Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2020-03-10
Ported from the following upstream stable releases:
v4.19.103, v5.4.19
from git://git.kernel.org/
Revert "drm/sun4i: dsi: Change the start delay calculation"
ovl: fix lseek overflow on 32bit
kernel/module: Fix memleak in module_add_modinfo_attrs()
media: iguanair: fix endpoint sanity check
ocfs2: fix oops when writing cloned file
x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
udf: Allow writing to 'Rewritable' partitions
printk: fix exclusive_console replaying
iwlwifi: mvm: fix NVM check for 3168 devices
sparc32: fix struct ipc64_perm type definition
cls_rsvp: fix rsvp_policy
gtp: use __GFP_NOWARN to avoid memalloc warning
l2tp: Allow duplicate session creation with UDP
net: hsr: fix possible NULL deref in hsr_handle_frame()
net_sched: fix an OOB access in cls_tcindex
net: stmmac: Delete txtimer in suspend()
bnxt_en: Fix TC queue mapping.
tcp: clear tp->total_retrans in tcp_disconnect()
tcp: clear tp->delivered in tcp_disconnect()
tcp: clear tp->data_segs{in|out} in tcp_disconnect()
tcp: clear tp->segs_{in|out} in tcp_disconnect()
rxrpc: Fix use-after-free in rxrpc_put_local()
rxrpc: Fix insufficient receive notification generation
rxrpc: Fix missing active use pinning of rxrpc_local object
rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
mfd: dln2: More sanity checking for endpoints
ipc/msg.c: consolidate all xxxctl_down() functions
tracing: Fix sched switch start/stop refcount racy updates
rcu: Avoid data-race in rcu_gp_fqs_check_wake()
brcmfmac: Fix memory leak in brcmf_usbdev_qinit
usb: typec: tcpci: mask event interrupts when remove driver
usb: gadget: legacy: set max_speed to super-speed
usb: gadget: f_ncm: Use atomic_t to track in-flight request
usb: gadget: f_ecm: Use atomic_t to track in-flight request
ALSA: usb-audio: Fix endianess in descriptor validation
ALSA: dummy: Fix PCM format loop in proc output
mm/memory_hotplug: fix remove_memory() lockdep splat
mm: move_pages: report the number of non-attempted pages
media/v4l2-core: set pages dirty upon releasing DMA buffers
media: v4l2-core: compat: ignore native command codes
media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
irqdomain: Fix a memory leak in irq_domain_push_irq()
platform/x86: intel_scu_ipc: Fix interrupt support
ALSA: hda: Add Clevo W65_67SB the power_save blacklist
KVM: arm64: Correct PSTATE on exception entry
KVM: arm/arm64: Correct CPSR on exception entry
KVM: arm/arm64: Correct AArch32 SPSR on exception entry
KVM: arm64: Only sign-extend MMIO up to register width
MIPS: fix indentation of the 'RELOCS' message
MIPS: boot: fix typo in 'vmlinux.lzma.its' target
s390/mm: fix dynamic pagetable upgrade for hugetlbfs
powerpc/xmon: don't access ASDR in VMs
powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
smb3: fix signing verification of large reads
PCI: tegra: Fix return value check of pm_runtime_get_sync()
mmc: spi: Toggle SPI polarity, do not hardcode it
ACPI: video: Do not export a non working backlight interface on MSI MS-7721
boards
ACPI / battery: Deal with design or full capacity being reported as -1
ACPI / battery: Use design-cap for capacity calculations if full-cap is not
available
ACPI / battery: Deal better with neither design nor full capacity not being
reported
alarmtimer: Unregister wakeup source when module get fails
ubifs: Reject unsupported ioctl flags explicitly
ubifs: don't trigger assertion on invalid no-key filename
ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
ubifs: Fix deadlock in concurrent bulk-read and writepage
PCI: keystone: Fix link training retries initiation
mmc: sdhci-of-at91: fix memleak on clk_get failure
hv_balloon: Balloon up according to request page number
mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
crypto: api - Check spawn->alg under lock in crypto_drop_spawn
crypto: ccree - fix backlog memory leak
crypto: ccree - fix pm wrongful error reporting
crypto: ccree - fix PM race condition
scripts/find-unused-docs: Fix massive false positives
scsi: qla2xxx: Fix mtcp dump collection failure
power: supply: ltc2941-battery-gauge: fix use-after-free
ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
f2fs: choose hardlimit when softlimit is larger than hardlimit in
f2fs_statfs_project()
f2fs: fix miscounted block limit in f2fs_statfs_project()
f2fs: code cleanup for f2fs_statfs_project()
PM: core: Fix handling of devices deleted during system-wide resume
