Bug #1959102 “Kernel fails to boot in ScalingStack” : Impish (21.10) : Bugs : linux-raspi package : Ubuntu

Juerg Haefliger (juergh) on 2022-01-26

summary:	- Fails to boot in ScalingStack + raspi kernel fails to boot in ScalingStack
summary:	- raspi kernel fails to boot in ScalingStack + Kernel fails to boot in ScalingStack
Changed in linux-raspi (Ubuntu Jammy):
assignee:	nobody → Juerg Haefliger (juergh)
Changed in linux-raspi (Ubuntu Impish):
assignee:	nobody → Juerg Haefliger (juergh)
Changed in linux-raspi (Ubuntu Focal):
assignee:	nobody → Juerg Haefliger (juergh)
no longer affects:	linux-raspi (Ubuntu Bionic)
no longer affects:	linux-raspi-5.4 (Ubuntu Focal)
no longer affects:	linux-raspi-5.4 (Ubuntu Impish)
no longer affects:	linux-raspi-5.4 (Ubuntu Jammy)
Changed in linux-raspi-5.4 (Ubuntu):
status:	New → Invalid
Changed in linux-raspi-5.4 (Ubuntu Bionic):
assignee:	nobody → Juerg Haefliger (juergh)

Juerg Haefliger (juergh) on 2022-01-27

tags:

added: kern-2070

Juerg Haefliger (juergh) on 2022-01-28

Changed in linux-raspi (Ubuntu Jammy):
status:	New → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-02-02:

#1

Download full text (44.5 KiB)

This bug was fixed in the package linux-raspi - 5.15.0-1002.2

---------------
linux-raspi (5.15.0-1002.2) jammy; urgency=medium

* jammy/linux-raspi: 5.15.0-1002.2 -proposed tracker (LP: #1958834)

  * Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * Kernel fails to boot in ScalingStack (LP: #1959102)
    - [Config] raspi: Set VIRTIO_PCI=m
    - [Config] raspi: Set ACPI=y

  * jammy/linux-raspi: Update to upstream raspberrypi rpi-5.15.y (2022-01-24)
    (LP: #1958854)
    - brcmfmac: firmware: Fix crash in brcm_alt_fw_path
    - ARM: dts: Remove VL805 USB node from CM4 dts
    - mfd: simple-mfd-i2c: Add configuration for RPi POE HAT
    - pwm: raspberrypi-poe: Add option of being created by MFD or FW
    - power: rpi-poe: Drop CURRENT_AVG as it is not hardware averaged
    - power: rpi-poe: Add option of being created by MFD or FW
    - defconfigs: Add MFD_RASPBERRYPI_POE_HAT to Pi defconfigs.
    - dtoverlays: Add option for PoE HAT to use Linux I2C instead of FW.
    - drivers: bcm2835_unicam: Disable trigger mode operation
    - arm: Remove spurious .fnend directive
    - drm/vc4: Fix deadlock on DSI device attach error
    - drm/vc4: dsi: Correct max divider to 255 (not 7)
    - defconfig: Add BACKLIGHT_PWM to bcm2709 and bcmrpi defconfigs
    - dtoverlays: Add pwm backlight option to vc4-kms-dpi-generic
    - dtoverlays: Correct [h|v]sync_invert config in vc4-kms-dpi-generic
    - ARM: dts: BCM2711 AON_INTR2 generates IRQ edges
    - update rpi-display-overlay.dts pins for 5.10+

[ Ubuntu: 5.15.0-18.18 ]

  * jammy/linux: 5.15.0-18.18 -proposed tracker (LP: #1958638)
  * CVE-2021-4155
    - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
  * CVE-2022-0185
    - SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
  * [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
    kernel part (LP: #1953334)
    - KVM: s390: add debug statement for diag 318 CPNC data
  * OOB write on BPF_RINGBUF (LP: #1956585)
    - SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other
      than 0
  * Miscellaneous Ubuntu changes
    - [Config] re-enable shiftfs
    - [SAUCE] shiftfs: support kernel 5.15
    - [Config] update toolchain versions
  * Miscellaneous upstream changes
    - vfs: fs_context: fix up param length parsing in legacy_parse_param

linux-raspi (5.15.0-1001.1) jammy; urgency=medium

* Missing overlays/README (LP: #1954757)
- SAUCE: Install overlays/README

* dtoverlay=uart4 breaks Raspberry Pi 4B boot (LP: #1875454)
- SAUCE: arm: dts: Add 'brcm,bcm2835-pl011' compatible for uart2-5

  * jammy/linux-raspi: Update to upstream raspberrypi rpi-5.15.y (2022-01-14)
    (LP: #1958146)
    - clk: bcm-2835: Pick the closest clock rate
    - clk: bcm-2835: Remove rounding up the dividers
    - drm/vc4: hdmi: Set a default HSM rate
    - drm/vc4: hdmi: Move the HSM clock enable to runtime_pm
    - drm/vc4: hdmi: Make sure the controller is powered in detect
    - drm/vc4: hdmi: Make sure the controller is powered up during bind
    - drm/vc4: hdmi: Rework the ...

This bug was fixed in the package linux-raspi - 5.15.0-1002.2

---------------
linux-raspi (5.15.0-1002.2) jammy; urgency=medium

* jammy/linux-raspi: 5.15.0-1002.2 -proposed tracker (LP: #1958834)

* Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md
    - debian/dkms-versions -- update from kernel-versions (main/master)

* Kernel fails to boot in ScalingStack (LP: #1959102)
    - [Config] raspi: Set VIRTIO_PCI=m
    - [Config] raspi: Set ACPI=y

* jammy/linux-raspi: Update to upstream raspberrypi rpi-5.15.y (2022-01-24)
    (LP: #1958854)
    - brcmfmac: firmware: Fix crash in brcm_alt_fw_path
    - ARM: dts: Remove VL805 USB node from CM4 dts
    - mfd: simple-mfd-i2c: Add configuration for RPi POE HAT
    - pwm: raspberrypi-poe: Add option of being created by MFD or FW
    - power: rpi-poe: Drop CURRENT_AVG as it is not hardware averaged
    - power: rpi-poe: Add option of being created by MFD or FW
    - defconfigs: Add MFD_RASPBERRYPI_POE_HAT to Pi defconfigs.
    - dtoverlays: Add option for PoE HAT to use Linux I2C instead of FW.
    - drivers: bcm2835_unicam: Disable trigger mode operation
    - arm: Remove spurious .fnend directive
    - drm/vc4: Fix deadlock on DSI device attach error
    - drm/vc4: dsi: Correct max divider to 255 (not 7)
    - defconfig: Add BACKLIGHT_PWM to bcm2709 and bcmrpi defconfigs
    - dtoverlays: Add pwm backlight option to vc4-kms-dpi-generic
    - dtoverlays: Correct [h|v]sync_invert config in vc4-kms-dpi-generic
    - ARM: dts: BCM2711 AON_INTR2 generates IRQ edges
    - update rpi-display-overlay.dts pins for 5.10+

[ Ubuntu: 5.15.0-18.18 ]

* jammy/linux: 5.15.0-18.18 -proposed tracker (LP: #1958638)
  * CVE-2021-4155
    - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate
  * CVE-2022-0185
    - SAUCE: vfs: test that one given mount param is not larger than PAGE_SIZE
  * [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
    kernel part (LP: #1953334)
    - KVM: s390: add debug statement for diag 318 CPNC data
  * OOB write on BPF_RINGBUF (LP: #1956585)
    - SAUCE: bpf: prevent helper argument PTR_TO_ALLOC_MEM to have offset other
      than 0
  * Miscellaneous Ubuntu changes
    - [Config] re-enable shiftfs
    - [SAUCE] shiftfs: support kernel 5.15
    - [Config] update toolchain versions
  * Miscellaneous upstream changes
    - vfs: fs_context: fix up param length parsing in legacy_parse_param

linux-raspi (5.15.0-1001.1) jammy; urgency=medium

* Missing overlays/README (LP: #1954757)
    - SAUCE: Install overlays/README

* dtoverlay=uart4 breaks Raspberry Pi 4B boot (LP: #1875454)
    - SAUCE: arm: dts: Add 'brcm,bcm2835-pl011' compatible for uart2-5

