Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.0.13 upstream stable release
from git://git.kernel.org/
Linux 6.0.13
drm/amdgpu/vcn: update vcn4 fw shared data structure
s390/qeth: fix use-after-free in hsci
macsec: add missing attribute validation for offload
net: mvneta: Fix an out of bounds check
net: thunderbolt: fix memory leak in tbnet_open()
ipv6: avoid use-after-free in ip6_fragment()
net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
net: phy: mxl-gpy: add MDINT workaround
net: dsa: mv88e6xxx: accept phy-mode = "internal" for internal PHY ports
xen/netback: fix build warning
dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and
dpaa2_switch_acl_entry_remove()
ethernet: aeroflex: fix potential skb leak in greth_init_rings()
tipc: call tipc_lxc_xmit without holding node_read_lock
net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
ipv4: Fix incorrect route flushing when table ID 0 is used
ipv4: Fix incorrect route flushing when source address is deleted
bonding: get correct NA dest address
tipc: Fix potential OOB in tipc_link_proto_rcv()
net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
ravb: Fix potential use-after-free in ravb_rx_gbeth()
net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue
ip_gre: do not report erspan version on GRE interface
net: wwan: iosm: fix memory leak in ipc_mux_init()
net: stmmac: fix "snps,axi-config" node property parsing
gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
nvme initialize core quirks before calling nvme_init_subsystem
NFC: nci: Bounds check struct nfc_target arrays
i40e: Disallow ip4 and ip6 l4_4_bytes
i40e: Fix for VF MAC address 0
i40e: Fix not setting default xps_cpus after reset
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
xen-netfront: Fix NULL sring after live migration
net: microchip: sparx5: correctly free skb in xmit
octeontx2-pf: Fix potential memory leak in otx2_init_tc()
net: mdiobus: fix double put fwnode in the error path
net: mdiobus: fwnode_mdiobus_register_phy() rework error handling
net: encx24j600: Fix invalid logic in reading of MISTAT register
net: encx24j600: Add parentheses to fix precedence
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
nfp: correct desc type when header dma len is 4096
selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
net: dsa: sja1105: Check return value
net: dsa: hellcreek: Check return value
net: dsa: ksz: Check return value
Bluetooth: Fix not cleanup led when bt_init fails
Bluetooth: Fix support for Read Local Supported Codecs V2
Bluetooth: Remove codec id field in vendor codec definition
Bluetooth: hci_conn: add missing hci_dev_put() in iso_listen_bis()
Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
vmxnet3: use correct intrConf reference when using extended queues
vmxnet3: correctly report encapsulated LRO packet
inet: ping: use hlist_nulls rcu iterator during lookup
af_unix: Get user_ns from in_skb in unix_diag_get_exact().
drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
net: ethernet: ti: am65-cpsw: Fix RGMII configuration at SPEED_10
net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under
ARCH_BCM2835
igb: Allocate MSI-X vector when testing
e1000e: Fix TX dispatch condition
gpio: amd8111: Fix PCI device reference count leak
drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
netfilter: conntrack: fix using __this_cpu_add in preemptible
ca8210: Fix crash by zero initializing data
ieee802154: cc2520: Fix error return code in cc2520_hw_init()
drm/vmwgfx: Fix race issue calling pin_user_pages
netfilter: flowtable_offload: fix using __this_cpu_add in preemptible
netfilter: nft_set_pipapo: Actually validate intervals in fields after the
first one
gpiolib: fix memory leak in gpiochip_setup_dev()
ARM: at91: fix build for SAMA5D3 w/o L2 cache
can: af_can: fix NULL pointer dereference in can_rcv_filter
ARM: 9278/1: kfence: only handle translation faults
HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
HID: core: fix shift-out-of-bounds in hid_report_raw_event
HID: hid-lg4ff: Add check for empty lbuf
HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
HID: fix I2C_HID not selected when I2C_HID_OF_ELAN is
HID: usbhid: Add ALWAYS_POLL quirk for some mice
net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()
drm/shmem-helper: Avoid vm_open error paths