UBUNTU: [Config] updateconfigs for CONFIG_OF_DMA_DEFAULT_COHERENT
of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
dm zoned: support zone sizes smaller than 128MiB
dm space map common: fix to ensure new block isn't already in use
dm crypt: fix benbi IV constructor crash if used in authenticated mode
dm: fix potential for q->make_request_fn NULL pointer
dm writecache: fix incorrect flush sequence when doing SSD mode commit
padata: Remove broken queue flushing
tracing: Annotate ftrace_graph_hash pointer with __rcu
tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
ftrace: Add comment to why rcu_dereference_sched() is open coded
ftrace: Protect ftrace_graph_hash with ftrace_sync
samples/bpf: Don't try to remove user's homedir on clean
crypto: ccp - set max RSA modulus size for v3 platform devices as well
crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
crypto: atmel-aes - Fix counter overflow in CTR mode
crypto: api - Fix race condition in crypto_spawn_alg
crypto: picoxcell - adjust the position of tasklet_init and fix missed
tasklet_kill
scsi: qla2xxx: Fix unbound NVME response length
NFS: Fix memory leaks and corruption in readdir
NFS: Directory page cache pages need to be locked when read
jbd2_seq_info_next should increase position index
Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
btrfs: set trans->drity in btrfs_commit_transaction
Btrfs: fix race between adding and putting tree mod seq elements and nodes
ARM: tegra: Enable PLLP bypass during Tegra124 LP1
iwlwifi: don't throw error when trying to remove IGTK
mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
sunrpc: expiry_time should be seconds not timeval
gfs2: move setting current->backing_dev_info
gfs2: fix O_SYNC write handling
drm/rect: Avoid division by zero
media: rc: ensure lirc is initialized before registering input device
tools/kvm_stat: Fix kvm_exit filter name
xen/balloon: Support xend-based toolstack take two
watchdog: fix UAF in reboot notifier handling in watchdog core code
bcache: add readahead cache policy options via sysfs interface
eventfd: track eventfd_signal() recursion depth
aio: prevent potential eventfd recursion on poll
KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks
KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF
attacks
KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in
x86.c
KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from
Spectre-v1/L1TF attacks
KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
KVM: x86: Don't let userspace set host-reserved cr4 bits
KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
KVM: s390: do not clobber registers during guest reset/store status
clk: tegra: Mark fuse clock as critical
drm/amd/dm/mst: Ignore payload update failures
percpu: Separate decrypted varaibles anytime encryption can be enabled
scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
scsi: csiostor: Adjust indentation in csio_device_reset
scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
scsi: ufs: Recheck bkops level if bkops is disabled
phy: qualcomm: Adjust indentation in read_poll_timeout
ext2: Adjust indentation in ext2_fill_super
powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
NFC: pn544: Adjust indentation in pn544_hci_check_presence
ppp: Adjust indentation into ppp_async_input
net: smc911x: Adjust indentation in smc911x_phy_configure
net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
IB/mlx5: Fix outstanding_pi index for GSI qps
IB/core: Fix ODP get user pages flow
nfsd: fix delay timer on 32-bit architectures
nfsd: fix jiffies/time_t mixup in LRU list
nfsd: Return the correct number of bytes written to the file
ubi: fastmap: Fix inverted logic in seen selfcheck
ubi: Fix an error pointer dereference in error handling code
mfd: da9062: Fix watchdog compatible string
mfd: rn5t618: Mark ADC control register volatile
bonding/alb: properly access headers in bond_alb_xmit()
net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
net: mvneta: move rx_dropped and rx_errors in per-cpu stats
net_sched: fix a resource leak in tcindex_set_parms()
net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
net/mlx5: IPsec, Fix esp modify function attribute
net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
net: macb: Remove unnecessary alignment check for TSO
net: macb: Limit maximum GEM TX length in TSO
net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
ext4: fix deadlock allocating crypto bounce page from mempool
btrfs: use bool argument in free_root_pointers()