* jammy/linux-raspi: Update to upstream raspberrypi rpi-5.15.y (2022-01-14)
    (LP: #1958146)
    - clk: bcm-2835: Pick the closest clock rate
    - clk: bcm-2835: Remove rounding up the dividers
    - drm/vc4: hdmi: Set a default HSM rate
    - drm/vc4: hdmi: Move the HSM clock enable to runtime_pm
    - drm/vc4: hdmi: Make sure the controller is powered in detect
    - drm/vc4: hdmi: Make sure the controller is powered up during bind
    - drm/vc4: hdmi: Rework the pre_crtc_configure error handling
    - drm/vc4: hdmi: Split the CEC disable / enable functions in two
    - drm/vc4: hdmi: Make sure the device is powered with CEC
    - drm/vc4: hdmi: Warn if we access the controller while disabled
    - drm/vc4: crtc: Make sure the HDMI controller is powered when disabling
    - drm/vc4: crtc: Drop feed_txp from state
    - drm/vc4: Fix non-blocking commit getting stuck forever
    - drm/vc4: crtc: Copy assigned channel to the CRTC
    - drm/vc4: hdmi: Add a spinlock to protect register access
    - drm/vc4: hdmi: Use a mutex to prevent concurrent framework access
    - drm/vc4: hdmi: Prevent access to crtc->state outside of KMS
    - drm/vc4: hdmi: Check the device state in prepare()
    - drm/vc4: hdmi: Introduce an output_enabled flag
    - drm/vc4: hdmi: Introduce a scdc_enabled flag
    - drm/vc4: hdmi: Remove the DDC probing for status detection
    - drm/vc4: hdmi: Fix HPD GPIO detection
    - drm/vc4: Make vc4_crtc_get_encoder public
    - drm/vc4: crtc: Add encoder to vc4_crtc_config_pv prototype
    - drm/vc4: crtc: Rework the encoder retrieval code (again)
    - drm/vc4: crtc: Add some logging
    - drm/vc4: Leverage the load tracker on the BCM2711
    - drm/vc4: hdmi: Raise the maximum clock rate
    - drm/vc4: hdmi: Enable the scrambler on reconnection
    - drm/vc4: Increase the core clock based on HVS load
    - drm/vc4: select PM
    - drm/probe-helper: Create a HPD IRQ event helper for a single connector
    - drm/vc4: hdmi: Actually check for the connector status in hotplug
    - firmware: raspberrypi: Add RPI_FIRMWARE_NOTIFY_DISPLAY_DONE
    - drm/vc4: Remove conflicting framebuffers before callind bind_all
    - drm/vc4: Notify the firmware when DRM is in charge
    - arm: partially revert 702b94bff3c50542a6e4ab9a4f4cef093262fe65
    - Revert "rtc: pcf8523: properly handle oscillator stop bit"
    - Revert "staging: bcm2835-audio: Drop DT dependency"
    - Revert "spi: spidev: Fix CS polarity if GPIO descriptors are used"
    - Revert "mailbox: avoid timer start from callback"
    - Revert "Bluetooth: Always request for user confirmation for Just Works (LE
      SC)"
    - Revert "Bluetooth: Always request for user confirmation for Just Works"
    - smsx95xx: fix crimes against truesize
    - smsc95xx: Experimental: Enable turbo_mode and packetsize=2560 by default
    - Allow mac address to be set in smsc95xx
    - cgroup: Disable cgroup "memory" by default
    - Protect __release_resource against resources without parents
    - irq-bcm2836: Avoid "Invalid trigger warning"
    - irqchip: bcm2835: Add FIQ support
    - irqchip: irq-bcm2835: Add 2836 FIQ support
    - spi: spidev: Completely disable the spidev warning
    - dmaengine: bcm2835: Load driver early and support legacy API
    - rtc: Add SPI alias for pcf2123 driver
    - watchdog: bcm2835: Support setting reboot partition
    - reboot: Use power off rather than busy spinning when halt is requested
    - bcm: Make RASPBERRYPI_POWER depend on PM
    - Register the clocks early during the boot process, so that special/critical
      clocks can get enabled early on in the boot process avoiding the risk of
      disabling a clock, pll_divider or pll when a claiming driver fails to
      install propperly - maybe it needs to defer.
    - bcm2835-rng: Avoid initialising if already enabled
    - clk-bcm2835: Mark used PLLs and dividers CRITICAL
    - clk-bcm2835: Add claim-clocks property
    - clk-bcm2835: Read max core clock from firmware
    - sound: Demote deferral errors to INFO level
    - Update vfpmodule.c
    - i2c: bcm2835: Add debug support
    - irqchip: irq-bcm2836: Remove regmap and syscon use
    - lan78xx: Enable LEDs and auto-negotiation
    - amba_pl011: Don't use DT aliases for numbering
    - amba_pl011: Round input clock up
    - amba_pl011: Insert mb() for correct FIFO handling
    - amba_pl011: Add cts-event-workaround DT property
    - tty: amba-pl011: Add un/throttle support
    - tty: amba-pl011: Avoid rare write-when-full error
    - pinctrl-bcm2835: Set base to 0 give expected gpio numbering
    - Main bcm2708/bcm2709 linux port
    - Add dwc_otg driver
    - bcm2708 framebuffer driver
    - Pulled in the multi frame buffer support from the Pi3 repo
    - fbdev: add FBIOCOPYAREA ioctl
    - Speed up console framebuffer imageblit function
    - dmaengine: Add support for BCM2708
    - MMC: added alternative MMC driver
    - Adding bcm2835-sdhost driver, and an overlay to enable it
    - vc_mem: Add vc_mem driver for querying firmware memory addresses
    - Add /dev/gpiomem device for rootless user GPIO access
    - Add SMI driver
    - Add Chris Boot's i2c driver
    - char: broadcom: Add vcio module
    - firmware: bcm2835: Support ARCH_BCM270x
    - BCM2708: Add core Device Tree support
    - leds: Add the "input" trigger, for pwr_led
    - Added Device IDs for August DVB-T 205
    - Improve __copy_to_user and __copy_from_user performance
    - gpio-poweroff: Allow it to work on Raspberry Pi
    - mfd: Add Raspberry Pi Sense HAT core driver
    - Add support for all the downstream rpi sound card drivers
    - rpi_display: add backlight driver and overlay
    - bcm2835-virtgpio: Virtual GPIO driver
    - OF: DT-Overlay configfs interface
    - brcm: adds support for BCM43341 wifi
    - hci_h5: Don't send conf_req when ACTIVE
    - config: Add default configs
    - ARM64: Round-Robin dispatch IRQs between CPUs.
    - ARM64: Force hardware emulation of deprecated instructions.
    - cache: export clean and invalidate
    - AXI performance monitor driver (#2222)
    - ARM: bcm2835: Set Serial number and Revision
    - dwc-otg: FIQ: Fix "bad mode in data abort handler"
    - ARM: Activate FIQs to avoid __irq_startup warnings
    - i2c-gpio: Also set bus numbers from reg property
    - added capture_clear option to pps-gpio via dtoverlay (#2433)
    - lan78xx: Read initial EEE status from DT
    - hid: Reduce default mouse polling interval to 60Hz
    - Add ability to export gpio used by gpio-poweroff
    - firmware/raspberrypi: Notify firmware of a reboot
    - irqchip: irq-bcm2835: Calc. FIQ_START at boot-time
    - of: configfs: Use of_overlay_fdt_apply API call
    - net: lan78xx: Disable TCP Segmentation Offload (TSO)
    - brcmfmac: Re-enable firmware roaming support
    - lan78xx: Move enabling of EEE into PHY init code
    - cxd2880: CXD2880_SPI_DRV should select DVB_CXD2880 with
      MEDIA_SUBDRV_AUTOSELECT
    - firmware: raspberrypi: Add backward compatible get_throttled
    - sc16is7xx: Don't spin if no data received
    - drivers: thermal: step_wise: add support for hysteresis
    - drivers: thermal: step_wise: avoid throttling at hysteresis temperature
      after dropping below it
    - Update issue templates (#2736)
    - net: lan78xx: Support auto-downshift to 100Mb/s
    - firmware: raspberrypi: Report the fw variant during probe
    - lan78xx: Debounce link events to minimize poll storm
    - lan78xx: EEE support is now a PHY property
    - bcm2835-dma: Add support for per-channel flags
    - rtc: rv3028: Add backup switchover mode support
    - lan78xx: use default alignment for rx buffers
    - media: tc358743: Increase FIFO level to 374.
    - media: tc358743: fix connected/active CSI-2 lane reporting
    - media: tc358743: Add support for 972Mbit/s link freq.
    - media: tc358743: Check I2C succeeded during probe.
    - media: adv7180: Default to the first valid input
    - media: adv7180: Add YPrPb support for ADV7282M
    - media: videodev2: Add helper defines for printing FOURCCs
    - dt-bindings: Document BCM283x CSI2/CCP2 receiver
    - MAINTAINERS: Add entry for BCM2835 Unicam driver
    - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    - staging: mmal-vchiq: Avoid use of bool in structures
    - staging: mmal-vchiq: Add support for event callbacks.
    - staging: vc04_services: Support sending data to MMAL ports
    - media: videobuf2: Allow exporting of a struct dmabuf
    - staging: mmal-vchiq: Fix client_component for 64 bit kernel
    - clk: clk-bcm2835: Use %zd when printing size_t
    - staging: mmal_vchiq: Add in the Bayer encoding formats
    - staging: mmal-vchiq: Update mmal_parameters.h with recently defined params
    - staging: mmal-vchiq: Free the event context for control ports
    - staging: mmal-vchiq: Fix memory leak in error path
    - w1: w1-gpio: Make GPIO an output for strong pullup
    - arm: bcm2835: Fix FIQ early ioremap
    - arm: bcm2835: DMA can only address 1GB
    - hwrng: iproc-rng200: Add BCM2838 support
    - bcmgenet: constrain max DMA burst length
    - bcmgenet: Better coalescing parameter defaults
    - net: genet: enable link energy detect powerdown for external PHYs
    - spi: bcm2835: enable shared interrupt support
    - clk-bcm2835: Don't wait for pllh lock
    - soc: bcm: bcm2835-pm: Add support for 2711.
    - clk: bcm2835: Add support for setting leaf clock rates while running.
    - clk: bcm2835: Allow reparenting leaf clocks while they're running.
    - usb: add plumbing for updating interrupt endpoint interval state
    - xhci: implement xhci_fixup_endpoint for interval adjustments
    - usbhid: call usb_fixup_endpoint after mangling intervals
    - arm: bcm2835: Add bcm2838 compatible string.
    - drm/v3d: Add support for 2711.
    - drm/v3d: Skip MMU flush if the device is currently off.
    - drm/v3d: Hook up the runtime PM ops.
    - i2c: bcm2835: Set clock-stretch timeout to 35ms
    - clk-bcm2835: Avoid null pointer exception
    - drm/v3d: HACK: gut runtime pm for now.
    - drm/v3d: Clock V3D down when not in use.
    - drivers: char: add chardev for mmap'ing the RPiVid control registers
    - hid: usb: Add device quirks for Freeway Airmouse T3 and MX3
    - Add HDMI1 facility to the driver.
    - net: bcmgenet: Workaround #2 for Pi4 Ethernet fail
    - xhci: Use more event ring segment table entries
    - configs: arm64/bcm2711: Enable V3D
    - arch/arm: Add model string to cpuinfo
    - arch/arm64: Add Revision, Serial, Model to cpuinfo
    - media: dt-bindings: Add binding for the Sony IMX219 sensor
    - v4l2: Add a Greyworld AWB mode.
    - staging: bcm2835-camera: Add greyworld AWB mode
    - drm/v3d: Delete pm_runtime support
    - ARM: bcm: Switch board, clk and pinctrl to bcm2711 compatible
    - Rename HDMI ALSA device names, check for enable state
    - dt-bindings: Add binding for the Infineon IRS1125 sensor
    - media: i2c: Add a driver for the Infineon IRS1125 depth sensor
    - drm/v3d: Suppress all but the first MMU error
    - drm/v3d: Plug dma_fence leak
    - staging: vchiq_arm: Register vcsm-cma as a platform driver
    - staging: vchiq_arm: Register bcm2835-codec as a platform driver
    - net:phy:2711 Allow ethernet LED mode to be set via device tree
    - v3d_drv: Handle missing clock more gracefully
    - v3d_gem: Kick the clock so firmware knows we are using firmware clock
      interface
    - clk-raspberrypi: Allow cpufreq driver to also adjust gpu clocks
    - clk-bcm2835: Disable v3d clock
    - staging: vchiq_arm: Set up dma ranges on child devices
    - staging: vchiq: Use the old dma controller for OF config on platform devices
    - ARM: bcm: Backport BCM2711 support from upstream
    - Initialise rpi-firmware before clk-bcm2835
    - staging: vchiq_arm: Give vchiq children DT nodes
    - pinctrl: bcm2835: Remove gpiochip on error
    - drivers: char: vcio: Use common compat header
    - video: fbdev: bcm2708_fb: Use common compat header
    - of: overlay: Correct symbol path fixups
    - dt-bindings: pci: Add DT docs for Brcmstb PCIe device
    - bcmgenet: Disable skip_umac_reset by default
    - drm/fourcc: Add packed 10bit YUV 4:2:0 format
    - media: uapi: hevc: Add scaling matrix control
    - media: uapi: hevc: Add segment address field
    - media: videodev2.h: Add a format for column YUV4:2:0 modes
    - media: dt-bindings: media: Add binding for the Raspberry PI HEVC decoder
    - staging: media: Add Raspberry Pi V4L2 H265 decoder
    - dt-bindings: clock: Add a binding for the RPi Firmware clocks
    - dt-bindings: display: vc4: hdmi: Add BCM2711 HDMI controllers bindings
    - drm: Checking of the pitch is only valid for linear formats
    - driver: char: rpivid: Remove legacy name support
    - spi: Force CS_HIGH if GPIO descriptors are used
    - driver: char: rpivid: Don't map more than wanted
    - media: bcm2835-unicam: Driver for CCP2/CSI2 camera interface
    - media: uapi: v4l2-core: Add sensor ancillary data V4L2 foucc type.
    - media: uapi: Add MEDIA_BUS_FMT_SENSOR_DATA media bus format
    - media: bcm2835-unicam: Add support for mulitple device nodes.
    - media: bcm2835-unicam: Add embedded data node.
    - media: bcm2835-unicam: Use dummy buffer if none have been queued
    - media: bcm2835-unicam: Disable event-related ioctls on metadata node
    - media: bcm2835-unicam: Add support for the FRAME_SYNC event
    - media: bcm2835-unicam: Re-fetch mbus code from subdev on a g_fmt call
    - media: uapi: v4l2-core: Add ISP statistics output V4L2 fourcc type
    - media: uapi: v4l-ctrls: Add CID base for the bcm2835-isp driver
    - staging: vchiq: Load bcm2835_isp driver from vchiq
    - bcm2835-dma: Add proper 40-bit DMA support
    - media: bcm2835-unicam: Add support for VIDIOC_[S|G]_SELECTION
    - media: bcm2835-unicam: Do not stop streaming in unicam_release
    - media: bcm2835-unicam: Fix reference counting in unicam_open
    - media: i2c: tc358743: Fix fallthrough warning
    - media: bcm2835: unicam: Fix uninitialized warning
    - video: bcm2708_fb: Disable FB if no displays found
    - dt-bindings: media: i2c: Add IMX477 CMOS sensor binding
    - media: bcm2835-unicam: Always service interrupts
    - sc16is7xx: Fix for hardware flow control
    - staging: vc04_services: mmal-vchiq: Update parameters list
    - staging:vc04_services: bcm2835-camera: Request headers with I-frame
    - media: bcm2835-unicam: Retain packing information on G_FMT
    - zswap: Defer zswap initialisation
    - media: bcm2835-unicam: change minimum number of vb2_queue buffers to 1
    - snd_bcm2835: disable HDMI audio when vc4 is used (#3640)
    - gpiolib: Don't prevent IRQ usage of output GPIOs
    - PCI: brcmstb: Add DT property to control L1SS
    - media: irs1125: Using i2c_transfer for ic2 reads
    - media: irs1125: Refactoring and debug messages
    - media: irs1125: Atomic access to imager reconfiguration
    - media: irs1125: Keep HW in sync after imager reset
    - staging: bcm2835-audio: Add missing MODULE_ALIAS
    - brcmfmac: Prefer a ccode from OTP over nvram file
    - drivers: media: Remove the downstream version of bcm2835-unicam
    - media: bcm2835-unicam: Driver for CCP2/CSI2 camera interface
    - media: bcm2835-unicam: Add support for get_mbus_config to set num lanes
    - media: bcm2835-unicam: Avoid gcc warning over {0} on endpoint
    - media: i2c: imx290: set the format before VIDIOC_SUBDEV_G_FMT is called
    - media: i2c: imx290: Add support for 74.25MHz clock
    - media: i2c: imx290: Correct range for V4L2_CID_GAIN to 0-238
    - media: i2c: imx290: Convert HMAX setting into V4L2_CID_HBLANK
    - media: i2c: imx290: Add support for V4L2_CID_VBLANK
    - media: i2c: imx290: Add exposure control to the driver.
    - media: i2c: imx290: Add H and V flip controls
    - media: dt-bindings: media: i2c: Add mono version to IMX290 bindings
    - media : i2c: imx290: Add support for the mono sensor variant.
    - media: i2c: imx290: Switch set_hmax to use imx290_write_buffered_reg
    - serial: 8250: bcm2835aux - defer if clock is zero
    - media: Add a pixel format for MIPI packed 12bit luma only.
    - media: Add a pixel format for MIPI packed 14bit luma only.
    - media: bcm2835-unicam: Add support for 12bit mono packed format
    - media: bcm2835-unicam: Add support for 14bit mono sources
    - media: bcm2835-unicam: Add support for unpacked 14bit Bayer formats
    - bcm2835-dma: Add NO_WAIT_RESP flag
    - media: i2c: imx290: Explicitly set v&h blank on mode change
    - media: i2c: imx290: Add support for g_selection to report cropping
    - media: i2c: imx290: Set the colorspace fields in the format
    - media: bcm2835-unicam: Reinstate V4L2_CAP_READWRITE in the caps
    - media: bcm2835-unicam: Ensure type is VIDEO_CAPTURE in [g|s]_selection
    - media: bcm2835: unicam: Set VPU min clock freq to 250Mhz.
    - dt-bindings: bcm2835-unicam: Update documentation with new clock params
    - leds: Add the actpwr trigger
    - bcm2835-dma: Advertise the full DMA range
    - media: bcm2835: unicam: Select MEDIA_CONTROLLER and VIDEO_V4L2_SUBDEV_API
    - staging: media: rpivid: Select MEDIA_CONTROLLER and
      MEDIA_CONTROLLER_REQUEST_API
    - media: bcm2835-unicam: Drop WARN on uing direct cache alias
    - media: i2c: tc358743: Only allow supported pixel fmts in set_fmt
    - dwc_otg: whitelist_table is now productlist_table
    - include/firmware: Add enum for RPI_FIRMWARE_FRAMEBUFFER_GET_DISPLAY_ID
    - media: i2c: Add driver for Sony IMX477 sensor
    - media: i2c: imx477: Add support for adaptive frame control
    - media: i2c: imx477: Return correct result on sensor id verification
    - media: i2c: imx477: Parse and register properties
    - media: bcm2835-unicam: Always service interrupts
    - media: bcm2835: unicam: Fix uninitialized warning
    - media: bcm2835-unicam: Fixup review comments from Hans.
    - media: bcm2835-unicam: Retain packing information on G_FMT
    - media: bcm2835-unicam: change minimum number of vb2_queue buffers to 1
    - staging/fbtft: Add support for display variants
    - brcmfmac: Increase power saving delay to 2s
    - rpivid_h265: Fix width/height typo
    - net: bcmgenet: Reset RBUF on first open
    - char: Add broadcom char drivers back to build files
    - dwc_otg: initialise sched_frame for periodic QHs that were parked
    - staging: bcm2835-camera: Replace deprecated V4L2_PIX_FMT_BGR32
    - staging: vc04_services: Add new vc-sm-cma driver
    - staging: vchiq-mmal: Add support for 14bit Bayer
    - staging: mmal-vchiq: Add monochrome image formats
    - staging: mmal-vchiq: Use vc-sm-cma to support zero copy
    - staging: vc04_services: Add a V4L2 M2M codec driver
    - bcm2835-dma: only reserve channel 0 if legacy dma driver is enabled
    - uapi: bcm2835-isp: Add bcm2835-isp uapi header file
    - staging: vc04_services: ISP: Add a more complex ISP processing component
    - gpio: Add gpio-fsm driver
    - staging: bcm2835-audio: Add disable-headphones flag
    - rpisense-fb: Set pseudo_pallete to prevent crash on fbcon takeover
    - dwc_otg: Minimise header and fix build warnings
    - rpivid_h625: Fix build warnings
    - bcm2708_fb: Fix a build warning
    - watchdog: bcm2835: Ignore params after the partition number
    - firmware: raspberrypi: Add support for tryonce reboot flag
    - phy: broadcom: split out the BCM54213PE from the BCM54210E IDs
    - phy: broadcom: Add bcm54213pe configuration
    - PCI: brcmstb: Restore initial fundamental reset
    - Input: edt-ft5x06: Poll the device if no interrupt is configured.
    - drm/panel/raspberrypi-touchscreen: Use independent I2C actions with delay.
    - drm/panel/raspberrypi-ts: Insert delay before polling for startup state
    - dt-bindings: Add compatible for BCM2711 DSI1
    - media: bcm2835-unicam: Correctly handle error propagation for stream on
    - media: bcm2835-unicam: Return early from stop_streaming() if stopped
    - media: bcm2835-unicam: Clear clock state when stopping streaming
    - PCI: brcmstb: Advertise MSI-X support
    - net: lan78xx: Ack pending PHY ints when resetting
    - media: i2c: imx477: Selection compliance fixes
    - vc-sm-cma: fixed kbuild problem
    - staging/vc04_services: Add additional unpacked raw formats
    - staging/bcm2835-codec: Add the unpacked (16bpp) raw formats
    - staging/bcm2835-codec: Log the number of excess supported formats
    - staging/bcm2835-isp: Add the unpacked (16bpp) raw formats
    - staging/bcm2835-isp: Log the number of excess supported formats
    - bcm2835-dma: Avoid losing CS flags after interrupt
    - arch/arm: Add __memset alias to memset_rpi.S
    - bcm2835-dma: Add bcm2835-dma: Add DMA_WIDE_SOURCE and DMA_WIDE_DEST flags
    - uapi: bcm2835-isp: Add colour denoise configuration
    - staging: vc04_services: ISP: Add colour denoise control
    - spi: bcm2835: Workaround/fix for zero-length transfers
    - kbuild: Silence unavoidable dtc overlay warnings
    - media: i2c: imx290: Replace V4L2_CID_GAIN with V4L2_CID_ANALOGUE_GAIN
