This bug was fixed in the package linux - 5.15.0-70.77
---------------
linux (5.15.0-70.77) jammy; urgency=medium
* jammy/linux: 5.15.0-70.77 -proposed tracker (LP: #2011918)
* CVE-2023-26545
- net: mpls: fix stale pointer if allocation fails during device rename
* CVE-2023-1281
- net/sched: tcindex: update imperfect hash filters respecting rcu
* [SRU][Ubuntu 22.04.1] mpi3mr: Add management application interface(BSG)
support (LP: #1971151)
- scsi: mpi3mr: Add bsg device support
- scsi: mpi3mr: Add support for driver commands
- scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi
header
- scsi: mpi3mr: Add support for MPT commands
- scsi: mpi3mr: Add support for PEL commands
- scsi: mpi3mr: Expose adapter state to sysfs
- scsi: mpi3mr: Add support for NVMe passthrough
- scsi: mpi3mr: Update driver version to 8.0.0.69.0
- scsi: mpi3mr: Increase I/O timeout value to 60s
- scsi: mpi3mr: Hidden drives not removed during soft reset
- scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR
- scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init()
- scsi: mpi3mr: Return error if dma_alloc_coherent() fails
- scsi: mpi3mr: Add shost related sysfs attributes
- scsi: mpi3mr: Add target device related sysfs attributes
- scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings
- scsi: mpi3mr: Fix kernel-doc
* cpufreq: intel_pstate: Update Balance performance EPP for Sapphire Rapids
(LP: #2008519)
- cpufreq: intel_pstate: Update EPP for AlderLake mobile
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids
* Fail to output sound to external monitor which connects via docking station
(LP: #2009024)
- [Config] Enable CONFIG_SND_HDA_INTEL_HDMI_SILENT_STREAM
* Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)
- wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read
* Jammy update: v5.15.92 upstream stable release (LP: #2011472)
- ARM: dts: imx: Fix pca9547 i2c-mux node name
- ARM: dts: vf610: Fix pca9548 i2c-mux node names
- arm64: dts: freescale: Fix pca954x i2c-mux node names
- arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
- firmware: arm_scmi: Clear stale xfer->hdr.status
- bpf: Skip task with pid=1 in send_signal_common()
- erofs/zmap.c: Fix incorrect offset calculation
- blk-cgroup: fix missing pd_online_fn() while activating policy
- HID: playstation: sanity check DualSense calibration data.
- dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint()
- extcon: usbc-tusb320: fix kernel-doc warning
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
- tools: fix ARRAY_SIZE defines in tools and selftests hdrs
- selftests/vm: remove ARRAY_SIZE define from individual tests
- selftests: Provide local define of __cpuid_count()
- net: fix NULL pointer in skb_segment_list
- net: mctp: purge receive queues on sk destruction
- Linux 5.15.92
* Jammy update: v5.15.91 upstream stable release (LP: #2011467)
- memory: tegra: Remove clients SID override programming
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in
atmel_ramc_probe()
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe()
- dmaengine: ti: k3-udma: Do conditional decrement of
UDMA_CHAN_RT_PEER_BCNT_REG
- arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property
- ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency'
- ARM: dts: imx7d-pico: Use 'clock-frequency'
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
- arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux
- ARM: imx: add missing of_node_put()
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity
- soc: imx8m: Fix incorrect check for of_clk_get_by_name()
- reset: uniphier-glue: Use reset_control_bulk API
- reset: uniphier-glue: Fix possible null-ptr-deref
- EDAC/highbank: Fix memory leak in highbank_mc_probe()
- firmware: arm_scmi: Harden shared memory access in fetch_response
- firmware: arm_scmi: Harden shared memory access in fetch_notification
- tomoyo: fix broken dependency on *.conf.default
- RDMA/core: Fix ib block iterator counter overflow
- IB/hfi1: Reject a zero-length user expected buffer
- IB/hfi1: Reserve user expected TIDs
- IB/hfi1: Fix expected receive setup error exit issues
- IB/hfi1: Immediately remove invalid memory from hardware
- IB/hfi1: Remove user expected buffer invalidate race
- affs: initialize fsdata in affs_truncate()
- PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
- arm64: dts: qcom: msm8992: Don't use sfpb mutex
- arm64: dts: qcom: msm8992-libra: Add CPU regulators
- arm64: dts: qcom: msm8992-libra: Fix the memory map
- phy: ti: fix Kconfig warning and operator precedence
- NFSD: fix use-after-free in nfsd4_ssc_setup_dul()
- ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- amd-xgbe: Delay AN timeout during KR training
- bpf: Fix pointer-leak due to insufficient speculative store bypass
mitigation
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and
unmap_si_regs
- net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()
- sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb
- gpio: use raw spinlock for gpio chip shadowed data
- gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock
- gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode
- pinctrl/rockchip: Use temporary variable for struct device
- pinctrl/rockchip: add error handling for pull/drive register getters
- pinctrl: rockchip: fix reading pull type on rk3568
- net: stmmac: Fix queue statistics reading
- net/sched: sch_taprio: fix possible use-after-free
- l2tp: Serialize access to sk_user_data with sk_callback_lock
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