btrfs: free block groups after free'ing fs trees
drm: atmel-hlcdc: enable clock before configuring timing engine
drm/dp_mst: Remove VCPI while disabling topology mgr
btrfs: flush write bio if we loop in extent_write_cache_pages
KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
KVM: nVMX: vmread should not set rflags to specify success in case of #PF
KVM: Use vcpu-specific gva->hva translation when querying host page size
KVM: Play nice with read-only memslots when querying host page size
mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section
cifs: fail i/o on soft mounts if sessionsetup errors out
x86/apic/msi: Plug non-maskable MSI affinity race
clocksource: Prevent double add_timer_on() for watchdog_timer
perf/core: Fix mlock accounting in perf_mmap()
rxrpc: Fix service call disconnection
tracing/kprobes: Have uname use __get_str() in print_fmt
rcu: Use *_ONCE() to protect lockless ->expmask accesses
srcu: Apply *_ONCE() to ->srcu_last_gp_end
nvmet: Fix error print message at nvmet_install_queue function
nvmet: Fix controller use after free
usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer
ALSA: hda: Add JasperLake PCI ID and codec vid
arm64: acpi: fix DAIF manipulation with pNMI
MIPS: syscalls: fix indentation of the 'SYSNR' message
PCI: keystone: Fix outbound region mapping
ubifs: Fix wrong memory allocation
nvmem: core: fix memory abort in cleanup path
fs: allow deduplication of eof block into the end of the destination file
scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
power: supply: axp20x_ac_power: Fix reporting online status
ARM: dma-api: fix max_pfn off-by-one error in __dma_supported()
scsi: qla2xxx: Fix stuck login session using prli_pend_timer
btrfs: fix improper setting of scanned for range cyclic write cache pages
btrfs: Handle another split brain scenario with metadata uuid feature
tc-testing: fix eBPF tests failure on linux fresh clones
selftests: bpf: Use a temporary file in test_sockmap
crypto: api - fix unexpectedly getting generic implementation
crypto: hisilicon - Use the offset fields in sqe to avoid need to split
scatterlists
btrfs: drop log root for dropped roots
drm: atmel-hlcdc: prefer a lower pixel-clock than requested
KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
virtio-balloon: initialize all vq callbacks
virtio-pci: check name when counting MSI-X vectors
virtio-balloon: Fix memory leak when unloading while hinting is in progress
virtio_balloon: Fix memory leaks on errors in virtballoon_probe()
ubifs: Fix memory leak from c->sup_node
regulator: core: Add regulator_is_equal() helper
ASoC: sgtl5000: Fix VDDA and VDDIO comparison
dpaa_eth: support all modes with rate adapting PHYs
net: dsa: microchip: enable module autoprobe
taprio: Use taprio_reset_tc() to reset Traffic Classes configuration
x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode
regulator fix for "regulator: core: Add regulator_is_equal() helper"
UBUNTU: upstream stable to v4.19.103, v5.4.19
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Disco)
Importance: Undecided
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Disco)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Disco)
Status: New => In Progress
** Changed in: linux (Ubuntu Disco)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
-
- SRU Justification
-
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
-
- upstream stable patchset 2020-03-10
- from git://git.kernel.org/
+ SRU Justification
+
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
+
+ upstream stable patchset 2020-03-10
+
+ Ported from the following upstream stable releases:
+ v4.19.103, v5.4.19
+
+ from git://git.kernel.org/
+
+ Revert "drm/sun4i: dsi: Change the start delay calculation"
+ ovl: fix lseek overflow on 32bit
+ kernel/module: Fix memleak in module_add_modinfo_attrs()
+ media: iguanair: fix endpoint sanity check
+ ocfs2: fix oops when writing cloned file
+ x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
+ udf: Allow writing to 'Rewritable' partitions
+ printk: fix exclusive_console replaying
+ iwlwifi: mvm: fix NVM check for 3168 devices
+ sparc32: fix struct ipc64_perm type definition
+ cls_rsvp: fix rsvp_policy
+ gtp: use __GFP_NOWARN to avoid memalloc warning
+ l2tp: Allow duplicate session creation with UDP
+ net: hsr: fix possible NULL deref in hsr_handle_frame()
+ net_sched: fix an OOB access in cls_tcindex
+ net: stmmac: Delete txtimer in suspend()
+ bnxt_en: Fix TC queue mapping.