    - media: i2c: imx290: Fix number of controls in v4l2_ctrl_handler_init
    - dt-binding: display: bcm2711-hdmi: Add CEC and hotplug interrupts
    - staging:bcm2835-camera: Fix the cherry-pick of AWB Greyworld
    - bcm2835-isp: Allow formats with different colour spaces.
    - staging: rpivid: Fix crash when CMA alloc fails
    - media: i2c: imx477: Remove auto frame length adjusting
    - media: i2c: imx477: Add very long exposure control to the driver
    - media: i2c: imx290: Fix up exposure calcuations and ranges
    - media: i2c: imx290: Handle exposure correctly when vblank changes
    - media: i2c: imx477: Fix crop height for 2028x1080 mode
    - media: i2c: imx477: Replace existing 1012x760 mode
    - media: i2c: imx477: Remove internal v4l2_mbus_framefmt from the state
    - media: i2c: imx477: Remove unused function parameter
    - media: bcm2835-unicam: Fix bug in buffer swapping logic
    - Assign crypto aliases to different AES implementation modules
    - media/v4l2_m2m: In buffered mode run jobs if either port is streaming
    - staging/bcm2835-codec: Correct logging of size_t to %zu
    - staging/bcm2835-codec: Add support for pixel aspect ratio
    - staging/bcm2835-codec: Implement additional g_selection calls for decode
    - staging/bcm2835-codec: Add VC-1 support.
    - hack: fixup bcm2835-unicam
    - media: i2c: add ov9281 driver.
    - media: i2c: ov9281: fix mclk issue when probe multiple camera.
    - media: i2c: ov9281: add enum_frame_interval function for iq tool 2.2 and
      hal3
    - media: i2c: ov9281: Fixup for recent kernel releases, and remove custom code
    - media: i2c: ov9281: Read chip ID via 2 reads
    - media: i2c: ov9281: Add support for 8 bit readout
    - media: ov9281: Add 1280x720 and 640x480 modes
    - Fixed picture line bug in all ov9281 modes
    - Added hflip and vflip controls to ov9281
    - media: ov5647: Fix return codes from ov5647_write/ov5647_read functions.
    - media: i2c: ov5647: Parse and register properties
    - clk-raspberrypi: Also support HEVC clock
    - rpivid: Request maximum hevc clock
    - staging/bcm2835-camera: Add support for DMABUFs
    - staging: fbtft: Add minipitft13 variant
    - dwc-otg: fix clang -Wignored-attributes warning
    - dwc-otg: fix clang -Wsometimes-uninitialized warning
    - dwc-otg: fix clang -Wpointer-bool-conversion warning
    - staging: vcsm-cma: Fix memory leak from not detaching dmabuf
    - clk: Introduce a clock request API
    - bcm2835-unicam: Switch to new clock api
    - rpivid: Switch to new clock api
    - rpivid: Only clk_request_done once
    - dwc_otg: fix an undeclared variable
    - drm/panel: jdi-lt070me05000: Use gpiod_set_value_cansleep
    - clk: requests: Ignore if the pointer is null
    - clk: requests: Dereference the request pointer after the check
    - staging/bcm2835-codec: Fix support for levels 4.1 and 4.2
    - staging/bcm2835-codec: Set the colourspace appropriately for RGB formats
    - staging/bcm2835-codec: Pass corrupt frame flag.
    - staging/bcm2835-camera: Add support for H264 levels 4.1 and 4.2
    - staging/bcm2835-codec: Do not update crop from S_FMT after res change
    - staging/bcm2835-isp: Fix compiler warning
    - gpio-poweroff: Remember the old poweroff handler
    - media: i2c: ov5647: Correct pixel array offset
    - media: i2c: ov5647: Correct minimum VBLANK value
    - media: i2c: ov5647: Fix v4l2-compliance failure subscribing to events
    - media: rpivid: Remove the need to have num_entry_points set
    - media: rpivid: Convert to MPLANE
    - media: rpivid: Add an enable count to irq claim Qs
    - RFC: media: Add media_request_{pin,unpin} API
    - media: rpivid: Add a Pass0 to accumulate slices and rework job finish
    - media: rpivid: Map cmd buffer directly
    - media: rpivid: Improve values returned when setting output format
    - media: rpivid: Improve stream_on/off conformance & clock setup
    - media: rpivid: Improve SPS/PPS error handling/validation
    - bcm2835: Allow compressed frames to set sizeimage (#4386)
    - media: i2c: imx477: Fix for long exposure limit calculations
    - clk: bcm2835: Pass DT node to rpi_firmware_get
    - bcm2835-pcm.c: Support multichannel audio
    - bcm2835-pcm: Fix up multichannel pcm audio
    - media: i2c: imx290: Support 60fps in 2 lane operation
    - media: i2c: imx290: Fix the pixel rate at 148.5Mpix/s
    - media: i2c: imx290: Fix clock setup register assignments
    - media: rpivid: Fix H265 aux ent reuse of the same slot
    - media: i2c: ov9281: Remove override of subdev name
    - staging: vc04_services: isp: Set the YUV420/YVU420 format stride to 64 bytes
    - Documentation: devicetree: Add documentation for imx378 sensor
    - media: i2c: imx477: Extend driver to support imx378 sensor
    - dt-bindings: clk: raspberrypi: Remove unused property
    - dt-bindings: display: vc4: Add phandle to the firmware
    - bcm2711_thermal: Don't clamp temperature at zero
    - media: bcm2835-unicam: Forward input status from subdevice
    - media: v4l2-subdev: add subdev-wide state struct
    - drm/vc4: Adopt the dma configuration from the HVS or V3D component
    - Support RPi DPI interface in mode6 for 18-bit color
    - drm/vc4: Add support for DRM_FORMAT_P030 to vc4 planes
    - drm/vc4: Add support for YUV color encodings and ranges
    - drm/vc4: Add FKMS as an acceptable node for dma ranges.
    - drm/vc4: A present but empty dmas disables audio
    - drm/vc4: Add debugfs node that dumps the current display lists
    - drm/vc4: Add all the HDMI registers into the debugfs dumps
    - drm/vc4: Add the 2711 HVS as a suitable DMA node
    - vc4_hdmi: Report that 3d/stereo is allowed
    - vc4: Clear unused infoframe packet RAM registers
    - drm/vc4: Change the default DPI format to being 18bpp, not 24.
    - vc4/drm: Avoid full hdmi audio fifo writes
    - vc4/drm: Fix source offsets with DRM_FORMAT_P030
    - vc4/drm: vc4_plane: Remove subpixel positioning check
    - vc4/kms: vc4_plane: Support 2020 colourspace for yuv planes
    - drm/vc4: hdmi: Convert to the new clock request API
    - drm/vc4: Correct pixel order for DSI0
    - drm/vc4: Register dsi0 as the correct vc4 encoder type
    - drm/vc4: Fix dsi0 interrupt support.
    - drm/vc4: Add correct stop condition to vc4_dsi_encoder_disable iteration
    - drm/atomic: Don't fixup modes that haven't been reset
    - drm/vc4: Allow DBLCLK modes even if horz timing is odd.
    - clk: Always clamp the rounded rate
    - drm/vc4: Increase the core clock based on HVS load
    - drm/vc4: hdmi: Simplify the connector state retrieval
    - drm/vc4: Fix timings for interlaced modes
    - dwc_otg: Update NetBSD usb.h header licence
    - drm/vc4: Fix margin calculations for the right/bottom edges
    - drm/vc4: Fix timings for VEC modes
    - drm/vc4: Refactor VEC TV mode setting
    - drm/vc4: Fix definition of PAL-M mode
    - drm/vc4: Add support for more analog TV standards
    - drm/vc4: Allow setting the TV norm via module parameter
    - drm/vc4: Refactor mode checking logic
    - drm/vc4: Add firmware-kms mode
    - media: i2c: imx477: Fix framerates for 1332x990 mode
    - SQUASH: fbmem: Use fallthrough keyword
    - ASoC: bcm: Compiler warnings in audioinjector-octo
    - media: i2c: tc358743: Fix compiler warning
    - ASoC: bcm: Add chipdip-dac driver
    - drm/vc4: hdmi: Unregister codec device on unbind
    - media: i2c: imx290: Add fwnode properties controls
    - media: i2c: ov9281: Add fwnode properties controls
    - media: i2c: ov7251: Add fwnode properties controls
    - media: v4l2: Remove v4l2-ctrls.c
    - media: v4l2: Add HEVC_SCALING_MATRIX attribute to v4l2-ctrl-*
    - media: rpivid: Update to compile with new hevc decode params
    - media: v4l2: Add Greyworld AWB control name
    - videodev2.h: add V4L2_CTRL_FLAG_DYNAMIC_ARRAY
    - v4l2-ctrls: add support for dynamically allocated arrays.
    - media: rpivid: Make slice ctrl dynamic
    - media: rpivid: Only create aux entries for H265 if needed
    - usb: xhci: workaround for bogus SET_DEQ_PENDING endpoint state
    - media: i2c: imx477: Allow control of on-sensor DPC
    - sound/usb: add device quirks for A4Tech FHD 1080p webcams
    - sound/usb: call usb_autopm_get_interface() for devices that should not
    - brcmfmac: Try product-specific clm_blob names first
    - staging: vchiq_arm: Add 36-bit address support
    - staging: vchiq_arm: children inherit DMA config
    - staging: vchiq_arm: Usa a DMA pool for small bulks
    - drm/vc4: Reset HDMI MISC_CONTROL register.
    - drm/vc4: Release workaround buffer and DMA in error paths and unbind
    - drm/vc4: Correct DSI divider calculations
    - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
    - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
    - drm/panel/raspberrypi-touchscreen: Handle I2C errors.
    - drm/panel-simple: Add a timing for the Raspberry Pi 7" panel
    - Input: edt-ft54x6: Clean up timer and workqueue on remove
    - regulator: rpi-panel: Register with a unique backlight name
    - regulator: rpi-panel: Handle I2C errors/timing to the Atmel
    - regulator: rpi-panel: Serialise operations.
    - regulator: rpi-panel: Ensure the backlight is off during probe.
    - regulator: rpi-panel: Convert to drive lines directly
    - regulator: rpi-panel: Add GPIO control for panel and touch resets
    - staging/bcm2835-codec: Change the default codec res to 32x32
    - staging/vchiq-mmal: Add buffer flags for interlaced video
    - staging/vchiq-mmal: Add parameters for interlaced video support
    - staging/bcm2835-codec: Add support for decoding interlaced streams
    - staging/bcm2835-codec: Correct ENUM_FRAMESIZES stepsize to 2
    - staging/bcm2835-codec: Return buffers to QUEUED not ERROR state
    - staging/bcm2835_codec: Log MMAL flags in hex
    - staging: bcm2835-codec: Allow custom specified strides/bytesperline.
    - staging/vchiq-mmal: Add the deinterlace image effects enums
    - staging/bcm2835_codec: Add support for image_fx to deinterlace
    - staging/bcm2835-v4l2_codec: Fix for encode selection API
    - Add Raspberry Pi PoE+ HAT support
    - configs: Add CAN_PEAK_USB=m
    - ARM: dts: Restore downstream dtbs to Makefile
    - media: rpivid: Avoid returning EINVAL to a G_FMT ioctl
    - net: phy: lan87xx: Allow more time for link detect
    - media: rpivid: Remove unused ctx state variable and defines
    - media: rpivid: Ensure IRQs have completed before uniniting context
    - staging: bcm2835-codec: Allow decode res changed before STREAMON(CAPTURE)
    - staging/bcm2835-codec: Do not send buffers to the VPU unless streaming
    - staging/mmal-vchiq: Rationalise included headers
    - staging: bcm2835-codec: Format changed should trigger drain
    - staging: bcm2835-codec: Signal the firmware to stop on all changes
    - staging/mmal-vchiq: Add module parameter to enable logging.
    - staging: bcm2835-codec: Queue flushed buffers instead of completing
    - staging: mmal-vchiq: Reset buffers_with_vpu on port_enable
    - staging: bcm2835_codec: Correct flushing code for refcounting
    - staging: bcm2835-codec: Ensure all ctrls are set on streamon
    - staging: bcm2835-codec: Add support for H&V Flips to ISP
    - overlays: add support for the MLX90640 thermal camera
    - overlays: Add generic mcp2515 overlay
    - regulator: rpi-panel: Remove get_brightness hook
    - bcm2835_smi_dev: Fix handling of word-odd lengths
    - Revert "mmc: sdhci-iproc: Fix vmmc regulators on iProc"
    - mmc: sdhci-iproc: Fix vmmc regulators (pre-bcm2711)
    - dt-bindings: media: i2c: Add IMX519 CMOS sensor binding
    - media: i2c: Add driver for IMX519 sensor
    - media: i2c: imx519: Advertise embedded data node on media pad 1
    - configs: Add CONFIG_VIDEO_IMX519=m
    - overlays: Add imx519-overlay.dts
    - dtoverlays: Add overlay for ST7735R (160x128) TinyDRM driver
    - dwc_otg: pay attention to qh->interval when rescheduling periodic queues
    - Hifiberry DAC+ADCPro DT overlay: add optional headphone amp
    - Hifiberry DAC+ADCPro: adding optional headphone amp control
    - Add module for 8111h chip used in various CM4 boards
    - drivers/gpio: Add a driver that wraps the PWM API as a GPIO controller
    - rtc: pcf85063: Always clear EXT_TEST from set_time
    - char: vcio: Rewrite as a firmware node child
    - ARM: dts: Make vcio a child of the firmware node
    - ARM: dts: bcm2835_audio missing firmware reference
    - ARM: dts: Delete vestigial vcsm node
    - config: Enable FSFS_FS_SECURITY
    - gpio: bcm-virt: Fix the get() method
    - configs: Add CONFIG_FB_SIMPLE to bcmrpi3_defconfig
    - media: i2c: imx219: Sensor should report RAW color space
    - media: i2c: imx290: Sensor should report RAW color space
    - media: i2c: imx477: Sensor should report RAW color space
    - media: i2c: imx519: Sensor should report RAW color space
    - media: i2c: ov5647: Sensor should report RAW color space
    - media: i2c: ov9281: Sensor should report RAW color space
    - vc04_services: isp: Report input node as wanting full range RAW color space
    - media/bcm2835-unicam: Parse pad numbers correctly
    - media/bcm2835-unicam: Add support for configuration via MC API
    - ARM: dts: vc4-kms-v3d: Always disable firmware HDMI
    - staging/bcm2835-camera: Add support for H264_MIN_QP, H264_MAX_QP
    - staging/bcm2835-camera: Add support for MPEG_VIDEO_FORCE_KEY_FRAME
    - ARM: dts: Add Pi Zero 2 support
    - clk-raspberrypi: Support VEC clock
    - dt: Move VEC clock to clk-raspberrypi
    - clk-bcm2835: Remove VEC clock support
    - drm/vc4: Add support for gamma on BCM2711
    - drm/vc4: Add debugfs node that dumps the vc5 gamma PWL entries
    - drm/vc4: hvs: Force modeset on gamma lut change
    - media: i2c: imx477: Add vsync trigger_mode parameter
    - drm/vc4: Relax VEC modeline requirements and add progressive mode support
    - drm/vc4: Make VEC progressive modes readily accessible
    - bcm2835-v4l2-codec: Remove advertised support of VP8
    - ARM: dts: Rename Zero 2 W DT files
    - brcmfmac: Don't promote INFO logging to ERR
    - dtoverlays: Update all image sensor overlays for Media Controller option
    - ARM: dt: Add DT nodes for the WLAN interfaces
    - brcmfmac: Read alternative firmware names from DT
    - ARM: dts: Provide WLAN firmware names for Zero 2 W
    - drm: Check whether the gamma lut has changed before updating
    - brcmfmac: Protect against reprobing
    - drm/vc4: kms: Fix return code check
    - drm/vc4: kms: Move clock request to our HVS state
    - overlays: Add fbtft overlay
    - configs: Regenerate defconfigs
    - configs: Add NTFS3 support
    - configs: Add kernel SMB3 server support
    - config: Set TCA8418 to module
    - overlays: Additional parameters for gpio-poweroff
    - configs: Add TCA6416 driver module
    - drm: Fix double free from checking if gamma lut has been updated
    - drm/vc4: Enable gamma block only when required.
    - drm/vc4: Only add gamma properties once.
    - dtoverlays: Remove i2c0mux and i20if status from edt-ft5406.dtsi
    - drm/vc4: Validate the size of the gamma_lut
    - drm/vc4: Don't try disabling SCDC on Pi0-3.
    - enable several virtual devices for hosting virtual machines
    - configs: add CONFIG_HID_PLAYSTATION=m and CONFIG_PLAYSTATION_FF=y
    - configs: add LEDS_PWM=y
    - configs: Add USB gadget support (for Zero 2 W)
    - media: i2c: ov5647: Support HFLIP and VFLIP
    - drivers: bcm2835_isp: Allow multiple users for the ISP driver.
    - drivers: bcm2835_isp: Fix div by 0 bug.
    - Pass V4L2_CID_MPEG_VIDEO_H264_MIN_QP/MAX_QP to bcm2835-v4l2-codec
    - ARM: dts: Update rpi-400 and cm4 dts to match 4-b
    - spi: spidev: Restore loading from Device Tree
    - drm/vc4: Add support for composite syncs to vc4_dpi
    - drm/vc4: Ensure vc4_hdmi doesn't use 2711 HPD registers on Pi0-3
    - ARM: dts: gpio-ranges property is now required
    - input: edt-ft5x06: Handle unreliable TOUCH_UP events
    - dtoverlays: Use edt-ft5506 for 10 points, instead of edt-ft5x06
    - staging/bcm2835-codec: bytesperline for YUV420/YVU420 needs to be 64
    - media: rpivid: remove min_buffers_needed from src queue
    - staging/bcm2835-codec: Allow a different stride alignment per role
    - drivers: bcm2835_unicam: Add logging message when a frame is dropped.
    - regulator/rpi-panel-attiny: Don't read the LCD power status
    - regulator/rpi-panel-attiny: Use two transactions for I2C read
    - input: edt-ft5x06: Only look at the number of points reported
    - drm/vc4: Move HDMI reset to pm_resume
    - clk: bcm: rpi: Add the BCM283x pixel clock.
    - dt: bcm283x: Change BCM283x HDMI to use firmware clock driver
    - Revert "Revert "overlays: vc4-kms-v3d: Change composite handling""
    - drm/panel-simple: Populate bpc when using panel-dpi
    - drm/panel-simple: When using panel-dpi, update desc
    - drm/panel-simple: Allow the bus format to be read from DT for panel-dpi
    - drm/vc4: dpi: Add option for inverting pixel clock and output enable
    - drm/vc4: dpi: Ensure a default format is selected
    - dt: bcm270x: Add GPIO defines for RGB565 DPI output modes
    - dtoverlays: Add a generic DPI panel overlay for KMS
    - xhci: quirks: add link TRB quirk for VL805
    - xhci: correct room_on_ring() for cases where there is a single segment
    - media: imx219: Advertise embedded data node on media pad 1
    - vc4/drm: Ignore vc4_hdmi->output_enabled for allowing audio (#4759)
    - ARM: dts: Create bcm2711-rpi-cm4s.dts (#4761)
    - xhci: refactor out TRBS_PER_SEGMENT define in runtime code
    - usb: xhci: add VLI_TRB_CACHE_BUG quirk
    - drm/vc4: Fix build without DRM_VC4_HDMI_CEC
    - dt: Create static regulators and clocks for camera nodes
    - dtoverlays: Convert the camera sensor overlays to use the new regs and clks.
    - media: i2c: ov5647: Add support for regulator control.
    - dtoverlays: Convert ov5647 to use the regulator framework
    - media: i2c: ov7251: Make the enable GPIO optional.
    - ARM: dts: bcm2711-cm4s Correct i2c0mux to use 0/1 and 28/29 & 2 regulators
    - dtoverlays: Add option to select camera as on CAM0 of CM
    - ASoC:ma120x0p: Increase maximum sample rate to 192KHz
    - staging/bcm2835-isp: Fix cleanup after init fail
    - drm/vc4: kms: Take old state core clock rate into account
    - drm/vc4: hvs: Store channel in variable
    - drm/vc4: hvs: Remove dlist setup duplication
    - drm/vc4: hvs: Move the dlist setup to its own function
    - drm/vc4: hvs: Ignore atomic_flush if we're disabled
    - drm/vc4: plane: Use dlist offset instead of pointer
    - drm/vc4: hvs: Create a shadow dlist
    - drm/vc4: Skip writes to disabled packet RAM
    - drm/edid: Don't clear YUV422 if using deep color
    - drm/edid: Rename drm_hdmi_avi_infoframe_colorspace to _colorimetry
    - drm/vc4: hdmi: Add full range RGB helper
    - drm/vc4: hdmi: Use full range helper in csc functions
    - drm/vc4: hdmi: Move XBAR setup to csc_setup
    - drm/vc4: hdmi: Replace CSC_CTL hardcoded value by defines
    - drm/vc4: hdmi: Define colorspace matrices
    - drm/vc4: hdmi: Change CSC callback prototype
    - drm/vc4: hdmi: Move clock validation to its own function
    - drm/vc4: hdmi: Move clock calculation into its own function
    - drm/vc4: hdmi: Take the sink maximum TMDS clock into account
    - drm/vc4: hdmi: Take bpp into account for the scrambler
    - drm/vc4: hdmi: Always try to have the highest bpc
    - drm/vc4: hdmi: Support HDMI YUV output
    - media: v4l2-ctrls: Add V4L2_CID_NOTIFY_GAINS control
    - media: v4l2-ctrls: Document V4L2_CID_NOTIFY_GAINS control
    - Extending ili9881c driver support for nwe080 panel
    - Enable ili9881 panel and pwm backlight driver by default
    - Add panel overlay for CutiePi
    - dtoverlays: Enable cam1_clock when using tc358743 or irs1125
    - uapi/v4l2-controls: Reset V4L2_CID_USER_BCM2835_ISP_BASE to same as 5.10
    - drm/vc4: hdmi: Fix HDMI monitor detection in polled mode
    - drm/vc4: hdmi: Fix no video output on DVI monitors
    - drm/vc4: Correct interrupt enable bits on hvs4
    - staging/bcm2835-codec: Fix typo
    - media: i2c: ov9281: Increase diff between VTS and max exposure
    - bcm2835-v4l2-isp: Add missing lock initialization
    - configs: Enable Azoteq IQS550/572/525
    - overlays: Add overlay for Azoteq IQS550
    - dtoverlays: Add backlight-gpio parameter to vc4-kms-dpi-generic
    - configs: add CONFIG_LEDS_TRIGGER_PATTERN=m
    - drm/vc4: Fix interrupt masking for HVS5.
    - drm/vc4: Add alpha_blend_mode property to each plane.
    - arm: Fix custom rpi __memset32 and __memset64
    - overlays: Add vl805 overlay
    - arm: Fix annoying .eh_frame section warnings
    - drm/vc4: Disable Gamma control on HVS5 due to issues writing the table
    - drm/vc4: hdmi: Fix clock value used for validating hdmi modes
    - [Config] raspi: updateconfigs after rebase to rpi-5.15.y (2022-01-14)

