Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2022-05-17 Ported from the following upstream stable releases: v4.14.276, v4.19.238 v4.19.239 from git://git.kernel.org/ USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver netdevice: add the case if dev is NULL virtio_console: break out of buf poll on remove ethernet: sun: Free the coherent when failing in probing spi: Fix invalid sgs value spi: Fix erroneous sgs value with min_t() af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register fuse: fix pipe buffer lifetime for direct_io tpm: fix reference counting for struct tpm_chip block: Add a helper to validate the block size virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c coresight: Fix TRCCONFIGR.QE sysfs interface iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation clk: uniphier: Fix fixed-rate initialization Documentation: add link to stable release candidate tree Documentation: update stable tree link SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() pinctrl: samsung: drop pin banks references on error paths jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" ALSA: cs4236: fix an incorrect NULL check on list iterator drbd: fix potential silent data corruption ACPI: properties: Consistently return -ENOENT if there are no more references drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 carl9170: fix missing bit-wise or operator for tx_params thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error DEC: Limit PMAX memory probing to R3k systems media: davinci: vpif: fix unbalanced runtime PM get brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio PCI: pciehp: Clear cmd_busy bit in polling mode crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing spi: tegra114: Add missing IRQ check in tegra_spi_probe selftests/x86: Add validity check and allow field splitting spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler hwrng: atmel - disable trng on failure path crypto: vmx - add missing dependencies ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel media: coda: Fix missing put_device() call in coda_get_vdoa_data video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() ARM: dts: qcom: ipq4019: fix sleep clock soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe media: usb: go7007: s2250-board: fix leak in probe() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mtd: onenand: Check for error irq drm/edid: Don't clear formats if using deep color ath9k_htc: fix uninit value bugs power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iwlwifi: Fix -EIO error code that is never returned dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix abort all task initialization TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq PCI: Reduce warnings on possible RW1C corruption powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request vxcan: enable local echo for sent CAN frames MIPS: RB532: fix return value of __setup handler mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init USB: storage: ums-realtek: fix error code in rts51x_read_mem() af_netlink: Fix shift out of bounds in group mask calculation i2c: mux: demux-pinctrl: do not deactivate a master that is not active tcp: ensure PMTU updates are processed during fastopen mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() staging:iio:adc:ad7280a: Fix handing of device address bit reversing. serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq clk: qcom: clk-rcg2: Update the frac table for pixel clock remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler kgdbts: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options xen: fix is_xen_pmu() net: phy: broadcom: Fix brcm_fet_config_init() qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head lib/test: use after free in register_test_dev_kmod() selinux: use correct type for context length loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/nvic: Release nvic_base upon failure ACPICA: Avoid walking the ACPI Namespace if it is not there ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() spi: tegra20: Use of_device_get_match_data() ext4: don't BUG if someone dirty pages without asking ext4 first ntfs: add sanity check on allocation size video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() KVM: Prevent module exit until all VMs are freed ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: rename_whiteout: correct old_dir size computing can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type gfs2: Make sure FITRIM minlen is rounded up to fs block size pinctrl: pinconf-generic: Print arguments for bias-pull-* ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ACPI: CPPC: Avoid out of bounds access when parsing _CPC data mm/mmap: return 1 from stack_guard_gap __setup() handler mm/memcontrol: return 1 from cgroup.memory __setup() handler ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties openvswitch: Fixed nd target mask field in the flow dump. KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated ubifs: Rectify space amount budget for mkdir/tmpfile operations rtc: wm8350: Handle error for wm8350_register_irq ARM: 9187/1: JIVE: fix return value of __setup