Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.81 upstream stable release
       from git://git.kernel.org/

spi: bcm-qspi: Fix use-after-free on unbind
spi: bcm2835: Fix use-after-free on unbind
ipv4: use IS_ENABLED instead of ifdef
netfilter: clear skb->next in NF_HOOK_LIST()
btrfs: tree-checker: add missing return after error in root_item
btrfs: tree-checker: add missing returns after data_ref alignment checks
btrfs: don't access possibly stale fs_info data for printing duplicate device
btrfs: fix lockdep splat when reading qgroup config on mount
wireless: Use linux/stddef.h instead of stddef.h
smb3: Call cifs reconnect from demultiplex thread
smb3: Avoid Mid pending list corruption
smb3: Handle error case during offload read path
cifs: fix a memleak with modefromsid
KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page
KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace
KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
KVM: x86: Fix split-irqchip vs interrupt injection window request
trace: fix potenial dangerous pointer
arm64: pgtable: Fix pte_accessible()
arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect()
HID: uclogic: Add ID for Trust Flex Design Tablet
HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses
HID: cypress: Support Varmilo Keyboards' media hotkeys
HID: add support for Sega Saturn
Input: i8042 - allow insmod to succeed on devices without an i8042 controller
HID: hid-sensor-hub: Fix issue with devices with no report ID
staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK
HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices
dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant
x86/xen: don't unbind uninitialized lock_kicker_irq
HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge
HID: Add Logitech Dinovo Edge battery quirk
proc: don't allow async path resolution of /proc/self components
nvme: free sq/cq dbbuf pointers when dbbuf set fails
vhost scsi: fix cmd completion race
dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
scsi: libiscsi: Fix NOP race condition
scsi: target: iscsi: Fix cmd abort fabric stop race
perf/x86: fix sysfs type mismatches
xtensa: uaccess: Add missing __user to strncpy_from_user() prototype
net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset
bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw
ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled()
phy: tegra: xusb: Fix dangling pointer on probe failure
iwlwifi: mvm: write queue_sync_state only for sync
batman-adv: set .owner to THIS_MODULE
arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
ARM: dts: dra76x: m_can: fix order of clocks
scsi: ufs: Fix race between shutdown and runtime resume flow
bnxt_en: fix error return code in bnxt_init_one()
bnxt_en: fix error return code in bnxt_init_board()
video: hyperv_fb: Fix the cache type when mapping the VRAM
bnxt_en: Release PCI regions when DMA mask setup fails during probe.
cxgb4: fix the panic caused by non smac rewrite
s390/qeth: make af_iucv TX notification call more robust
s390/qeth: fix af_iucv notification race
s390/qeth: fix tear down of async TX buffers
ibmvnic: fix call_netdevice_notifiers in do_reset
ibmvnic: notify peers when failover and migration happen
powerpc/64s: Fix allnoconfig build since uaccess flush
IB/mthca: fix return value of error branch in mthca_init_cq()
i40e: Fix removing driver while bare-metal VFs pass traffic
nfc: s3fwrn5: use signed integer for parsing GPIO numbers
net: ena: set initial DMA width to avoid intel iommu issue
ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq
optee: add writeback to valid memory type
arm64: tegra: Wrong AON HSP reg property size
efivarfs: revert "fix memory leak in efivarfs_create()"
efi: EFI_EARLYCON should depend on EFI
can: gs_usb: fix endianess problem with candleLight firmware
platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time
platform/x86: toshiba_acpi: Fix the wrong variable assignment
RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
RDMA/hns: Bugfix for memory window mtpt configuration
can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from 
request_threaded_irq()'s flags
can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
perf stat: Use proper cpu for shadow stats
perf probe: Fix to die_entrypc() returns error correctly
spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
USB: core: Change %pK for __user pointers to %px
usb: gadget: f_midi: Fix memleak in f_midi_alloc
USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO 
built-in usb-audio card
usb: gadget: Fix memleak in gadgetfs_fill_super
irqchip/exiu: Fix the index of fwspec for IRQ type
x86/mce: Do not overwrite no_way_out if mce_end() fails
x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak
x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak
USB: core: Fix regression in Hercules audio card
ASoC: Intel: Skylake: Remove superfluous chip initialization
ASoC: Intel: Skylake: Select hda configuration permissively
ASoC: Intel: Skylake: Enable codec wakeup during chip init
ASoC: Intel: Skylake: Shield against no-NHLT configurations
ASoC: Intel: Allow for ROM init retry on CNL platforms
ASoC: Intel: Skylake: Await purge request ack on CNL
ASoC: Intel: Multiple I/O PCM format support for pipe
ASoC: Intel: Skylake: Automatic DMIC format configuration according to 
information from NHLT
Linux 5.4.81
UBUNTU: upstream stable to v5.4.81