* Miscellaneous Ubuntu changes
    - [Packaging] raspi: Initial import of debian.raspi from impish:linux-raspi
      (5.13.0-1014.16)
    - [Packaging] raspi: Initial version of linux-raspi for Jammy
    - SAUCE: arm: dts: Add 'brcm,bcm2835-pl011' compatible for uart0
    - SAUCE: arm: dts: Add 'brcm,bcm2835-gpio' compatible for gpio
    - SAUCE: Revert "cgroup: Disable cgroup "memory" by default"

[ Ubuntu: 5.15.0-17.17 ]

* jammy/linux: 5.15.0-17.17 -proposed tracker (LP: #1957809)

linux-raspi (5.15.0-1000.0) jammy; urgency=medium

* Initial version of linux-raspi for Jammy.

-- Juerg Haefliger <juergh@canonical.com>  Fri, 28 Jan 2022 14:42:07 +0100

Changed in linux-raspi (Ubuntu Jammy):
status:	Fix Committed → Fix Released

Juerg Haefliger (juergh) on 2022-02-10

description:

updated

Juerg Haefliger (juergh) on 2022-02-10

Changed in linux-raspi (Ubuntu Focal):
status:	New → Fix Committed
Changed in linux-raspi (Ubuntu Impish):
status:	New → Fix Committed

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2022-02-16:

#2

This bug is awaiting verification that the linux-raspi/5.4.0-1053.60 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-focal' to 'verification-done-focal'. If the problem still exists, change the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: verification-needed-focal

Revision history for this message

Juerg Haefliger (juergh) wrote on 2022-02-22:

#3

Verified that the virtio_pci module is present in the modules package.

tags:

added: verification-done-focal
removed: verification-needed-focal

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2022-03-02:

#4

This bug is awaiting verification that the linux-raspi/5.13.0-1018.20 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-impish' to 'verification-done-impish'. If the problem still exists, change the tag 'verification-needed-impish' to 'verification-failed-impish'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: verification-needed-impish

Revision history for this message

Juerg Haefliger (juergh) wrote on 2022-03-02:

#5

Verified that the module is included in linux-modules-extra-5.13.0-1018-raspi_5.13.0-1018.20_arm64.deb.

tags:

added: verification-done-impish
removed: verification-needed-impish

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-03-03:

#6

Download full text (16.9 KiB)

This bug was fixed in the package linux-raspi - 5.4.0-1053.60

---------------
linux-raspi (5.4.0-1053.60) focal; urgency=medium

* focal/linux-raspi: 5.4.0-1053.60 -proposed tracker (LP: #1959271)

* Kernel fails to boot in ScalingStack (LP: #1959102)
- [Config] raspi: Set VIRTIO_PCI=m

* Large Page support disabled on Raspberry Pi kernels (LP: #1933532)
- [Config] raspi: Set HUGETLBFS=y and TRANSPARENT_HUGEPAGE=y

[ Ubuntu: 5.4.0-100.113 ]

  * focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900)
  * CVE-2022-22942
    - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
  * CVE-2022-0330
    - drm/i915: Flush TLBs before releasing backing store
  * Focal update: v5.4.166 upstream stable release (LP: #1957008)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - Linux 5.4.166
    - net/packet: rx_owner_map depends on pg_vec
    - USB: gadget: bRequestType is a bitfield, not a enum
    - HID: holtek: fix mouse probing
    - udp: using datalen to cap ipv6 udp max gso segments
    - selftests: Calculate udpgso segment count without header adjustment
  * Focal update: v5.4.165 upstream stable release (LP: #1957007)
    - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
      tegra30
    - ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - seg6: fix the iif in the IPv6 socket control block
    - udp: using datalen to cap max gso segments
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - btrfs: clear extent buffer uptodate when we fail to write i...

This bug was fixed in the package linux-raspi - 5.4.0-1053.60

---------------
linux-raspi (5.4.0-1053.60) focal; urgency=medium

* focal/linux-raspi: 5.4.0-1053.60 -proposed tracker (LP: #1959271)

* Kernel fails to boot in ScalingStack (LP: #1959102)
    - [Config] raspi: Set VIRTIO_PCI=m

* Large Page support disabled on Raspberry Pi kernels (LP: #1933532)
    - [Config] raspi: Set HUGETLBFS=y and TRANSPARENT_HUGEPAGE=y

[ Ubuntu: 5.4.0-100.113 ]

* focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900)
  * CVE-2022-22942
    - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
  * CVE-2022-0330
    - drm/i915: Flush TLBs before releasing backing store
  * Focal update: v5.4.166 upstream stable release (LP: #1957008)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - Linux 5.4.166
    - net/packet: rx_owner_map depends on pg_vec
    - USB: gadget: bRequestType is a bitfield, not a enum
    - HID: holtek: fix mouse probing
    - udp: using datalen to cap ipv6 udp max gso segments
    - selftests: Calculate udpgso segment count without header adjustment
  * Focal update: v5.4.165 upstream stable release (LP: #1957007)
    - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
      tegra30
    - ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - seg6: fix the iif in the IPv6 socket control block
    - udp: using datalen to cap max gso segments
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - btrfs: clear extent buffer uptodate when we fail to write it
    - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
    - nfsd: Fix nsfd startup race (again)
    - tracefs: Have new files inherit the ownership of their parent
    - clk: qcom: regmap-mux: fix parent clock lookup
    - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
    - can: pch_can: pch_can_rx_normal: fix use after free
    - can: m_can: Disable and ignore ELO interrupt
    - x86/sme: Explicitly map new EFI memmap table as encrypted
    - libata: add horkage for ASMedia 1092
    - wait: add wake_up_pollfree()
    - SAUCE: binder: export __wake_up_pollfree for binder module
    - binder: use wake_up_pollfree()
    - signalfd: use wake_up_pollfree()
    - aio: keep poll requests on waitqueue until completed
    - aio: fix use-after-free due to missing POLLFREE handling
    - tracefs: Set all files to the same group ownership as the mount option
    - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
    - qede: validate non LSO skb length
    - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
    - i40e: Fix failed opcode appearing if handling messages from VF
    - i40e: Fix pre-set max number of queues for VF
    - mtd: rawnand: fsmc: Take instruction delay into account
    - mtd: rawnand: fsmc: Fix timing computation
    - dt-bindings: net: Reintroduce PHY no lane swap binding
    - tools build: Remove needless libpython-version feature check that breaks
      test-all fast path
    - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
    - net: altera: set a couple error code in probe()
    - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
    - net, neigh: clear whole pneigh_entry at alloc time
    - net/qla3xxx: fix an error code in ql_adapter_up()
    - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
      rp_filter tests"
    - selftests/fib_tests: Rework fib_rp_filter_test()
    - USB: gadget: detect too-big endpoint 0 requests
    - USB: gadget: zero allocate endpoint 0 buffers
    - usb: core: config: fix validation of wMaxPacketValue entries
    - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
      suspending
    - usb: core: config: using bit mask instead of individual bits
    - xhci: avoid race between disable slot command and host runtime suspend
    - iio: trigger: Fix reference counting
    - iio: trigger: stm32-timer: fix MODULE_ALIAS
    - iio: stk3310: Don't return error code in interrupt handler
    - iio: mma8452: Fix trigger reference couting
    - iio: ltr501: Don't return error code in trigger handler
    - iio: kxsd9: Don't return error code in trigger handler
    - iio: itg3200: Call iio_trigger_notify_done() on error
    - iio: dln2-adc: Fix lockdep complaint
    - iio: dln2: Check return value of devm_iio_trigger_register()
    - iio: at91-sama5d2: Fix incorrect sign extension
    - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
    - iio: ad7768-1: Call iio_trigger_notify_done() on error
    - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
    - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
    - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
    - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
    - irqchip: nvic: Fix offset for Interrupt Priority Offsets
    - misc: fastrpc: fix improper packet size calculation
    - bpf: Add selftests to cover packet access corner cases
    - Linux 5.4.165
  * Focal update: v5.4.164 upstream stable release (LP: #1956381)
    - NFSv42: Fix pagecache invalidation after COPY/CLONE
    - of: clk: Make <linux/of_clk.h> self-contained
    - arm64: dts: mcbin: support 2W SFP modules
    - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
    - gfs2: Fix length of holes reported at end-of-file
    - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
    - mac80211: do not access the IV when it was stripped
    - net/smc: Transfer remaining wait queue entries during fallback
    - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
    - net: return correct error code
    - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
    - s390/setup: avoid using memblock_enforce_memory_limit
    - btrfs: check-integrity: fix a warning on write caching disabled disk
    - thermal: core: Reset previous low and high trip during thermal zone init
    - scsi: iscsi: Unblock session then wake up error handler
    - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
    - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
      hns_dsaf_ge_srst_by_port()
    - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
      bound
    - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
      type3_infoblock()
    - perf hist: Fix memory leak of a perf_hpp_fmt
    - perf report: Fix memory leaks around perf_tip()
    - net/smc: Avoid warning of possible recursive locking
    - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
    - kprobes: Limit max data_size of the kretprobe instances
    - rt2x00: do not mark device gone on EPROTO errors during start
    - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
    - s390/pci: move pseudo-MMIO to prevent MIO overlap
    - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
    - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
    - i2c: stm32f7: flush TX FIFO upon transfer errors
    - i2c: stm32f7: recover the bus on access timeout
    - i2c: stm32f7: stop dma transfer in case of NACK
    - i2c: cbus-gpio: set atomic transfer callback
    - natsemi: xtensa: fix section mismatch warnings
    - net: qlogic: qlcnic: Fix a NULL pointer dereference in
      qlcnic_83xx_add_rings()
    - net: mpls: Fix notifications when deleting a device
    - siphash: use _unaligned version by default
    - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
    - selftests: net: Correct case name
    - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
    - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
      is available
    - net: marvell: mvpp2: Fix the computation of shared CPUs
    - net: annotate data-races on txq->xmit_lock_owner
    - ipv4: convert fib_num_tclassid_users to atomic_t
    - net/rds: correct socket tunable error in rds_tcp_tune()
    - net/smc: Keep smc_close_final rc during active close
    - drm/msm: Do hw_init() before capturing GPU state
    - ipv6: fix memory leak in fib6_rule_suppress
    - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
    - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
    - parisc: Fix KBUILD_IMAGE for self-extracting kernel
    - parisc: Fix "make install" on newer debian releases
    - vgacon: Propagate console boot parameters before calling `vc_resize'
    - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
    - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
    - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
    - x86/tsc: Add a timer to make sure TSC_adjust is always checked
    - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
    - x86/64/mm: Map all kernel memory into trampoline_pgd
    - tty: serial: msm_serial: Deactivate RX DMA for polling support
    - serial: pl011: Add ACPI SBSA UART match id
    - serial: core: fix transmit-buffer reset and memleak
    - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
    - serial: 8250_pci: rewrite pericom_do_set_divisor()
    - iwlwifi: mvm: retry init flow if failed
    - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
    - net/tls: Fix authentication failure in CCM mode
    - Linux 5.4.164
  * Focal update: v5.4.163 upstream stable release (LP: #1956380)
    - USB: serial: option: add Telit LE910S1 0x9200 composition
    - USB: serial: option: add Fibocom FM101-GL variants
    - usb: dwc2: gadget: Fix ISOC flow for elapsed frames
    - usb: dwc2: hcd_queue: Fix use of floating point literal
    - net: nexthop: fix null pointer dereference when IPv6 is not enabled
    - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
    - usb: hub: Fix usb enumeration issue due to address0 race
    - usb: hub: Fix locking issues with address0_mutex
    - binder: fix test regression due to sender_euid change
    - ALSA: ctxfi: Fix out-of-range access
    - media: cec: copy sequence field for the reply
    - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
    - staging/fbtft: Fix backlight
    - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
    - xen: don't continue xenstore initialization in case of errors
    - xen: detect uninitialized xenbus in xenbus_init
    - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
    - tracing/uprobe: Fix uprobe_perf_open probes iteration
    - tracing: Fix pid filtering when triggers are attached
    - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
    - mdio: aspeed: Fix "Link is Down" issue
    - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
    - PCI: aardvark: Wait for endpoint to be ready before training link
    - PCI: aardvark: Fix big endian support
    - PCI: aardvark: Train link immediately after enabling training
    - PCI: aardvark: Improve link training
    - PCI: aardvark: Issue PERST via GPIO
    - PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros
    - PCI: aardvark: Don't touch PCIe registers if no card connected
    - PCI: aardvark: Fix compilation on s390
    - PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()
    - PCI: aardvark: Update comment about disabling link training
    - PCI: pci-bridge-emul: Fix array overruns, improve safety
    - PCI: aardvark: Configure PCIe resources from 'ranges' DT property
    - PCI: aardvark: Fix PCIe Max Payload Size setting
    - PCI: aardvark: Implement re-issuing config requests on CRS response
    - PCI: aardvark: Simplify initialization of rootcap on virtual bridge
    - PCI: aardvark: Fix link training
    - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
      bridge
    - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
    - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
    - pinctrl: armada-37xx: Correct PWM pins definitions
    - arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
    - proc/vmcore: fix clearing user buffer by properly using clear_user()
    - netfilter: ipvs: Fix reuse connection if RS weight is 0
    - ARM: dts: BCM5301X: Fix I2C controller interrupt
    - ARM: dts: BCM5301X: Add interrupt properties to GPIO node
    - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
    - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
    - net: ieee802154: handle iftypes as u32
    - firmware: arm_scmi: pm: Propagate return value to caller
    - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
    - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
    - scsi: mpt3sas: Fix kernel panic during drive powercycle test
    - drm/vc4: fix error code in vc4_create_object()
    - iavf: Prevent changing static ITR values if adaptive moderation is on
    - ipv6: fix typos in __ip6_finish_output()
    - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
    - net: ipv6: add fib6_nh_release_dsts stub
    - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
    - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
    - net/smc: Ensure the active closing peer first closes clcsock
    - nvmet-tcp: fix incomplete data digest send
    - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
    - PM: hibernate: use correct mode for swsusp_close()
    - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
      flows
    - nvmet: use IOCB_NOWAIT only if the filesystem supports it
    - igb: fix netpoll exit with traffic
    - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
    - net: vlan: fix underflow for the real_dev refcnt
    - net/smc: Don't call clcsock shutdown twice when smc shutdown
    - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
    - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
    - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
    - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
    - smb3: do not error on fsync when readonly
    - vhost/vsock: fix incorrect used length reported to the guest
    - tracing: Check pid filtering when creating events
    - s390/mm: validate VMA in PGSTE manipulation functions
    - shm: extend forced shm destroy to support objects from several IPC nses
    - NFC: add NCI_UNREG flag to eliminate the race
    - fuse: release pipe buf after last use
    - xen: sync include/xen/interface/io/ring.h with Xen's newest version
    - xen/blkfront: read response from backend only once
    - xen/blkfront: don't take local copy of a request from the ring page
    - xen/blkfront: don't trust the backend response data blindly
    - xen/netfront: read response from backend only once
    - xen/netfront: don't read data from request on the ring page
    - xen/netfront: disentangle tx_skb_freelist
    - xen/netfront: don't trust the backend response data blindly
    - tty: hvc: replace BUG_ON() with negative return value
    - Linux 5.4.163
  * net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
    - net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
  * CVE-2021-4083
    - fget: check that the fd still exists after getting a ref to it
  * CVE-2021-4155
    - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate

-- Juerg Haefliger <juergh@canonical.com>  Fri, 11 Feb 2022 08:04:31 +0100

Changed in linux-raspi (Ubuntu Focal):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-03-03:

#7

Download full text (17.0 KiB)

This bug was fixed in the package linux-raspi-5.4 - 5.4.0-1053.60~18.04.1

---------------
linux-raspi-5.4 (5.4.0-1053.60~18.04.1) bionic; urgency=medium

* bionic/linux-raspi-5.4: 5.4.0-1053.60~18.04.1 -proposed tracker
(LP: #1959270)

[ Ubuntu: 5.4.0-1053.60 ]

  * focal/linux-raspi: 5.4.0-1053.60 -proposed tracker (LP: #1959271)
  * Kernel fails to boot in ScalingStack (LP: #1959102)
    - [Config] raspi: Set VIRTIO_PCI=m
  * Large Page support disabled on Raspberry Pi kernels (LP: #1933532)
    - [Config] raspi: Set HUGETLBFS=y and TRANSPARENT_HUGEPAGE=y
  * focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900)
  * CVE-2022-22942
    - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
  * CVE-2022-0330
    - drm/i915: Flush TLBs before releasing backing store
  * Focal update: v5.4.166 upstream stable release (LP: #1957008)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - Linux 5.4.166
    - net/packet: rx_owner_map depends on pg_vec
    - USB: gadget: bRequestType is a bitfield, not a enum
    - HID: holtek: fix mouse probing
    - udp: using datalen to cap ipv6 udp max gso segments
    - selftests: Calculate udpgso segment count without header adjustment
  * Focal update: v5.4.165 upstream stable release (LP: #1957007)
    - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
      tegra30
    - ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - seg6: fix the iif in the IPv6 socket control block
    - udp: using datalen to cap max gso segments
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle mi...

This bug was fixed in the package linux-raspi-5.4 - 5.4.0-1053.60~18.04.1

---------------
linux-raspi-5.4 (5.4.0-1053.60~18.04.1) bionic; urgency=medium

* bionic/linux-raspi-5.4: 5.4.0-1053.60~18.04.1 -proposed tracker
    (LP: #1959270)

[ Ubuntu: 5.4.0-1053.60 ]

* focal/linux-raspi: 5.4.0-1053.60 -proposed tracker (LP: #1959271)
  * Kernel fails to boot in ScalingStack (LP: #1959102)
    - [Config] raspi: Set VIRTIO_PCI=m
  * Large Page support disabled on Raspberry Pi kernels (LP: #1933532)
    - [Config] raspi: Set HUGETLBFS=y and TRANSPARENT_HUGEPAGE=y
  * focal/linux: 5.4.0-100.113 -proposed tracker (LP: #1959900)
  * CVE-2022-22942
    - SAUCE: drm/vmwgfx: Fix stale file descriptors on failed usercopy
  * CVE-2022-0330
    - drm/i915: Flush TLBs before releasing backing store
  * Focal update: v5.4.166 upstream stable release (LP: #1957008)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - Linux 5.4.166
    - net/packet: rx_owner_map depends on pg_vec
    - USB: gadget: bRequestType is a bitfield, not a enum
    - HID: holtek: fix mouse probing
    - udp: using datalen to cap ipv6 udp max gso segments
    - selftests: Calculate udpgso segment count without header adjustment
  * Focal update: v5.4.165 upstream stable release (LP: #1957007)
    - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
      tegra30
    - ntfs: fix ntfs_test_inode and ntfs_init_locked_inode function type
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - seg6: fix the iif in the IPv6 socket control block
    - udp: using datalen to cap max gso segments
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - btrfs: clear extent buffer uptodate when we fail to write it
    - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
    - nfsd: Fix nsfd startup race (again)
    - tracefs: Have new files inherit the ownership of their parent
    - clk: qcom: regmap-mux: fix parent clock lookup
    - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
    - can: pch_can: pch_can_rx_normal: fix use after free
    - can: m_can: Disable and ignore ELO interrupt
    - x86/sme: Explicitly map new EFI memmap table as encrypted
    - libata: add horkage for ASMedia 1092
    - wait: add wake_up_pollfree()
    - SAUCE: binder: export __wake_up_pollfree for binder module
    - binder: use wake_up_pollfree()
    - signalfd: use wake_up_pollfree()
    - aio: keep poll requests on waitqueue until completed
    - aio: fix use-after-free due to missing POLLFREE handling
    - tracefs: Set all files to the same group ownership as the mount option
    - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
    - qede: validate non LSO skb length
    - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
    - i40e: Fix failed opcode appearing if handling messages from VF
    - i40e: Fix pre-set max number of queues for VF
    - mtd: rawnand: fsmc: Take instruction delay into account
    - mtd: rawnand: fsmc: Fix timing computation
    - dt-bindings: net: Reintroduce PHY no lane swap binding
    - tools build: Remove needless libpython-version feature check that breaks
      test-all fast path
    - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
    - net: altera: set a couple error code in probe()
    - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
    - net, neigh: clear whole pneigh_entry at alloc time
    - net/qla3xxx: fix an error code in ql_adapter_up()
    - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
      rp_filter tests"
    - selftests/fib_tests: Rework fib_rp_filter_test()
    - USB: gadget: detect too-big endpoint 0 requests
    - USB: gadget: zero allocate endpoint 0 buffers
    - usb: core: config: fix validation of wMaxPacketValue entries
    - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
      suspending
    - usb: core: config: using bit mask instead of individual bits
    - xhci: avoid race between disable slot command and host runtime suspend
    - iio: trigger: Fix reference counting
    - iio: trigger: stm32-timer: fix MODULE_ALIAS
    - iio: stk3310: Don't return error code in interrupt handler
    - iio: mma8452: Fix trigger reference couting
    - iio: ltr501: Don't return error code in trigger handler
    - iio: kxsd9: Don't return error code in trigger handler
    - iio: itg3200: Call iio_trigger_notify_done() on error
    - iio: dln2-adc: Fix lockdep complaint
    - iio: dln2: Check return value of devm_iio_trigger_register()
    - iio: at91-sama5d2: Fix incorrect sign extension
    - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
    - iio: ad7768-1: Call iio_trigger_notify_done() on error
    - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
    - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
    - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
    - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
    - irqchip: nvic: Fix offset for Interrupt Priority Offsets
    - misc: fastrpc: fix improper packet size calculation
    - bpf: Add selftests to cover packet access corner cases
    - Linux 5.4.165
  * Focal update: v5.4.164 upstream stable release (LP: #1956381)
    - NFSv42: Fix pagecache invalidation after COPY/CLONE
    - of: clk: Make <linux/of_clk.h> self-contained
    - arm64: dts: mcbin: support 2W SFP modules
    - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
    - gfs2: Fix length of holes reported at end-of-file
    - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
    - mac80211: do not access the IV when it was stripped
    - net/smc: Transfer remaining wait queue entries during fallback
    - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
    - net: return correct error code
    - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
    - s390/setup: avoid using memblock_enforce_memory_limit
    - btrfs: check-integrity: fix a warning on write caching disabled disk
    - thermal: core: Reset previous low and high trip during thermal zone init
    - scsi: iscsi: Unblock session then wake up error handler
    - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
    - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
      hns_dsaf_ge_srst_by_port()
    - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
      bound
    - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
      type3_infoblock()
    - perf hist: Fix memory leak of a perf_hpp_fmt
    - perf report: Fix memory leaks around perf_tip()
    - net/smc: Avoid warning of possible recursive locking
    - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
    - kprobes: Limit max data_size of the kretprobe instances
    - rt2x00: do not mark device gone on EPROTO errors during start
    - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
    - s390/pci: move pseudo-MMIO to prevent MIO overlap
    - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
    - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
    - i2c: stm32f7: flush TX FIFO upon transfer errors
    - i2c: stm32f7: recover the bus on access timeout
    - i2c: stm32f7: stop dma transfer in case of NACK
    - i2c: cbus-gpio: set atomic transfer callback
    - natsemi: xtensa: fix section mismatch warnings
    - net: qlogic: qlcnic: Fix a NULL pointer dereference in
      qlcnic_83xx_add_rings()
    - net: mpls: Fix notifications when deleting a device
    - siphash: use _unaligned version by default
    - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
    - selftests: net: Correct case name
    - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
    - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
      is available
    - net: marvell: mvpp2: Fix the computation of shared CPUs
    - net: annotate data-races on txq->xmit_lock_owner
    - ipv4: convert fib_num_tclassid_users to atomic_t
    - net/rds: correct socket tunable error in rds_tcp_tune()
    - net/smc: Keep smc_close_final rc during active close
    - drm/msm: Do hw_init() before capturing GPU state
    - ipv6: fix memory leak in fib6_rule_suppress
    - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
    - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
    - parisc: Fix KBUILD_IMAGE for self-extracting kernel
    - parisc: Fix "make install" on newer debian releases
    - vgacon: Propagate console boot parameters before calling `vc_resize'
    - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
    - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
    - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
    - x86/tsc: Add a timer to make sure TSC_adjust is always checked
    - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
    - x86/64/mm: Map all kernel memory into trampoline_pgd
    - tty: serial: msm_serial: Deactivate RX DMA for polling support
    - serial: pl011: Add ACPI SBSA UART match id
    - serial: core: fix transmit-buffer reset and memleak
    - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
    - serial: 8250_pci: rewrite pericom_do_set_divisor()
    - iwlwifi: mvm: retry init flow if failed
    - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
    - net/tls: Fix authentication failure in CCM mode
    - Linux 5.4.164
  * Focal update: v5.4.163 upstream stable release (LP: #1956380)
    - USB: serial: option: add Telit LE910S1 0x9200 composition
    - USB: serial: option: add Fibocom FM101-GL variants
    - usb: dwc2: gadget: Fix ISOC flow for elapsed frames
    - usb: dwc2: hcd_queue: Fix use of floating point literal
    - net: nexthop: fix null pointer dereference when IPv6 is not enabled
    - usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
    - usb: hub: Fix usb enumeration issue due to address0 race
    - usb: hub: Fix locking issues with address0_mutex
    - binder: fix test regression due to sender_euid change
    - ALSA: ctxfi: Fix out-of-range access
    - media: cec: copy sequence field for the reply
    - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
    - staging/fbtft: Fix backlight
    - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
    - xen: don't continue xenstore initialization in case of errors
    - xen: detect uninitialized xenbus in xenbus_init
    - KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
    - tracing/uprobe: Fix uprobe_perf_open probes iteration
    - tracing: Fix pid filtering when triggers are attached
    - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
    - mdio: aspeed: Fix "Link is Down" issue
    - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
    - PCI: aardvark: Wait for endpoint to be ready before training link
    - PCI: aardvark: Fix big endian support
    - PCI: aardvark: Train link immediately after enabling training
    - PCI: aardvark: Improve link training
    - PCI: aardvark: Issue PERST via GPIO
    - PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros
    - PCI: aardvark: Don't touch PCIe registers if no card connected
    - PCI: aardvark: Fix compilation on s390
    - PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link()
    - PCI: aardvark: Update comment about disabling link training
    - PCI: pci-bridge-emul: Fix array overruns, improve safety
    - PCI: aardvark: Configure PCIe resources from 'ranges' DT property
    - PCI: aardvark: Fix PCIe Max Payload Size setting
    - PCI: aardvark: Implement re-issuing config requests on CRS response
    - PCI: aardvark: Simplify initialization of rootcap on virtual bridge
    - PCI: aardvark: Fix link training
    - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
      bridge
    - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
    - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
    - pinctrl: armada-37xx: Correct PWM pins definitions
    - arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function
    - proc/vmcore: fix clearing user buffer by properly using clear_user()
    - netfilter: ipvs: Fix reuse connection if RS weight is 0
    - ARM: dts: BCM5301X: Fix I2C controller interrupt
    - ARM: dts: BCM5301X: Add interrupt properties to GPIO node
    - ASoC: qdsp6: q6routing: Conditionally reset FrontEnd Mixer
    - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
    - net: ieee802154: handle iftypes as u32
    - firmware: arm_scmi: pm: Propagate return value to caller
    - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
    - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
    - scsi: mpt3sas: Fix kernel panic during drive powercycle test
    - drm/vc4: fix error code in vc4_create_object()
    - iavf: Prevent changing static ITR values if adaptive moderation is on
    - ipv6: fix typos in __ip6_finish_output()
    - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
    - net: ipv6: add fib6_nh_release_dsts stub
    - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
    - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
    - net/smc: Ensure the active closing peer first closes clcsock
    - nvmet-tcp: fix incomplete data digest send
    - net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
    - PM: hibernate: use correct mode for swsusp_close()
    - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
      flows
    - nvmet: use IOCB_NOWAIT only if the filesystem supports it
    - igb: fix netpoll exit with traffic
    - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
    - net: vlan: fix underflow for the real_dev refcnt
    - net/smc: Don't call clcsock shutdown twice when smc shutdown
    - net: hns3: fix VF RSS failed problem after PF enable multi-TCs
    - net: mscc: ocelot: don't downgrade timestamping RX filters in SIOCSHWTSTAMP
    - net: mscc: ocelot: correctly report the timestamping RX filters in ethtool
    - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
    - smb3: do not error on fsync when readonly
    - vhost/vsock: fix incorrect used length reported to the guest
    - tracing: Check pid filtering when creating events
    - s390/mm: validate VMA in PGSTE manipulation functions
    - shm: extend forced shm destroy to support objects from several IPC nses
    - NFC: add NCI_UNREG flag to eliminate the race
    - fuse: release pipe buf after last use
    - xen: sync include/xen/interface/io/ring.h with Xen's newest version
    - xen/blkfront: read response from backend only once
    - xen/blkfront: don't take local copy of a request from the ring page
    - xen/blkfront: don't trust the backend response data blindly
    - xen/netfront: read response from backend only once
    - xen/netfront: don't read data from request on the ring page
    - xen/netfront: disentangle tx_skb_freelist
    - xen/netfront: don't trust the backend response data blindly
    - tty: hvc: replace BUG_ON() with negative return value
    - Linux 5.4.163
  * net/mlx5e: EPERM on vlan 0 programming (LP: #1957753)
    - net/mlx5e: Unblock setting vid 0 for VF in case PF isn't eswitch manager
  * CVE-2021-4083
    - fget: check that the fd still exists after getting a ref to it
  * CVE-2021-4155
    - xfs: map unwritten blocks in XFS_IOC_{ALLOC, FREE}SP just like fallocate