handler KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 ptp: replace snprintf with sysfs_emit powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 scsi: mvsas: Replace snprintf() with sysfs_emit() scsi: bfa: Replace snprintf() with sysfs_emit() power: supply: axp20x_battery: properly report current when discharging powerpc: Set crashkernel offset to mid of RMA region PCI: aardvark: Fix support for MSI interrupts iommu/arm-smmu-v3: fix event handling soft lockup dm ioctl: prevent potential spectre v1 gadget scsi: pm8001: Fix pm8001_mpi_task_abort_resp() scsi: aha152x: Fix aha152x_setup() __setup handler return value net/smc: correct settings of RMB window update limit macvtap: advertise link netns via netlink bnxt_en: Eliminate unintended link toggle during FW reset MIPS: fix fortify panic when copying asm exception handlers scsi: libfc: Fix use after free in fc_exch_abts_resp() usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm xtensa: fix DTC warning unit_address_format Bluetooth: Fix use after free in hci_send_acl init/main.c: return 1 from handled __setup() functions w1: w1_therm: fixes w1_seq for ds28ea00 sensors SUNRPC/call_alloc: async tasks mustn't block waiting for memory NFS: swap IO handling is slightly different for O_DIRECT IO NFS: swap-out must always use STABLE writes. serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() virtio_console: eliminate anonymous module_init & module_exit jfs: prevent NULL deref in diFree parisc: Fix CPU affinity for Lasi, WAX and Dino chips ipv6: add missing tx timestamping on IPPROTO_RAW net: add missing SOF_TIMESTAMPING_OPT_ID support mm: fix race between MADV_FREE reclaim and blkdev direct IO read drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() net: stmmac: Fix unset max_speed difference between DT and non-DT platforms drm/imx: Fix memory leak in imx_pd_connector_get_modes drbd: Fix five use after free bugs in get_initial_state Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) mm/mempolicy: fix mpol_new leak in shared_policy_replace x86/pm: Save the MSR validity status at context setup x86/speculation: Restore speculation related MSRs during S3 resume btrfs: fix qgroup reserve overflow the qgroup limit arm64: patch_text: Fixup last cpu should be master perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" mm: don't skip swap entry even if zap_details specified arm64: module: remove (NOLOAD) from linker script mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning cgroup: Use open-time credentials for process migraton perm checks cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv cgroup: Use open-time cgroup namespace for process migration perm checks memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe veth: Ensure eth header is in skb's linear part gpiolib: acpi: use correct format characters mlxsw: i2c: Fix initialization error flow nfc: nci: add flush_workqueue to prevent uaf cifs: potential buffer overflow in handling symlinks drm/amd: Add USBC connector ID drm/amdkfd: Check for potential null return of kmalloc_array() Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer scsi: target: tcmu: Fix possible page UAF scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs gpu: ipu-v3: Fix dev_dbg frequency output scsi: mvsas: Add PCI ID of RocketRaid 2640 drivers: net: slip: fix NPD bug in sl_tx_timeout() mm, page_alloc: fix build_zonerefs_node() mm: kmemleak: take a full lowmem check in kmemleak_*_phys() gcc-plugins: latent_entropy: use /dev/urandom ALSA: pcm: Test for "silence" field in struct "pcm_format_data" ARM: davinci: da850-evm: Avoid NULL pointer dereference smp: Fix offline cpu check in flush_smp_call_function_queue() i2c: pasemi: Wait for write xfers to finish xhci: make xhci_handshake timeout for xhci_reset() adjustable drm/edid: check basic audio support on CEA extension block ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() mmc: davinci_mmc: Handle error for clk_enable drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev Bluetooth: hci_serdev: call init_rwsem() before p->open() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() hv_balloon: rate-limit "Unhandled message" warning scsi: qla2xxx: Fix incorrect reporting of task management failure ubifs: Fix deadlock in concurrent rename whiteout and inode writeback sctp: Initialize daddr on peeled off socket testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set UBUNTU: upstream stable to v4.14.276, v4.19.239 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Bionic) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Bionic) Status: New => In Progress ** Changed in: linux (Ubuntu Bionic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Bionic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2022-05-17 + from git://git.kernel.org/ - upstream stable patchset 2022-05-17 - from git://git.kernel.org/ + USB: serial: pl2303: add IBM device IDs + USB: serial: simple: add Nokia phone driver + netdevice: add the case if dev is NULL + virtio_console: break out of buf poll on remove + ethernet: sun: Free the coherent when failing in probing + spi: Fix invalid sgs value + spi: Fix erroneous sgs value with