ELSA-2022-10022

ELSA-2022-10022 - Unbreakable Enterprise kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2022-11-26

Description


[5.15.0-4.70.5.2]
- Revert 'sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle' (Samasth Norway Ananda) [Orabug: 34783367]

[5.15.0-4.70.5.1]
- NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust) [Orabug: 34751176]

[5.15.0-4.70.5]
- uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 34595591]
- Revert 'scsi: lpfc: SLI path split: Refactor lpfc_iocbq' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: SLI path split: Refactor SCSI paths' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: Resolve some cleanup issues following SLI path refactoring' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input' (John Donnelly) [Orabug: 34678989]
- Revert 'scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE' (John Donnelly) [Orabug: 34678989]
- RDS/IB Fix allocation warning (Hans Westgaard Ry) [Orabug: 34684321]
- fs: remove no_llseek (Jason A. Donenfeld) [Orabug: 34705082]
- vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34705082]
- dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld) [Orabug: 34705082]
- fs: do not compare against ->llseek (Jason A. Donenfeld) [Orabug: 34705082]
- fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld) [Orabug: 34705082]
- hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek) [Orabug: 34710681]
- hwmon: (opbmc) Driver message prefixes (Jan Zdarek) [Orabug: 34710681]
- NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34716070]

[5.15.0-4.70.4]
- xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer) [Orabug: 34512197]
- net/rds: Send congestion map updates only via path zero (Anand Khoje) [Orabug: 34578048]
- Revert 'RDS/IB: Fix RDS IB SRQ implementation and tune it' (Hans Westgaard Ry) [Orabug: 34662659]
- RDMA/cma: Use output interface for net_dev check (Hakon Bugge) [Orabug: 34694979]
- crypto: qat - add support for 401xx devices (Giovanni Cabiddu) [Orabug: 34686738]

[5.15.0-4.70.3]
- Revert 'Makefile: link with -z noexecstack --no-warn-rwx-segments' (Jack Vogel)
- Revert 'x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments' (Jack Vogel)

[5.15.0-4.70.2]
- LTS version: v5.15.70 (Jack Vogel)
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)
- KVM: SEV: add cache flush to solve SEV cache incoherency issues (Mingwei Zhang)
- net: Find dst with sk's xfrm policy not ctl_sk (sewookseo)
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)
- mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)
- drm/panfrost: devfreq: set opp to the recommended one to configure regulator (Clement Peron)
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)
- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells)
- net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)
- ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar)
- ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)
- wifi: mac80211_hwsim: check length for virtio packets (Soenke Huster)
- rxrpc: Fix calc of resend age (David Howells)
- rxrpc: Fix local destruction being repeated (David Howells)
- scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (Hannes Reinecke)
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)
- ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)
- arm64: dts: juno: Add missing MHU secure-irq (Jassi Brar)
- video: fbdev: i740fb: Error out if 'pixclock' equals zero (Zheyu Ma)
- binder: remove inaccurate mmap_assert_locked() (Carlos Llamas)
- drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (Alex Deucher)
- drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (Alex Deucher)
- drm/amdgpu: Don't enable LTR if not supported (Lijo Lazar)
for parisc and xtensa (Ben Hutchings)
- parisc: Allow CONFIG_64BIT with ARCH=parisc (Helge Deller)
- cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher)
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)
- cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg)
- of/device: Fix up of_dma_configure_id() stub (Thierry Reding)
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)
- block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (Stefan Roesch)
- drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy)
- drm/meson: Correct OSD1 global alpha value (Stuart Menefy)
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohar)
- NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust)
- pinctrl: sunxi: Fix name for A100 R_PIO (Michael Wu)
- pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH (Joao H. Spies)
- pinctrl: qcom: sc8180x: Fix wrong pin numbers (Molly Sophia)
- pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Molly Sophia)
- of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)
- tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga)
- serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo)
- drm/tegra: vic: Fix build warning when CONFIG_PM=n (YueHaibing)
- LTS version: v5.15.69 (Jack Vogel)
- Input: goodix - add compatible string for GT1158 (Jarrah Gosbell)
- RDMA/irdma: Use s/g array in post send only when its valid (Sindhu-Devale)
- usb: gadget: f_uac2: fix superspeed transfer (Jing Leng)
- usb: gadget: f_uac2: clean up some inconsistent indenting (Colin Ian King)
- soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride)
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)
to IGNORE_UAS (Hu Xiaoying)
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)
- perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe)
- net: dsa: hellcreek: Print warning only once (Kurt Kanzenbach)
- drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (Chengming Gui)
- nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi)
- Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli)
- ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)
- gpio: mockup: remove gpio debugfs when remove device (Wei Yongjun)
- tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)
- hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu)
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)
- dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (Krzysztof Kozlowski)
- drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (Maximilian Luz)
- Input: goodix - add support for GT1158 (Ondrej Jirman)
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (Lu Baolu)
- tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)
- tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou)
- task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov)
- x86/mm: Force-inline __phys_addr_nodebug() (Borislav Petkov)
- lockdep: Fix -Wunused-parameter for _THIS_IP_ (Nick Desaulniers)
- ARM: dts: at91: sama7g5ek: specify proper regulator output ranges (Claudiu Beznea)
- ARM: dts: at91: fix low limit for CPU regulator (Claudiu Beznea)
- ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (Marco Felsch)
- ARM: dts: imx: align SPI NOR node name with dtschema (Krzysztof Kozlowski)
- ACPI: resource: skip IRQ override on AMD Zen platforms (Chuanhong Guo)
- NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (Dave Wysochanski)
- LTS version: v5.15.68 (Jack Vogel)
- ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency (Claudiu Beznea)
- perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) (Arnaldo Carvalho de Melo)
- drm/bridge: display-connector: implement bus fmts callbacks (Neil Armstrong)
- arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Ionela Voinescu)
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (Lu Baolu)
- arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Brown)
- Revert 'arm64: kasan: Revert 'arm64: mte: reset the page tag in page->flags'' (Sasha Levin)
- hwmon: (mr75203) enable polling for all VM channels (Eliav Farber)
- hwmon: (mr75203) fix multi-channel voltage reading (Eliav Farber)
- hwmon: (mr75203) fix voltage equation for negative source input (Eliav Farber)
- hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors (Eliav Farber)
- hwmon: (mr75203) fix VM sensor allocation when 'intel,vm-map' not defined (Eliav Farber)
- s390/boot: fix absolute zero lowcore corruption on boot (Alexander Gordeev)
- iommu/amd: use full 64-bit value in build_completion_wait() (John Sperbeck)
- swiotlb: avoid potential left shift overflow (Chao Gao)
- i40e: Fix ADQ rate limiting for PF (Przemyslaw Patynowski)
- i40e: Refactor tc mqprio checks (Przemyslaw Patynowski)
