Jammy update: v5.17.14 upstream stable release

Bug #1980388 reported by Paolo Pisati
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

    SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.17.14 upstream stable release
       from git://git.kernel.org/

Linux 5.17.14
block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
pinctrl/rockchip: support setting input-enable param
tty: n_gsm: Fix packet data hex dump output
md: bcache: check the return value of kzalloc() in detached_dev_do_request()
md: fix double free of io_acct_set bioset
md: Don't set mddev private to NULL in raid0 pers->free
fs/ntfs3: Fix invalid free in log_replay
exportfs: support idmapped mounts
fs: add two trivial lookup helpers
ext4: only allow test_dummy_encryption when supported
MIPS: IP30: Remove incorrect `cpu_has_fpu' override
MIPS: IP27: Remove incorrect `cpu_has_fpu' override
RDMA/rxe: Generate a completion for unsupported/invalid opcode
RDMA/hns: Remove the num_cqc_timer variable
staging: r8188eu: delete rtw_wx_read/write32()
Revert "random: use static branch for crng_ready()"
list: test: Add a test for list_is_head()
perf evlist: Extend arch_evsel__must_be_in_group to support hybrid systems
kseltest/cgroup: Make test_stress.sh work if run interactively
net: ipa: fix page free in ipa_endpoint_replenish_one()
net: ipa: fix page free in ipa_endpoint_trans_release()
phy: qcom-qmp: fix reset-controller leak on probe errors
coresight: core: Fix coresight device probe failure issue
blk-iolatency: Fix inflight count imbalances and IO hangs on offline
vdpasim: allow to enable a vq repeatedly
dt-bindings: gpio: altera: correct interrupt-cells
docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op
ceph: fix decoding of client session messages flags
ARM: pxa: maybe fix gpio lookup tables
ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries
phy: qcom-qmp: fix struct clk leak on probe errors
clk: tegra: Add missing reset deassertion
arm64: tegra: Add missing DFLL reset on Tegra210
arm64: dts: qcom: ipq8074: fix the sleep clock frequency
gma500: fix an incorrect NULL check on list iterator
tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
serial: pch: don't overwrite xmit->buf[0] by x_char
bcache: avoid journal no-space deadlock by reserving 1 journal bucket
bcache: remove incremental dirty sector counting for bch_sectors_dirty_init()
bcache: improve multithreaded bch_sectors_dirty_init()
bcache: improve multithreaded bch_btree_check()
stm: ltdc: fix two incorrect NULL checks on list iterator
carl9170: tx: fix an incorrect use of list iterator
ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
rtl818x: Prevent using not initialized queues
xtensa/simdisk: fix proc_read_simdisk()
mm/memremap: fix missing call to untrack_pfn() in pagemap_range()
hugetlb: fix huge_pmd_unshare address update
nodemask.h: fix compilation error with GCC12
mm/page_alloc: always attempt to allocate at least one page during bulk allocation
Revert "mm/cma.c: remove redundant cma_mutex lock"
iommu/dma: Fix iova map result check bug
iommu/msm: Fix an incorrect NULL check on list iterator
ksmbd: fix outstanding credits related bugs
ftrace: Clean up hash direct_functions on register failures
kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
um: Fix out-of-bounds read in LDT setup
um: chan_user: Fix winch_tramp() return value
um: Use asm-generic/dma-mapping.h
um: virtio_uml: Fix broken device handling in time-travel
mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
cfg80211: declare MODULE_FIRMWARE for regulatory.db
mt76: fix use-after-free by removing a non-RCU wcid pointer
thermal: devfreq_cooling: use local ops instead of global ops
irqchip: irq-xtensa-mx: fix initial IRQ affinity
irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
csky: patch_text: Fixup last cpu should be master
mmc: core: Allows to override the timeout value for ioctl() path
RDMA/hfi1: Fix potential integer multiplication overflow errors
lib/string_helpers: fix not adding strarray to device's resource list
Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
ima: remove the IMA_TEMPLATE Kconfig option
media: coda: Add more H264 levels for CODA960
media: coda: Fix reported H264 profile
mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
md: fix an incorrect NULL check in md_reload_sb
md: fix an incorrect NULL check in does_sb_need_changing
drm/i915/dsi: fix VBT send packet port selection for ICL+
drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator
drm/nouveau/clk: Fix an incorrect NULL check on list iterator
drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
drm/nouveau/subdev/bus: Ratelimit logging for fault errors
drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
landlock: Fix same-layer rule unions
landlock: Create find_rule() from unmask_layers()
landlock: Reduce the maximum number of layers to 16
landlock: Define access_mask_t to enforce a consistent access mask size
selftests/landlock: Test landlock_create_ruleset(2) argument check ordering
landlock: Change landlock_restrict_self(2) check ordering
landlock: Change landlock_add_rule(2) argument check ordering
selftests/landlock: Add tests for O_PATH
selftests/landlock: Fully test file rename with "remove" access
selftests/landlock: Extend access right tests to directories
selftests/landlock: Add tests for unknown access rights
selftests/landlock: Extend tests for minimal valid attribute size
selftests/landlock: Make tests build with old libc
landlock: Fix landlock_add_rule(2) documentation
samples/landlock: Format with clang-format
samples/landlock: Add clang-format exceptions
selftests/landlock: Format with clang-format
selftests/landlock: Normalize array assignment
selftests/landlock: Add clang-format exceptions
landlock: Format with clang-format
landlock: Add clang-format exceptions
scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
scsi: dc395x: Fix a missing check on list iterator
ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
dlm: fix missing lkb refcount handling
dlm: fix wake_up() calls for pending remove
dlm: uninitialized variable on error in dlm_listen_for_all()
dlm: fix plock invalid read
s390/stp: clock_delta should be signed
s390/perf: obtain sie_block from the right address
mm, compaction: fast_find_migrateblock() should return pfn in the target zone
block: Fix potential deadlock in blk_ia_range_sysfs_show()
staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()
PCI: qcom: Fix unbalanced PHY init on probe errors
PCI: qcom: Fix runtime PM imbalance on probe errors
PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
drm/amdgpu: add beige goby PCI ID
tracing: Initialize integer variable to prevent garbage return value
tracing: Fix return value of trace_pid_write()
tracing: Fix potential double free in create_var_ref()
tty: goldfish: Introduce gf_ioread32()/gf_iowrite32()
ACPI: property: Release subnode properties with data nodes
ext4: avoid cycles in directory h-tree
ext4: verify dir block before splitting it
ext4: fix bug_on in __es_tree_search
ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
ext4: fix bug_on in ext4_writepages
ext4: fix memory leak in parse_apply_sb_mount_options()
ext4: fix warning in ext4_handle_inode_extension
ext4: fix race condition between ext4_write and ext4_convert_inline_data
ext4: fix journal_ioprio mount option handling
ext4: fix use-after-free in ext4_rename_dir_prepare
ext4: mark group as trimmed only if it was fully scanned
bfq: Make sure bfqg for which we are queueing requests is online
bfq: Get rid of __bio_blkcg() usage
bfq: Track whether bfq_group is still online
bfq: Remove pointless bfq_init_rq() calls
bfq: Drop pointless unlock-lock pair
bfq: Update cgroup information before merging bio
bfq: Split shared queues on move between cgroups
bfq: Avoid merging queues with different parents
bfq: Avoid false marking of bic as stably merged
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages
iwlwifi: mei: fix potential NULL-ptr deref
iwlwifi: mei: clear the sap data header before sending
iwlwifi: mvm: fix assert 1F04 upon reconfig
iwlwifi: fw: init SAR GEO table only if data is present
wifi: mac80211: fix use-after-free in chanctx code
objtool: Fix symbol creation
objtool: Fix objtool regression on x32 systems
f2fs: fix to do sanity check for inline inode
f2fs: fix fallocate to use file_modified to update permissions consistently
f2fs: don't use casefolded comparison for "." and ".."
f2fs: fix to do sanity check on total_data_blocks
f2fs: don't need inode lock for system hidden quota
f2fs: fix deadloop in foreground GC
f2fs: fix to clear dirty inode in f2fs_evict_inode()
f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
NFSv4.1 mark qualified async operations as MOVEABLE tasks
video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
perf jevents: Fix event syntax error caused by ExtSel
tracing/timerlat: Notify IRQ new max latency only if stop tracing is set
rtla: Fix __set_sched_attr error message
rtla: Minor grammar fix for rtla README
rtla: Don't overwrite existing directory mode
perf c2c: Use stdio interface if slang is not supported
perf build: Fix btf__load_from_kernel_by_id() feature check
MIPS: RALINK: Define pci_remap_iospace under CONFIG_PCI_DRIVERS_GENERIC
RISC-V: Fix the XIP build
tracing: Reset the function filter after completing trampoline/graph selftest
i2c: rcar: fix PM ref counts in probe error paths
i2c: npcm: Handle spurious interrupts
i2c: npcm: Correct register access width
i2c: npcm: Fix timeout calculation
iommu/amd: Increase timeout waiting for GA log enablement
dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler()
dmaengine: stm32-mdma: remove GISR1 register
video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
NFS: Further fixes to the writeback error handling
NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
NFS: Don't report errors from nfs_pageio_complete() more than once
NFS: Do not report flush errors in nfs_write_end()
NFS: Don't report ENOSPC write errors twice
NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS
NFS: Do not report EINTR/ERESTARTSYS as mapping errors
dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
i2c: at91: Initialize dma_buf in at91_twi_xfer()
iommu/mediatek: Fix NULL pointer dereference when printing dev_name
MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon
iommu/arm-smmu-v3-sva: Fix mm use-after-free
cpufreq: mediatek: Unregister platform device on exit
cpufreq: mediatek: Use module_init and add module_exit
i2c: at91: use dma safe buffers
iommu/mediatek: Add mutex for m4u_group and m4u_dom in data
iommu/mediatek: Remove clk_disable in mtk_iommu_remove
iommu/mediatek: Add list_del in mtk_iommu_remove
iommu/mediatek: Fix 2 HW sharing pgtable issue
iommu/amd: Enable swiotlb in all cases
riscv: Fixup difference with defconfig
f2fs: fix dereference of stale list iterator after loop body
f2fs: fix to do sanity check on inline_dots inode
OPP: call of_node_put() on error path in _bandwidth_supported()
Input: stmfts - do not leave device disabled in stmfts_input_open
KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer
pinctrl: apple: Use a raw spinlock for the regmap
RDMA/hfi1: Prevent use of lock before it is initialized
mailbox: forward the hrtimer if not queued and under a lock
nfsd: destroy percpu stats counters after reply cache shutdown
mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
gpio: sim: Use correct order for the parameters of devm_kcalloc()
powerpc/fsl_book3e: Don't set rodata RO too early
powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
powerpc/xive: Fix refcount leak in xive_spapr_init
powerpc/xive: Add some error handling code to 'xive_spapr_init()'
macintosh: via-pmu and via-cuda need RTC_LIB
powerpc/perf: Fix the threshold compare group constraint for power9
powerpc/perf: Fix the threshold compare group constraint for power10
powerpc/powernv: Get STF barrier requirements from device-tree
powerpc/powernv: Get L1D flush requirements from device-tree
powerpc/64: Only WARN if __pa()/__va() called with bad addresses
mailbox: pcc: Fix an invalid-load caught by the address sanitizer
perf stat: Always keep perf metrics topdown events in a group
perf evlist: Keep topdown counters in weak group
hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume()
PCI: microchip: Fix potential race in interrupt handling
KVM: PPC: Book3S HV: Fix vcore_blocked tracepoint
Input: sparcspkr - fix refcount leak in bbc_beep_probe
mce: fix set_mce_nospec to always unmap the whole page
x86/mce: relocate set{clear}_mce_nospec() functions
hugetlbfs: fix hugetlbfs_statfs() locking
ARM: dts: at91: sama7g5: remove interrupt-parent from gic node
crypto: cryptd - Protect per-CPU resource by disabling BH.
crypto: sun8i-ss - handle zero sized sg
crypto: sun8i-ss - rework handling of IV
tty: fix deadlock caused by calling printk() under tty_port->lock
module: fix [e_shstrndx].sh_size=0 OOB access
module.h: simplify MODULE_IMPORT_NS
PCI: mediatek-gen3: Assert resets to ensure expected init state
PCI: imx6: Fix PERST# start-up sequence
ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
proc: fix dentry/inode overinstantiating under /proc/${pid}/net
ASoC: atmel-classd: Remove endianness flag on class d component
ASoC: atmel-pdmic: Remove endianness flag on pdmic component
arm64: dts: marvell: espressobin-ultra: enable front USB3 port
arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config
RDMA/hns: Add the detection for CMDQ status in the device initialization process
powerpc/4xx/cpm: Fix return value of __setup() handler
powerpc/idle: Fix return value of __setup() handler
pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()
pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins
powerpc/8xx: export 'cpm_setbrg' for modules
drm/msm/dpu: fix error check return value of irq_of_parse_and_map()
list: fix a data-race around ep->rdllist
ocfs2: fix mounting crash if journal is not alloced
firmware: arm_ffa: Remove incorrect assignment of driver_data
firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe
drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block()
dax: fix cache flush on PMD-mapped pages
drivers/base/node.c: fix compaction sysfs file leak
crypto: ccp - Fix the INIT_EX data file open failure
pinctrl: mvebu: Fix irq_of_parse_and_map() return value
nvdimm: Allow overwrite in the presence of disabled dimms
nvdimm: Fix firmware activation deadlock scenarios
firmware: arm_scmi: Fix list protocols enumeration in the base protocol
ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path
ASoC: sh: rz-ssi: Propagate error codes returned from platform_get_irq_byname()
arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates
soc: bcm: Check for NULL return of devm_kzalloc()
scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
mfd: ipaq-micro: Fix error check return value of platform_get_irq()
powerpc/fadump: fix PT_LOAD segment for boot memory area
Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero
arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name
pinctrl: mediatek: mt8195: enable driver on mtk platforms
pinctrl/rockchip: support deferring other gpio params
arm: mediatek: select arch timer for mt7629
drm/msm: return the average load over the polling period
drm/msm: simplify gpu_busy callback
pinctrl: bcm2835: implement hook for missing gpio-ranges
gpiolib: of: Introduce hook for missing gpio-ranges
crypto: marvell/cesa - ECB does not IV
hwrng: cn10k - Make check_rng_health() return an error code
hwrng: cn10k - Optimize cn10k_rng_read()
misc: ocxl: fix possible double free in ocxl_file_register_afu
ARM: dts: bcm2835-rpi-b: Fix GPIO line names
ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
ARM: dts: qcom: sdx55: remove wrong unit address from RPMH RSC clocks
dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
ARM: dts: stm32: Fix PHY post-reset delay on Avenger96
can: xilinx_can: mark bit timing constants as const
platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls
ARM: dts: imx6dl-colibri: Fix I2C pinmuxing
platform/chrome: cros_ec: fix error handling in cros_ec_register()
crypto: qat - set COMPRESSION capability for DH895XCC
crypto: qat - set CIPHER capability for DH895XCC
KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault
KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
soc: qcom: llcc: Add MODULE_DEVICE_TABLE()
ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks
PCI: dwc: Fix setting error return on MSI DMA mapping failure
PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()
PCI: rockchip: Fix find_first_zero_bit() limit
PCI: cadence: Fix find_first_zero_bit() limit
soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
ARM: dts: suniv: F1C100: fix watchdog compatible
ARM: dts: BCM5301X: Update pin controller node name
memory: samsung: exynos5422-dmc: Avoid some over memory allocation
PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3
arm64: dts: mt8192: Fix nor_flash status disable typo
arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
Revert "net/smc: fix listen processing for SMC-Rv2"
Bluetooth: hci_conn: Fix hci_connect_le_sync
Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted
dma-direct: don't over-decrypt memory
net/smc: fix listen processing for SMC-Rv2
net/smc: postpone sk_refcnt increment in connect()
net: dsa: restrict SMSC_LAN9303_I2C kconfig
hinic: Avoid some over memory allocation
rxrpc: Fix decision on when to generate an IDLE ACK
rxrpc: Don't let ack.previousPacket regress
rxrpc: Fix overlapping ACK accounting
rxrpc: Don't try to resend the request if we're receiving the reply
rxrpc: Fix listen() setting the bar too high for the prealloc rings
rxrpc: Fix locking issue
hwmon: (pmbus) Check PEC support before reading other registers
hv_netvsc: Fix potential dereference of NULL pointer
amt: fix memory leak for advertisement message
amt: fix gateway mode stuck
net: stmmac: fix out-of-bounds access in a selftest
perf parse-events: Support different format of the topdown event name
ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv()
bonding: fix missed rcu protection
NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
scsi: hisi_sas: Fix rescan after deleting a disk
net: macb: Fix PTP one step sync support
PM: domains: Fix initialization of genpd's next_wakeup
ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()
bfq: Allow current waker to defend against a tentative one
bfq: Relax waker detection for shared queues
thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe
thermal/core: Fix memory leak in __thermal_cooling_device_register()
thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
thermal/drivers/bcm2711: Don't clamp temperature at zero
drm/i915: Fix CFI violation with show_dynamic_id()
drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path
selftests/bpf: Add missed ima_setup.sh in Makefile
drm/msm: don't free the IRQ if it was not requested
x86/sev: Annotate stack change in the #VC handler
drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
ext4: reject the 'commit' option on ext2 filesystems