min_t() + af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register + fuse: fix pipe buffer lifetime for direct_io + tpm: fix reference counting for struct tpm_chip + block: Add a helper to validate the block size + virtio-blk: Use blk_validate_block_size() to validate block size + USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c + coresight: Fix TRCCONFIGR.QE sysfs interface + iio: inkern: apply consumer scale on IIO_VAL_INT cases + iio: inkern: apply consumer scale when no channel scale is available + iio: inkern: make a best effort on offset calculation + clk: uniphier: Fix fixed-rate initialization + Documentation: add link to stable release candidate tree + Documentation: update stable tree link + SUNRPC: avoid race between mod_timer() and del_timer_sync() + NFSD: prevent underflow in nfssvc_decode_writeargs() + pinctrl: samsung: drop pin banks references on error paths + jffs2: fix use-after-free in jffs2_clear_xattr_subsystem + jffs2: fix memory leak in jffs2_do_mount_fs + jffs2: fix memory leak in jffs2_scan_medium + mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node + mempolicy: mbind_range() set_policy() after vma_merge() + scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands + qed: display VF trust config + qed: validate and restrict untrusted VFs vlan promisc mode + Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" + ALSA: cs4236: fix an incorrect NULL check on list iterator + drbd: fix potential silent data corruption + ACPI: properties: Consistently return -ENOENT if there are no more references + drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() + video: fbdev: sm712fb: Fix crash in smtcfb_read() + video: fbdev: atari: Atari 2 bpp (STe) palette bugfix + ARM: dts: at91: sama5d2: Fix PMERRLOC resource size + ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 + ARM: dts: exynos: add missing HDMI supplies on SMDK5250 + ARM: dts: exynos: add missing HDMI supplies on SMDK5420 + carl9170: fix missing bit-wise or operator for tx_params + thermal: int340x: Increase bitmap size + lib/raid6/test: fix multiple definition linking error + DEC: Limit PMAX memory probing to R3k systems + media: davinci: vpif: fix unbalanced runtime PM get + brcmfmac: firmware: Allocate space for default boardrev in nvram + brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio + PCI: pciehp: Clear cmd_busy bit in polling mode + crypto: authenc - Fix sleep in atomic context in decrypt_tail + crypto: mxs-dcp - Fix scatterlist processing + spi: tegra114: Add missing IRQ check in tegra_spi_probe + selftests/x86: Add validity check and allow field splitting + spi: pxa2xx-pci: Balance reference count for PCI DMA device + hwmon: (pmbus) Add mutex to regulator ops + hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING + PM: hibernate: fix __setup handler error handling + PM: suspend: fix return value of __setup handler + hwrng: atmel - disable trng on failure path + crypto: vmx - add missing dependencies + ACPI: APEI: fix return value of __setup handlers + crypto: ccp - ccp_dmaengine_unregister release dma channels + hwmon: (pmbus) Add Vin unit off handling + clocksource: acpi_pm: fix return value of __setup handler + sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa + perf/core: Fix address filter parser for multiple filters + perf/x86/intel/pt: Fix address filter config for 32-bit kernel + media: coda: Fix missing put_device() call in coda_get_vdoa_data + video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() + video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() + ARM: dts: qcom: ipq4019: fix sleep clock + soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe + media: usb: go7007: s2250-board: fix leak in probe() + ASoC: ti: davinci-i2s: Add check for clk_enable() + ALSA: spi: Add check for clk_enable() + arm64: dts: ns2: Fix spi-cpol and spi-cpha property + arm64: dts: broadcom: Fix sata nodename + printk: fix return value of printk.devkmsg __setup handler + ASoC: mxs-saif: Handle errors for clk_enable + ASoC: atmel_ssc_dai: Handle errors for clk_enable + memory: emif: Add check for setup_interrupts + memory: emif: check the pointer temp in get_device_details() + ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction + media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED + ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe + ASoC: wm8350: Handle error for wm8350_register_irq + ASoC: fsi: Add check for clk_enable + video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of + ASoC: dmaengine: do not use a NULL prepare_slave_config() callback + ASoC: mxs: Fix error handling in mxs_sgtl5000_probe + ASoC: imx-es8328: Fix error return code in imx_es8328_probe() + ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe + mtd: onenand: Check for error irq + drm/edid: Don't clear formats if using deep color + ath9k_htc: fix uninit value bugs + power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe + ray_cs: Check ioremap return value + power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init + HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports + iwlwifi: Fix -EIO error code that is never returned + dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS + scsi: pm8001: Fix command initialization in pm80XX_send_read_log() + scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() + scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() + scsi: pm8001: Fix abort all task initialization + TOMOYO: fix __setup handlers return values + ext2: correct max file size computing + drm/tegra: Fix reference leak in tegra_dsi_ganged_probe + power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return + KVM: x86: Fix emulation in writing cr8 + KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() + i2c: xiic: Make bus names unique + power: supply: wm8350-power: Handle error for wm8350_register_irq + power: supply: wm8350-power: Add missing free in free_charger_irq + PCI: Reduce warnings on possible RW1C corruption + powerpc/sysdev: fix incorrect use to determine if list is empty + mfd: mc13xxx: Add check for mc13xxx_irq_request + vxcan: enable local echo for sent CAN frames + MIPS: RB532: fix return value of __setup handler + mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init + USB: storage: ums-realtek: fix error code in rts51x_read_mem() + af_netlink: Fix shift out of bounds in group mask calculation + i2c: mux: demux-pinctrl: do not deactivate a master that is not active + tcp: ensure PMTU updates are processed during fastopen + mfd: asic3: Add missing iounmap() on error asic3_mfd_probe + mxser: fix xmit_buf leak in activate when LSR == 0xff + pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() + staging:iio:adc:ad7280a: Fix handing of device address bit reversing. + serial: 8250_mid: Balance reference count for PCI DMA device + serial: 8250: Fix race condition in RTS-after-send handling + iio: adc: Add check for devm_request_threaded_irq + clk: qcom: clk-rcg2: Update the frac table for pixel clock + remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region + clk: loongson1: Terminate clk_div_table with sentinel element + clk: clps711x: Terminate clk_div_table with sentinel element + clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver + NFS: remove unneeded check in decode_devicenotify_args() + pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init + pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe + pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe + tty: hvc: fix return value of __setup handler + kgdboc: fix return value of __setup handler + kgdbts: fix return value of __setup handler + jfs: fix divide error in dbNextAG + netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options + xen: fix is_xen_pmu() + net: phy: broadcom: Fix brcm_fet_config_init() + qlcnic: dcb: default to returning -EOPNOTSUPP + net/x25: Fix null-ptr-deref caused by x25_disconnect + NFSv4/pNFS: Fix another issue with a list iterator pointing to the head + lib/test: use after free in register_test_dev_kmod() + selinux: use correct type for context length + loop: use sysfs_emit() in the sysfs xxx show() + Fix incorrect type in assignment of ipv6 port for audit + irqchip/nvic: Release nvic_base upon failure + ACPICA: Avoid walking the ACPI Namespace if it is not there + ACPI/APEI: Limit printable size of BERT table data + PM: core: keep irq flags in device_pm_check_callbacks() + spi: tegra20: Use of_device_get_match_data() + ext4: don't BUG if someone dirty pages without asking ext4 first + ntfs: add sanity check on allocation size + video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow + video: fbdev: w100fb: Reset global state + video: fbdev: cirrusfb: check pixclock to avoid divide by zero + video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit + ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 + ARM: dts: bcm2837: Add the missing L1/L2 cache information + video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() + video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() + ASoC: soc-core: skip zero num_dai component in searching dai name + media: cx88-mpeg: clear interrupt status register before streaming video + ARM: tegra: tamonten: Fix I2C3 pad setting + ARM: mmp: Fix failure to remove sram device + video: fbdev: sm712fb: Fix crash in smtcfb_write() + media: hdpvr: initialize dev->worker at hdpvr_register_videodev + mmc: host: Return an error when ->enable_sdio_irq() ops is missing + powerpc/lib/sstep: Fix 'sthcx' instruction + powerpc/lib/sstep: Fix build errors with newer binutils + scsi: qla2xxx: Fix warning for missing error code + scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() + KVM: Prevent module exit until all VMs are freed + ubifs: rename_whiteout: Fix double free for whiteout_ui->data + ubifs: Add missing iput if do_tmpfile() failed in rename whiteout + ubifs: setflags: Make dirtied_ino_d 8 bytes aligned + ubifs: rename_whiteout: correct old_dir size computing + can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path + can: mcba_usb: properly check endpoint type + gfs2: Make sure FITRIM minlen is rounded up to fs block size + pinctrl: pinconf-generic: Print arguments for bias-pull-* + ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl + ACPI: CPPC: Avoid out of bounds access when parsing _CPC data + mm/mmap: return 1 from stack_guard_gap __setup() handler + mm/memcontrol: return 1 from cgroup.memory __setup() handler + ubi: fastmap: Return error code if memory allocation fails in add_aeb() + ASoC: topology: Allow TLV control to be either read or write + ARM: dts: spear1340: Update serial node properties + ARM: dts: spear13xx: Update SPI dma properties + openvswitch: Fixed nd target mask field in the flow dump. + KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated + ubifs: Rectify space amount budget for mkdir/tmpfile operations + rtc: wm8350: Handle error for wm8350_register_irq + ARM: 9187/1: JIVE: fix return value of __setup handler + KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs + ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 + ptp: replace snprintf with sysfs_emit + powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 + scsi: mvsas: Replace snprintf() with sysfs_emit() + scsi: bfa: Replace snprintf() with sysfs_emit() + power: supply: axp20x_battery: properly report current when discharging + powerpc: Set crashkernel offset to mid of RMA region + PCI: aardvark: Fix support for MSI interrupts + iommu/arm-smmu-v3: fix event handling soft lockup + dm ioctl: prevent potential spectre v1 gadget + scsi: pm8001: Fix pm8001_mpi_task_abort_resp() + scsi: aha152x: Fix aha152x_setup() __setup handler return value + net/smc: correct settings of RMB window update limit + macvtap: advertise link netns via netlink + bnxt_en: Eliminate unintended link toggle during FW reset + MIPS: fix fortify panic when copying asm exception handlers + scsi: libfc: Fix use after free in fc_exch_abts_resp() + usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm + xtensa: fix DTC warning unit_address_format + Bluetooth: Fix use after free in hci_send_acl + init/main.c: return 1 from handled __setup() functions + w1: w1_therm: fixes w1_seq for ds28ea00 sensors + SUNRPC/call_alloc: async tasks mustn't block waiting for memory + NFS: swap IO handling is slightly different for O_DIRECT IO + NFS: swap-out must always use STABLE writes. + serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() + virtio_console: eliminate anonymous module_init & module_exit + jfs: prevent NULL deref in diFree + parisc: Fix CPU affinity for Lasi, WAX and Dino chips + ipv6: add missing tx timestamping on IPPROTO_RAW + net: add missing SOF_TIMESTAMPING_OPT_ID support + mm: fix race between MADV_FREE reclaim and blkdev direct IO read + drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() + scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() + net: stmmac: Fix unset max_speed difference between DT and non-DT platforms + drm/imx: Fix memory leak in imx_pd_connector_get_modes + drbd: Fix five use after free bugs in get_initial_state + Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" + mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) + mm/mempolicy: fix mpol_new leak in shared_policy_replace + x86/pm: Save the MSR validity status at context setup + x86/speculation: Restore speculation related MSRs during S3 resume + btrfs: fix qgroup reserve overflow the qgroup limit + arm64: patch_text: Fixup last cpu should be master + perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator + tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts + dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" + mm: don't skip swap entry even if zap_details specified + arm64: module: remove (NOLOAD) from linker script + mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning + cgroup: Use open-time credentials for process migraton perm checks + cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv + cgroup: Use open-time cgroup namespace for process migration perm checks + memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe + veth: Ensure eth header is in skb's linear part + gpiolib: acpi: use correct format characters + mlxsw: i2c: Fix initialization error flow + nfc: nci: add flush_workqueue to prevent uaf + cifs: potential buffer overflow in handling symlinks + drm/amd: Add USBC connector ID + drm/amdkfd: Check for potential null return of kmalloc_array() + Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer + scsi: target: tcmu: Fix possible page UAF + scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 + ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs + gpu: ipu-v3: Fix dev_dbg frequency output + scsi: mvsas: Add PCI ID of RocketRaid 2640 + drivers: net: slip: fix NPD bug in sl_tx_timeout() + mm, page_alloc: fix build_zonerefs_node() + mm: kmemleak: take a full lowmem check in kmemleak_*_phys() + gcc-plugins: latent_entropy: use /dev/urandom + ALSA: pcm: Test for "silence" field in struct "pcm_format_data" + ARM: davinci: da850-evm: Avoid NULL pointer dereference + smp: Fix offline cpu check in flush_smp_call_function_queue() + i2c: pasemi: Wait for write xfers to finish + xhci: make xhci_handshake timeout for xhci_reset() adjustable + drm/edid: check basic audio support on CEA extension block + ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() + mmc: davinci_mmc: Handle error for clk_enable + drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev + Bluetooth: hci_serdev: call init_rwsem() before