- kbuild: disable header exports for UML in a straightforward way (Masahiro Yamada)
- MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)
- ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (Nathan Chancellor)
- ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (Claudiu Beznea)
- hwmon: (tps23861) fix byte order in resistance register (Alexandru Gagniuc)
- perf script: Fix Cannot print 'iregs' field for hybrid systems (Zhengjun Xing)
- sch_sfb: Also store skb len before calling child enqueue (Toke Hoiland-Jorgensen)
- RDMA/irdma: Report RNR NAK generation in device caps (Sindhu-Devale)
- RDMA/irdma: Return correct WC error for bind operation failure (Sindhu-Devale)
- RDMA/irdma: Report the correct max cqes from query device (Sindhu-Devale)
- nvmet: fix mar and mor off-by-one errors (Dennis Maisenbacher)
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)
- nvme-tcp: fix regression that causes sporadic requests to time out (Sagi Grimberg)
- nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)
- erofs: fix pcluster use-after-free on UP platforms (Gao Xiang)
- RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)
- IB/core: Fix a nested dead lock as part of ODP flow (Yishai Hadas)
- ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)
- RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)
- xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (Paul Durrant)
- iavf: Detach device during reset task (Ivan Vecera)
- i40e: Fix kernel crash during module removal (Ivan Vecera)
- ice: use bitmap_free instead of devm_kfree (Michal Swiatkowski)
- tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet)
- net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov)
- tipc: fix shift wrapping bug in map_get() (Dan Carpenter)
- sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Hoiland-Jorgensen)
- Revert 'net: phy: meson-gxl: improve link-up behavior' (Heiner Kallweit)
- afs: Use the operation issue time instead of the reply time for callbacks (David Howells)
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)
- rxrpc: Fix ICMP/ICMP6 error handling (David Howells)
- ALSA: usb-audio: Register card again for iface over delayed_register option (Takashi Iwai)
- ALSA: usb-audio: Inform the delayed registration more properly (Takashi Iwai)
- RDMA/srp: Set scmnd->result only when scmnd is not NULL (yangx.jy@fujitsu.com)
- netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)
- netfilter: nf_tables: clean up hook list when offload flags check fails (Pablo Neira Ayuso)
- netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)
- ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time (Claudiu Beznea)
- ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time (Claudiu Beznea)
- ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (Claudiu Beznea)
- ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (Claudiu Beznea)
- ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh (Claudiu Beznea)
- ARM: at91: pm: fix self-refresh for sama7g5 (Claudiu Beznea)
- wifi: wilc1000: fix DMA on stack objects (Ajay.Kathat@microchip.com)
- RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (Wenpeng Liang)
- RDMA/hns: Fix supported page size (Chengchang Tang)
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)
- RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)
- tee: fix compiler warning in tee_shm_register() (Jens Wiklander)
- regulator: core: Clean up on enable failure (Andrew Halaney)
- soc: imx: gpcv2: Assert reset before ungating clock (Marek Vasut)
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)
- RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (Jack Wang)
- RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (Jack Wang)
- ASoC: qcom: sm8250: add missing module owner (Srinivas Kandagatla)
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)
- NFS: Fix another fsync() issue after a server reboot (Trond Myklebust)
- NFS: Save some space in the inode (Trond Myklebust)
- NFS: Further optimisations for 'ls -l' (Trond Myklebust)
- scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)
- scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)
- drm/i915: Implement WaEdpLinkRateDataReload (Ville Syrjala)