drm/shmem-helper: Remove errant put in error path
drm/amd/display: fix array index out of bound error in DCN32 DML
drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend
can: esd_usb: Allow REC and TEC to return to zero
can: slcan: fix freed work crash
can: can327: flush TX_work on ldisc .close()
drm/vmwgfx: Don't use screen objects when SEV is active
KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
HID: uclogic: Fix frame templates for big endian architectures
io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
net: mana: Fix race on per-CQ variable napi work_done
selftests/tls: Fix tls selftests dependency to correct algorithm
Bluetooth: Fix crash when replugging CSR fake controllers
Bluetooth: btusb: Add debug message for CSR controllers
Bluetooth: btusb: Fix CSR clones again by re-adding ERR_DATA_REPORTING quirk
tmpfs: fix data loss from failed fallocate
mm/gup: fix gup_pud_range() for dax
memcg: fix possible use-after-free in memcg_write_event_control()
media: v4l2-dv-timings.c: fix too strict blanking sanity checks
Revert "ARM: dts: imx7: Fix NAND controller size-cells"
soundwire: intel: Initialize clock stop timeout
fscache: Fix oops due to race with cookie_lru and use_cookie
media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
xen/netback: don't call kfree_skb() with interrupts disabled
xen/netback: Ensure protocol headers don't fall in the non-linear area
platform/x86: asus-wmi: Add support for ROG X13 tablet mode
platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum
soundwire: dmi-quirks: add remapping for HP Omen 16-k0005TX
crypto: ccp - Add a quirk to firmware update
ALSA: hda/realtek: More robust component matching for CS35L41
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
mm/khugepaged: fix GUP-fast interaction by sending IPI
mm/khugepaged: take the right locks for page table retraction
drm/amdgpu: fix use-after-free during gpu recovery
drm/amd/display: Use new num clk levels struct for max mclk index
drm/amd/display: Avoid setting pixel rate divider to N/A
drm/amd/display: Use viewport height for subvp mall allocation size
net: usb: qmi_wwan: add u-blox 0x1342 composition
9p/xen: check logical size for buffer size
usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
fbcon: Use kzalloc() in fbcon_prepare_logo()
regulator: twl6030: fix get status of twl6032 regulators
ASoC: soc-pcm: Add NULL check in BE reparenting
net/mlx5: Lag, avoid lockdep warnings
btrfs: send: avoid unaligned encoded writes when attempting to clone range
selftests/net: Find nettest in current directory
LoongArch: Fix unsigned comparison with less than zero
LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in {pmd,pte}_mkwrite()
LoongArch: Combine acpi_boot_table_init() and acpi_boot_init()
LoongArch: Makefile: Use "grep -E" instead of "egrep"
ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
regulator: slg51000: Wait after asserting CS pin
9p/fd: Use P9_HDRSZ for header size
ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine
transitions
ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
spi: mediatek: Fix DEVAPC Violation at KO Remove
ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
fs: use acquire ordering in __fget_light()
ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
arm64: dts: rockchip: fix ir-receiver node names
ARM: dts: rockchip: fix ir-receiver node names
arm64: dts: rockchip: fix adc-keys sub node names
ARM: dts: rockchip: fix adc-keys sub node names
arm: dts: rockchip: remove clock-frequency from rtc
arm: dts: rockchip: fix node name for hym8563 rtc
arm64: dts: rockchip: fix node name for hym8563 rtc
arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
arm64: dts: rockchip: remove i2c5 from rk3566-roc-pc
arm64: dts: rockchip: Fix i2c3 pinctrl on rk3566-roc-pc
arm64: dts: rockchip: Fix gmac failure of rgmii-id from rk3566-roc-pc
drm/i915: Remove non-existent pipes from bigjoiner pipe mask
madvise: use zap_page_range_single for madvise dontneed
** Affects: linux-oem-6.0 (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux-oem-6.0 (Ubuntu Jammy)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux-oem-6.0 (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux-oem-6.0 (Ubuntu Jammy)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-6.0 in Ubuntu.