+ tcp: clear tp->total_retrans in tcp_disconnect()
+ tcp: clear tp->delivered in tcp_disconnect()
+ tcp: clear tp->data_segs{in|out} in tcp_disconnect()
+ tcp: clear tp->segs_{in|out} in tcp_disconnect()
+ rxrpc: Fix use-after-free in rxrpc_put_local()
+ rxrpc: Fix insufficient receive notification generation
+ rxrpc: Fix missing active use pinning of rxrpc_local object
+ rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
+ media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
+ mfd: dln2: More sanity checking for endpoints
+ ipc/msg.c: consolidate all xxxctl_down() functions
+ tracing: Fix sched switch start/stop refcount racy updates
+ rcu: Avoid data-race in rcu_gp_fqs_check_wake()
+ brcmfmac: Fix memory leak in brcmf_usbdev_qinit
+ usb: typec: tcpci: mask event interrupts when remove driver
+ usb: gadget: legacy: set max_speed to super-speed
+ usb: gadget: f_ncm: Use atomic_t to track in-flight request
+ usb: gadget: f_ecm: Use atomic_t to track in-flight request
+ ALSA: usb-audio: Fix endianess in descriptor validation
+ ALSA: dummy: Fix PCM format loop in proc output
+ mm/memory_hotplug: fix remove_memory() lockdep splat
+ mm: move_pages: report the number of non-attempted pages
+ media/v4l2-core: set pages dirty upon releasing DMA buffers
+ media: v4l2-core: compat: ignore native command codes
+ media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
+ lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
+ irqdomain: Fix a memory leak in irq_domain_push_irq()
+ platform/x86: intel_scu_ipc: Fix interrupt support
+ ALSA: hda: Add Clevo W65_67SB the power_save blacklist
+ KVM: arm64: Correct PSTATE on exception entry
+ KVM: arm/arm64: Correct CPSR on exception entry
+ KVM: arm/arm64: Correct AArch32 SPSR on exception entry
+ KVM: arm64: Only sign-extend MMIO up to register width
+ MIPS: fix indentation of the 'RELOCS' message
+ MIPS: boot: fix typo in 'vmlinux.lzma.its' target
+ s390/mm: fix dynamic pagetable upgrade for hugetlbfs
+ powerpc/xmon: don't access ASDR in VMs
+ powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
+ smb3: fix signing verification of large reads
+ PCI: tegra: Fix return value check of pm_runtime_get_sync()
+ mmc: spi: Toggle SPI polarity, do not hardcode it
+ ACPI: video: Do not export a non working backlight interface on MSI MS-7721
boards
+ ACPI / battery: Deal with design or full capacity being reported as -1
+ ACPI / battery: Use design-cap for capacity calculations if full-cap is not
available
+ ACPI / battery: Deal better with neither design nor full capacity not being
reported
+ alarmtimer: Unregister wakeup source when module get fails
+ ubifs: Reject unsupported ioctl flags explicitly
+ ubifs: don't trigger assertion on invalid no-key filename
+ ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
+ ubifs: Fix deadlock in concurrent bulk-read and writepage
+ PCI: keystone: Fix link training retries initiation
+ mmc: sdhci-of-at91: fix memleak on clk_get failure
+ hv_balloon: Balloon up according to request page number
+ mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
+ crypto: api - Check spawn->alg under lock in crypto_drop_spawn
+ crypto: ccree - fix backlog memory leak
+ crypto: ccree - fix pm wrongful error reporting
+ crypto: ccree - fix PM race condition
+ scripts/find-unused-docs: Fix massive false positives
+ scsi: qla2xxx: Fix mtcp dump collection failure
+ power: supply: ltc2941-battery-gauge: fix use-after-free
+ ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
+ f2fs: choose hardlimit when softlimit is larger than hardlimit in
f2fs_statfs_project()
+ f2fs: fix miscounted block limit in f2fs_statfs_project()
+ f2fs: code cleanup for f2fs_statfs_project()
+ PM: core: Fix handling of devices deleted during system-wide resume
+ UBUNTU: [Config] updateconfigs for CONFIG_OF_DMA_DEFAULT_COHERENT
+ of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
+ dm zoned: support zone sizes smaller than 128MiB
+ dm space map common: fix to ensure new block isn't already in use
+ dm crypt: fix benbi IV constructor crash if used in authenticated mode
+ dm: fix potential for q->make_request_fn NULL pointer
+ dm writecache: fix incorrect flush sequence when doing SSD mode commit
+ padata: Remove broken queue flushing
+ tracing: Annotate ftrace_graph_hash pointer with __rcu
+ tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
+ ftrace: Add comment to why rcu_dereference_sched() is open coded
+ ftrace: Protect ftrace_graph_hash with ftrace_sync
+ samples/bpf: Don't try to remove user's homedir on clean
+ crypto: ccp - set max RSA modulus size for v3 platform devices as well
+ crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
+ crypto: atmel-aes - Fix counter overflow in CTR mode
+ crypto: api - Fix race condition in crypto_spawn_alg
+ crypto: picoxcell - adjust the position of tasklet_init and fix missed
tasklet_kill
+ scsi: qla2xxx: Fix unbound NVME response length
+ NFS: Fix memory leaks and corruption in readdir
+ NFS: Directory page cache pages need to be locked when read
+ jbd2_seq_info_next should increase position index
+ Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
+ btrfs: set trans->drity in btrfs_commit_transaction
+ Btrfs: fix race between adding and putting tree mod seq elements and nodes
+ ARM: tegra: Enable PLLP bypass during Tegra124 LP1
+ iwlwifi: don't throw error when trying to remove IGTK
+ mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
+ sunrpc: expiry_time should be seconds not timeval
+ gfs2: move setting current->backing_dev_info
+ gfs2: fix O_SYNC write handling
+ drm/rect: Avoid division by zero
+ media: rc: ensure lirc is initialized before registering input device
+ tools/kvm_stat: Fix kvm_exit filter name
+ xen/balloon: Support xend-based toolstack take two
+ watchdog: fix UAF in reboot notifier handling in watchdog core code
+ bcache: add readahead cache policy options via sysfs interface
+ eventfd: track eventfd_signal() recursion depth
+ aio: prevent potential eventfd recursion on poll
+ KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
+ KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
+ KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
+ KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
+ KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
+ KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF
attacks
+ KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
+ KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF
attacks
+ KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
+ KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks
in x86.c
+ KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
+ KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit()
from Spectre-v1/L1TF attacks
+ KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
+ KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
+ KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
+ KVM: x86: Don't let userspace set host-reserved cr4 bits
+ KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
+ KVM: s390: do not clobber registers during guest reset/store status
+ clk: tegra: Mark fuse clock as critical
+ drm/amd/dm/mst: Ignore payload update failures
+ percpu: Separate decrypted varaibles anytime encryption can be enabled
+ scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
+ scsi: csiostor: Adjust indentation in csio_device_reset
+ scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
+ scsi: ufs: Recheck bkops level if bkops is disabled
+ phy: qualcomm: Adjust indentation in read_poll_timeout
+ ext2: Adjust indentation in ext2_fill_super
+ powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
+ drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
+ NFC: pn544: Adjust indentation in pn544_hci_check_presence
+ ppp: Adjust indentation into ppp_async_input
+ net: smc911x: Adjust indentation in smc911x_phy_configure
+ net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
+ IB/mlx5: Fix outstanding_pi index for GSI qps
+ IB/core: Fix ODP get user pages flow
+ nfsd: fix delay timer on 32-bit architectures
+ nfsd: fix jiffies/time_t mixup in LRU list
+ nfsd: Return the correct number of bytes written to the file
+ ubi: fastmap: Fix inverted logic in seen selfcheck
+ ubi: Fix an error pointer dereference in error handling code
+ mfd: da9062: Fix watchdog compatible string
+ mfd: rn5t618: Mark ADC control register volatile
+ bonding/alb: properly access headers in bond_alb_xmit()
+ net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
+ net: mvneta: move rx_dropped and rx_errors in per-cpu stats
+ net_sched: fix a resource leak in tcindex_set_parms()
+ net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
+ net/mlx5: IPsec, Fix esp modify function attribute
+ net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
+ net: macb: Remove unnecessary alignment check for TSO
+ net: macb: Limit maximum GEM TX length in TSO
+ net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
+ ext4: fix deadlock allocating crypto bounce page from mempool
+ btrfs: use bool argument in free_root_pointers()
+ btrfs: free block groups after free'ing fs trees
+ drm: atmel-hlcdc: enable clock before configuring timing engine
+ drm/dp_mst: Remove VCPI while disabling topology mgr
+ btrfs: flush write bio if we loop in extent_write_cache_pages
+ KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
+ KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
+ KVM: nVMX: vmread should not set rflags to specify success in case of #PF
+ KVM: Use vcpu-specific gva->hva translation when querying host page size
+ KVM: Play nice with read-only memslots when querying host page size
+ mm/page_alloc.c: fix uninitialized memmaps on a partially populated last
section
+ cifs: fail i/o on soft mounts if sessionsetup errors out