net/mlx5e: Correct the calculation of max channels for rep
erofs: fix buffer copy overflow of ztailpacking feature
regulator: scmi: Fix refcount leak in scmi_regulator_probe
media: rkvdec: h264: Fix bit depth wrap in pps packet
media: rkvdec: h264: Fix dpb_valid implementation
media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR()
media: ov7670: remove ov7670_power_off from ov7670_remove
kselftest/arm64: bti: force static linking
ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init
sctp: read sk->sk_bound_dev_if once in sctp_rcv()
m68k: math-emu: Fix dependencies of math emulation support
nvme: set dma alignment to dword
irqchip/gic-v3: Fix priority mask handling
irqchip/gic-v3: Refactor ISB + EOIR at ack time
irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
io_uring: only wake when the correct events are set
io_uring: fix assuming triggered poll waitqueue is the single poll
io_uring: cache poll/double-poll state with a request flag
io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
media: mediatek: vcodec: Fix v4l2 compliance decoder cmd test fail
Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
Bluetooth: protect le accept and resolv lists with hdev->lock
Bluetooth: use hdev lock for accept_list and reject_list in conn req
Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
media: hantro: HEVC: Fix tile info buffer value computation
media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check
media: vsp1: Fix offset calculation for plane cropping
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
media: exynos4-is: Change clk_disable to clk_disable_unprepare
media: i2c: rdacm2x: properly set subdev entity function
media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe
media: st-delta: Fix PM disable depth imbalance in delta_probe
mt76: mt7915: fix twt table_mask to u16 in mt7915_dev
mt76: fix tx status related use-after-free race on station removal
mt76: do not attempt to reorder received 802.3 packets without agg session
mt76: mt7921: fix kernel crash at mt7921_pci_remove
mt76: fix antenna config missing in 6G cap
mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set
mt76: mt7921: Fix the error handling path of mt7921_pci_probe()
media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe
media: aspeed: Fix an error handling path in aspeed_video_probe()
scripts/faddr2line: Fix overlapping text section failures
kselftest/cgroup: fix test_stress.sh to use OUTPUT dir
block: Fix the bio.bi_opf comment
ASoC: samsung: Fix refcount leak in aries_audio_probe
dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages
PM: EM: Decrement policy counter
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe
ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
HID: amd_sfh: Modify the hid name
HID: amd_sfh: Modify the bus name
wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice()
ath11k: Don't check arvif->is_started before sending management frames
perf/amd/ibs: Use interrupt regs ip for stack unwinding
samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is provided
regulator: qcom_smd: Fix up PM8950 regulator configuration
Revert "cpufreq: Fix possible race in cpufreq online error path"
selftests/bpf: Prevent skeleton generation race
spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()
iomap: iomap_write_failed fix
arm64: stackleak: fix current_top_of_stack()
media: uvcvideo: Fix missing check to determine if element is found in list
drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
drm/msm/dp: fix event thread stuck in wait_event after kthread_stop()
drm/msm/dsi: fix address for second DSI PHY on SDM660
drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit
regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
arm64: fix types in copy_highpage()
x86/mm: Cleanup the control_va_addr_alignment() __setup handler
irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value
irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
irqchip/exiu: Fix acknowledgment of edge triggered interrupts
x86: Fix return value of __setup handlers
nl80211: don't hold RTNL in color change request
virtio_blk: fix the discard_granularity and discard_alignment queue limits
perf tools: Use Python devtools for version autodetection rather than runtime
spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA
drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
kunit: fix debugfs code to use enum kunit_status, not bool
drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H
drm/msm: add missing include to msm_drv.c
drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
drm/msm/hdmi: check return value after calling platform_get_resource_byname()
drm/msm/dsi: fix error checks and return values for DSI xmit functions
drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test
drm/msm/dp: reset DP controller before transmit phy test pattern
drm/msm/dp: fix error check return value of irq_of_parse_and_map()
drm/msm/dp: stop event kernel thread when DP unbind
drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
perf tools: Add missing headers needed by util/data.h
ASoC: rk3328: fix disabling mclk on pclk probe failure
x86/speculation: Add missing prototype for unpriv_ebpf_notify()
mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()
mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()
