Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v7.0.14 upstream stable release
from git://git.kernel.org/
io_uring/net: Avoid msghdr on op_connect/op_bind async data
arm64/entry: Fix arm64-specific rseq brokenness
lockd: fix TEST handling when not all permissions are available.
firmware: exynos-acpm: Count number of commands in acpm_xfer
firmware: exynos-acpm: Count acpm_xfer buffers with __counted_by_ptr
firmware: samsung: acpm: Fix cross-thread RX length corruption
firmware: samsung: acpm: Fix false timeouts and Use-After-Free in polling
firmware: samsung: acpm: Fix missing LKMM barriers in sequence allocator
fuse: re-lock request before replacing page cache folio
Revert "NFSD: Defer sub-object cleanup in export put callbacks"
RDMA/bnxt_re: zero shared page before exposing to userspace
bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
i2c: stub: Reject I2C block transfers with invalid length
net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
agp/amd64: Fix broken error propagation in agp_amd64_probe()
rose: fix dev_put() leak in rose_loopback_timer()
rose: hold loopback neighbour reference across timer callback
rose: fix race between loopback timer and module removal
rose: clear neighbour pointer after rose_neigh_put() in state machines
rose: guard rose_neigh_put() against NULL in timer expiry
rose: fix netdev double-hold in rose_rx_call_request()
rose: fix notifier unregistered too early in rose_exit()
rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup
rose: disconnect orphaned STATE_2 sockets when device is gone
rose: fix netdev double-hold in rose_make_new()
rose: release netdev ref and destroy orphaned incoming sockets
rose: drop CALL_REQUEST in loopback timer when device is not running
rose: cancel neighbour timers in rose_neigh_put() before freeing
rose: clear neighbour pointer in rose_kill_by_device()
rose: don't free fd-owned sockets when reaping in the heartbeat
net: export netif_open for self_test usage
net: net_failover: Fix the deadlock in slave register
iio: light: veml6075: add bounds check to veml6075_it_ms index
iio: adc: ti-ads1298: add bounds check to pga_settings index
crypto: qat - remove unused character device and IOCTLs
vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
drivers/base/memory: set mem->altmap after successful device registration
ksmbd: reject non-VALID session in compound request branch
media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
virtiofs: fix UAF on submount umount
Linux 7.0.14
UBUNTU: Upstream stable to v7.0.14
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Resolute)
Importance: Medium
Assignee: Alice C. Munduruca (cremfuelled)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Resolute)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Resolute)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Resolute)
Status: New => In Progress
** Changed in: linux (Ubuntu Resolute)
Assignee: (unassigned) => Alice C. Munduruca (cremfuelled)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v7.0.14 upstream stable release
from git://git.kernel.org/
-
+ io_uring/net: Avoid msghdr on op_connect/op_bind async data
+ arm64/entry: Fix arm64-specific rseq brokenness
+ lockd: fix TEST handling when not all permissions are available.
+ firmware: exynos-acpm: Count number of commands in acpm_xfer
+ firmware: exynos-acpm: Count acpm_xfer buffers with __counted_by_ptr
+ firmware: samsung: acpm: Fix cross-thread RX length corruption
+ firmware: samsung: acpm: Fix false timeouts and Use-After-Free in polling
+ firmware: samsung: acpm: Fix missing LKMM barriers in sequence allocator
+ fuse: re-lock request before replacing page cache folio
+ Revert "NFSD: Defer sub-object cleanup in export put callbacks"
+ RDMA/bnxt_re: zero shared page before exposing to userspace
+ bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
+ i2c: stub: Reject I2C block transfers with invalid length
+ net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
+ agp/amd64: Fix broken error propagation in agp_amd64_probe()
+ rose: fix dev_put() leak in rose_loopback_timer()
+ rose: hold loopback neighbour reference across timer callback
+ rose: fix race between loopback timer and module removal
+ rose: clear neighbour pointer after rose_neigh_put() in state machines
+ rose: guard rose_neigh_put() against NULL in timer expiry
+ rose: fix netdev double-hold in rose_rx_call_request()
+ rose: fix notifier unregistered too early in rose_exit()
+ rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup
+ rose: disconnect orphaned STATE_2 sockets when device is gone
+ rose: fix netdev double-hold in rose_make_new()
+ rose: release netdev ref and destroy orphaned incoming sockets
+ rose: drop CALL_REQUEST in loopback timer when device is not running
+ rose: cancel neighbour timers in rose_neigh_put() before freeing
+ rose: clear neighbour pointer in rose_kill_by_device()
+ rose: don't free fd-owned sockets when reaping in the heartbeat
+ net: export netif_open for self_test usage
+ net: net_failover: Fix the deadlock in slave register
+ iio: light: veml6075: add bounds check to veml6075_it_ms index
+ iio: adc: ti-ads1298: add bounds check to pga_settings index
+ crypto: qat - remove unused character device and IOCTLs
+ vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
+ serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
+ serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
+ drivers/base/memory: set mem->altmap after successful device registration
+ ksmbd: reject non-VALID session in compound request branch
+ media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
+ virtiofs: fix UAF on submount umount
Linux 7.0.14
- virtiofs: fix UAF on submount umount
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
- ksmbd: reject non-VALID session in compound request branch
- drivers/base/memory: set mem->altmap after successful device registration
- serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero
- vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
- crypto: qat - remove unused character device and IOCTLs
- iio: adc: ti-ads1298: add bounds check to pga_settings index
- iio: light: veml6075: add bounds check to veml6075_it_ms index
- net: net_failover: Fix the deadlock in slave register
- net: export netif_open for self_test usage
- rose: don't free fd-owned sockets when reaping in the heartbeat
- rose: clear neighbour pointer in rose_kill_by_device()
- rose: cancel neighbour timers in rose_neigh_put() before freeing
- rose: drop CALL_REQUEST in loopback timer when device is not running
- rose: release netdev ref and destroy orphaned incoming sockets
- rose: fix netdev double-hold in rose_make_new()
- rose: disconnect orphaned STATE_2 sockets when device is gone
- rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup
- rose: fix notifier unregistered too early in rose_exit()
- rose: fix netdev double-hold in rose_rx_call_request()
- rose: guard rose_neigh_put() against NULL in timer expiry
- rose: clear neighbour pointer after rose_neigh_put() in state machines
- rose: fix race between loopback timer and module removal
- rose: hold loopback neighbour reference across timer callback
- rose: fix dev_put() leak in rose_loopback_timer()
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
- i2c: stub: Reject I2C block transfers with invalid length
- bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
- RDMA/bnxt_re: zero shared page before exposing to userspace
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
- fuse: re-lock request before replacing page cache folio
- firmware: samsung: acpm: Fix missing LKMM barriers in sequence allocator
- firmware: samsung: acpm: Fix false timeouts and Use-After-Free in polling
- firmware: samsung: acpm: Fix cross-thread RX length corruption
- firmware: exynos-acpm: Count acpm_xfer buffers with __counted_by_ptr
- firmware: exynos-acpm: Count number of commands in acpm_xfer
- lockd: fix TEST handling when not all permissions are available.
- arm64/entry: Fix arm64-specific rseq brokenness
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
+ UBUNTU: Upstream stable to v7.0.14
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2158815
Title:
Resolute update: v7.0.14 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2158815/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