+ x86/apic/msi: Plug non-maskable MSI affinity race
+ clocksource: Prevent double add_timer_on() for watchdog_timer
+ perf/core: Fix mlock accounting in perf_mmap()
+ rxrpc: Fix service call disconnection
+ tracing/kprobes: Have uname use __get_str() in print_fmt
+ rcu: Use *_ONCE() to protect lockless ->expmask accesses
+ srcu: Apply *_ONCE() to ->srcu_last_gp_end
+ nvmet: Fix error print message at nvmet_install_queue function
+ nvmet: Fix controller use after free
+ usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer
+ ALSA: hda: Add JasperLake PCI ID and codec vid
+ arm64: acpi: fix DAIF manipulation with pNMI
+ MIPS: syscalls: fix indentation of the 'SYSNR' message
+ PCI: keystone: Fix outbound region mapping
+ ubifs: Fix wrong memory allocation
+ nvmem: core: fix memory abort in cleanup path
+ fs: allow deduplication of eof block into the end of the destination file
+ scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
+ power: supply: axp20x_ac_power: Fix reporting online status
+ ARM: dma-api: fix max_pfn off-by-one error in __dma_supported()
+ scsi: qla2xxx: Fix stuck login session using prli_pend_timer
+ btrfs: fix improper setting of scanned for range cyclic write cache pages
+ btrfs: Handle another split brain scenario with metadata uuid feature
+ tc-testing: fix eBPF tests failure on linux fresh clones
+ selftests: bpf: Use a temporary file in test_sockmap
+ crypto: api - fix unexpectedly getting generic implementation
+ crypto: hisilicon - Use the offset fields in sqe to avoid need to split
scatterlists
+ btrfs: drop log root for dropped roots
+ drm: atmel-hlcdc: prefer a lower pixel-clock than requested
+ KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
+ virtio-balloon: initialize all vq callbacks
+ virtio-pci: check name when counting MSI-X vectors
+ virtio-balloon: Fix memory leak when unloading while hinting is in progress
+ virtio_balloon: Fix memory leaks on errors in virtballoon_probe()
+ ubifs: Fix memory leak from c->sup_node
+ regulator: core: Add regulator_is_equal() helper
+ ASoC: sgtl5000: Fix VDDA and VDDIO comparison
+ dpaa_eth: support all modes with rate adapting PHYs
+ net: dsa: microchip: enable module autoprobe
+ taprio: Use taprio_reset_tc() to reset Traffic Classes configuration
+ x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode
+ regulator fix for "regulator: core: Add regulator_is_equal() helper"
+ UBUNTU: upstream stable to v4.19.103, v5.4.19
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866858
Title:
Disco update: upstream stable patchset 2020-03-10
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Disco:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2020-03-10
Ported from the following upstream stable releases:
v4.19.103, v5.4.19
from git://git.kernel.org/
Revert "drm/sun4i: dsi: Change the start delay calculation"
ovl: fix lseek overflow on 32bit
kernel/module: Fix memleak in module_add_modinfo_attrs()
media: iguanair: fix endpoint sanity check
ocfs2: fix oops when writing cloned file
x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
udf: Allow writing to 'Rewritable' partitions
printk: fix exclusive_console replaying
iwlwifi: mvm: fix NVM check for 3168 devices
sparc32: fix struct ipc64_perm type definition
cls_rsvp: fix rsvp_policy
gtp: use __GFP_NOWARN to avoid memalloc warning
l2tp: Allow duplicate session creation with UDP
net: hsr: fix possible NULL deref in hsr_handle_frame()
net_sched: fix an OOB access in cls_tcindex
net: stmmac: Delete txtimer in suspend()
bnxt_en: Fix TC queue mapping.
tcp: clear tp->total_retrans in tcp_disconnect()
tcp: clear tp->delivered in tcp_disconnect()
tcp: clear tp->data_segs{in|out} in tcp_disconnect()
tcp: clear tp->segs_{in|out} in tcp_disconnect()
rxrpc: Fix use-after-free in rxrpc_put_local()
rxrpc: Fix insufficient receive notification generation
rxrpc: Fix missing active use pinning of rxrpc_local object
rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
mfd: dln2: More sanity checking for endpoints
ipc/msg.c: consolidate all xxxctl_down() functions
tracing: Fix sched switch start/stop refcount racy updates
rcu: Avoid data-race in rcu_gp_fqs_check_wake()
brcmfmac: Fix memory leak in brcmf_usbdev_qinit
usb: typec: tcpci: mask event interrupts when remove driver
usb: gadget: legacy: set max_speed to super-speed
usb: gadget: f_ncm: Use atomic_t to track in-flight request
usb: gadget: f_ecm: Use atomic_t to track in-flight request
ALSA: usb-audio: Fix endianess in descriptor validation
ALSA: dummy: Fix PCM format loop in proc output
mm/memory_hotplug: fix remove_memory() lockdep splat
mm: move_pages: report the number of non-attempted pages
media/v4l2-core: set pages dirty upon releasing DMA buffers
media: v4l2-core: compat: ignore native command codes
media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
irqdomain: Fix a memory leak in irq_domain_push_irq()
platform/x86: intel_scu_ipc: Fix interrupt support
ALSA: hda: Add Clevo W65_67SB the power_save blacklist
KVM: arm64: Correct PSTATE on exception entry
KVM: arm/arm64: Correct CPSR on exception entry
KVM: arm/arm64: Correct AArch32 SPSR on exception entry
KVM: arm64: Only sign-extend MMIO up to register width
MIPS: fix indentation of the 'RELOCS' message
MIPS: boot: fix typo in 'vmlinux.lzma.its' target
s390/mm: fix dynamic pagetable upgrade for hugetlbfs
powerpc/xmon: don't access ASDR in VMs
powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
smb3: fix signing verification of large reads
PCI: tegra: Fix return value check of pm_runtime_get_sync()
mmc: spi: Toggle SPI polarity, do not hardcode it
ACPI: video: Do not export a non working backlight interface on MSI MS-7721
boards
ACPI / battery: Deal with design or full capacity being reported as -1
ACPI / battery: Use design-cap for capacity calculations if full-cap is not
available
ACPI / battery: Deal better with neither design nor full capacity not being
reported
alarmtimer: Unregister wakeup source when module get fails
ubifs: Reject unsupported ioctl flags explicitly
ubifs: don't trigger assertion on invalid no-key filename
ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
ubifs: Fix deadlock in concurrent bulk-read and writepage
PCI: keystone: Fix link training retries initiation
mmc: sdhci-of-at91: fix memleak on clk_get failure
hv_balloon: Balloon up according to request page number
mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
crypto: api - Check spawn->alg under lock in crypto_drop_spawn
crypto: ccree - fix backlog memory leak
crypto: ccree - fix pm wrongful error reporting
crypto: ccree - fix PM race condition
scripts/find-unused-docs: Fix massive false positives
scsi: qla2xxx: Fix mtcp dump collection failure
power: supply: ltc2941-battery-gauge: fix use-after-free
ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
f2fs: choose hardlimit when softlimit is larger than hardlimit in
f2fs_statfs_project()
f2fs: fix miscounted block limit in f2fs_statfs_project()
f2fs: code cleanup for f2fs_statfs_project()
PM: core: Fix handling of devices deleted during system-wide resume
UBUNTU: [Config] updateconfigs for CONFIG_OF_DMA_DEFAULT_COHERENT
of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
dm zoned: support zone sizes smaller than 128MiB
dm space map common: fix to ensure new block isn't already in use
dm crypt: fix benbi IV constructor crash if used in authenticated mode
dm: fix potential for q->make_request_fn NULL pointer
dm writecache: fix incorrect flush sequence when doing SSD mode commit
padata: Remove broken queue flushing
tracing: Annotate ftrace_graph_hash pointer with __rcu
tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
ftrace: Add comment to why rcu_dereference_sched() is open coded
ftrace: Protect ftrace_graph_hash with ftrace_sync
samples/bpf: Don't try to remove user's homedir on clean
crypto: ccp - set max RSA modulus size for v3 platform devices as well
crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
crypto: atmel-aes - Fix counter overflow in CTR mode
crypto: api - Fix race condition in crypto_spawn_alg
crypto: picoxcell - adjust the position of tasklet_init and fix missed
tasklet_kill
scsi: qla2xxx: Fix unbound NVME response length
NFS: Fix memory leaks and corruption in readdir
NFS: Directory page cache pages need to be locked when read
jbd2_seq_info_next should increase position index
Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
btrfs: set trans->drity in btrfs_commit_transaction
Btrfs: fix race between adding and putting tree mod seq elements and nodes
ARM: tegra: Enable PLLP bypass during Tegra124 LP1
iwlwifi: don't throw error when trying to remove IGTK
mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
sunrpc: expiry_time should be seconds not timeval
gfs2: move setting current->backing_dev_info
gfs2: fix O_SYNC write handling
drm/rect: Avoid division by zero
media: rc: ensure lirc is initialized before registering input device
tools/kvm_stat: Fix kvm_exit filter name
xen/balloon: Support xend-based toolstack take two
watchdog: fix UAF in reboot notifier handling in watchdog core code
bcache: add readahead cache policy options via sysfs interface
eventfd: track eventfd_signal() recursion depth
aio: prevent potential eventfd recursion on poll
KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF
attacks
KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF
attacks
KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks
in x86.c
KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit()
from Spectre-v1/L1TF attacks
KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
KVM: x86: Don't let userspace set host-reserved cr4 bits
KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
KVM: s390: do not clobber registers during guest reset/store status
clk: tegra: Mark fuse clock as critical