- l2tp: convert l2tp_tunnel_list to idr
- l2tp: close all race conditions in l2tp_tunnel_register()
- octeontx2-pf: Avoid use of GFP_KERNEL in atomic context
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values()
- HID: check empty report_list in bigben_probe()
- net: stmmac: fix invalid call to mdiobus_get_phy()
- pinctrl: rockchip: fix mux route data for rk3568
- HID: revert CHERRY_MOUSE_000C quirk
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
- net: ipa: disable ipa interrupt during suspend
- net/mlx5: E-switch, Fix setting of reserved fields on
MODIFY_SCHEDULING_ELEMENT
- net: mlx5: eliminate anonymous module_init & module_exit
- drm/panfrost: fix GENERIC_ATOMIC64 dependency
- dmaengine: Fix double increment of client_count in dma_chan_get()
- net: macb: fix PTP TX timestamp failure due to packet padding
- virtio-net: correctly enable callback during start_xmit
- l2tp: prevent lockdep issue in l2tp_tunnel_register()
- HID: betop: check shape of output reports
- cifs: fix potential deadlock in cache_refresh_path()
- dmaengine: xilinx_dma: call of_node_put() when breaking out of
for_each_child_of_node()
- phy: phy-can-transceiver: Skip warning if no "max-bitrate"
- drm/amd/display: fix issues with driver unload
- nvme-pci: fix timeout request state check
- tcp: avoid the lookup process failing to get sk in ehash table
- octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt
- ptdma: pt_core_execute_cmd() should use spinlock
- device property: fix of node refcount leak in
fwnode_graph_get_next_endpoint()
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- driver core: Fix test_async_probe_init saves device in wrong array
- selftests/net: toeplitz: fix race on tpacket_v3 block close
- net: dsa: microchip: ksz9477: port map correction in ALU table entry
register
- thermal/core: Remove duplicate information when an error occurs
- thermal/core: Rename 'trips' to 'num_trips'
- thermal: Validate new state in cur_state_store()
- thermal/core: fix error code in __thermal_cooling_device_register()
- thermal: core: call put_device() only after device_register() fails
- net: stmmac: enable all safety features by default
- tcp: fix rate_app_limited to default to 1
- scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
- kcsan: test: don't put the expect array on the stack
- cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist
- ASoC: fsl_micfil: Correct the number of steps on SX controls
- net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
- s390/debug: add _ASM_S390_ prefix to header guard
- s390: expicitly align _edata and _end symbols on page boundary
- perf/x86/msr: Add Emerald Rapids
- perf/x86/intel/uncore: Add Emerald Rapids
- cpufreq: armada-37xx: stop using 0 as NULL pointer
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
- spi: spidev: remove debug messages that access spidev->spi without locking
- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
- scsi: hisi_sas: Set a port invalid only if there are no devices attached
when refreshing port id
- r8152: add vendor/device ID pair for Microsoft Devkit
- platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
- platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
- lockref: stop doing cpu_relax in the cmpxchg loop
- firmware: coreboot: Check size of table entry and use flex-array
- drm/i915: Allow switching away via vga-switcheroo if uninitialized
- drm/i915: Remove unused variable
- x86: ACPI: cstate: Optimize C3 entry on AMD CPUs
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- sysctl: add a new register_sysctl_init() interface
- kernel/panic: move panic sysctls to its own file
- panic: unset panic_on_warn inside panic()
- ubsan: no need to unset panic_on_warn in ubsan_epilogue()
- kasan: no need to unset panic_on_warn in end_report()
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- hexagon: Fix function name in die()
- h8300: Fix build errors from do_exit() to make_task_dead() transition
- csky: Fix function name in csky_alignment() and die()
- ia64: make IA64_MCA_RECOVERY bool instead of tristate
- panic: Separate sysctl logic from CONFIG_SMP
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- docs: Fix path paste-o for /sys/kernel/warn_count
- exit: Use READ_ONCE() for all oops/warn limit reads
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- drm/amdgpu: complete gfxoff allow signal during suspend without delay
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- KVM: SVM: fix tsc scaling cache logic
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- trace_events_hist: add check for return value of 'create_hist_field'
- ftrace/scripts: Update the instructions for ftrace-bisect.sh
- cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- i2c: mv64xxx: Remove shutdown method from driver
- i2c: mv64xxx: Add atomic_xfer method to driver
- ksmbd: add smbd max io size parameter
- ksmbd: add max connections parameter
- ksmbd: do not sign response to session request for guest login
- ksmbd: downgrade ndr version error message to debug
- ksmbd: limit pdu length size according to connection status
- ovl: fail on invalid uid/gid mapping at copy up
- KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
- KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation
- thermal: intel: int340x: Protect trip temperature from concurrent updates
- ipv6: fix reachability confirmation with proxy_ndp
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment
- EDAC/device: Respect any driver-supplied workqueue polling value
- EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info
- net: mana: Fix IRQ name - add PCI and queue number
- scsi: ufs: core: Fix devfreq deadlocks
- i2c: designware: use casting of u64 in clock multiplication to avoid
overflow
- netlink: prevent potential spectre v1 gadgets
- net: fix UaF in netns ops registration error path
- drm/i915/selftest: fix intel_selftest_modify_policy argument types
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
- netfilter: nft_set_rbtree: skip elements in transaction from garbage
collection
- netlink: annotate data races around nlk->portid
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- net/sched: sch_taprio: do not schedule in taprio_reset()
- sctp: fail if no bound addresses can be used for a given scope
- riscv/kprobe: Fix instruction simulation of JALR
- nvme: fix passthrough csi check
- gpio: mxc: Unlock on error path in mxc_flip_edge()
- ravb: Rename "no_ptp_cfg_active" and "ptp_cfg_active" variables
- net: ravb: Fix lack of register setting after system resumed for Gen3
- net: ravb: Fix possible hang if RIS2_QFF1 happen
- net: mctp: mark socks as dead on unhash, prevent re-add
- thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- net: mdio-mux-meson-g12a: force internal PHY off on mux switch
- treewide: fix up files incorrectly marked executable
- tools: gpio: fix -c option of gpio-event-mon
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- cpufreq: Move to_gov_attr_set() to cpufreq.h
- cpufreq: governor: Use kobject release() method to free dbs_data
- kbuild: Allow kernel installation packaging to override pkg-config
- block: fix and cleanup bio_check_ro
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- netfilter: conntrack: unify established states for SCTP paths
- perf/x86/amd: fix potential integer overflow on shift of a int
- Linux 5.15.91
* Kernel livepatch support for for s390x (LP: #1639924)
- sched: Improve try_invoke_on_locked_down_task()
- sched,rcu: Rework try_invoke_on_locked_down_task()
- sched,livepatch: Use task_call_func()
- sched: Simplify wake_up_*idle*()
- sched,livepatch: Use wake_up_if_idle()
- sched: Improve wake_up_all_idle_cpus() take #2
- s390/entry: remove unused expoline thunk
- s390: remove unused expoline to BC instructions
- s390/nospec: generate single register thunks if possible
- s390/nospec: add an option to use thunk-extern
- s390/nospec: align and size extern thunks
- bug: Use normal relative pointers in 'struct bug_entry'
- s390/nospec: build expoline.o for modules_prepare target
- [Config] Enable EXPOLINE_EXTERN on s390x
- [Config] s390x: Removing UBSAN from configuration
* Do not sort the task scan result from /proc when synthesizing perf events
(LP: #2008971)
- perf synthetic-events: Don't sort the task scan result from /proc
* linux: Staging modules should be unsigned (LP: #1642368)
- [Packaging] Move and update signature inclusion list
- SAUCE: Add selective signing of staging modules
- [Packaging] Add module-signature-check
- [Packaging] module-signature-check: Check debian.<foo>/signature-inclusion
- [Packaging] Introduce debian/scripts/sign-module
- SAUCE: Switch to using debian/scripts/sign-module
* Jammy update: v5.15.90 upstream stable release (LP: #2008933)
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
- pNFS/filelayout: Fix coalescing test for single DS
- tools/virtio: initialize spinlocks in vring_test.c
- virtio_pci: modify ENOENT to EINVAL
- vduse: Validate vq_num in vduse_validate_config()
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down()
- RDMA/srp: Move large values to a new enum for gcc13
- btrfs: always report error in run_one_delayed_ref()
- x86/asm: Fix an assembler warning with current binutils
- f2fs: let's avoid panic if extent_tree is not created
- perf/x86/rapl: Treat Tigerlake like Icelake
- fbdev: omapfb: avoid stack overflow warning
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
- wifi: mac80211: sdata can be NULL during AMPDU start
- Add exception protection processing for vd in axi_chan_handle_err function
- zonefs: Detect append writes at invalid locations
- nilfs2: fix general protection fault in nilfs_btree_insert()
- efi: fix userspace infinite retry read efivars after EFI runtime services
page fault
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform
- drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2)
- drm/amd: Delay removal of the firmware framebuffer
- hugetlb: unshare some PMDs when splitting VMAs
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
- eventpoll: add EPOLL_URING_WAKE poll wakeup flag
- eventfd: provide a eventfd_signal_mask() helper
- io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups
- io_uring: improve send/recv error handling
- io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
- io_uring: add flag for disabling provided buffer recycling
- io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
- io_uring: allow re-poll if we made progress
- io_uring: fix async accept on O_NONBLOCK sockets
- io_uring: ensure that cached task references are always put on exit
- io_uring: remove duplicated calls to io_kiocb_ppos
- io_uring: update kiocb->ki_pos at execution time
- io_uring: do not recalculate ppos unnecessarily
- io_uring/rw: defer fsnotify calls to task context
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- xhci: Fix null pointer dereference when host dies
- xhci: Add update_hub_device override for PCI xHCI hosts
- xhci: Add a flag to disable USB3 lpm on a xhci root port level.