x86/pm: Fix false positive kmemleak report in msr_build_context()
mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check()
libbpf: Fix logic for finding matching program for CO-RE relocation
selftests/resctrl: Fix null pointer dereference on open failed
drm/v3d: Fix null pointer dereference of pointer perfmon
scsi: ufs: core: Exclude UECxx from SFR dump list
scsi: ufs: qcom: Fix ufs_qcom_resume()
scsi: iscsi: Fix harmless double shift bug
drm/msm/dpu: adjust display_v_end for eDP and DP
drm/msm: properly add and remove internal bridges
selftests/damon: add damon to selftests root Makefile
of: overlay: do not break notify on NOTIFY_{OK|STOP}
spi: rockchip: fix missing error on unsupported SPI_CS_HIGH
spi: rockchip: Preset cs-high and clk polarity in setup progress
spi: rockchip: Stop spi slave dma receiver when cs inactive
fsnotify: fix wrong lockdep annotations
inotify: show inotify mask flags in proc fdinfo
mtdblock: warn if opened on NAND
ALSA: pcm: Check for null pointer of pointer substream before dereferencing it
drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01
media: hantro: Empty encoder capture buffers by default
media: i2c: max9286: fix kernel oops when removing module
media: i2c: max9286: Use "maxim,gpio-poc" property
ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
printk: wake waiters for safe and NMI contexts
printk: add missing memory barrier to wake_up_klogd()
printk: use atomic updates for klogd work
cpufreq: Fix possible race in cpufreq online error path
spi: img-spfi: Fix pm_runtime_get_sync() error checking
sched/psi: report zeroes for CPU full at the system level
sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
signal: Deliver SIGTRAP on perf event asynchronously if blocked
drm/mediatek: dpi: Use mt8183 output formats for mt8192
regulator: da9121: Fix uninit-value in da9121_assign_chip_model()
drm/bridge: Fix error handling in analogix_dp_probe
HID: elan: Fix potential double free in elan_input_configured
HID: hid-led: fix maximum brightness for Dream Cheeky
mtd: rawnand: denali: Use managed device resources
drm/bridge: anx7625: Use uint8 for lane-swing arrays
EDAC/dmc520: Don't print an error for each unconfigured interrupt line
drbd: fix duplicate array initializer
target: remove an incorrect unmap zeroes data deduction
device property: Allow error pointer to be passed to fwnode APIs
efi: Add missing prototype for efi_capsule_setup_info
efi: Allow to enable EFI runtime services by default on RT
NFC: NULL out the dev->rfkill to prevent UAF
ixp4xx_eth: fix error check return value of platform_get_irq()
net: dsa: mt7530: 1G can also support 1000BASE-X link mode
scftorture: Fix distribution of short handler delays
spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
drm: mali-dp: potential dereference of null pointer
drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
nl80211: show SSID for P2P_GO interfaces
mptcp: reset the packet scheduler on PRIO change
mptcp: reset the packet scheduler on incoming MP_PRIO
mptcp: optimize release_cb for the common case
x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation
libbpf: Don't error out on CO-RE relos for overriden weak subprogs
drm/vc4: txp: Force alpha to be 0xff if it's disabled
drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
drm/vc4: hvs: Reset muxes at probe time
drm/mediatek: Fix mtk_cec_mask()
drm/vc4: hvs: Fix frame count register readout
drm/vc4: kms: Take old state core clock rate into account
drm/mediatek: Fix DPI component detection for MT8192
drm/mediatek: Add vblank register/unregister callback functions
x86/delay: Fix the wrong asm constraint in delay_loop()
ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t
spi: qcom-qspi: Add minItems to interconnect-names
mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling
drm: bridge: icn6211: Fix register layout
drm/bridge: adv7511: clean up CEC adapter when probe fails
drm/edid: fix invalid EDID extension block filtering
ath9k: fix ar9003_get_eepmisc
drm: bridge: it66121: Fix the register page length
ath11k: acquire ab->base_lock in unassign when finding the peer by addr
drm/vmwgfx: Fix an invalid read
dt-bindings: display: sitronix, st7735r: Fix backlight in example
drm/omap: fix NULL but dereferenced coccicheck error
drm/bridge_connector: enable HPD by default if supported
drm: fix EDID struct for old ARM OABI format
Input: gpio-keys - cancel delayed work only in case of GPIO
cifs: do not use tcpStatus after negotiate completes
RDMA/hfi1: Prevent panic when SDMA is disabled
smb3: check for null tcon
fanotify: fix incorrect fmode_t casts
powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
powerpc/powernv: fix missing of_node_put in uv_init()
powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr
cifs: return ENOENT for DFS lookup_cache_entry()
tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
alpha: fix alloc_zeroed_user_highpage_movable()
KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting
PCI: cadence: Clear FLR in device capabilities register
PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
powerpc/rtas: Keep MSR[RI] set when calling RTAS
PCI: microchip: Add missing chained_irq_enter()/exit() calls
cpufreq: Avoid unnecessary frequency updates due to mismatch