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Focal)
     Importance: Undecided
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu Focal)
       Status: New => In Progress

** Changed in: linux (Ubuntu Focal)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        v5.4.81 upstream stable release
+        from git://git.kernel.org/
  
-        v5.4.81 upstream stable release
-        from git://git.kernel.org/
+ spi: bcm-qspi: Fix use-after-free on unbind
+ spi: bcm2835: Fix use-after-free on unbind
+ ipv4: use IS_ENABLED instead of ifdef
+ netfilter: clear skb->next in NF_HOOK_LIST()
+ btrfs: tree-checker: add missing return after error in root_item
+ btrfs: tree-checker: add missing returns after data_ref alignment checks
+ btrfs: don't access possibly stale fs_info data for printing duplicate device
+ btrfs: fix lockdep splat when reading qgroup config on mount
+ wireless: Use linux/stddef.h instead of stddef.h
+ smb3: Call cifs reconnect from demultiplex thread
+ smb3: Avoid Mid pending list corruption
+ smb3: Handle error case during offload read path
+ cifs: fix a memleak with modefromsid
+ KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page
+ KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace
+ KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
+ KVM: x86: Fix split-irqchip vs interrupt injection window request
+ trace: fix potenial dangerous pointer
+ arm64: pgtable: Fix pte_accessible()
+ arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect()
+ HID: uclogic: Add ID for Trust Flex Design Tablet
+ HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses
+ HID: cypress: Support Varmilo Keyboards' media hotkeys
+ HID: add support for Sega Saturn
+ Input: i8042 - allow insmod to succeed on devices without an i8042 controller
+ HID: hid-sensor-hub: Fix issue with devices with no report ID
+ staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK
+ HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices
+ dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant
+ x86/xen: don't unbind uninitialized lock_kicker_irq
+ HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge
+ HID: Add Logitech Dinovo Edge battery quirk
+ proc: don't allow async path resolution of /proc/self components
+ nvme: free sq/cq dbbuf pointers when dbbuf set fails
+ vhost scsi: fix cmd completion race
+ dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
+ scsi: libiscsi: Fix NOP race condition
+ scsi: target: iscsi: Fix cmd abort fabric stop race
+ perf/x86: fix sysfs type mismatches
+ xtensa: uaccess: Add missing __user to strncpy_from_user() prototype
+ net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset
+ bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw
+ ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled()
+ phy: tegra: xusb: Fix dangling pointer on probe failure
+ iwlwifi: mvm: write queue_sync_state only for sync
+ batman-adv: set .owner to THIS_MODULE
+ arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
+ ARM: dts: dra76x: m_can: fix order of clocks
+ scsi: ufs: Fix race between shutdown and runtime resume flow
+ bnxt_en: fix error return code in bnxt_init_one()
+ bnxt_en: fix error return code in bnxt_init_board()
+ video: hyperv_fb: Fix the cache type when mapping the VRAM
+ bnxt_en: Release PCI regions when DMA mask setup fails during probe.
+ cxgb4: fix the panic caused by non smac rewrite
+ s390/qeth: make af_iucv TX notification call more robust
+ s390/qeth: fix af_iucv notification race
+ s390/qeth: fix tear down of async TX buffers
+ ibmvnic: fix call_netdevice_notifiers in do_reset
+ ibmvnic: notify peers when failover and migration happen
+ powerpc/64s: Fix allnoconfig build since uaccess flush
+ IB/mthca: fix return value of error branch in mthca_init_cq()
+ i40e: Fix removing driver while bare-metal VFs pass traffic
+ nfc: s3fwrn5: use signed integer for parsing GPIO numbers
+ net: ena: set initial DMA width to avoid intel iommu issue
+ ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
+ ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq
+ optee: add writeback to valid memory type
+ arm64: tegra: Wrong AON HSP reg property size
+ efivarfs: revert "fix memory leak in efivarfs_create()"
+ efi: EFI_EARLYCON should depend on EFI
+ can: gs_usb: fix endianess problem with candleLight firmware
+ platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time
+ platform/x86: toshiba_acpi: Fix the wrong variable assignment
+ RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
+ RDMA/hns: Bugfix for memory window mtpt configuration
+ can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from 
request_threaded_irq()'s flags
+ can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
+ perf stat: Use proper cpu for shadow stats
+ perf probe: Fix to die_entrypc() returns error correctly
+ spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
+ USB: core: Change %pK for __user pointers to %px
+ usb: gadget: f_midi: Fix memleak in f_midi_alloc
+ USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO 
built-in usb-audio card
+ usb: gadget: Fix memleak in gadgetfs_fill_super
+ irqchip/exiu: Fix the index of fwspec for IRQ type
+ x86/mce: Do not overwrite no_way_out if mce_end() fails
+ x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
+ x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak
+ x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak
+ USB: core: Fix regression in Hercules audio card
+ ASoC: Intel: Skylake: Remove superfluous chip initialization
+ ASoC: Intel: Skylake: Select hda configuration permissively
+ ASoC: Intel: Skylake: Enable codec wakeup during chip init
+ ASoC: Intel: Skylake: Shield against no-NHLT configurations
+ ASoC: Intel: Allow for ROM init retry on CNL platforms
+ ASoC: Intel: Skylake: Await purge request ack on CNL
+ ASoC: Intel: Multiple I/O PCM format support for pipe
+ ASoC: Intel: Skylake: Automatic DMIC format configuration according to 
information from NHLT
+ Linux 5.4.81
+ UBUNTU: upstream stable to v5.4.81

