CLSA-2023-1682416329

[ Ubuntu: 4.15.0-209.220 ] * bionic/linux: 4.15.0-209.220 -proposed tracker (LP: #2011989) * CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename * CVE-2023-1281 - rcu: Upgrade rcuswapprotected() to rcureplacepointer() - net/sched: tcindex: update imperfect hash filters respecting rcu * CVE-2022-3903 - USB: add usbcontrolmsgsend() and usbcontrolmsgrecv() - USB: correct API of usbcontrolmsgsend/recv - USB: move sndusbpipesanitycheck into the USB core - media: mceusb: Use new usbcontrolmsg*() routines * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) - pNFS/filelayout: Fix coalescing test for single DS - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats - RDMA/srp: Move large values to a new enum for gcc13 - f2fs: let's avoid panic if extenttree is not created - nilfs2: fix general protection fault in nilfsbtreeinsert() - xhci-pci: set the dma maxsegsize - usb: xhci: Check endpoint is valid before dereferencing it - prlimit: doprlimit needs to have a speculation check - USB: serial: option: add Quectel EM05-G (GR) modem - USB: serial: option: add Quectel EM05-G (CS) modem - USB: serial: option: add Quectel EM05-G (RS) modem - USB: serial: option: add Quectel EC200U modem - USB: serial: option: add Quectel EM05CN (SG) modem - USB: serial: option: add Quectel EM05CN modem - USB: misc: iowarrior: fix up header size for USBDEVICEIDCODEMERCSIOW100 - usb: core: hub: disable autosuspend for TI TUSB8041 - USB: serial: cp210x: add SCALANCE LPE-9000 device id - usb: host: ehci-fsl: Fix module alias - usb: gadget: gwebcam: Send color matching descriptor per frame - usb: gadget: fncm: fix potential NULL ptr deref in ncmbitrate() - usb-storage: apply IGNOREUAS only for HIKSEMI MD202 on RTL9210 - serial: pchuart: Pass correct sg to dmaunmapsg() - serial: atmel: fix incorrect baudrate setup - gsmi: fix null-deref in gsmigetvariable - comedi: advpci1760: Fix PWM instruction handling - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' - HID: intelish-hid: Add check for ishtpdmatxmap - EDAC/highbank: Fix memory leak in highbankmcprobe() - tomoyo: fix broken dependency on *.conf.default - IB/hfi1: Reject a zero-length user expected buffer - IB/hfi1: Reserve user expected TIDs - affs: initialize fsdata in affstruncate() - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent - phy: rockchip-inno-usb2: Fix missing clkdisableunprepare() in rockchipusb2phypoweron() - net: nfc: Fix use-after-free in localcleanup() - net: usb: sr9700: Handle negative len - net: mdio: validate parameter addr in mdiobusgetphy() - HID: check empty reportlist in hidvalidatevalues() - usb: gadget: ffs: Prevent race during ffsep0queuewait - usb: gadget: ffs: Ensure ep0req is dequeued before freerequest - net: mlx5: eliminate anonymous moduleinit & moduleexit - dmaengine: Fix double increment of clientcount in dmachan_get() - HID: betop: check shape of output reports - w1: fix deadloop in _w1removemasterdevice() - w1: fix WARNING after calling w1process() - fs: reiserfs: remove useless newopts in reiserfsremount - Bluetooth: hcisync: cancel cmdtimer if hciopen failed - scsi: hpsa: Fix allocation size for scsihostalloc() - module: Don't wait for GOING modules - tracing: Make sure traceprintk() can output as soon as it can be used - ARM: 9280/1: mm: fix warning on physaddrt to void pointer assignment - EDAC/device: Respect any driver-supplied workqueue polling value - netlink: annotate data races around dstportid and dstgroup - netlink: annotate data races around skstate - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWNCOMPLETE - netrom: Fix use-after-free of a listening socket. - sctp: fail if no bound addresses can be used for a given scope - net: ravb: Fix possible hang if RIS2QFF1 happen - net/tg3: resolve deadlock in tg3resettask() during EEH - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" - x86/i8259: Mark legacy PIC interrupts with IRQLEVEL - xen: Fix up build warning with xeninittimeops() reference - x86/asm: Fix an assembler warning with current binutils - x86/entry/64: Add instruction suffix to SYSRET - sysctl: add a new registersysctlinit() interface - panic: unset paniconwarn inside panic() - exit: Add and use maketaskdead. - objtool: Add a missing comma to avoid string concatenation - hexagon: Fix function name in die() - h8300: Fix build errors from doexit() to maketaskdead() transition - ia64: make IA64MCARECOVERY bool instead of tristate - exit: Put an upper limit on how often we can oops - exit: Expose "oopscount" to sysfs - exit: Allow oopslimit to be disabled - panic: Consolidate open-coded paniconwarn checks - panic: Introduce warnlimit - panic: Expose "warncount" to sysfs - exit: Use READONCE() for all oops/warn limit reads - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags - ipv6: ensure sane device mtu in tunnels - usb: host: xhci-plat: add wakeup entry at sysfs - amd-xgbe: Delay AN timeout during KR training - tcp: avoid the lookup process failing to get sk in ehash table - net: fix UaF in netns ops registration error path - netlink: annotate data races around nlk->portid - ipv4: prevent potential spectre v1 gadget in ipmetricsconvert() * rtcpie in timers from ubuntukernelselftests randomly failing (LP: #1814234) - SAUCE: selftest: rtctest: Fix force-passing unreliable subtest