- usb: acpi: add helper to check port lpm capability using acpi _DSM
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
- prlimit: do_prlimit needs to have a speculation check
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- staging: vchiq_arm: fix enum vchiq_status return types
- USB: misc: iowarrior: fix up header size for
USB_DEVICE_ID_CODEMERCS_IOW100
- misc: fastrpc: Don't remove map on creater_process and device_release
- misc: fastrpc: Fix use-after-free race condition for maps
- usb: core: hub: disable autosuspend for TI TUSB8041
- comedi: adv_pci1760: Fix PWM instruction handling
- ACPI: PRM: Check whether EFI runtime is available
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting
- btrfs: do not abort transaction on failure to write log tree when syncing
log
- btrfs: fix race between quota rescan and disable leading to NULL pointer
deref
- cifs: do not include page data when checking signature
- thunderbolt: Use correct function to calculate maximum USB3 link rate
- riscv: dts: sifive: fu740: fix size of pcie 32bit memory
- bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and
PERF_BPF_EVENT_PROG_UNLOAD
- staging: mt7621-dts: change some node hex addresses to lower case
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer
- tty: fix possible null-ptr-defer in spk_ttyio_release
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: cdns3: remove fetched trb from cache before dequeuing
- usb: host: ehci-fsl: Fix module alias
- usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail
- usb: typec: altmodes/displayport: Add pin assignment helper
- usb: typec: altmodes/displayport: Fix pin assignment calculation
- usb: gadget: g_webcam: Send color matching descriptor per frame
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation
- dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation
- serial: pch_uart: Pass correct sg to dma_unmap_sg()
- dmaengine: lgm: Move DT parsing after initialization
- dmaengine: tegra210-adma: fix global intr clear
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
- serial: amba-pl011: fix high priority character transmission in rs486 mode
- serial: atmel: fix incorrect baudrate setup
- gsmi: fix null-deref in gsmi_get_variable
- mei: me: add meteor lake point M DID
- drm/i915: re-disable RC6p on Sandy Bridge
- drm/i915/display: Check source height is > 0
- drm/amd/display: Fix set scaling doesn's work
- drm/amd/display: Calculate output_color_space after pixel encoding
adjustment
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
- drm/amdgpu: drop experimental flag on aldebaran
- fs/ntfs3: Fix attr_punch_hole() null pointer derenference
- arm64: efi: Execute runtime services from a dedicated stack
- efi: rt-wrapper: Add missing include
- x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
- tracing: Use alignof__(struct {type b;}) instead of offsetof()
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
- io_uring/net: fix fast_iov assignment in io_setup_async_msg()
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
- block: mq-deadline: Rename deadline_is_seq_writes()
- soc: qcom: apr: Make qcom,protection-domain optional again
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
- io_uring: Clean up a false-positive warning from GCC 9.3.0
- io_uring: fix double poll leak on repolling
- io_uring/rw: ensure kiocb_end_write() is always called
- io_uring/rw: remove leftover debug statement
- Linux 5.15.90
* Jammy update: v5.15.89 upstream stable release (LP: #2008929)
- ALSA: control-led: use strscpy in set_led_id()
- ALSA: hda/realtek - Turn on power early
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx
- KVM: arm64: Fix S1PTW handling on RO memslots
- KVM: arm64: nvhe: Fix build with profile optimization
- selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c
- efi: tpm: Avoid READ_ONCE() for accessing the event log
- docs: Fix the docs build with Sphinx 6.0
- net: stmmac: add aux timestamps fifo clearance wait
- perf auxtrace: Fix address filter duplicate symbol selection
- s390/kexec: fix ipl report address for kdump
- ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
- s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops
- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- drm/virtio: Fix GEM handle creation UAF
- drm/i915/gt: Reset twice
- net/mlx5e: Set action fwd flag when parsing tc action goto
- cifs: Fix uninitialized memory read for smb311 posix symlink create
- platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present
- platform/surface: aggregator: Ignore command messages not intended for us
- platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting
- dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint
- drm/msm/adreno: Make adreno quirks not overwrite each other
- dt-bindings: msm: dsi-controller-main: Fix power-domain constraint
- dt-bindings: msm: dsi-controller-main: Fix description of core clock
- dt-bindings: msm: dsi-phy-28nm: Add missing qcom,
dsi-phy-regulator-ldo-mode
- platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to
set_fn_lock_led_list[]
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux
transfer
- dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY
- dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during
probe
- ixgbe: fix pci device refcount leak
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames
- bus: mhi: host: Fix race between channel preparation and M0 event
- usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- iommu/iova: Fix alloc iova overflows issue
- iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe()
- sched/core: Fix use-after-free bug in dup_user_cpus_ptr()
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- powerpc/imc-pmu: Fix use of mutex in IRQs disabled section
- x86/boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- x86/resctrl: Fix task CLOSID/RMID update race
- regulator: da9211: Use irq handler when ready
- scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile
- scsi: ufs: Stop using the clock scaling lock in the error handler
- scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery
- ASoC: wm8904: fix wrong outputs volume after power reactivation
- ALSA: usb-audio: Make sure to stop endpoints before closing EPs
- ALSA: usb-audio: Relax hw constraints for implicit fb sync
- tipc: fix unexpected link reset due to discovery messages
- octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- af_unix: selftest: Fix the size of the parameter to connect()
- tools/nolibc: x86: Remove `r8`, `r9` and `r10` from the clobber list
- tools/nolibc: x86-64: Use `mov $60,%eax` instead of `mov $60,%rax`
- tools/nolibc: use pselect6 on RISCV
- tools/nolibc/std: move the standard type definitions to std.h
- tools/nolibc/types: split syscall-specific definitions into their own
files
- tools/nolibc/arch: split arch-specific code into individual files
- tools/nolibc/arch: mark the _start symbol as weak
- tools/nolibc: Remove .global _start from the entry point code
- tools/nolibc: restore mips branch ordering in the _start block
- tools/nolibc: fix the O_* fcntl/open macro definitions for riscv
- net/sched: act_mpls: Fix warning during failed attribute validation
- net/mlx5: Fix ptp max frequency adjustment range
- net/mlx5e: Don't support encap rules with gbp option
- perf build: Properly guard libbpf includes
- igc: Fix PPS delta between two synchronized end-points
- platform/surface: aggregator: Add missing call to ssam_request_sync_free()
- Documentation: KVM: add API issues section
- KVM: x86: Do not return host topology information from
KVM_GET_SUPPORTED_CPUID
- io_uring: lock overflowing for IOPOLL
- arm64: atomics: format whitespace consistently
- arm64: atomics: remove LL/SC trampolines
- arm64: cmpxchg_double*: hazard against entire exchange variable
- efi: fix NULL-deref in init error path
- io_uring/io-wq: free worker if task_work creation is canceled
- io_uring/io-wq: only free worker if it was allocated for creation
- block: handle bio_split_to_limits() NULL return
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
- pinctrl: amd: Add dynamic debugging for active GPIOs
- Linux 5.15.89
* Jammy update: v5.15.88 upstream stable release (LP: #2008927)
- parisc: Align parisc MADV_XXX constants with all other architectures
- serial: fixup backport of "serial: Deassert Transmit Enable on probe in
driver-specific way"
- net: sched: disallow noqueue for qdisc classes
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
- ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
- Linux 5.15.88
* Fix selftests/ftracetests/Meta-selftests (LP: #2006453)
- selftests/ftrace: Fix bash specific "==" operator
-- Stefan Bader <stefan.ba...@canonical.com> Tue, 21 Mar 2023 10:08:08
+0100
** Changed in: linux (Ubuntu Jammy)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-1281
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-26545
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1639924
Title:
Kernel livepatch support for for s390x
Status in Ubuntu on IBM z Systems:
Fix Committed
Status in gcc-11 package in Ubuntu:
Fix Released
Status in kpatch package in Ubuntu:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in gcc-11 source package in Jammy:
Fix Released
Status in kpatch source package in Jammy:
Invalid
Status in linux source package in Jammy:
Fix Released
Status in gcc-11 source package in Kinetic:
Fix Released
Status in kpatch source package in Kinetic:
Invalid
Status in linux source package in Kinetic:
Fix Released
Bug description:
[ Impact ]
* kpatch upstream has gained support for more architectures which we
would like to enable on LTS release. Since building livepatches using
the kpatch tooling makes the most sense on LTS kernels.
* This SRU is to enable s390x builds of kpatch on kinetic & jammy.
* Separately linux kernel patches for s390x will also be backported
to the GA kernel, whilst hwe-5.19 kernel already has all bugfixes to
support livepatches.
[ Test Plan ]
* Attempt to run and load sample integration livepatches from the
kpatch integration source code, against v5.15 & v5.19 kernels. These
should succeed on:
- amd64 jammy v5.15
- amd64 & s390x jammy v5.19
- amd64 & s390x kinetic v5.19
[ Where problems could occur ]
* The newly generated livepatches produced by this kpatch may have
different content (more or less sections/sybmols/relocations/etc), but
remain compatible with all prior kernels and tool-chains.
* This is a fairly large upstream update to the tooling.
* One command line option to kpatch-build is no longer supported
'-e', instead long form command line option must be used '--oot-
module'. And '--ott-module-src' becomes mandatory in such cases,
previously '--sourcedire' was required.
Additional command line options added '--oot-module-src, -R|--non-
replace'.
'--skip-gcc-check' is still supported but prints warnings, it is
deprecated in favour of '--skip-compiler-check'.
kpatch-cc utility is added, which is a toolchain wrapper.
Thus adjustments might be needed to scripts used to invoke and create
kpatch modules.
* Majority of non-test/non-doc changes are to do with:
- add support for s390x and 32bit powerpc
- add support for newer kernels and compilers (support & bugfixes to
various sections and symbols)
- more strict checking and bugfixes w.r.t. livepatch generation
- refactoring and better build support for cross-compiled modules,
compilation for various linux distributions, and code cleanups.
* Some of the fixes from these new upstream releases have already been
cherry-picked in the kpatch, but others might soon be needed on x84,
i.e. to support gcc-12 built kernels.
$ git log --no-merges --oneline v0.8.0..v0.9.7 -- kmod/ kpatch-
build/ > shortlog.txt
d46fea98ef kpatch-build: strengthen conditions for changed sections
9fac261ed0 kpatch-build: rela section could disappear after patched
fe45029b4d kpatch-build: fix KBUILD_MODNAME for OOT modules
8cc0fedefb kpatch-build: use err.h instead of error.h for musl support
07433e98c0 kpatch-cc: fix stripping of source tree prefix
33368a88cd create-diff-object: add support for .return_sites section (x86)
e921c557f9 macros: tweak syscall patching macros
a1171b112e create-diff-object: Create missing section symbol
0308d52bcd kpatch/s390: Enable kpatch build support
b0330ab18e kpatch/s390: Add additional bundled symbols.
eb4a85f778 kpatch/s390: Add exclusion lists
f0d00a9290 kpatch/s390: Add initial support for kpatch
10002f5aa6 kpatch/s390: Add gcc prerequisite flags for kpatch
c6d0b5450b lookup: fix symtab parsing
52863dace0 create-diff-object: fix endianness in
kpatch_no_sibling_calls_ppc64le()
017015a725 create-diff-object: make kpatch_check_relocations() more precise
f0e3da336c create-diff-object: fix string extraction
86d5208b46 create-diff-object: error on symbol conversion failure
325bccd89d create-diff-object: skip conversion for sections which never have
symbols
8508abd3b1 create-diff-object: allow converstion of empty symbols
8d5a628bde create-diff-object: add extra check for symbol conversion edge case
01427d50a1 create-diff-object: move addend math to a new function
bec6488af6 create-diff-object: add rela_insn() error check
6b1895a6b7 create-diff-object: convert rela_insn() to take normal 'sec'
bf212f7750 create-diff-object: error on unsupported rela in symbol conversion
3f8e1062cc create-diff-object: support R_X86_64_NONE in
kpatch_replace_sections_syms()
79f45d1b0a create-diff-object: fix kpatch_replace_sections_syms() for non-text
61e46094b5 create-diff-object: convert function return types to 'bool'
c24d135f40 create-diff-object: rename "sec" -> "relasec" for rela sections
3b63456817 kpatch-elf: convert functions to static
0c5a1e7753 kpatch-build: make xtrace output less verbose
2784f5056b kpatch-build: add support for openEuler
3392049665 kpatch-build: remove duplicated use_klp_arch
e9c0b67862 macros: add syscall patching macros
c2e73c2cbc create-diff-object: ensure debug sections don't use dynrelas
305ff8a5d8 create-diff-object: include .LCx string literal symbols
b700732f5d create-diff-object: add "_printk" to the __LINE__ detection
79fd60b28d create-diff-object: check arg2 and arg3 on all arches for line
detection
f7b27f2fec kpatch-build: Increase name length limit to 55 chars
e6b1664d0e create-diff-object.c: add s390 support for __LINE__ detection
a6920b9381 create-diff-object: fix endian issues in insn_is_load_immediate()
1152e58244 create-diff-object: support __LINE__ detection for btrfs macros
fea0192104 kpatch-build: Allow setting kernel version if --sourcedir and
--vmlinux are used
af672577b3 create-diff-object: use toc_rela() in
kpatch_line_macro_change_only()
81296117f4 create-diff-object: unify kpatch_line_macro_change_only()
4ba6f1fbc9 create-diff-object: include __dyndbg section when referenced by
jump table
8d81cc8517 kpatch-elf: symtab_shndx support
4d8c8102de Fix sym->type condition in locals_match()
4c0e4898d9 create-diff-object: detect architecture from input ELF file
394a907a37 create-diff-object: move kpatch_find_func_profiling_calls
definition
0decc79d0b kpatch-build: introduce ability to ignore distro-specific checks
fd0457b9f3 kpatch-build: add cross-compilation support
c4286ee2cb create-diff-object: add support for .retpoline_sites section
9ee9f7a3ec kpatch-build: Add missing allocation failure checks
bdc43561e9 kpatch-build: combine find_special_section_data() variants
34fcfd4d56 kpatch-build: source kernel .config instead of grepping
89a871fff9 Fix oot-module builds
aa85922ec6 Do not unset KBUILD_EXTRA_SYMBOLS
4a7dab17c8 Allow OOT modules to be built with non-distro kernels
6c4c8c0a2d create-diff-object: update for __already_done
f5175a402b kpatch-build: save environment varibles to file
6673c693d6 kmod/patch: clean only rebuildable objs
607ee53e1e livepatch-patch-hook: add comments
4f51ee7fa3 create-diff-object: support ppc64le relative jump labels
cb23c601f6 kpatch-build: Handle error in create-klp-module
ef0ce9715a create-diff-object: fix use after free in
kpatch-check-relocations()
70b8fe8f95 kpatch-build: Do not check KLP_REPLACE for kpatch.ko-based patches
eaaced1912 add openEuler build support
99542e864e create-diff-object: rename arguments in most correlate/compare
functions
22e16619e0 create-diff-object: base->orig renames
e2b50d7b66 create-diff-object: make locals_match() and maybe_discarded_sym()
return bool
720768767d Switch to per-file lookup table pointers.
db442d1405 Make lookup_symbol() accept struct symbol as an argument
56471ffc7c kpatch-build: Support CONFIG_PRINTK_INDEX, part 2
6cf50a6fca create-diff-object: Support CONFIG_PRINTK_INDEX, part 1
ea0470baa7 create-diff-object: change kpatch_line_macro_change_only() return
type to bool
a02668a0f7 kmod: remove redundant -mcmodel=large on ppc64le
624e5e3b82 kmod: pass CFLAGS_MODULE to module build
5622e3cc3d Make sure section symbols exist
a26b2af2a3 kpatch-build: set EXTRAVERSION and not localversion for RH kernels
ba3defa060 create-diff-object: Check that the section has a secsym
17dcebf077 kpatch-build: enable klp with replace option by default
d9f49e850a kpatch-build: drop klp.arch support in RHEL-8.4
81f9ca4833 create-diff-object: Fix out-of-range relocation check
fa5a95cafd create-diff-object: Fix out-of-range relocation error message
7be75549ba kpatch-build: add support for static calls
6d466fa76f kpatch-build: drop klp.arch support in RHEL-8.4
f9d2ec1d77 kpatch-build: fix kernel_is_rhel() for rhel-8 z-stream kernels
1b5a17f934 create-build-diff: support for .cold functions with no id suffix
fc4a56f6b2 kpatch-build: check existance of Makefile.modfinal
4cc2f06279 kpatch-build: workaround pahole and CONFIG_DEBUG_INFO_BTF_MODULES
6c83b642a4 create-diff-object: make digit tail optional in
kpatch_mengled_strcmp
b6e1d071ff create-diff-object: consider '.L' symbols not static local
fddc6242c6 create-diff-object: support both gcc and clang style of static
variables
38c2d7315d create-diff-object: clang __UNIQUE_ID symbol support
488f30c31b create-diff-object: .L.str* symbols support
41de9e763a kpatch-build: clang support
f951c1a92e kpatch-build: apply 'cp -f ... || die' pattern
e25450f5a8 kpatch-build: workaround pahole and CONFIG_DEBUG_INFO_BTF
387914b683 kpatch-gcc: powerpc - skip vdso files
04021bbfd5 kmod/patch: add kpatch.lds as a dependency for $(KPATCH_NAME).o
b8d4611edb kmod: convert __section to __kpatch_section
aea2cb96d6 create-diff-object: fix __dyndbg section inclusion
ef420050e3 kpatch-elf: pass new ELF output file mode to
kpatch_write_output_elf()
25f12681fa create-diff-object: cleanup maybe-uninitialized compiler complaints
08056febfd kpatch-build: Check Final module symbols for loadability
e9600c5513 kpatch-build: Check exported symbol version changes
b4c2753684 kpatch-build: Create module symbol version file once
b311112702 deal with the deadlock may occur in stop_machine context.
6531a7e075 kpatch-build: avoid modpost .output.o.cmd complaints
ea647e50ae kpatch-build/Makefile: Fail build on unsupported architectures
17ec03ef95 Keep build.log on --skip-cleanup
ed849a9b3e create-diff-object: Ignore changes to .altinstr_aux
abd2ff81c7 create-diff-object: change rela_equal() to return bool
514acc32e9 create-diff-object: improve jump label warnings
b381a0cc0b lookup: Add __UNIQUE_ID_ to maybe_discarded_sym list
67aa131137 gcc-plugin: GCC 10 - update local/non local insn names
92c42039bf gcc-plugin: abort building klp module on error
fde1a75b7f gcc-plugin: Fix build failure with GCC 10
b958ed601c create-diff-object: Add ppc64le mcount support
9bb75659e2 kpatch-build: Detect R_X86_64_64 dynrelas with large addends
15067fcd64 kmod/core: apply dynrela addend for R_X86_64_64
c1caee1468 create-diff-object: Ignore kpatch_ignored functions/sections
missing ftrace hook
1991ff0018 create-diff-object: add support for .klp.arch removal
3982b329bc kpatch-build: drop support for old non-.klp.arch kernels
e80562a8cb kpatch-build: add kpatch.ko deprecation warning
d97de8d554 kpatch-build: readability cleanups
4e0db559c1 lookup: fix Module.symvers reading for newer kernels
89e8574027 create-diff-object: show all jump labels before reporting failure
0a3e6c5f42 create-diff-object: refactor dynrela conversion
d2089a4d72 create-diff-object: rename lookup 'result' -> 'symbol'
ae9f1c17b1 lookup: add duplicate symbol checks
3064cf3c60 lookup: add 'objname' to lookup table and lookup results
7e1f2b0e07 lookup: convert lookup functions to return bool
6cc03f9599 lookup: rename 'pos' to 'sympos'
cd121422d9 lookup: rename 'value' -> 'addr'
5fad6599a4 lookup: remove unused testing code
e4d37dad5d lookup: Skip .dynsym table in symtab_read()
7e48138185 lookup: Simplify first loop in symtab_read()
74c9c99931 create-diff-object: reduce indentation in
kpatch_create_patches_sections()
b548ba153f kpatch-build: Look for local static variables in child functions
42128ff78c kpatch-build: Include .part. symbols as child function
b502e5b1cc kpatch-build: Allow function to have multiple child functions
af1fe267c5 create-diff-object: Avoid unnecessary parent symbol inclusion
fbfc8f9bec create-diff-object: Handle ppc64le toc with only constants
687e2caabc create-diff-object: Don't strip callback section symbols
37e950a653 create-kpatch-module: Fix -Wconversion warnings
ea9e708df0 create-klp-module: Fix -Wconversion warnings
f67c2ebce0 kpatch-elf: Fix -Wconversion warnings
5f68db22e5 create-diff-object: Fix -Wconversion warnings
a0c608de70 kpatch-build/Makefile: Skip build insn/plugin with -Wconversion
4e4a8d99da kpatch-build: add -Wconversion/-Wno-sign-conversion CFLAGS
f5f5479614 create-diff-object: fix relocations used for ZERO_PAGE(0)
61c55d9e52 kpatch-build: replace all '-' to '_' in KOBJFILE_NAME
68530e4c2b kpatch-build: Make local static twining stricter
19baa5b7c7 create-diff-object: process debug sections last
852bad5e8d create-diff-object: Use new helpers for static local correlation
e49e3a59c2 create-diff-object: Rename elements getting correlated
49a9adaf74 create-diff-object: Correlate objects related to a section at once
770f529225 kpatch-elf: Ensure stale references are not used
3a1a73f08c Make symvers reading code more flexible.
a02842fb69 kpatch-elf: Free sections in elf teardown
935f199875 create-diff-object: simplify mangled function correlation
e9755413ed kpatch-build: use whole word filename matching in find_parent_obj()
878bac379f create-diff-object: Simplify relocation processing
bd4fae25f9 create-diff-object: Add const to unmodified rela_insn arguments
50476c94cc create-diff-object: Check ELF headers earlier
2499eb2bdc Revert "create-diff-object: Check for *_fixup sections changes"
aabdf9c9c9 Fix parent matches for kernels newer than 5.3
ed5091b16f kpatch-build: Check if /etc/os-release exists
e4525ce311 kpatch-build: sanity check patched filenames
36120b9b08 kmod/patch: check for RHEL8 when setting HAVE_SIMPLE_ENABLE
e187de3fe4 kpatch-build: update core file error message
* This will be a potentially disruptive SRU, however it is required
to introduce building livepatches for the LTS v5.15 GA kernel on
s390x, and to continue support building kpatches on an LTS release for
the hwe based kernels. Kinetic update is required to not regress
support for kpatch building upon upgrades (even though that's not
provided by canonical).
[ Other Info ]
* Anything else you think is useful to include
* Anticipate questions from users, SRU, +1 maintenance, security teams and
the Technical Board
* and address these questions in advance
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1639924/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
