Jammy update: v5.15.64 upstream stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
Medium
|
Kamal Mostafa |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.64 upstream stable release
from git://git.
wifi: rtlwifi: remove always-true condition pointed out by GCC 12
eth: sun: cassini: remove dead code
audit: fix potential double free on error path from fsnotify_
cgroup: Fix race condition at rebind_subsystems()
parisc: Make CONFIG_64BIT available for ARCH=parisc64 only
parisc: Fix exception handler for fldw and fstw instructions
kernel/sys_ni: add compat entry for fadvise64_64
x86/entry: Move CLD to the start of the idtentry macro
block: add a bdev_max_
block: add bdev_max_segments() helper
btrfs: zoned: revive max_zone_
btrfs: replace BTRFS_MAX_
btrfs: convert count_max_extents() to use fs_info-
Input: i8042 - move __initconst to fix code styling warning
Input: i8042 - merge quirk tables
Input: i8042 - add TUXEDO devices to i8042 quirk tables
Input: i8042 - add additional TUXEDO devices to i8042 quirk tables
drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist
scsi: qla2xxx: Fix response queue handler reading stale packets
scsi: qla2xxx: edif: Fix dropped IKE message
btrfs: put initial index value of a directory in a constant
btrfs: pass the dentry to btrfs_log_
btrfs: remove unnecessary parameter delalloc_start for writepage_
riscv: lib: uaccess: fold fixups into body
riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit
xfrm: fix refcount leak in __xfrm_
xfrm: clone missing x->lastused in xfrm_do_migrate
af_key: Do not call xfrm_probe_algs in parallel
xfrm: policy: fix metadata dst->dev xmit null pointer dereference
fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts
net: use eth_hw_addr_set() instead of ether_addr_copy()
Revert "net: macsec: update SCI upon MAC address change."
NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open()
NFSv4.2 fix problems with __nfs42_ssc_open
SUNRPC: RPC level errors should set task->tk_rpc_status
mm/smaps: don't access young/dirty bit if pte unpresent
ntfs: fix acl handling
rose: check NULL rose_loopback_
r8152: fix the units of some registers for RTL8156A
r8152: fix the RX FIFO settings when suspending
nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
ice: xsk: Force rings to be sized to power of 2
ice: xsk: prohibit usage of non-balanced queue id
net/mlx5e: Properly disable vlan strip on non-UL reps
net/mlx5: Avoid false positive lockdep warning by adding lock_class_key
net/mlx5e: Fix wrong application of the LRO state
net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off
net: ipa: don't assume SMEM is page-aligned
net: phy: Don't WARN for PHY_READY state in mdio_bus_
net: moxa: get rid of asymmetry in DMA mapping/unmapping
bonding: 802.3ad: fix no transmission of LACPDUs
net: ipvtap - add __init/__exit annotations to module init/exit funcs
netfilter: ebtables: reject blobs that don't provide all entry points
bnxt_en: fix NQ resource accounting during vf creation on 57500 chips
netfilter: nf_tables: disallow updates of implicit chain
netfilter: nf_tables: make table handle allocation per-netns friendly
netfilter: nft_payload: report ERANGE for too long offset and length
netfilter: nft_payload: do not truncate csum_offset and csum_type
netfilter: nf_tables: do not leave chain stats enabled on error
netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
netfilter: nft_tunnel: restrict it to netdev family
netfilter: nf_tables: consolidate rule verdict trace call
netfilter: nft_cmp: optimize comparison for 16-bytes
netfilter: bitwise: improve error goto labels
netfilter: nf_tables: upfront validation of data via nft_data_init()
netfilter: nf_tables: disallow jump to implicit chain from set element
netfilter: nf_tables: disallow binding to already bound chain
netfilter: flowtable: add function to invoke garbage collection immediately
netfilter: flowtable: fix stuck flows on cleanup due to pending work
net: Fix data-races around sysctl_
net: Fix data-races around weight_p and dev_weight_
net: Fix data-races around netdev_max_backlog.
net: Fix data-races around netdev_
ratelimit: Fix data-races in ___ratelimit().
net: Fix data-races around sysctl_optmem_max.
net: Fix a data-race around sysctl_
net: Fix a data-race around sysctl_
net: Fix a data-race around sysctl_
net: Fix a data-race around netdev_budget.
tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers
mptcp: stop relying on tcp_tx_skb_cache
net: Fix data-races around sysctl_
net: Fix a data-race around netdev_
net: Fix data-races around sysctl_
net: Fix data-races around sysctl_
net: Fix a data-race around sysctl_somaxconn.
ixgbe: stop resetting SYSTIME in ixgbe_ptp_
i40e: Fix incorrect address type for IPv6 flow rules
rxrpc: Fix locking in rxrpc's sendmsg
ionic: widen queue_lock use around lif init and deinit
ionic: clear broken state on generation change
ionic: fix up issues with handling EAGAIN on FW cmds
ionic: VF initial random MAC address if no assigned mac
net: stmmac: work around sporadic tx issue on link-up
btrfs: fix silent failure when deleting root reference
btrfs: replace: drop assert for suspended replace
btrfs: add info when mount fails due to stale replace target
btrfs: check if root is readonly while setting security xattr
btrfs: fix possible memory leak in btrfs_get_
perf/x86/lbr: Enable the branch type for the Arch LBR by default
x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
x86/bugs: Add "unknown" reporting for MMIO Stale Data
x86/nospec: Unwreck the RSB stuffing
loop: Check for overflow while configuring loop
writeback: avoid use-after-free after removing device
asm-generic: sections: refactor memory_intersects
mm/damon/dbgfs: avoid duplicate context directory creation
s390/mm: do not trigger write fault when vma does not allow VM_WRITE
bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem
s390: fix double free of GS and RI CBs on fork() failure
fbdev: fbcon: Properly revert changes when vc_resize() failed
Revert "memcg: cleanup racy sum avoidance code"
ACPI: processor: Remove freq Qos request for all CPUs
nouveau: explicitly wait on the fence in nouveau_
smb3: missing inode locks in punch hole
xen/privcmd: fix error exit of privcmd_
riscv: traps: add missing prototype
io_uring: fix issue with io_write() not always undoing sb_start_write()
mm/hugetlb: fix hugetlb not supporting softdirty tracking
md: call __md_stop_writes in md_stop
mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb
arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76
binder_alloc: add missing mmap_lock calls when using the VMA
x86/nospec: Fix i386 RSB stuffing
Documentation/ABI: Mention retbleed vulnerability info file for sysfs
blk-mq: fix io hung due to missing commit_rqs
perf python: Fix build when PYTHON_CONFIG is user supplied
perf/x86/
perf/x86/intel/ds: Fix precise store latency handling
perf stat: Clear evsel->reset_group for each stat run
scsi: ufs: core: Enable link lost interrupt
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
bpf: Don't use tnum_range on array range checking for poke descriptors
Linux 5.15.64
UBUNTU: Upstream stable to v5.15.64
CVE References
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
description: | updated |
Changed in linux (Ubuntu): | |
status: | Confirmed → Invalid |
Changed in linux (Ubuntu Jammy): | |
status: | New → In Progress |
importance: | Undecided → Medium |
assignee: | nobody → Kamal Mostafa (kamalmostafa) |
tags: | removed: verification-needed-jammy |
Skipped:
- "af_key: Do not call xfrm_probe_algs in parallel"
already applied for security (CVE-2022-3028)