ARM: hisi: Add missing of_node_put after of_find_compatible_node
arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth
ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
ARM: versatile: Add missing of_node_put in dcscb_init
pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()
fat: add ratelimit to fat*_ent_bread()
powerpc/fadump: Fix fadump to work with a different endian capture kernel
ARM: OMAP1: clock: Fix UART rate reporting algorithm
ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c
ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb
arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property
fs: jfs: fix possible NULL pointer dereference in dbFree()
soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
crypto: qat - fix off-by-one error in PFVF debug print
crypto: ccree - use fine grained DMA mapping dir
PM / devfreq: rk3399_dmc: Disable edev on remove()
arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count
arm64: dts: qcom: msm8994: Fix the cont_splash_mem address
ASoC: amd: Add driver data to acp6x machine driver
ARM: dts: s5pv210: align DMA channels with dtschema
ARM: dts: socfpga: align interrupt controller node name with dtschema
ARM: dts: ox820: align interrupt controller node name with dtschema
PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
IB/rdmavt: add missing locks in rvt_ruc_loopback
kunit: fix executor OOM error handling logic on non-UML
scsi: target: tcmu: Avoid holding XArray lock when calling lock_page
gfs2: use i_lock spin_lock for inode qadata
selftests/bpf: fix btf_dump/btf_dump due to recent clang change
char: tpm: cr50_i2c: Suppress duplicated error message in .remove()
eth: tg3: silence the GCC 12 array-bounds warning
afs: Adjust ACK interpretation to try and cope with NAT
rxrpc, afs: Fix selection of abort codes
rxrpc: Return an error to sendmsg if call failed
m68k: atari: Make Atari ROM port I/O write macros return void
selftests/bpf: Add missing trampoline program type to trampoline_count test
net: ipa: ignore endianness if there is no header
x86/microcode: Add explicit CPU vendor dependency
can: mcp251xfd: silence clang's -Wunaligned-access warning
nvme: set non-mdts limits in nvme_scan_work
ACPI: CPPC: Assume no transition latency if no PCCT
ASoC: rt1015p: remove dependency on GPIOLIB
ASoC: max98357a: remove dependency on GPIOLIB
blk-throttle: Set BIO_THROTTLED when bio has been throttled
of/fdt: Ignore disabled memory nodes
rtw89: cfo: check mac_id to avoid out-of-bounds
media: hantro: Stop using H.264 parameter pic_num
media: exynos4-is: Fix compile warning
net: phy: micrel: Allow probing without .driver_data
kunit: tool: make parser stop overwriting status of suites w/ no_tests
btrfs: fix anon_dev leak in create_subvol()
drm/amd/pm: update smartshift powerboost calc for smu13
drm/amd/pm: update smartshift powerboost calc for smu12
nbd: Fix hung on disconnect request if socket is closed before
ASoC: rt5645: Fix errorenous cleanup order
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
openrisc: start CPU timer early in boot
usbnet: Run unregister_netdev() before unbind() again
media: cec-adap.c: fix is_configuring state
media: imon: reorganize serialization
media: ccs-core.c: fix failure to call clk_disable_unprepare
media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values
media: coda: limit frame interval enumeration to supported encoder frame sizes
media: rga: fix possible memory leak in rga_probe
mt76: fix encap offload ethernet type check
mt76: mt7921: accept rx frames with non-standard VHT MCS10-11
rtlwifi: Use pr_warn instead of WARN_ONCE
kunit: bail out of test filtering logic quicker if OOM
ipmi: Fix pr_fmt to avoid compilation issues
ipmi: Add an intializer for ipmi_smi_msg struct
ipmi:ssif: Check for NULL msg when handling events and messages
ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
ASoC: SOF: amd: add missing platform_device_unregister in acp_pci_rn_probe
dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
spi: stm32-qspi: Fix wait_cmd timeout in APM mode
sched/core: Avoid obvious double update_rq_clock warning
perf/amd/ibs: Cascade pmu init functions' return value
s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES
net: remove two BUG() from skb_checksum_help()
scsi: lpfc: Alter FPIN stat accounting logic
scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW
net/mlx5: Increase FW pre-init timeout for health recovery
ASoC: tscs454: Add endianness flag in snd_soc_component_driver
of: Support more than one crash kernel regions for kexec -s
drm/tegra: gem: Do not try to dereference ERR_PTR()
HID: bigben: fix slab-out-of-bounds Write in bigben_probe
regulator: mt6315: Enforce regulator-compatible, not name
drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init
mlxsw: Treat LLDP packets as control
mlxsw: spectrum_dcb: Do not warn about priority changes
ASoC: dapm: Don't fold register value changes into notifications
net/mlx5: fs, delete the FTE when there are no rules attached to it
ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
scsi: target: tcmu: Fix possible data corruption
ath11k: fix warning of not found station for bssid in message
xtensa: move trace_hardirqs_off call back to entry.S
drm/msm/dpu: Clean up CRC debug logs
drm: msm: fix error check return value of irq_of_parse_and_map()
arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
ath10k: skip ath10k_halt during suspend for driver state RESTARTING
drm/amd/pm: fix the compile warning
drm/plane: Move range check for format_count earlier
ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408
ath11k: disable spectral scan during spectral deinit
scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync()
drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells
scsi: megaraid: Fix error check return value of register_chrdev()
drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit
mmc: jz4740: Apply DMA engine limits to maximum segment size
md/bitmap: don't set sb values if can't pass sanity check
media: cx25821: Fix the warning when removing the module
media: pci: cx23885: Fix the error handling in cx23885_initdev()
media: venus: do not queue internal buffers from previous sequence
media: venus: hfi: avoid null dereference in deinit
media: Revert "media: dw9768: activate runtime PM and turn off device"
ath9k: fix QCA9561 PA bias level
ASoC: rsnd: care return value from rsnd_node_fixed_index()
ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear()
drm/amd/pm: fix double free in si_parse_power_table()
cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode
scsi: lpfc: Fix call trace observed during I/O with CMF enabled
scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock
scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()
tcp: consume incoming skb leading to a reset
tools/power turbostat: fix ICX DRAM power numbers
spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction
rtw88: 8821c: fix debugfs rssi value
rtw88: fix incorrect frequency reported
ALSA: jack: Access input_dev under mutex
sfc: ef10: Fix assigning negative value to unsigned variable
rcu: Make TASKS_RUDE_RCU select IRQ_WORK
rcu-tasks: Handle sparse cpu_possible_mask in rcu_tasks_invoke_cbs()
rcu-tasks: Fix race in schedule and flush work
drm/amd/display: Disabling Z10 on DCN31
drm/komeda: return early if drm_universal_plane_init() fails.
mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output)
libbpf: Fix a bug with checking bpf_probe_read_kernel() support in old kernels
ACPICA: Avoid cache flush inside virtual machines
x86/platform/uv: Update TSC sync state for UV5
fbcon: Consistently protect deferred_takeover with console_lock()
ipv6: fix locking issues with loops over idev->addr_list
ipw2x00: Fix potential NULL dereference in libipw_xmit()
b43: Fix assigning negative value to unsigned variable
b43legacy: Fix assigning negative value to unsigned variable
mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
ath11k: Change max no of active probe SSID and BSSID to fw capability
selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync
selftests/bpf: Fix vfs_link kprobe definition
drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
drm/vmwgfx: validate the screen formats
iommu/vt-d: Add RPLS to quirk list to skip TE disabling
btrfs: zoned: fix comparison of alloc_offset vs meta_write_pointer
btrfs: zoned: finish block group when there are no more allocatable bytes left
btrfs: zoned: zone finish unused block group
btrfs: zoned: properly finish block group on metadata write
btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage()
btrfs: repair super block num_devices automatically
btrfs: return correct error number for __extent_writepage_io()
btrfs: add "0x" prefix for unsupported optional features
ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
kthread: Don't allocate kthread_struct for init and umh
x86/sgx: Set active memcg prior to shmem allocation
x86/kexec: fix memory leak of elf header buffer
perf/x86/intel: Fix event constraints for ICL
x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
platform/x86: intel-hid: fix _DSM function index handling
xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI
cifs: when extending a file with falloc we should make files not-sparse
cifs: fix potential double free during failed mount
cifs: fix ntlmssp on old servers
cifs: don't call cifs_dfs_query_info_nonascii_quirk() if nodfs was set
fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions
fs/ntfs3: Update i_ctime when xattr is added
fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if called from function ntfs_init_acl
fs/ntfs3: Check new size for limits
fs/ntfs3: Keep preallocated only if option prealloc enabled
fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space)
fs/ntfs3: Update valid size if -EIOCBQUEUED
usb: core: hcd: Add support for deferring roothub registration
usb: dwc3: gadget: Move null pinter check to proper place
usb: isp1760: Fix out-of-bounds array access
USB: new quirk for Dell Gen 2 devices
USB: serial: option: add Quectel BG95 modem
USB: serial: pl2303: fix type detection for odd device
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop
ALSA: hda/realtek - Add new type for ALC245
riscv: Move alternative length validation into subsection
riscv: Wire up memfd_secret in UAPI header
riscv: Fix irq_work when SMP is disabled
riscv: Initialize thread pointer before calling C functions
parisc/stifb: Keep track of hardware path of graphics card
parisc/stifb: Implement fb_is_primary_device()
binfmt_flat: do not stop relocating GOT entries prematurely on riscv

Paolo Pisati (p-pisati)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.