p->open() + drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() + hv_balloon: rate-limit "Unhandled message" warning + scsi: qla2xxx: Fix incorrect reporting of task management failure + ubifs: Fix deadlock in concurrent rename whiteout and inode writeback + sctp: Initialize daddr on peeled off socket + testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set + UBUNTU: upstream stable to v4.14.276, v4.19.239 ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2022-05-17 + + Ported from the following upstream stable releases: + v4.14.276, v4.19.238 + v4.19.239 + from git://git.kernel.org/ USB: serial: pl2303: add IBM device IDs USB: serial: simple: add Nokia phone driver netdevice: add the case if dev is NULL virtio_console: break out of buf poll on remove ethernet: sun: Free the coherent when failing in probing spi: Fix invalid sgs value spi: Fix erroneous sgs value with min_t() af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register fuse: fix pipe buffer lifetime for direct_io tpm: fix reference counting for struct tpm_chip block: Add a helper to validate the block size virtio-blk: Use blk_validate_block_size() to validate block size USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c coresight: Fix TRCCONFIGR.QE sysfs interface iio: inkern: apply consumer scale on IIO_VAL_INT cases iio: inkern: apply consumer scale when no channel scale is available iio: inkern: make a best effort on offset calculation clk: uniphier: Fix fixed-rate initialization Documentation: add link to stable release candidate tree Documentation: update stable tree link SUNRPC: avoid race between mod_timer() and del_timer_sync() NFSD: prevent underflow in nfssvc_decode_writeargs() pinctrl: samsung: drop pin banks references on error paths jffs2: fix use-after-free in jffs2_clear_xattr_subsystem jffs2: fix memory leak in jffs2_do_mount_fs jffs2: fix memory leak in jffs2_scan_medium mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node mempolicy: mbind_range() set_policy() after vma_merge() scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands qed: display VF trust config qed: validate and restrict untrusted VFs vlan promisc mode Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" ALSA: cs4236: fix an incorrect NULL check on list iterator drbd: fix potential silent data corruption ACPI: properties: Consistently return -ENOENT if there are no more references drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() video: fbdev: sm712fb: Fix crash in smtcfb_read() video: fbdev: atari: Atari 2 bpp (STe) palette bugfix ARM: dts: at91: sama5d2: Fix PMERRLOC resource size ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5250 ARM: dts: exynos: add missing HDMI supplies on SMDK5420 carl9170: fix missing bit-wise or operator for tx_params thermal: int340x: Increase bitmap size lib/raid6/test: fix multiple definition linking error DEC: Limit PMAX memory probing to R3k systems media: davinci: vpif: fix unbalanced runtime PM get brcmfmac: firmware: Allocate space for default boardrev in nvram brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio PCI: pciehp: Clear cmd_busy bit in polling mode crypto: authenc - Fix sleep in atomic context in decrypt_tail crypto: mxs-dcp - Fix scatterlist processing spi: tegra114: Add missing IRQ check in tegra_spi_probe selftests/x86: Add validity check and allow field splitting spi: pxa2xx-pci: Balance reference count for PCI DMA device hwmon: (pmbus) Add mutex to regulator ops hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING PM: hibernate: fix __setup handler error handling PM: suspend: fix return value of __setup handler hwrng: atmel - disable trng on failure path crypto: vmx - add missing dependencies ACPI: APEI: fix return value of __setup handlers crypto: ccp - ccp_dmaengine_unregister release dma channels hwmon: (pmbus) Add Vin unit off handling clocksource: acpi_pm: fix return value of __setup handler sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa perf/core: Fix address filter parser for multiple filters perf/x86/intel/pt: Fix address filter config for 32-bit kernel media: coda: Fix missing put_device() call in coda_get_vdoa_data video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() ARM: dts: qcom: ipq4019: fix sleep clock soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe media: usb: go7007: s2250-board: fix leak in probe() ASoC: ti: davinci-i2s: Add check for clk_enable() ALSA: spi: Add check for clk_enable() arm64: dts: ns2: Fix spi-cpol and spi-cpha property arm64: dts: broadcom: Fix sata nodename printk: fix return value of printk.devkmsg __setup handler ASoC: mxs-saif: Handle errors for clk_enable ASoC: atmel_ssc_dai: Handle errors for clk_enable memory: emif: Add check for setup_interrupts memory: emif: check the pointer temp in get_device_details() ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe ASoC: wm8350: Handle error for wm8350_register_irq ASoC: fsi: Add check for clk_enable video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of ASoC: dmaengine: do not use a NULL prepare_slave_config() callback ASoC: mxs: Fix error handling in mxs_sgtl5000_probe ASoC: imx-es8328: Fix error return code in imx_es8328_probe() ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe mtd: onenand: Check for error irq drm/edid: Don't clear formats if using deep color ath9k_htc: fix uninit value bugs power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe ray_cs: Check ioremap return value power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports iwlwifi: Fix -EIO error code that is never returned dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS scsi: pm8001: Fix command initialization in pm80XX_send_read_log() scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() scsi: pm8001: Fix abort all task initialization TOMOYO: fix __setup handlers return values ext2: correct max file size computing drm/tegra: Fix reference leak in tegra_dsi_ganged_probe power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return KVM: x86: Fix emulation in writing cr8 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() i2c: xiic: Make bus names unique power: supply: wm8350-power: Handle error for wm8350_register_irq power: supply: wm8350-power: Add missing free in free_charger_irq PCI: Reduce warnings on possible RW1C corruption powerpc/sysdev: fix incorrect use to determine if list is empty mfd: mc13xxx: Add check for mc13xxx_irq_request vxcan: enable local echo for sent CAN frames MIPS: RB532: fix return value of __setup handler mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init USB: storage: ums-realtek: fix error code in rts51x_read_mem() af_netlink: Fix shift out of bounds in group mask calculation i2c: mux: demux-pinctrl: do not deactivate a master that is not active tcp: ensure PMTU updates are processed during fastopen mfd: asic3: Add missing iounmap() on error asic3_mfd_probe mxser: fix xmit_buf leak in activate when LSR == 0xff pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() staging:iio:adc:ad7280a: Fix handing of device address bit reversing. serial: 8250_mid: Balance reference count for PCI DMA device serial: 8250: Fix race condition in RTS-after-send handling iio: adc: Add check for devm_request_threaded_irq clk: qcom: clk-rcg2: Update the frac table for pixel clock remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region clk: loongson1: Terminate clk_div_table with sentinel element clk: clps711x: Terminate clk_div_table with sentinel element clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver NFS: remove unneeded check in decode_devicenotify_args() pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe tty: hvc: fix return value of __setup handler kgdboc: fix return value of __setup handler kgdbts: fix return value of __setup handler jfs: fix divide error in dbNextAG netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options xen: fix is_xen_pmu() net: phy: broadcom: Fix brcm_fet_config_init() qlcnic: dcb: default to returning -EOPNOTSUPP net/x25: Fix null-ptr-deref caused by x25_disconnect NFSv4/pNFS: Fix another issue with a list iterator pointing to the head lib/test: use after free in register_test_dev_kmod() selinux: use correct type for context length loop: use sysfs_emit() in the sysfs xxx show() Fix incorrect type in assignment of ipv6 port for audit irqchip/nvic: Release nvic_base upon failure ACPICA: Avoid walking the ACPI Namespace if it is not there ACPI/APEI: Limit printable size of BERT table data PM: core: keep irq flags in device_pm_check_callbacks() spi: tegra20: Use of_device_get_match_data() ext4: don't BUG if someone dirty pages without asking ext4 first ntfs: add sanity check on allocation size video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow video: fbdev: w100fb: Reset global state video: fbdev: cirrusfb: check pixclock to avoid divide by zero video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 ARM: dts: bcm2837: Add the missing L1/L2 cache information video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() ASoC: soc-core: skip zero num_dai component in searching dai name media: cx88-mpeg: clear interrupt status register before streaming video ARM: tegra: tamonten: Fix I2C3 pad setting ARM: mmp: Fix failure to remove sram device video: fbdev: sm712fb: Fix crash in smtcfb_write() media: hdpvr: initialize dev->worker at hdpvr_register_videodev mmc: host: Return an error when ->enable_sdio_irq() ops is missing powerpc/lib/sstep: Fix 'sthcx' instruction powerpc/lib/sstep: Fix build errors with newer binutils scsi: qla2xxx: Fix warning for missing error code scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() KVM: Prevent module exit until all VMs are freed ubifs: rename_whiteout: Fix double free for whiteout_ui->data ubifs: Add missing iput if do_tmpfile() failed in rename whiteout ubifs: setflags: Make dirtied_ino_d 8 bytes aligned ubifs: rename_whiteout: correct old_dir size computing can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path can: mcba_usb: properly check endpoint type gfs2: Make sure FITRIM minlen is rounded up to fs block size pinctrl: pinconf-generic: Print arguments for bias-pull-* ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl ACPI: CPPC: Avoid out of bounds access when parsing _CPC data mm/mmap: return 1 from stack_guard_gap __setup() handler mm/memcontrol: return 1 from cgroup.memory __setup() handler ubi: fastmap: Return error code if memory allocation fails in add_aeb() ASoC: topology: Allow TLV control to be either read or write ARM: dts: spear1340: Update serial node properties ARM: dts: spear13xx: Update SPI dma properties openvswitch: Fixed nd target mask field in the flow dump. KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated ubifs: Rectify space amount budget for mkdir/tmpfile operations rtc: wm8350: Handle error for wm8350_register_irq ARM: 9187/1: JIVE: fix return value of __setup handler KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 ptp: replace snprintf with sysfs_emit powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 scsi: mvsas: Replace snprintf() with sysfs_emit() scsi: bfa: Replace snprintf() with sysfs_emit() power: supply: axp20x_battery: properly report current when discharging powerpc: Set crashkernel offset to mid of RMA region PCI: aardvark: Fix support for MSI interrupts iommu/arm-smmu-v3: fix event handling soft lockup dm ioctl: prevent potential spectre v1 gadget scsi: pm8001: Fix pm8001_mpi_task_abort_resp() scsi: aha152x: Fix aha152x_setup() __setup handler return value net/smc: correct settings of RMB window update limit macvtap: advertise link netns via netlink bnxt_en: Eliminate unintended link toggle during FW reset MIPS: fix fortify panic when copying asm exception handlers scsi: libfc: Fix use after free in fc_exch_abts_resp() usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm xtensa: fix DTC warning unit_address_format Bluetooth: Fix use after free in hci_send_acl init/main.c: return 1 from handled __setup() functions w1: w1_therm: fixes w1_seq for ds28ea00 sensors SUNRPC/call_alloc: async tasks mustn't block waiting for memory NFS: swap IO handling is slightly different for O_DIRECT IO NFS: swap-out must always use STABLE writes. serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() virtio_console: eliminate anonymous module_init & module_exit jfs: prevent NULL deref in diFree parisc: Fix CPU affinity for Lasi, WAX and Dino chips ipv6: add missing tx timestamping on IPPROTO_RAW net: add missing SOF_TIMESTAMPING_OPT_ID support mm: fix race between MADV_FREE reclaim and blkdev direct IO read drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() net: stmmac: Fix unset max_speed difference between DT and non-DT platforms drm/imx: Fix memory leak in imx_pd_connector_get_modes drbd: Fix five use after free bugs in get_initial_state Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) mm/mempolicy: fix mpol_new leak in shared_policy_replace x86/pm: Save the MSR validity status at context setup x86/speculation: Restore speculation related MSRs during S3 resume btrfs: fix qgroup reserve overflow the qgroup limit arm64: patch_text: Fixup last cpu should be master perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" mm: don't skip swap entry even if zap_details specified arm64: module: remove (NOLOAD) from linker script mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning cgroup: Use open-time credentials for process migraton perm checks cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv cgroup: Use open-time cgroup namespace for process migration perm checks memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe veth: Ensure eth header is in skb's linear part gpiolib: acpi: use correct format characters mlxsw: i2c: Fix initialization error flow nfc: nci: add flush_workqueue to prevent uaf cifs: potential buffer overflow in handling symlinks drm/amd: Add USBC connector ID drm/amdkfd: Check for potential null return of kmalloc_array() Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer scsi: target: tcmu: Fix possible page UAF scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs gpu: ipu-v3: Fix dev_dbg frequency output scsi: mvsas: Add PCI ID of RocketRaid 2640 drivers: net: slip: fix NPD bug in sl_tx_timeout() mm, page_alloc: fix build_zonerefs_node() mm: kmemleak: take a full lowmem check in kmemleak_*_phys() gcc-plugins: latent_entropy: use /dev/urandom ALSA: pcm: Test for "silence" field in struct "pcm_format_data" ARM: davinci: da850-evm: Avoid NULL pointer dereference smp: Fix offline cpu check in flush_smp_call_function_queue() i2c: pasemi: Wait for write xfers to finish xhci: make xhci_handshake timeout for xhci_reset() adjustable drm/edid: check basic audio support on CEA extension block ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp() mmc: davinci_mmc: Handle error for clk_enable drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev Bluetooth: hci_serdev: call init_rwsem() before p->open() drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() hv_balloon: rate-limit "Unhandled message" warning scsi: qla2xxx: Fix incorrect reporting of task management failure ubifs: Fix deadlock in concurrent rename whiteout and inode writeback sctp: Initialize daddr on peeled off socket testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set UBUNTU: upstream stable to v4.14.276, v4.19.239 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1973831 Title: Bionic update: upstream stable patchset 2022-05-17 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1973831/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs