests
Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
char: tpm: Protect tpm_pm_suspend with locks
Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend"
ACPI: HMAT: Fix initiator registration for single-initiator systems
ACPI: HMAT: remove unnecessary variable initialization
i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer
i2c: npcm7xx: Fix error handling in npcm_i2c_init()
i2c: Restore initial power state if probe fails
mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in
damon_sysfs_set_schemes()
mm/damon: introduce struct damos_access_pattern
ipv4: Fix route deletion when nexthop info is not specified
ipv4: Handle attempt to delete multipath route when fib_info contains an nh
reference
iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
nvme: fix SRCU protection of nvme_ns_head list
riscv: kexec: Fixup irq controller broken in kexec crash path
riscv: fix race when vmap stack overflow
riscv: Sync efi page table's kernel mappings before switching
pinctrl: single: Fix potential division by zero
ASoC: tlv320adc3xxx: Fix build error for implicit function declaration
ASoC: ops: Fix bounds check for _sx controls
tracing: Free buffers when a used dynamic event is removed
tracing: Fix race where histograms can be called before the event
tracing/osnoise: Fix duration type
drm/i915: Never return 0 if not all requests retired
drm/i915: Fix negative value passed as remaining time
drm/amdgpu: enable Vangogh VCN indirect sram mode
drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame
Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
mmc: sdhci: Fix voltage switch delay
mmc: sdhci-sprd: Fix no reset data and command after voltage switch
mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
mmc: core: Fix ambiguous TRIM and DISCARD arg
mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse()
mmc: mmc_test: Fix removal of debugfs file
net: stmmac: Set MAC's flow control register to reflect current settings
mm: migrate: fix THP's mapcount on isolation
v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
pinctrl: intel: Save and restore pins in "direct IRQ" mode
x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
error-injection: Add prompt for function error injection
can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when
netdev is down
ALSA: dice: fix regression for Lexicon I-ONIX FW810S
riscv: mm: Proper page permissions after initmem free
riscv: vdso: fix section overlapping under some conditions
hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
hwmon: (coretemp) Check for null before removing sysfs attrs
afs: Fix server->active leak in afs_put_server
net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
sctp: fix memory leak in sctp_stream_outq_migrate()
packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
net/mlx5: Lag, Fix for loop when checking lag
net: tun: Fix use-after-free in tun_detach()
afs: Fix fileserver probe RTT handling
net: mdiobus: fix unbalanced node reference count
net: hsr: Fix potential use-after-free
tipc: re-fetch skb cb after tipc_msg_validate
mptcp: fix sleep in atomic at close time
mptcp: don't orphan ssk in mptcp_close()
dsa: lan9303: Correct stat name
net: wwan: iosm: fix incorrect skb length
net: wwan: iosm: fix crash in peek throughput test
net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
net: wwan: iosm: fix kernel test robot reported error
net: ethernet: nixge: fix NULL dereference
net/9p: Fix a potential socket leak in p9_socket_open
net: net_netdev: Fix error handling in ntb_netdev_init_module()
net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()
net: phy: fix null-ptr-deref while probe() failed
wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
wifi: cfg80211: don't allow multi-BSSID in S1G
wifi: cfg80211: fix buffer overflow in elem comparison
aquantia: Do not purge addresses when setting the number of rings
qlcnic: fix sleep-in-atomic-context bugs caused by msleep
vfs: fix copy_file_range() averts filesystem freeze protection
can: m_can: Add check for devm_clk_get
can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
can: etas_es58x: es58x_init_netdev(): free netdev when register_candev()
can: cc770: cc770_isa_probe(): add missing free_cc770dev()
can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
net/mlx5e: Fix use-after-free when reverting termination table
net/mlx5: Fix uninitialized variable bug in outlen_write()
net/mlx5: E-switch, Fix duplicate lag creation
net/mlx5: E-switch, Destroy legacy fdb table when needed
net/mlx5: DR, Fix uninitialized var warning
e100: Fix possible use after free in e100_xmit_prepare
iavf: Fix error handling in iavf_init_module()
fm10k: Fix error handling in fm10k_init_module()
i40e: Fix error handling in i40e_init_module()
ixgbevf: Fix resource leak in ixgbevf_init_module()
clk: qcom: gcc-sc8280xp: add cxo as parent for three ufs ref clks
of: property: decrement node refcount in of_fwnode_get_reference_args()
nvmem: rmem: Fix return value check in rmem_read()
bpf: Do not copy spin lock field from user in bpf_selem_alloc
clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error
hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
hwmon: (i5500_temp) fix missing pci_disable_device()
hwmon: (ina3221) Fix shunt sum critical calculation
hwmon: (ltc2947) fix temperature scaling
libbpf: Handle size overflow for ringbuf mmap
ARM: at91: rm9200: fix usb device clock id
scripts/faddr2line: Fix regression in name resolution on ppc64le
bpf, perf: Use subprog name when reporting subprog ksymbol
libbpf: Use correct return pointer in attach_raw_tp
iio: light: rpr0521: add missing Kconfig dependencies
iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
iio: health: afe4403: Fix oob read in afe4403_read_raw
clk: qcom: gdsc: Remove direct runtime PM calls
clk: qcom: gdsc: add missing error handling
clk: samsung: exynos7885: Correct "div4" clock parents
drm/amd/pm: update driver if header for smu_13_0_7
drm/amd/pm: update driver-if header for smu_v13_0_10
drm/amd/pm: add smu_v13_0_10 driver if version
drm/amdgpu: fix userptr HMM range handling v2
drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos
drm/amdgpu: move setting the job resources
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.0/+bug/2002670/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