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1908562

Title:
  Focal update: v5.4.81 upstream stable release

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Focal:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.4.81 upstream stable release
         from git://git.kernel.org/

  spi: bcm-qspi: Fix use-after-free on unbind
  spi: bcm2835: Fix use-after-free on unbind
  ipv4: use IS_ENABLED instead of ifdef
  netfilter: clear skb->next in NF_HOOK_LIST()
  btrfs: tree-checker: add missing return after error in root_item
  btrfs: tree-checker: add missing returns after data_ref alignment checks
  btrfs: don't access possibly stale fs_info data for printing duplicate device
  btrfs: fix lockdep splat when reading qgroup config on mount
  wireless: Use linux/stddef.h instead of stddef.h
  smb3: Call cifs reconnect from demultiplex thread
  smb3: Avoid Mid pending list corruption
  smb3: Handle error case during offload read path
  cifs: fix a memleak with modefromsid
  KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page
  KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace
  KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
  KVM: x86: Fix split-irqchip vs interrupt injection window request
  trace: fix potenial dangerous pointer
  arm64: pgtable: Fix pte_accessible()
  arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect()
  HID: uclogic: Add ID for Trust Flex Design Tablet
  HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses
  HID: cypress: Support Varmilo Keyboards' media hotkeys
  HID: add support for Sega Saturn
  Input: i8042 - allow insmod to succeed on devices without an i8042 controller
  HID: hid-sensor-hub: Fix issue with devices with no report ID
  staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK
  HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices
  dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant
  x86/xen: don't unbind uninitialized lock_kicker_irq
  HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge
  HID: Add Logitech Dinovo Edge battery quirk
  proc: don't allow async path resolution of /proc/self components
  nvme: free sq/cq dbbuf pointers when dbbuf set fails
  vhost scsi: fix cmd completion race
  dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
  scsi: libiscsi: Fix NOP race condition
  scsi: target: iscsi: Fix cmd abort fabric stop race
  perf/x86: fix sysfs type mismatches
  xtensa: uaccess: Add missing __user to strncpy_from_user() prototype
  net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset
  bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw
  ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled()
  phy: tegra: xusb: Fix dangling pointer on probe failure
  iwlwifi: mvm: write queue_sync_state only for sync
  batman-adv: set .owner to THIS_MODULE
  arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
  ARM: dts: dra76x: m_can: fix order of clocks
  scsi: ufs: Fix race between shutdown and runtime resume flow
  bnxt_en: fix error return code in bnxt_init_one()
  bnxt_en: fix error return code in bnxt_init_board()
  video: hyperv_fb: Fix the cache type when mapping the VRAM
  bnxt_en: Release PCI regions when DMA mask setup fails during probe.
  cxgb4: fix the panic caused by non smac rewrite
  s390/qeth: make af_iucv TX notification call more robust
  s390/qeth: fix af_iucv notification race
  s390/qeth: fix tear down of async TX buffers
  ibmvnic: fix call_netdevice_notifiers in do_reset
  ibmvnic: notify peers when failover and migration happen
  powerpc/64s: Fix allnoconfig build since uaccess flush
  IB/mthca: fix return value of error branch in mthca_init_cq()
  i40e: Fix removing driver while bare-metal VFs pass traffic
  nfc: s3fwrn5: use signed integer for parsing GPIO numbers
  net: ena: set initial DMA width to avoid intel iommu issue
  ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
  ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq
  optee: add writeback to valid memory type
  arm64: tegra: Wrong AON HSP reg property size
  efivarfs: revert "fix memory leak in efivarfs_create()"
  efi: EFI_EARLYCON should depend on EFI
  can: gs_usb: fix endianess problem with candleLight firmware
  platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time
  platform/x86: toshiba_acpi: Fix the wrong variable assignment
  RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  RDMA/hns: Bugfix for memory window mtpt configuration
  can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from 
request_threaded_irq()'s flags
  can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
  perf stat: Use proper cpu for shadow stats
  perf probe: Fix to die_entrypc() returns error correctly
  spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
  USB: core: Change %pK for __user pointers to %px
  usb: gadget: f_midi: Fix memleak in f_midi_alloc
  USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO 
built-in usb-audio card
  usb: gadget: Fix memleak in gadgetfs_fill_super
  irqchip/exiu: Fix the index of fwspec for IRQ type
  x86/mce: Do not overwrite no_way_out if mce_end() fails
  x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
  x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak
  x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak
  USB: core: Fix regression in Hercules audio card
  ASoC: Intel: Skylake: Remove superfluous chip initialization
  ASoC: Intel: Skylake: Select hda configuration permissively
  ASoC: Intel: Skylake: Enable codec wakeup during chip init
  ASoC: Intel: Skylake: Shield against no-NHLT configurations
  ASoC: Intel: Allow for ROM init retry on CNL platforms
  ASoC: Intel: Skylake: Await purge request ack on CNL
  ASoC: Intel: Multiple I/O PCM format support for pipe
  ASoC: Intel: Skylake: Automatic DMIC format configuration according to 
information from NHLT
  Linux 5.4.81
  UBUNTU: upstream stable to v5.4.81

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1908562/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to