https://bugs.launchpad.net/bugs/2002671
Title:
Jammy update: v6.0.13 upstream stable release
Status in linux-oem-6.0 package in Ubuntu:
Confirmed
Status in linux-oem-6.0 source package in Jammy:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.0.13 upstream stable release
from git://git.kernel.org/
Linux 6.0.13
drm/amdgpu/vcn: update vcn4 fw shared data structure
s390/qeth: fix use-after-free in hsci
macsec: add missing attribute validation for offload
net: mvneta: Fix an out of bounds check
net: thunderbolt: fix memory leak in tbnet_open()
ipv6: avoid use-after-free in ip6_fragment()
net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
net: phy: mxl-gpy: add MDINT workaround
net: dsa: mv88e6xxx: accept phy-mode = "internal" for internal PHY ports
xen/netback: fix build warning
dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and
dpaa2_switch_acl_entry_remove()
ethernet: aeroflex: fix potential skb leak in greth_init_rings()
tipc: call tipc_lxc_xmit without holding node_read_lock
net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
ipv4: Fix incorrect route flushing when table ID 0 is used
ipv4: Fix incorrect route flushing when source address is deleted
bonding: get correct NA dest address
tipc: Fix potential OOB in tipc_link_proto_rcv()
net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
ravb: Fix potential use-after-free in ravb_rx_gbeth()
net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue
ip_gre: do not report erspan version on GRE interface
net: wwan: iosm: fix memory leak in ipc_mux_init()
net: stmmac: fix "snps,axi-config" node property parsing
gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
nvme initialize core quirks before calling nvme_init_subsystem
NFC: nci: Bounds check struct nfc_target arrays
i40e: Disallow ip4 and ip6 l4_4_bytes
i40e: Fix for VF MAC address 0
i40e: Fix not setting default xps_cpus after reset
net: mvneta: Prevent out of bounds read in mvneta_config_rss()
xen-netfront: Fix NULL sring after live migration
net: microchip: sparx5: correctly free skb in xmit
octeontx2-pf: Fix potential memory leak in otx2_init_tc()
net: mdiobus: fix double put fwnode in the error path
net: mdiobus: fwnode_mdiobus_register_phy() rework error handling
net: encx24j600: Fix invalid logic in reading of MISTAT register
net: encx24j600: Add parentheses to fix precedence
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
nfp: correct desc type when header dma len is 4096
selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
net: dsa: sja1105: Check return value
net: dsa: hellcreek: Check return value
net: dsa: ksz: Check return value
Bluetooth: Fix not cleanup led when bt_init fails
Bluetooth: Fix support for Read Local Supported Codecs V2
Bluetooth: Remove codec id field in vendor codec definition
Bluetooth: hci_conn: add missing hci_dev_put() in iso_listen_bis()
Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
vmxnet3: use correct intrConf reference when using extended queues
vmxnet3: correctly report encapsulated LRO packet
inet: ping: use hlist_nulls rcu iterator during lookup
af_unix: Get user_ns from in_skb in unix_diag_get_exact().
drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
net: ethernet: ti: am65-cpsw: Fix RGMII configuration at SPEED_10
net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under
ARCH_BCM2835
igb: Allocate MSI-X vector when testing
e1000e: Fix TX dispatch condition
gpio: amd8111: Fix PCI device reference count leak
drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
netfilter: ctnetlink: fix compilation warning after data race fixes in ct mark
netfilter: conntrack: fix using __this_cpu_add in preemptible
ca8210: Fix crash by zero initializing data
ieee802154: cc2520: Fix error return code in cc2520_hw_init()
drm/vmwgfx: Fix race issue calling pin_user_pages
netfilter: flowtable_offload: fix using __this_cpu_add in preemptible
netfilter: nft_set_pipapo: Actually validate intervals in fields after the
first one
gpiolib: fix memory leak in gpiochip_setup_dev()
ARM: at91: fix build for SAMA5D3 w/o L2 cache
can: af_can: fix NULL pointer dereference in can_rcv_filter
ARM: 9278/1: kfence: only handle translation faults
HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
HID: core: fix shift-out-of-bounds in hid_report_raw_event
HID: hid-lg4ff: Add check for empty lbuf
HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
HID: fix I2C_HID not selected when I2C_HID_OF_ELAN is
HID: usbhid: Add ALWAYS_POLL quirk for some mice
net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()
drm/shmem-helper: Avoid vm_open error paths
drm/shmem-helper: Remove errant put in error path
drm/amd/display: fix array index out of bound error in DCN32 DML
drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend
can: esd_usb: Allow REC and TEC to return to zero
can: slcan: fix freed work crash
can: can327: flush TX_work on ldisc .close()
drm/vmwgfx: Don't use screen objects when SEV is active
KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
HID: uclogic: Fix frame templates for big endian architectures
io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
net: mana: Fix race on per-CQ variable napi work_done
selftests/tls: Fix tls selftests dependency to correct algorithm
Bluetooth: Fix crash when replugging CSR fake controllers
Bluetooth: btusb: Add debug message for CSR controllers
Bluetooth: btusb: Fix CSR clones again by re-adding ERR_DATA_REPORTING quirk
tmpfs: fix data loss from failed fallocate
mm/gup: fix gup_pud_range() for dax
memcg: fix possible use-after-free in memcg_write_event_control()
media: v4l2-dv-timings.c: fix too strict blanking sanity checks
Revert "ARM: dts: imx7: Fix NAND controller size-cells"
soundwire: intel: Initialize clock stop timeout
fscache: Fix oops due to race with cookie_lru and use_cookie
media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
xen/netback: don't call kfree_skb() with interrupts disabled
xen/netback: Ensure protocol headers don't fall in the non-linear area
platform/x86: asus-wmi: Add support for ROG X13 tablet mode
platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum
soundwire: dmi-quirks: add remapping for HP Omen 16-k0005TX
crypto: ccp - Add a quirk to firmware update
ALSA: hda/realtek: More robust component matching for CS35L41
hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
mm/khugepaged: fix GUP-fast interaction by sending IPI
mm/khugepaged: take the right locks for page table retraction
drm/amdgpu: fix use-after-free during gpu recovery
drm/amd/display: Use new num clk levels struct for max mclk index
drm/amd/display: Avoid setting pixel rate divider to N/A
drm/amd/display: Use viewport height for subvp mall allocation size
net: usb: qmi_wwan: add u-blox 0x1342 composition
9p/xen: check logical size for buffer size
usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
fbcon: Use kzalloc() in fbcon_prepare_logo()
regulator: twl6030: fix get status of twl6032 regulators
ASoC: soc-pcm: Add NULL check in BE reparenting
net/mlx5: Lag, avoid lockdep warnings
btrfs: send: avoid unaligned encoded writes when attempting to clone range
selftests/net: Find nettest in current directory
LoongArch: Fix unsigned comparison with less than zero
LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in
{pmd,pte}_mkwrite()
LoongArch: Combine acpi_boot_table_init() and acpi_boot_init()
LoongArch: Makefile: Use "grep -E" instead of "egrep"
ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
regulator: slg51000: Wait after asserting CS pin
9p/fd: Use P9_HDRSZ for header size
ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine
transitions
ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
spi: mediatek: Fix DEVAPC Violation at KO Remove
ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
fs: use acquire ordering in __fget_light()
ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
arm64: dts: rockchip: fix ir-receiver node names
ARM: dts: rockchip: fix ir-receiver node names
arm64: dts: rockchip: fix adc-keys sub node names
ARM: dts: rockchip: fix adc-keys sub node names
arm: dts: rockchip: remove clock-frequency from rtc
arm: dts: rockchip: fix node name for hym8563 rtc
arm64: dts: rockchip: fix node name for hym8563 rtc
arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series
arm64: dts: rockchip: remove i2c5 from rk3566-roc-pc
arm64: dts: rockchip: Fix i2c3 pinctrl on rk3566-roc-pc
arm64: dts: rockchip: Fix gmac failure of rgmii-id from rk3566-roc-pc
drm/i915: Remove non-existent pipes from bigjoiner pipe mask
madvise: use zap_page_range_single for madvise dontneed
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.0/+bug/2002671/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