-- Juerg Haefliger <juergh@canonical.com>  Mon, 14 Feb 2022 08:50:24 +0100

Changed in linux-raspi-5.4 (Ubuntu Bionic):
status:	New → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-03-21:

#8

Download full text (50.1 KiB)

This bug was fixed in the package linux-raspi - 5.13.0-1022.24

---------------
linux-raspi (5.13.0-1022.24) impish; urgency=medium

* impish/linux-raspi: 5.13.0-1022.24 -proposed tracker (LP: #1964955)

[ Ubuntu: 5.13.0-37.42 ]

  * impish/linux: 5.13.0-37.42 -proposed tracker (LP: #1964959)
  * CVE-2022-0742
    - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()

linux-raspi (5.13.0-1021.23) impish; urgency=medium

* impish/linux-raspi: 5.13.0-1021.23 -proposed tracker (LP: #1964166)

* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md

* Kernel fails to boot in ScalingStack (LP: #1959102)
- [Config] raspi: Set VIRTIO_PCI=m

[ Ubuntu: 5.13.0-36.41 ]

  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
    - debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
  * Broken network on some AWS instances with focal/impish kernels
    (LP: #1961968)
    - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
  * [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
    enabled by IOMMU (LP: #1937295)
    - PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
      by IOMMU
  * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
    (LP: #1960182)
    - s390/cpumf: Support for CPU Measurement Facility CSVN 7
    - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
  * [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
    (LP: #1960875)
    - s390/cio: verify the driver availability for path_event call
  * Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
    - devtmpfs regression fix: reconfigure on each mount
    - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
    - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
    - perf: Protect perf_guest_cbs with RCU
    - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
    - KVM: s390: Clarify SIGP orders versus STOP/RESTART
    - 9p: only copy valid iattrs in 9P2000.L setattr implementation
    - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
    - media: uvcvideo: fix division by zero at stream start
    - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
      interrupts enabled
    - firmware: qemu_fw_cfg: fix sysfs information leak
    - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
    - firmware: qemu_fw_cfg: fix kobject leak in probe error path
    - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
    - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
    - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
      reboot from Windows
    - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
    - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
    - ALSA: hda/realtek: Re-order quirk entries for Lenovo
    - powerpc/pseries: Get entry and uaccess flush required bits from
      H_GET_CPU_CHARACTERISTICS
    - mtd: fixup CFI on ixp4xx
    - KVM: x86: don't print when fail to read/write pv eoi memory
    -...

This bug was fixed in the package linux-raspi - 5.13.0-1022.24

---------------
linux-raspi (5.13.0-1022.24) impish; urgency=medium

* impish/linux-raspi: 5.13.0-1022.24 -proposed tracker (LP: #1964955)

[ Ubuntu: 5.13.0-37.42 ]

* impish/linux: 5.13.0-37.42 -proposed tracker (LP: #1964959)
  * CVE-2022-0742
    - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()

linux-raspi (5.13.0-1021.23) impish; urgency=medium

* impish/linux-raspi: 5.13.0-1021.23 -proposed tracker (LP: #1964166)

* Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md

* Kernel fails to boot in ScalingStack (LP: #1959102)
    - [Config] raspi: Set VIRTIO_PCI=m

[ Ubuntu: 5.13.0-36.41 ]

* Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
    - debian/dkms-versions -- update from kernel-versions (main/2022.02.21)
  * Broken network on some AWS instances with focal/impish kernels
    (LP: #1961968)
    - SAUCE: Revert "PCI/MSI: Mask MSI-X vectors only on success"
  * [SRU]PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is
    enabled by IOMMU (LP: #1937295)
    - PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled
      by IOMMU
  * [UBUNTU 20.04] kernel: Add support for CPU-MF counter second version 7
    (LP: #1960182)
    - s390/cpumf: Support for CPU Measurement Facility CSVN 7
    - s390/cpumf: Support for CPU Measurement Sampling Facility LS bit
  * [UBUNTU 21.10] s390/cio: verify the driver availability for path_event call
    (LP: #1960875)
    - s390/cio: verify the driver availability for path_event call
  * Impish update: upstream stable patchset 2022-02-14 (LP: #1960861)
    - devtmpfs regression fix: reconfigure on each mount
    - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
    - remoteproc: qcom: pil_info: Don't memcpy_toio more than is provided
    - perf: Protect perf_guest_cbs with RCU
    - KVM: x86: Register Processor Trace interrupt hook iff PT enabled in guest
    - KVM: s390: Clarify SIGP orders versus STOP/RESTART
    - 9p: only copy valid iattrs in 9P2000.L setattr implementation
    - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
    - media: uvcvideo: fix division by zero at stream start
    - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
      interrupts enabled
    - firmware: qemu_fw_cfg: fix sysfs information leak
    - firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
    - firmware: qemu_fw_cfg: fix kobject leak in probe error path
    - KVM: x86: remove PMU FIXED_CTR3 from msrs_to_save_all
    - ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
    - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
      reboot from Windows
    - ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
    - ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
    - ALSA: hda/realtek: Re-order quirk entries for Lenovo
    - powerpc/pseries: Get entry and uaccess flush required bits from
      H_GET_CPU_CHARACTERISTICS
    - mtd: fixup CFI on ixp4xx
    - KVM: x86: don't print when fail to read/write pv eoi memory
    - remoteproc: qcom: pas: Add missing power-domain "mxc" for CDSP
    - perf annotate: Avoid TUI crash when navigating in the annotation of
      recursive functions
    - ALSA: hda/realtek: Use ALC285_FIXUP_HP_GPIO_LED on another HP laptop
    - ALSA: hda/tegra: Fix Tegra194 HDA reset failure
  * CVE-2022-0516
    - KVM: s390: Return error on SIDA memop on normal guest
  * CVE-2022-0435
    - tipc: improve size validations for received domain records
  * CVE-2022-0492
    - cgroup-v1: Require capabilities to set release_agent
  * jammy 5.15 kernel soft lockup when zfs.ko is loaded on s390x w/ gcc >=
    11.2.0-10ubuntu1 / gcc-11 PLT regression on s390x (LP: #1954676)
    - s390/module: fix loading modules with a lot of relocations
  * Impish update: upstream stable patchset 2022-02-09 (LP: #1960452)
    - workqueue: Fix unbind_workers() VS wq_worker_running() race
    - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
    - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
    - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
    - Bluetooth: bfusb: fix division by zero in send path
    - ARM: dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
    - USB: core: Fix bug in resuming hub's handling of wakeup requests
    - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
    - ath11k: Fix buffer overflow when scanning with extraie
    - mmc: sdhci-pci: Add PCI ID for Intel ADL
    - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
    - can: gs_usb: fix use of uninitialized variable, detach device on reception
      of invalid USB data
    - can: isotp: convert struct tpcon::{idx,len} to unsigned int
    - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
    - random: fix data race on crng_node_pool
    - random: fix data race on crng init time
    - random: fix crash on multiple early calls to add_bootloader_randomness()
    - media: Revert "media: uvcvideo: Set unique vdev name based in type"
    - staging: wlan-ng: Avoid bitwise vs logical OR warning in
      hfa384x_usb_throttlefn()
    - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk()
    - staging: greybus: fix stack size warning with UBSAN
    - s390/kexec: handle R_390_PLT32DBL rela in arch_kexec_apply_relocations_add()
    - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
    - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
    - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
    - Bluetooth: btusb: Enable MSFT extension for Mediatek Chip (MT7921)
    - Bluetooth: btusb: enable Mediatek to support AOSP extension
    - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
    - Bluetooth: btusb: Add the new support IDs for WCN6855
    - fget: clarify and improve __fget_files() implementation
    - Bluetooth: btusb: Add one more Bluetooth part for WCN6855
    - Bluetooth: add quirk disabling LE Read Transmit Power
    - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
      chip
    - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
  * Impish update: upstream stable patchset 2022-01-31 (LP: #1959627)
    - selftests: x86: fix [-Wstringop-overread] warn in test_process_vm_readv()
    - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
    - tracing: Tag trace_percpu_buffer as a percpu pointer
    - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
    - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
    - iavf: Fix limit of total number of queues to active queues of VF
    - RDMA/core: Don't infoleak GRH fields
    - netrom: fix copying in user data in nr_setsockopt
    - RDMA/uverbs: Check for null return of kmalloc_array
    - mac80211: initialize variable have_higher_than_11mbit
    - sfc: The RX page_ring is optional
    - i40e: fix use-after-free in i40e_sync_filters_subtask()
    - i40e: Fix for displaying message regarding NVM version
    - i40e: Fix incorrect netdev's real number of RX/TX queues
    - ftrace/samples: Add missing prototypes direct functions
    - ipv4: Check attribute length for RTA_GATEWAY in multipath route
    - ipv4: Check attribute length for RTA_FLOW in multipath route
    - ipv6: Check attribute length for RTA_GATEWAY in multipath route
    - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
    - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
    - batman-adv: mcast: don't send link-local multicast to mcast routers
    - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
    - net: ena: Fix undefined state when tx request id is out of bounds
    - net: ena: Fix error handling when calculating max IO queues number
    - power: supply: core: Break capacity loop
    - power: reset: ltc2952: Fix use of floating point literals
    - rndis_host: support Hytera digital radios
    - phonet: refcount leak in pep_sock_accep
    - power: bq25890: Enable continuous conversion for ADC at charging
    - ipv6: Continue processing multipath route even if gateway attribute is
      invalid
    - ipv6: Do cleanup if attribute validation fails in multipath route
    - usb: mtu3: fix interval value for intr and isoc
    - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
    - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
    - net: udp: fix alignment problem in udp4_seq_show()
    - atlantic: Fix buff_ring OOB in aq_ring_rx_clean
    - mISDN: change function names to avoid conflicts
    - drm/amd/display: Added power down for DCN10
    - ipv6: raw: check passed optlen before reading
    - ARM: dts: gpio-ranges property is now required
    - Input: zinitix - make sure the IRQ is allocated before it gets enabled
    - fscache_cookie_enabled: check cookie is valid before accessing it
    - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks"
    - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
    - selftests: net: udpgro_fwd.sh: explicitly checking the available ping
      feature
    - sctp: hold endpoint before calling cb in sctp_transport_lookup_process
    - net: ena: Fix wrong rx request id by resetting device
    - md/raid1: fix missing bitmap update w/o WriteMostly devices
    - cgroup: Use open-time credentials for process migraton perm checks
    - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
    - cgroup: Use open-time cgroup namespace for process migration perm checks
    - i2c: mpc: Avoid out of bounds memory access
    - net ticp:fix a kernel-infoleak in __tipc_sendmsg()
    - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
    - drm/amdgpu: disable runpm if we are the primary adapter
    - auxdisplay: charlcd: checking for pointer reference before dereferencing
    - drm/amd/pm: Fix xgmi link control on aldebaran
    - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
    - drm/amdgpu: always reset the asic in suspend (v2)
    - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
      platform
    - userfaultfd/selftests: fix hugetlb area allocations
  * Impish update: upstream stable patchset 2022-01-26 (LP: #1959134)
    - Input: i8042 - add deferred probe support
    - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
    - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
    - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
    - parisc: Clear stale IIR value on instruction access rights trap
    - platform/x86: apple-gmux: use resource_size() with res
    - memblock: fix memblock_phys_alloc() section mismatch error
    - recordmcount.pl: fix typo in s390 mcount regex
    - selinux: initialize proto variable in selinux_ip_postroute_compat()
    - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
    - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
    - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
    - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
    - net/mlx5e: Fix ICOSQ recovery flow for XSK
    - udp: using datalen to cap ipv6 udp max gso segments
    - selftests: Calculate udpgso segment count without header adjustment
    - sctp: use call_rcu to free endpoint
    - net/smc: fix using of uninitialized completions
    - net: usb: pegasus: Do not drop long Ethernet frames
    - net: ag71xx: Fix a potential double free in error handling paths
    - net: lantiq_xrx200: fix statistics of received bytes
    - NFC: st21nfca: Fix memory leak in device probe and remove
    - net/smc: don't send CDC/LLC message if link not ready
    - net/smc: fix kernel panic caused by race of smc_sock
    - igc: Fix TX timestamp support for non-MSI-X platforms
    - ionic: Initialize the 'lif->dbid_inuse' bitmap
    - net/mlx5e: Fix wrong features assignment in case of error
    - selftests/net: udpgso_bench_tx: fix dst ip argument
    - net/ncsi: check for error return from call to nla_put_u32
    - fsl/fman: Fix missing put_device() call in fman_port_probe
    - i2c: validate user data in compat ioctl
    - nfc: uapi: use kernel size_t to fix user-space builds
    - uapi: fix linux/nfc.h userspace compilation errors
    - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly
      enabled
    - drm/amdgpu: add support for IP discovery gc_info table v2
    - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
    - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
    - usb: mtu3: add memory barrier before set GPD's HWO
    - usb: mtu3: fix list_head check warning
    - usb: mtu3: set interval of FS intr and isoc endpoint
    - binder: fix async_free_space accounting for empty parcels
    - scsi: vmw_pvscsi: Set residual data length conditionally
    - Input: appletouch - initialize work before device registration
    - Input: spaceball - fix parsing of movement data packets
    - net: fix use-after-free in tw_timer_handler
    - perf script: Fix CPU filtering of a script's switch events
    - net/sched: Extend qdisc control block with tc control block
    - platform/mellanox: mlxbf-pmc: Fix an IS_ERR() vs NULL bug in
      mlxbf_pmc_map_counters
    - net/mlx5: Fix SF health recovery flow
    - net/mlx5: Fix tc max supported prio for nic mode
    - selftests: net: Fix a typo in udpgro_fwd.sh
    - selftests: net: using ping6 for IPv6 in udpgro_fwd.sh
    - fs/mount_setattr: always cleanup mount_kattr
  * Impish update: upstream stable patchset 2022-01-21 (LP: #1958672)
    - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
    - net: usb: lan78xx: add Allied Telesis AT29M2-AF
    - ext4: prevent partial update of the extent blocks
    - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
    - ext4: check for inconsistent extents between index and leaf block
    - HID: holtek: fix mouse probing
    - HID: potential dereference of null pointer
    - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
    - spi: change clk_disable_unprepare to clk_unprepare
    - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
    - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
    - RDMA/hns: Replace kfree() with kvfree()
    - netfilter: fix regression in looped (broad|multi)cast's MAC handling
    - ARM: dts: imx6qdl-wandboard: Fix Ethernet support
    - net: marvell: prestera: fix incorrect return of port_find
    - qlcnic: potential dereference null pointer of rx_queue->page_ring
    - net: accept UFOv6 packages in virtio_net_hdr_to_skb
    - net: skip virtio_net_hdr_set_proto if protocol already set
    - igb: fix deadlock caused by taking RTNL in RPM resume path
    - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
    - bonding: fix ad_actor_system option setting to default
    - fjes: Check for error irq
    - drivers: net: smc911x: Check for error irq
    - net: ks8851: Check for error irq
    - sfc: Check null pointer of rx_queue->page_ring
    - sfc: falcon: Check null pointer of rx_queue->page_ring
    - pinctrl: bcm2835: Change init order for gpio hogs
    - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
    - hwmon: (lm90) Add basic support for TI TMP461
    - hwmon: (lm90) Introduce flag indicating extended temperature support
    - hwmon: (lm90) Drop critical attribute support for MAX6654
    - ALSA: jack: Check the return value of kstrdup()
    - ALSA: drivers: opl3: Fix incorrect use of vp->state
    - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
    - ALSA: hda/realtek: Add new alc285-hp-amp-init model
    - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
    - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
    - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
    - ipmi: bail out if init_srcu_struct fails
    - ipmi: ssif: initialize ssif_info->client early
    - ipmi: fix initialization when workqueue allocation fails
    - parisc: Correct completer in lws start
    - parisc: Fix mask used to select futex spinlock
    - tee: handle lookup of shm with reference count 0
    - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
    - platform/x86: intel_pmc_core: fix memleak on registration failure
    - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
    - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
    - gpio: dln2: Fix interrupts when replugging the device
    - mmc: sdhci-tegra: Fix switch to HS400ES mode
    - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
    - mmc: core: Disable card detect during shutdown
    - mmc: mmci: stm32: clear DLYB_CR after sending tuning command
    - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
    - mac80211: fix locking in ieee80211_start_ap error path
    - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
    - tee: optee: Fix incorrect page free bug
    - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
    - usb: gadget: u_ether: fix race in setting MAC address in setup phase
    - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
    - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
    - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
    - Input: goodix - add id->model mapping for the "9111" model
    - ASoC: tas2770: Fix setting of high sample rates
    - ASoC: rt5682: fix the wrong jack type detected
    - pinctrl: mediatek: fix global-out-of-bounds issue
    - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
    - hwmon: (lm90) Do not report 'busy' status bit as alarm
    - ax25: NPD bug when detaching AX25 device
    - hamradio: defer ax25 kfree after unregister_netdev
    - hamradio: improve the incomplete fix to avoid NPD
    - phonet/pep: refuse to enable an unbound pipe
    - selftests: KVM: Fix non-x86 compiling
    - NFSD: Fix READDIR buffer overflow
    - PM: sleep: Fix error handling in dpm_prepare()
    - bus: sunxi-rsb: Fix shutdown
    - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
    - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
    - ice: xsk: return xsk buffers back to pool when cleaning the ring
    - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
    - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
    - inet: fully convert sk->sk_rx_dst to RCU rules
    - io_uring: zero iocb->ki_pos for stream file types
    - veth: ensure skb entering GRO are not cloned.
    - net: bridge: Use array_size() helper in copy_to_user()
    - r8152: fix the force speed doesn't work for RTL8156
    - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
    - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
    - uapi: Fix undefined __always_inline on non-glibc systems
    - Revert "x86/boot: Pull up cmdline preparation and early param parsing"
    - x86/boot: Move EFI range reservation after cmdline parsing
    - ALSA: hda/hdmi: Disable silent stream on GLK
    - platform/x86: amd-pmc: only use callbacks for suspend
    - KVM: x86: Always set kvm_run->if_flag
    - KVM: x86/mmu: Don't advance iterator after restart due to yielding
    - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
    - mm, hwpoison: fix condition in free hugetlb page path
    - netfs: fix parameter of cleanup()
    - arm64: dts: lx2160a: fix scl-gpios property name
    - kfence: fix memory leak when cat kfence objects
    - Input: iqs626a - prohibit inlining of channel parsing functions
    - ASoC: SOF: Intel: pci-tgl: add ADL-M support
    - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
    - ASoC: SOF: Intel: pci-tgl: add ADL-N support
    - r8152: sync ocp base
    - tun: avoid double free in tun_free_netdev
  * Impish update: upstream stable patchset 2022-01-18 (LP: #1958287)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - nfc: fix segfault in nfc_genl_dump_devices_done
    - drm/msm/dsi: set default num_data_lanes
    - KVM: arm64: Save PSTATE early on exit
    - s390/test_unwind: use raw opcode instead of invalid instruction
    - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
    - net/mlx4_en: Update reported link modes for 1/10G
    - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
    - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
    - parisc/agp: Annotate parisc agp init functions with __init
    - i2c: rk3x: Handle a spurious start completion interrupt flag
    - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
    - drm/amd/display: Fix for the no Audio bug with Tiled Displays
    - drm/amd/display: add connector type check for CRC source set
    - tracing: Fix a kmemleak false positive in tracing_map
    - staging: most: dim2: use device release method
    - fuse: make sure reclaim doesn't write the inode
    - hwmon: (dell-smm) Fix warning on /proc/i8k creation error
    - ethtool: do not perform operations on net devices being unregistered
    - perf inject: Fix itrace space allowed for new attributes
    - memblock: free_unused_memmap: use pageblock units instead of MAX_ORDER
    - memblock: align freed memory map on pageblock boundaries with SPARSEMEM
    - memblock: ensure there is no overflow in memblock_overlaps_region()
    - arm: extend pfn_valid to take into account freed memory map alignment
    - arm: ioremap: don't abuse pfn_valid() to check if pfn is in RAM
    - hwmon: (corsair-psu) fix plain integer used as NULL pointer
    - perf bpf_skel: Do not use typedef to avoid error on old clang
    - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
    - ice: fix FDIR init missing when reset VF
    - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
    - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
    - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
    - mac80211: fix regression in SSN handling of addba tx
    - mac80211: mark TX-during-stop for TX in in_reconfig
    - mac80211: send ADDBA requests using the tid/queue of the aggregation session
    - mac80211: validate extended element ID is present
    - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
    - bpf: Fix signed bounds propagation after mov32
    - bpf: Make 32->64 bounds propagation slightly more robust
    - bpf, selftests: Add test case trying to taint map value pointer
    - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
    - vdpa: check that offsets are within bounds
    - recordmcount.pl: look for jgnop instruction as well as bcrl on s390
    - dm btree remove: fix use after free in rebalance_children()
    - audit: improve robustness of the audit queue handling
    - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
      edge
    - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
    - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
    - arm64: dts: rockchip: fix audio-supply for Rock Pi 4
    - mac80211: track only QoS data frames for admission control
    - tee: amdtee: fix an IS_ERR() vs NULL bug
    - ceph: fix duplicate increment of opened_inodes metric
    - ceph: initialize pathlen variable in reconnect_caps_cb
    - ARM: socfpga: dts: fix qspi node compatible
    - clk: Don't parent clks until the parent is fully registered
    - soc: imx: Register SoC device only on i.MX boards
    - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
    - selftests: net: Correct ping6 expected rc from 2 to 1
    - s390/kexec_file: fix error handling when applying relocations
    - sch_cake: do not call cake_destroy() from cake_init()
    - inet_diag: fix kernel-infoleak for UDP sockets
    - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
    - selftests: Add duplicate config only for MD5 VRF tests
    - selftests: Fix raw socket bind tests with VRF
    - selftests: Fix IPv6 address bind tests
    - dmaengine: st_fdma: fix MODULE_ALIAS
    - selftest/net/forwarding: declare NETIFS p9 p10
    - drm/ast: potential dereference of null pointer
    - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
    - mac80211: fix lookup when adding AddBA extension element
    - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
    - rds: memory leak in __rds_conn_create()
    - drm/amd/pm: fix a potential gpu_metrics_table memory leak
    - mptcp: clear 'kern' flag from fallback sockets
    - soc/tegra: fuse: Fix bitwise vs. logical OR warning
    - igb: Fix removal of unicast MAC filters of VFs
    - igbvf: fix double free in `igbvf_probe`
    - igc: Fix typo in i225 LTR functions
    - ixgbe: Document how to enable NBASE-T support
    - ixgbe: set X550 MDIO speed before talking to PHY
    - netdevsim: Zero-initialize memory for new map's value in function
      nsim_bpf_map_alloc
    - sfc_ef100: potential dereference of null pointer
    - net: Fix double 0x prefix print in SKB dump
    - net/smc: Prevent smc_release() from long blocking
    - net: systemport: Add global locking for descriptor lifecycle