drm/amd/dm/mst: Ignore payload update failures
percpu: Separate decrypted varaibles anytime encryption can be enabled
scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
scsi: csiostor: Adjust indentation in csio_device_reset
scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
scsi: ufs: Recheck bkops level if bkops is disabled
phy: qualcomm: Adjust indentation in read_poll_timeout
ext2: Adjust indentation in ext2_fill_super
powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
NFC: pn544: Adjust indentation in pn544_hci_check_presence
ppp: Adjust indentation into ppp_async_input
net: smc911x: Adjust indentation in smc911x_phy_configure
net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
IB/mlx5: Fix outstanding_pi index for GSI qps
IB/core: Fix ODP get user pages flow
nfsd: fix delay timer on 32-bit architectures
nfsd: fix jiffies/time_t mixup in LRU list
nfsd: Return the correct number of bytes written to the file
ubi: fastmap: Fix inverted logic in seen selfcheck
ubi: Fix an error pointer dereference in error handling code
mfd: da9062: Fix watchdog compatible string
mfd: rn5t618: Mark ADC control register volatile
bonding/alb: properly access headers in bond_alb_xmit()
net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
net: mvneta: move rx_dropped and rx_errors in per-cpu stats
net_sched: fix a resource leak in tcindex_set_parms()
net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
net/mlx5: IPsec, Fix esp modify function attribute
net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
net: macb: Remove unnecessary alignment check for TSO
net: macb: Limit maximum GEM TX length in TSO
net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
ext4: fix deadlock allocating crypto bounce page from mempool
btrfs: use bool argument in free_root_pointers()
btrfs: free block groups after free'ing fs trees
drm: atmel-hlcdc: enable clock before configuring timing engine
drm/dp_mst: Remove VCPI while disabling topology mgr
btrfs: flush write bio if we loop in extent_write_cache_pages
KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
KVM: nVMX: vmread should not set rflags to specify success in case of #PF
KVM: Use vcpu-specific gva->hva translation when querying host page size
KVM: Play nice with read-only memslots when querying host page size
mm/page_alloc.c: fix uninitialized memmaps on a partially populated last
section
cifs: fail i/o on soft mounts if sessionsetup errors out
x86/apic/msi: Plug non-maskable MSI affinity race
clocksource: Prevent double add_timer_on() for watchdog_timer
perf/core: Fix mlock accounting in perf_mmap()
rxrpc: Fix service call disconnection
tracing/kprobes: Have uname use __get_str() in print_fmt
rcu: Use *_ONCE() to protect lockless ->expmask accesses
srcu: Apply *_ONCE() to ->srcu_last_gp_end
nvmet: Fix error print message at nvmet_install_queue function
nvmet: Fix controller use after free
usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer
ALSA: hda: Add JasperLake PCI ID and codec vid
arm64: acpi: fix DAIF manipulation with pNMI
MIPS: syscalls: fix indentation of the 'SYSNR' message
PCI: keystone: Fix outbound region mapping
ubifs: Fix wrong memory allocation
nvmem: core: fix memory abort in cleanup path
fs: allow deduplication of eof block into the end of the destination file
scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
power: supply: axp20x_ac_power: Fix reporting online status
ARM: dma-api: fix max_pfn off-by-one error in __dma_supported()
scsi: qla2xxx: Fix stuck login session using prli_pend_timer
btrfs: fix improper setting of scanned for range cyclic write cache pages
btrfs: Handle another split brain scenario with metadata uuid feature
tc-testing: fix eBPF tests failure on linux fresh clones
selftests: bpf: Use a temporary file in test_sockmap
crypto: api - fix unexpectedly getting generic implementation
crypto: hisilicon - Use the offset fields in sqe to avoid need to split
scatterlists
btrfs: drop log root for dropped roots
drm: atmel-hlcdc: prefer a lower pixel-clock than requested
KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
virtio-balloon: initialize all vq callbacks
virtio-pci: check name when counting MSI-X vectors
virtio-balloon: Fix memory leak when unloading while hinting is in progress
virtio_balloon: Fix memory leaks on errors in virtballoon_probe()
ubifs: Fix memory leak from c->sup_node
regulator: core: Add regulator_is_equal() helper
ASoC: sgtl5000: Fix VDDA and VDDIO comparison
dpaa_eth: support all modes with rate adapting PHYs
net: dsa: microchip: enable module autoprobe
taprio: Use taprio_reset_tc() to reset Traffic Classes configuration
x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode
regulator fix for "regulator: core: Add regulator_is_equal() helper"
UBUNTU: upstream stable to v4.19.103, v5.4.19
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1866858/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