- nvmet: fix a use-after-free (Bart Van Assche)
- drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)
- sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman)
- debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)
- kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)
- vfio/type1: Unpin zero pages (Alex Williamson)
- btrfs: zoned: set pseudo max append zone limit in zone emulation mode (Shin'ichiro Kawasaki)
- tracing: Fix to check event_mutex is held while accessing trigger list (Masami Hiramatsu (Google))
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)
- ALSA: usb-audio: Split endpoint setups for hw_params and prepare (Takashi Iwai)
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai)
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)
- fbdev: fbcon: Destroy mutex on freeing struct fb_info (Shigeru Yoshida)
- md: Flush workqueue md_rdev_misc_wq in md_alloc() (David Sloan)
- net/core/skbuff: Check the return value of skb_copy_bits() (lily)
- cpufreq: check only freq_table in __resolve_freq() (Lukasz Luba)
- netfilter: conntrack: work around exceeded receive window (Florian Westphal)
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)
- Revert 'parisc: Show error if wrong 32/64-bit compiler is being used' (Helge Deller)
- scsi: ufs: core: Reduce the power mode change timeout (Bart Van Assche)
- drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)
- drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (YiPeng Chai)
- drm/gem: Fix GEM handle release errors (Jeffy Chen)
- scsi: megaraid_sas: Fix double kfree() (Guixin Liu)
- scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (Tony Battersby)
- Revert 'mm: kmemleak: take a full lowmem check in kmemleak_*_phys()' (Yee Lee)
- fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)
- efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)
- efi: libstub: Disable struct randomization (Ard Biesheuvel)
- net: wwan: iosm: remove pointless null check (Jakub Kicinski)
- LTS version: v5.15.67 (Jack Vogel)
- kbuild: fix up permissions on scripts/pahole-flags.sh (Greg Kroah-Hartman)
- LTS version: v5.15.66 (Jack Vogel)
- USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)
- USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)
- usb: dwc3: disable USB core PHY management (Johan Hovold)
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)
- usb: dwc3: fix PHY disable sequence (Johan Hovold)
- kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo)
- kbuild: Unify options for BTF generation for vmlinux and modules (Jiri Olsa)
- tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Mazin Al Haddad)
- drm/i915: Skip wm/ddb readout for disabled pipes (Ville Syrjala)
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)
- ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)
- ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)
- ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (Kacper Michajlow)
- net: mac802154: Fix a condition in the receive path (Miquel Raynal)
- net: Use u64_stats_fetch_begin_irq() for stats fetch. (Sebastian Andrzej Siewior)
- ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)
- wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)
- driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)
- usb: xhci-mtk: fix bandwidth release issue (Chunfeng Yun)
- usb: xhci-mtk: relax TT periodic bandwidth allocation (Chunfeng Yun)
- USB: core: Prevent nested device-reset calls (Alan Stern)
- s390: fix nospec table alignments (Josh Poimboeuf)
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)
- usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)
- usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (Pawel Laszczak)
- usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak)
- usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)
- usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (Badhri Jagan Sridharan)
- usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (Utkarsh Patel)
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)
- USB: serial: option: add Quectel EM060K modem (Yonglin Tan)
- USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)
- USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)
- xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)
- media: mceusb: Use new usb_control_msg_*() routines (Alan Stern)
- usb: dwc3: pci: Add support for Intel Raptor Lake (Heikki Krogerus)
- thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)
- xen-blkfront: Cache feature_persistent value before advertisement (SeongJae Park)
- xen-blkfront: Advertise feature-persistent as user requested (SeongJae Park)
- xen-blkback: Advertise feature-persistent as user requested (SeongJae Park)
- mm: pagewalk: Fix race between unmap and page walker (Steven Price)
- xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (Dan Carpenter)
- KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)
- gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)
- hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)
- clk: bcm: rpi: Add missing newline (Stefan Wahren)
- clk: bcm: rpi: Prevent out-of-bounds access (Stefan Wahren)
- clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET)
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)
- Input: rk805-pwrkey - fix module autoloading (Peter Robinson)
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)
- Revert 'clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops' (Stephen Boyd)
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)
- drm/i915/reg: Fix spelling mistake 'Unsupport' -> 'Unsupported' (Colin Ian King)
- KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (Jim Mattson)
- cifs: fix small mempool leak in SMB2_negotiate() (Enzo Matsumiya)
- binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas)
- binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)
- mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Adrian Hunter)
- mmc: core: Fix UHS-I SD 1.8V workaround branch (Adrian Hunter)
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)
- misc: fastrpc: fix memory corruption on open (Johan Hovold)
- misc: fastrpc: fix memory corruption on probe (Johan Hovold)
- iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)
- iio: ad7292: Prevent regulator double disable (Matti Vaittinen)
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)
- musb: fix USB_MUSB_TUSB6010 dependency (Arnd Bergmann)
- vt: Clear selection before changing the font (Helge Deller)
- powerpc: align syscall table for ppc32 (Masahiro Yamada)
- staging: r8188eu: add firmware dependency (Grzegorz Szymaszek)
- staging: rtl8712: fix use after free bugs (Dan Carpenter)
- serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)
- soundwire: qcom: fix device status array range (Srinivas Kandagatla)
- net/smc: Remove redundant refcount increase (Yacan Liu)
- Revert 'sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb' (Jakub Kicinski)
- tcp: annotate data-race around challenge_timestamp (Eric Dumazet)
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Hoiland-Jorgensen)
- kcm: fix strp_init() order and cleanup (Cong Wang)
- mlxbf_gige: compute MDIO period based on i1clk (David Thompson)
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)
- net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Wang Hai)
- net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)
- net: dsa: xrs700x: Use irqsave variant for u64 stats update (Sebastian Andrzej Siewior)
- openvswitch: fix memory leak at failed datapath creation (Andrey Zhadchenko)
- net: smsc911x: Stop and start PHY during suspend and resume (Florian Fainelli)
- net: sparx5: fix handling uneven length packets in manual extraction (Casper Andersson)
- Revert 'xhci: turn off port power in shutdown' (Mathias Nyman)
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)
- ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (Peter Ujfalusi)
- ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg (Pierre-Louis Bossart)
- drm/i915/display: avoid warnings when registering dual panel backlight (Arun R Murthy)
- drm/i915/backlight: extract backlight code to a separate file (Jani Nikula)
- ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)
- bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui)
- bpf: Restrict bpf_sys_bpf to CAP_PERFMON (YiFei Zhu)
- skmsg: Fix wrong last sg check in sk_msg_recvmsg() (Liu Jian)
- iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)
- drm/msm/dsi: Fix number of regulators for SDM660 (Douglas Anderson)
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)
- drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (Kuogee Hsieh)
- drm/msm/dsi: fix the inconsistent indenting (sunliming)
- LTS version: v5.15.65 (Jack Vogel)
- net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)
- android: binder: fix lockdep check on clearing vma (Liam Howlett)
- btrfs: fix space cache corruption and potential double allocations (Omar Sandoval)
- kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)
- btrfs: tree-checker: check for overlapping extent items (Josef Bacik)
- btrfs: fix lockdep splat with reloc root extent buffers (Josef Bacik)
- btrfs: move lockdep class helpers to locking.c (Josef Bacik)
- testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal)
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)
- drm/amd/display: avoid doing vm_init multiple time (Charlene Liu)
- drm/amdgpu: Increase tlb flush timeout for sriov (Dusica Milinkovic)
- drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)
- drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Evan Quan)
- ksmbd: don't remove dos attribute xattr on O_TRUNC open (Namjae Jeon)
- s390/hypfs: avoid error message under KVM (Juergen Gross)
- neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)
- ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured (Namjae Jeon)
- drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)
- drm/amd/display: For stereo keep 'FLIP_ANY_FRAME' (Alvin Lee)
- drm/amd/display: Fix HDMI VSIF V3 incorrect issue (Leo Ma)
- drm/amd/display: Avoid MPC infinite loop (Josip Pavic)
- ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path (Biju Das)
- fs/ntfs3: Fix work with fragmented xattr (Konstantin Komarov)
- btrfs: fix warning during log replay when bumping inode link count (Filipe Manana)
- btrfs: add and use helper for unlinking inode during log replay (Filipe Manana)
- btrfs: remove no longer needed logic for replaying directory deletes (Filipe Manana)
- btrfs: remove root argument from btrfs_unlink_inode() (Filipe Manana)
- mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Liming Sun)
- mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Sebastian Reichel)
- mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Yifeng Zhao)
- mmc: mtk-sd: Clear interrupts when cqe off/disable (Wenbin Mei)
- drm/i915/gt: Skip TLB invalidations once wedged (Chris Wilson)
- HID: thrustmaster: Add sparco wheel and fix array length (Michael Hubner)
- HID: asus: ROG NKey: Ignore portion of 0x5a report (Josh Kilmer)
- HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (Akihiko Odaki)
- HID: add Lenovo Yoga C630 battery quirk (Steev Klimaszewski)
- ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (Takashi Iwai)
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn)
- bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)
- fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)
- net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei)
- HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)
- media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)
- udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)
- Revert 'PCI/portdrv: Don't disable AER reporting in get_port_device_capability()' (Greg Kroah-Hartman)
- Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)
- kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)
- io_uring: fix UAF due to missing POLLFREE handling (Pavel Begunkov)
- io_uring: fix wrong arm_poll error handling (Pavel Begunkov)
- io_uring: fail links when poll fails (Pavel Begunkov)


Related CVEs


CVE-2022-1184

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 8 (aarch64) kernel-uek-5.15.0-4.70.5.2.el8uek.src.rpm0426aec2b3af89b2d43f7f3499adbee1-
bpftool-5.15.0-4.70.5.2.el8uek.aarch64.rpmf57d7bf564ef2aa9729fd850b75902c0-
kernel-uek-5.15.0-4.70.5.2.el8uek.aarch64.rpme809f2c87280033150b15dddf7268043-
kernel-uek-core-5.15.0-4.70.5.2.el8uek.aarch64.rpm679789c31ff1b2d3f0f9d8f45f390c4c-
kernel-uek-debug-5.15.0-4.70.5.2.el8uek.aarch64.rpm286ecbd226cb187dff627f1b6e8e08d6-
kernel-uek-debug-core-5.15.0-4.70.5.2.el8uek.aarch64.rpmd1f0b49677681d605b64d1cdac66cea3-
kernel-uek-debug-devel-5.15.0-4.70.5.2.el8uek.aarch64.rpm9302075dd59df7ff6d1124ac4670c15e-
kernel-uek-debug-modules-5.15.0-4.70.5.2.el8uek.aarch64.rpmb885976c90fb92cf53b88bcd1e933c1b-
kernel-uek-debug-modules-extra-5.15.0-4.70.5.2.el8uek.aarch64.rpma5af2c8246780e8c50093ea21114f8d6-
kernel-uek-devel-5.15.0-4.70.5.2.el8uek.aarch64.rpmc7b5fade48c33a9bfac6f38cf42121ae-
kernel-uek-doc-5.15.0-4.70.5.2.el8uek.noarch.rpm5156110e15cd18b773721d059402d2f5-
kernel-uek-modules-5.15.0-4.70.5.2.el8uek.aarch64.rpm54642ac4da9317ba678cd1c73c71f445-
kernel-uek-modules-extra-5.15.0-4.70.5.2.el8uek.aarch64.rpm6f824f623f042d5b6ba19b824cf6bce0-
Oracle Linux 8 (x86_64) kernel-uek-5.15.0-4.70.5.2.el8uek.src.rpm0426aec2b3af89b2d43f7f3499adbee1-
bpftool-5.15.0-4.70.5.2.el8uek.x86_64.rpm0eacdbf0a4f8a00c030b35e36c2f221d-
kernel-uek-5.15.0-4.70.5.2.el8uek.x86_64.rpm3e4e0cc4233ed735fe720eab1038adcc-
kernel-uek-core-5.15.0-4.70.5.2.el8uek.x86_64.rpm8ce1f7500e01345b6e4517899b08c1b8-
kernel-uek-debug-5.15.0-4.70.5.2.el8uek.x86_64.rpm5557233469a22e90ff8bc89eafe13cd2-
kernel-uek-debug-core-5.15.0-4.70.5.2.el8uek.x86_64.rpmad30d58cd1860fb6ea15f4b613ab008a-
kernel-uek-debug-devel-5.15.0-4.70.5.2.el8uek.x86_64.rpm6f15bb33b1cc5c241da27095ddf73738-
kernel-uek-debug-modules-5.15.0-4.70.5.2.el8uek.x86_64.rpmd97b37be44e94cfd8ac679902a02a5bf-
kernel-uek-debug-modules-extra-5.15.0-4.70.5.2.el8uek.x86_64.rpm9e24f822698bc875e12db37e1ebd21c9-
kernel-uek-devel-5.15.0-4.70.5.2.el8uek.x86_64.rpmb5efc8b19c12cf9bc1a978e80818534b-
kernel-uek-doc-5.15.0-4.70.5.2.el8uek.noarch.rpm5156110e15cd18b773721d059402d2f5-
kernel-uek-modules-5.15.0-4.70.5.2.el8uek.x86_64.rpmfa1e7daffb3f6919eb6bef4cf4df90f3-
kernel-uek-modules-extra-5.15.0-4.70.5.2.el8uek.x86_64.rpmda52e9f1af9aa0cb984c22646e36f605-
Oracle Linux 9 (aarch64) kernel-uek-5.15.0-4.70.5.2.el9uek.src.rpm5b0c10cdd5ebbcaff73a472dafac1819-
bpftool-5.15.0-4.70.5.2.el9uek.aarch64.rpmc6e8bb4b04d5a2b72222aa4cc67075ff-
kernel-uek-5.15.0-4.70.5.2.el9uek.aarch64.rpmb9e6aa955a6fa802f3db21924733584d-
kernel-uek-core-5.15.0-4.70.5.2.el9uek.aarch64.rpmb02cd44469c3ec7901dcbb56d006d99b-
kernel-uek-debug-5.15.0-4.70.5.2.el9uek.aarch64.rpm72623a0a2f3fe50cc59b6e70b6e27dad-
kernel-uek-debug-core-5.15.0-4.70.5.2.el9uek.aarch64.rpm18a25962ccbcfda80d4ceddc54800c76-
kernel-uek-debug-devel-5.15.0-4.70.5.2.el9uek.aarch64.rpm6bcd9ec5c34a24818f3f5638702d3924-
kernel-uek-debug-modules-5.15.0-4.70.5.2.el9uek.aarch64.rpmb6c93df59e756df97cc20445068ae1db-
kernel-uek-debug-modules-extra-5.15.0-4.70.5.2.el9uek.aarch64.rpm968d7b76e6cd162545b6b4544cf843d8-
kernel-uek-devel-5.15.0-4.70.5.2.el9uek.aarch64.rpmcf56704423e7db50a87ce42aa66267eb-
kernel-uek-doc-5.15.0-4.70.5.2.el9uek.noarch.rpm29bb0a7f05fa4242ebc43597005079a1-
kernel-uek-modules-5.15.0-4.70.5.2.el9uek.aarch64.rpm06f604b26107a932ea971833739659c6-
kernel-uek-modules-extra-5.15.0-4.70.5.2.el9uek.aarch64.rpm773679d340e320007ba510ed19908269-
Oracle Linux 9 (x86_64) kernel-uek-5.15.0-4.70.5.2.el9uek.src.rpm5b0c10cdd5ebbcaff73a472dafac1819-
bpftool-5.15.0-4.70.5.2.el9uek.x86_64.rpmace954cdd18ac0114a2a5d0accc66a6b-
kernel-uek-5.15.0-4.70.5.2.el9uek.x86_64.rpmf4b1878e29a9765eca5eb110133d7756-
kernel-uek-core-5.15.0-4.70.5.2.el9uek.x86_64.rpmc49116f06505b009a98c1c8b21b81ccd-
kernel-uek-debug-5.15.0-4.70.5.2.el9uek.x86_64.rpm3dd03f4443d0033af0830870a0a61155-
kernel-uek-debug-core-5.15.0-4.70.5.2.el9uek.x86_64.rpmbc66e2dff661d50b8fc35aae384d59bc-
kernel-uek-debug-devel-5.15.0-4.70.5.2.el9uek.x86_64.rpmc4881901c0922586a109f586683efc1d-
kernel-uek-debug-modules-5.15.0-4.70.5.2.el9uek.x86_64.rpm190b32aa9a757e30a3560e3fdb94c8fb-
kernel-uek-debug-modules-extra-5.15.0-4.70.5.2.el9uek.x86_64.rpm5654619d79a7d40e8f8380a1732c2ee4-
kernel-uek-devel-5.15.0-4.70.5.2.el9uek.x86_64.rpmaf117fe27f6743f722a7b06bf6a08533-
kernel-uek-doc-5.15.0-4.70.5.2.el9uek.noarch.rpm29bb0a7f05fa4242ebc43597005079a1-
kernel-uek-modules-5.15.0-4.70.5.2.el9uek.x86_64.rpmc755a3d1f1522c714b9990130c483a47-
kernel-uek-modules-extra-5.15.0-4.70.5.2.el9uek.x86_64.rpme7514050a84cf4397e046d0f565f0724-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete