Disco update: upstream stable patchset 2019-12-03
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Disco |
Fix Released
|
Undecided
|
Kamal Mostafa |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-12-03
from git://git.
mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
net/mlx4_en: fix mlx4 ethtool -N insertion
net/mlx4_en: Fix wrong limitation for number of TX rings
net: rtnetlink: prevent underflows in do_setvfinfo()
net/sched: act_pedit: fix WARN() in the traffic path
net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
sfc: Only cancel the PPS workqueue if it exists
net/mlx5e: Fix set vf link state error flow
net/mlxfw: Verify FSM error code translation doesn't exceed array size
net/mlx5: Fix auto group size calculation
vhost/vsock: split packets to send using multiple buffers
gpio: max77620: Fixup debounce delays
tools: gpio: Correctly add make dependencies for gpio_utils
nbd:fix memory leak in nbd_get_socket()
virtio_console: allocate inbufs in add_port() only if it is needed
Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_
mm/ksm.c: don't WARN if page is still mapped in remove_
drm/amd/powerplay: issue no PPSMC_MSG_
drm/i915/pmu: "Frequency" is reported as accumulated cycles
drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
mwifiex: Fix NL80211_
Bluetooth: Fix invalid-free in bcsp_close()
ath10k: Fix a NULL-ptr-deref bug in ath10k_
ath9k_hw: fix uninitialized variable data
md/raid10: prevent access of uninitialized resync_pages offset
mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
net: phy: dp83867: fix speed 10 in sgmii mode
net: phy: dp83867: increase SGMII autoneg timer duration
ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
x86/insn: Fix awk regexp warnings
x86/speculation: Fix incorrect MDS/TAA mitigation status
x86/speculation: Fix redundant MDS mitigation message
nbd: prevent memory leak
futex: Prevent robust futex exit race
ALSA: usb-audio: Fix NULL dereference at parsing BADD
nfc: port100: handle command failure cleanly
media: vivid: Set vid_cap_streaming and vid_out_streaming to true
media: vivid: Fix wrong locking that causes race conditions on streaming stop
media: usbvision: Fix races among open, close, and disconnect
cpufreq: Add NULL checks to show() and store() methods of cpufreq
media: uvcvideo: Fix error path in control parsing failure
media: b2c2-flexcop-usb: add sanity checking
media: cxusb: detect cxusb_ctrl_msg error in query
media: imon: invalid dereference in imon_touch_event
virtio_ring: fix return code on DMA mapping fails
USBIP: add config dependency for SGL_ALLOC
usbip: tools: fix fd leakage in the function of read_attr_
usbip: Fix uninitialized symbol 'nents' in stub_recv_
usb-serial: cp201x: support Mark-10 digital force gauge
USB: chaoskey: fix error case of a timeout
appledisplay: fix error handling in the scheduled work
USB: serial: mos7840: add USB ID to support Moxa UPort 2210
USB: serial: mos7720: fix remote wakeup
USB: serial: mos7840: fix remote wakeup
USB: serial: option: add support for DW5821e with eSIM support
USB: serial: option: add support for Foxconn T77W968 LTE modules
staging: comedi: usbduxfast: usbduxfast_
net/tls: remove unused function tls_sw_
net/tls: enable sk_msg redirect to tls socket egress
net/mlx5e: Fix error flow cleanup in mlx5e_tc_
net/mlx5: Update the list of the PCI supported devices
net/mlx5: Update the list of the PCI supported devices
virtio_balloon: fix shrinker count
drm/amdgpu: disable gfxoff when using register read interface
Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
x86/xen/32: Make xen_iret_
x86/xen/32: Simplify ring check in xen_iret_
x86/doublefault/32: Fix stack canaries in the double fault handler
x86/pti/32: Size initial_page_table correctly
x86/cpu_entry_area: Add guard page for entry stack on 32bit
selftests/
selftests/
x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_
x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
media: usbvision: Fix invalid accesses after device disconnect
media: mceusb: fix out of bounds read in MCE receiver buffer
UBUNTU: upstream stable to v4.19.87, v5.3.14
CVE References
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
description: | updated |
Changed in linux (Ubuntu Disco): | |
status: | New → In Progress |
assignee: | nobody → Kamal Mostafa (kamalmostafa) |
Changed in linux (Ubuntu Disco): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu): | |
status: | Confirmed → Invalid |
This bug was fixed in the package linux - 5.0.0-40.44
---------------
linux (5.0.0-40.44) disco; urgency=medium
* disco/linux: 5.0.0-40.44 -proposed tracker (LP: #1859724)
* use-after-free in i915_ppgtt_close (LP: #1859522) // CVE-2020-7053
- SAUCE: drm/i915: Fix use-after-free when destroying GEM context
* CVE-2019-14615
- drm/i915/gen9: Clear residual context state on context switch
* System hang with kernel traces while entering reboot process on a Disco
ARM64 moonshot node (LP: #1859582)
- Revert "RDMA/cm: Fix memory leak in cm_add/remove_one"
linux (5.0.0-39.43) disco; urgency=medium
* disco/linux: 5.0.0-39.43 -proposed tracker (LP: #1858547)
* [Regression] usb usb2-port2: Cannot enable. Maybe the USB cable is bad?
(LP: #1856608)
- SAUCE: Revert "usb: handle warm-reset port requests on hub resume"
* PAN is broken for execute-only user mappings on ARMv8 (LP: #1858815)
- arm64: Revert support for execute-only user mappings
* Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
- SAUCE: USB: core: Make port power cycle a seperate helper function
- SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
* [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_ T_nexus_ reset() T_nexus_ reset()
(LP: #1853992)
- scsi: hisi_sas: Fix out of bound at debug_I_
* [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
- scsi: hisi_sas: Assign NCQ tag for all NCQ commands
* [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
reset (LP: #1853997)
- scsi: hisi_sas: Fix the conflict between device gone and host reset
* scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
- scsi: hisi_sas: Check sas_port before using it
* CVE-2019-18885
- btrfs: refactor btrfs_find_device() take fs_devices as argument
- btrfs: merge btrfs_find_device and find_device
* Integrate Intel SGX driver into linux-azure (LP: #1844245)
- [Packaging] Add systemd service to load intel_sgx
* [SRU][B/ OEM-B/OEM- OSP1/D/ E/F] Add LG I2C touchscreen multitouch support
(LP: #1857541)
- SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
* cifs: DFS Caching feature causing problems traversing multi-tier DFS setups
(LP: #1854887)
- cifs: Fix retrieval of DFS referrals in cifs_mount()
* qede driver causes 100% CPU load (LP: #1855409)
- qede: Handle infinite driver spinning for Tx timestamp.
* [roce-1126] RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
(LP: #1853989)
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
* [roce-1126] RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
- RDMA/hns: Fixs hw access invalid dma memory error
* [hns-1126]net: hns3: revert to old channel when setting new channel num fail
(LP: #1853983)
- net: hns3: revert to old channel when setting new channel num fail
* [hns-1126]net: hns3: fix port setting handle for fibre port
(LP: #1853984)
- net: hns3: fix port setting handle for fibre...