    - sit: do not call ipip6_dev_free() from sit_init_net()
    - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
    - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
    - USB: gadget: bRequestType is a bitfield, not a enum
    - Revert "usb: early: convert to readl_poll_timeout_atomic()"
    - KVM: x86: Drop guest CPUID check for host initiated writes to
      MSR_IA32_PERF_CAPABILITIES
    - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
    - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
    - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
    - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
    - PCI/MSI: Mask MSI-X vectors only on success
    - usb: xhci: Extend support for runtime power management for AMD's Yellow
      carp.
    - USB: serial: cp210x: fix CP2105 GPIO registration
    - USB: serial: option: add Telit FN990 compositions
    - btrfs: fix memory leak in __add_inode_ref()
    - btrfs: fix double free of anon_dev after failure to create subvolume
    - zonefs: add MODULE_ALIAS_FS
    - iocost: Fix divide-by-zero on donation from low hweight cgroup
    - serial: 8250_fintek: Fix garbled text for console
    - timekeeping: Really make sure wall_to_monotonic isn't positive
    - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
    - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
    - Input: touchscreen - avoid bitwise vs logical OR warning
    - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
    - media: mxl111sf: change mutex_init() location
    - fuse: annotate lock in fuse_reverse_inval_entry()
    - ovl: fix warning in ovl_create_real()
    - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
    - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
    - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
    - rcu: Mark accesses to rcu_state.n_force_qs
    - bus: ti-sysc: Fix variable set but not used warning for reinit_modules
    - xen/blkfront: harden blkfront against event channel storms
    - xen/netfront: harden netfront against event channel storms
    - xen/console: harden hvc_xen against event channel storms
    - xen/netback: fix rx queue stall detection
    - xen/netback: don't queue unlimited number of packages
    - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
    - x86/kvm: remove unused ack_notifier callbacks
    - bpf: Fix kernel address leakage in atomic fetch
    - bpf, selftests: Add test case for atomic fetch on spilled pointer
    - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
    - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
    - s390/entry: fix duplicate tracking of irq nesting level
    - ceph: fix up non-directory creation in SGID directories
    - btrfs: convert latest_bdev type to btrfs_device and rename
    - btrfs: use latest_dev in btrfs_show_devname
    - btrfs: update latest_dev when we create a sprout device
    - btrfs: remove stale comment about the btrfs_show_devname
    - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
    - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()
    - pinctrl: amd: Fix wakeups when IRQ is shared with SCI
    - arm64: dts: rockchip: fix poweroff on helios64
    - dmaengine: idxd: add halt interrupt support
    - dmaengine: idxd: fix calling wq quiesce inside spinlock
    - arm64: dts: imx8mq: remove interconnect property from lcdif
    - iwlwifi: mvm: don't crash on invalid rate w/o STA
    - vdpa: Consider device id larger than 31
    - netdevsim: don't overwrite read only ethtool parms
    - dmaengine: idxd: fix missed completion on abort path
    - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
    - mptcp: never allow the PM to close a listener subflow
    - cfg80211: Acquire wiphy mutex on regulatory work
    - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
    - mptcp: remove tcp ulp setsockopt support
    - mptcp: fix deadlock in __mptcp_push_pending()
    - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
    - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
    - bpf: Fix extable fixup offset.
    - usb: cdnsp: Fix incorrect status for control request
    - usb: cdnsp: Fix incorrect calling of cdnsp_died function
    - usb: cdnsp: Fix issue in cdnsp_log_ep trace event
    - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
    - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
    - selinux: fix sleeping function called from invalid context
    - btrfs: check WRITE_ERR when trying to read an extent buffer
    - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
    - cifs: sanitize multiple delimiters in prepath
    - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
    - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
    - drm/amdgpu: don't override default ECO_BITs setting
    - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
    - can: m_can: make custom bittiming fields const
    - can: m_can: pci: use custom bit timings for Elkhart Lake
    - mptcp: add missing documented NL params
    - USB: core: Make do_proc_control() and do_proc_bulk() killable
  * Impish update: upstream stable patchset 2022-01-13 (LP: #1957832)
    - usb: gadget: uvc: fix multiple opens
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
    - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
    - IB/hfi1: Fix early init panic
    - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - x86/sme: Explicitly map new EFI memmap table as encrypted
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf, x86: Fix "no previous prototype" warning
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - seg6: fix the iif in the IPv6 socket control block
    - udp: using datalen to cap max gso segments
    - netfilter: conntrack: annotate data-races around ct->timeout
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
    - net/sched: fq_pie: prevent dismantle issue
    - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
      hypercall
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - scsi: qla2xxx: Format log strings only if needed
    - btrfs: clear extent buffer uptodate when we fail to write it
    - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
    - md: fix update super 1.0 on rdev size change
    - nfsd: fix use-after-free due to delegation race
    - nfsd: Fix nsfd startup race (again)
    - tracefs: Have new files inherit the ownership of their parent
    - mmc: renesas_sdhi: initialize variable properly when tuning
    - clk: qcom: regmap-mux: fix parent clock lookup
    - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
    - can: pch_can: pch_can_rx_normal: fix use after free
    - can: m_can: Disable and ignore ELO interrupt
    - libata: add horkage for ASMedia 1092
    - wait: add wake_up_pollfree()
    - SAUCE: binder: export __wake_up_pollfree for binder module
    - binder: use wake_up_pollfree()
    - signalfd: use wake_up_pollfree()
    - aio: keep poll requests on waitqueue until completed
    - aio: fix use-after-free due to missing POLLFREE handling
    - net: mvpp2: fix XDP rx queues registering
    - tracefs: Set all files to the same group ownership as the mount option
    - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
    - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
    - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
    - qede: validate non LSO skb length
    - PM: runtime: Fix pm_runtime_active() kerneldoc comment
    - ASoC: rt5682: Fix crash due to out of scope stack vars
    - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
    - ASoC: codecs: wsa881x: fix return values from kcontrol put
    - ASoC: codecs: wcd934x: handle channel mappping list correctly
    - ASoC: codecs: wcd934x: return correct value from mixer put
    - RDMA/hns: Do not halt commands during reset until later
    - RDMA/hns: Do not destroy QP resources in the hw resetting phase
    - clk: imx: use module_platform_driver
    - i40e: Fix failed opcode appearing if handling messages from VF
    - i40e: Fix pre-set max number of queues for VF
    - mtd: rawnand: fsmc: Take instruction delay into account
    - mtd: rawnand: fsmc: Fix timing computation
    - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
    - Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
    - perf tools: Fix SMT detection fast read path
    - Documentation/locking/locktypes: Update migrate_disable() bits.
    - dt-bindings: net: Reintroduce PHY no lane swap binding
    - tools build: Remove needless libpython-version feature check that breaks
      test-all fast path
    - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
    - net: altera: set a couple error code in probe()
    - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
    - net, neigh: clear whole pneigh_entry at alloc time
    - net/qla3xxx: fix an error code in ql_adapter_up()
    - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
      rp_filter tests"
    - selftests/fib_tests: Rework fib_rp_filter_test()
    - USB: gadget: detect too-big endpoint 0 requests
    - USB: gadget: zero allocate endpoint 0 buffers
    - usb: core: config: fix validation of wMaxPacketValue entries
    - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
      suspending
    - usb: core: config: using bit mask instead of individual bits
    - xhci: avoid race between disable slot command and host runtime suspend
    - iio: gyro: adxrs290: fix data signedness
    - iio: trigger: Fix reference counting
    - iio: trigger: stm32-timer: fix MODULE_ALIAS
    - iio: stk3310: Don't return error code in interrupt handler
    - iio: mma8452: Fix trigger reference couting
    - iio: ltr501: Don't return error code in trigger handler
    - iio: kxsd9: Don't return error code in trigger handler
    - iio: itg3200: Call iio_trigger_notify_done() on error
    - iio: dln2-adc: Fix lockdep complaint
    - iio: dln2: Check return value of devm_iio_trigger_register()
    - iio: at91-sama5d2: Fix incorrect sign extension
    - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
    - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
    - iio: ad7768-1: Call iio_trigger_notify_done() on error
    - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
    - csky: fix typo of fpu config macro
    - irqchip/aspeed-scu: Replace update_bits with write_bits.
    - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
    - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
    - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
    - irqchip: nvic: Fix offset for Interrupt Priority Offsets
    - misc: fastrpc: fix improper packet size calculation
    - bpf: Add selftests to cover packet access corner cases
    - HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
    - mmc: spi: Add device-tree SPI IDs
    - HID: Ignore battery for Elan touchscreen on Asus UX550VE
    - can: m_can: pci: fix incorrect reference clock rate
    - net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
    - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
    - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
    - netfilter: nft_exthdr: break evaluation if setting TCP option fails
    - net: bcm4908: Handle dma_set_coherent_mask error codes
    - net: dsa: mv88e6xxx: error handling for serdes_power functions
    - net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
    - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
    - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
    - timers: implement usleep_idle_range()
    - btrfs: fix re-dirty process of tree-log nodes
    - btrfs: free exchange changeset on failures
    - perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
      usage
    - perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
    - perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
    - perf intel-pt: Fix state setting when receiving overflow (OVF) packet
    - perf intel-pt: Fix next 'err' value, walking trace
    - perf intel-pt: Fix missing 'instruction' events with 'q' option
    - perf intel-pt: Fix error timestamp setting on the decoder error path
    - selftests: KVM: avoid failures due to reserved HyperTransport region
    - hwmon: (pwm-fan) Ensure the fan going on in .probe()
    - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
    - i2c: mpc: Use atomic read and fix break condition
    - ALSA: usb-audio: Reorder snd_djm_devices[] entries
    - clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
    - misc: rtsx: Avoid mangling IRQ during runtime PM
    - bus: mhi: pci_generic: Fix device recovery failed issue
    - bus: mhi: core: Add support for forced PM resume
    - clocksource/drivers/dw_apb_timer_of: Fix probe failure
  * Impish update: upstream stable patchset 2022-01-07 (LP: #1956791)
    - can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
    - gfs2: release iopen glock early in evict
    - gfs2: Fix length of holes reported at end-of-file
    - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for
      persistent memory"
    - drm/sun4i: fix unmet dependency on RESET_CONTROLLER for PHY_SUN6I_MIPI_DPHY
    - mac80211: do not access the IV when it was stripped
    - net/smc: Transfer remaining wait queue entries during fallback
    - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
    - net: return correct error code
    - platform/x86: thinkpad_acpi: Add support for dual fan control
    - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
    - s390/setup: avoid using memblock_enforce_memory_limit
    - btrfs: check-integrity: fix a warning on write caching disabled disk
    - thermal: core: Reset previous low and high trip during thermal zone init
    - scsi: iscsi: Unblock session then wake up error handler
    - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
    - drm/amd/amdgpu: fix potential memleak
    - ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
    - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in
      hns_dsaf_ge_srst_by_port()
    - ipv6: check return value of ipv6_skip_exthdr
    - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of
      bound
    - net: ethernet: dec: tulip: de4x5: fix possible array overflows in
      type3_infoblock()
    - perf inject: Fix ARM SPE handling
    - perf hist: Fix memory leak of a perf_hpp_fmt
    - perf report: Fix memory leaks around perf_tip()
    - net/smc: Avoid warning of possible recursive locking
    - ACPI: Add stubs for wakeup handler functions
    - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
    - kprobes: Limit max data_size of the kretprobe instances
    - rt2x00: do not mark device gone on EPROTO errors during start
    - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
    - s390/pci: move pseudo-MMIO to prevent MIO overlap
    - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
    - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
    - ipv6: fix memory leak in fib6_rule_suppress
    - drm/amd/display: Allow DSC on supported MST branch devices
    - KVM: Disallow user memslot with size that exceeds "unsigned long"
    - KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST
    - KVM: x86: Use a stable condition around all VT-d PI paths
    - KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1
    - KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
    - tracing/histograms: String compares should not care about signed values
    - wireguard: selftests: increase default dmesg log size
    - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
    - wireguard: selftests: actually test for routing loops
    - wireguard: selftests: rename DEBUG_PI_LIST to DEBUG_PLIST
    - wireguard: device: reset peer src endpoint when netns exits
    - wireguard: receive: use ring buffer for incoming handshakes
    - wireguard: receive: drop handshakes if queue lock is contended
    - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
    - i2c: stm32f7: flush TX FIFO upon transfer errors
    - i2c: stm32f7: recover the bus on access timeout
    - i2c: stm32f7: stop dma transfer in case of NACK
    - i2c: cbus-gpio: set atomic transfer callback
    - natsemi: xtensa: fix section mismatch warnings
    - tcp: fix page frag corruption on page fault
    - net: qlogic: qlcnic: Fix a NULL pointer dereference in
      qlcnic_83xx_add_rings()
    - net: mpls: Fix notifications when deleting a device
    - siphash: use _unaligned version by default
    - arm64: ftrace: add missing BTIs
    - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
    - selftests: net: Correct case name
    - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
    - ASoC: tegra: Fix wrong value type in ADMAIF
    - ASoC: tegra: Fix wrong value type in I2S
    - ASoC: tegra: Fix wrong value type in DMIC
    - ASoC: tegra: Fix wrong value type in DSPK
    - ASoC: tegra: Fix kcontrol put callback in ADMAIF
    - ASoC: tegra: Fix kcontrol put callback in I2S
    - ASoC: tegra: Fix kcontrol put callback in DMIC
    - ASoC: tegra: Fix kcontrol put callback in DSPK
    - ASoC: tegra: Fix kcontrol put callback in AHUB
    - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
    - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
    - ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
    - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ
      is available
    - net: marvell: mvpp2: Fix the computation of shared CPUs
    - dpaa2-eth: destroy workqueue at the end of remove function
    - net: annotate data-races on txq->xmit_lock_owner
    - ipv4: convert fib_num_tclassid_users to atomic_t
    - net/smc: fix wrong list_del in smc_lgr_cleanup_early
    - net/rds: correct socket tunable error in rds_tcp_tune()
    - drm/msm/a6xx: Allocate enough space for GMU registers
    - drm/msm: Do hw_init() before capturing GPU state
    - atlantic: Increase delay for fw transactions
    - atlatnic: enable Nbase-t speeds with base-t
    - atlantic: Fix to display FW bundle version instead of FW mac version.
    - atlantic: Add missing DIDs and fix 115c.
    - Remove Half duplex mode speed capabilities.
    - atlantic: Fix statistics logic for production hardware
    - atlantic: Remove warn trace message.
    - KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
    - KVM: VMX: Set failure code in prepare_vmcs02()
    - x86/sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
    - x86/entry: Use the correct fence macro after swapgs in kernel CR3
    - x86/xen: Add xenpv_restore_regs_and_return_to_usermode()
    - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
    - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
    - parisc: Fix KBUILD_IMAGE for self-extracting kernel
    - parisc: Fix "make install" on newer debian releases
    - vgacon: Propagate console boot parameters before calling `vc_resize'
    - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
    - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
    - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
    - x86/tsc: Add a timer to make sure TSC_adjust is always checked
    - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms
    - x86/64/mm: Map all kernel memory into trampoline_pgd
    - tty: serial: msm_serial: Deactivate RX DMA for polling support
    - serial: pl011: Add ACPI SBSA UART match id
    - serial: tegra: Change lower tolerance baud rate limit for tegra20 and
      tegra30
    - serial: core: fix transmit-buffer reset and memleak
    - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
    - serial: 8250_pci: rewrite pericom_do_set_divisor()
    - serial: 8250: Fix RTS modem control while in rs485 mode
    - iwlwifi: mvm: retry init flow if failed
    - parisc: Mark cr16 CPU clocksource unstable on all SMP machines
    - net/tls: Fix authentication failure in CCM mode
    - ALSA: usb-audio: Restrict rates for the shared clocks
    - ALSA: usb-audio: Check available frames for the next packet size
    - ALSA: usb-audio: Add spinlock to stop_urbs()
    - ALSA: usb-audio: Avoid killing in-flight URBs during draining
    - mac80211: fix throughput LED trigger
    - x86/hyperv: Move required MSRs check to initial platform probing
    - platform/x86: dell-wmi-descriptor: disable by default
    - btrfs: silence lockdep when reading chunk tree during mount
    - drm/amd/pm: Remove artificial freq level on Navi1x
    - perf sort: Fix the 'weight' sort key behavior
    - perf sort: Fix the 'ins_lat' sort key behavior
    - perf sort: Fix the 'p_stage_cyc' sort key behavior
    - tracing: Don't use out-of-sync va_list in event printing
    - dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow
    - drm/i915/dp: Perform 30ms delay after source OUI write
    - KVM: SVM: move check for kvm_vcpu_apicv_active outside of
      avic_vcpu_{put|load}
    - KVM: fix avic_set_running for preemptable kernels
    - KVM: x86/mmu: Fix TDP MMU page table level
    - KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
    - KVM: x86: ignore APICv if LAPIC is not enabled
    - KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
    - KVM: x86: check PIR even for vCPUs with disabled APICv
    - net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X
    - net: dsa: mv88e6xxx: Drop unnecessary check in
      mv88e6393x_serdes_erratum_4_6()
    - net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver
    - net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family
    - net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family
    - net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed
    - iwlwifi: fix warnings produced by kernel debug options
    - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
    - octeontx2-af: Fix a memleak bug in rvu_mbox_init()
    - drm/vc4: kms: Wait for the commit before increasing our clock rate
    - drm/vc4: kms: Fix return code check
    - drm/vc4: kms: Add missing drm_crtc_commit_put
    - drm/vc4: kms: Clear the HVS FIFO commit pointer once done
    - drm/vc4: kms: Don't duplicate pending commit
    - drm/vc4: kms: Fix previous HVS commit wait
    - KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
    - KVM: SEV: initialize regions_list of a mirror VM
    - preempt/dynamic: Fix setup_preempt_mode() return value
    - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails
    - serial: 8250_bcm7271: UART errors after resuming from S2
    - usb: cdns3: gadget: fix new urb never complete if ep cancel previous
      requests
    - usb: cdnsp: Fix a NULL pointer dereference in cdnsp_endpoint_init()
    - serial: liteuart: Fix NULL pointer dereference in ->remove()
    - serial: liteuart: fix use-after-free and memleak on unbind
    - serial: liteuart: fix minor-number leak on probe errors
  * CVE-2022-23222
    - bpf: Fix out of bounds access from invalid *_or_null type verification
    - bpf: Don't promote bogus looking registers after null check.
    - bpf, selftests: Add verifier test for mem_or_null register with offset.

-- Juerg Haefliger <juergh@canonical.com>  Wed, 16 Mar 2022 08:02:07 +0100

Changed in linux-raspi (Ubuntu Impish):
status:	Fix Committed → Fix Released

Ubuntu
linux-raspi package

Kernel fails to boot in ScalingStack

Bug Description

CVE References

Other bug subscribers

Remote bug watches

	Status	Importance	Assigned to
linux-raspi (Ubuntu)	Fix Released	Undecided	Juerg Haefliger
Focal	Fix Released	Undecided	Juerg Haefliger
Impish	Fix Released	Undecided	Juerg Haefliger
Jammy	Fix Released	Undecided	Juerg Haefliger
linux-raspi-5.4 (Ubuntu)	Invalid	Undecided	Unassigned
Bionic	Fix Released	Undecided	Juerg Haefliger

Ubuntulinux-raspi package

Kernel fails to boot in ScalingStack

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-raspi package