Xenial update: 4.4.209 upstream stable release

Bug #1859640 reported by Connor Kuehl
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Xenial
Fix Released
Medium
Connor Kuehl

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

* PM / devfreq: Don't fail devfreq_dev_release if not in list
* RDMA/cma: add missed unregister_pernet_subsys in init failure
* scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
* scsi: qla2xxx: Don't call qlt_async_event twice
* scsi: iscsi: qla4xxx: fix double free in probe
* scsi: libsas: stop discovering if oob mode is disconnected
* usb: gadget: fix wrong endpoint desc
* md: raid1: check rdev before reference in raid1_sync_request func
* s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits
* s390/cpum_sf: Avoid SBD overflow condition in irq handler
* xen/balloon: fix ballooned page accounting without hotplug enabled
* xfs: fix mount failure crash on invalid iclog memory access
* taskstats: fix data-race
* ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
* MIPS: Avoid VDSO ABI breakage due to global register variable
* locks: print unsigned ino in /proc/locks
* dmaengine: Fix access to uninitialized dma_slave_caps
* compat_ioctl: block: handle Persistent Reservations
* gpiolib: fix up emulated open drain outputs
* ALSA: cs4236: fix error return comparison of an unsigned integer
* ftrace: Avoid potential division by zero in function profiler
* Bluetooth: btusb: fix PM leak in error case of setup
* Bluetooth: delete a stray unlock
* tty: serial: msm_serial: Fix lockup for sysrq and oops
* drm/mst: Fix MST sideband up-reply failure handling
* powerpc/pseries/hvconsole: Fix stack overread via udbg
* ath9k_htc: Modify byte order for an error message
* ath9k_htc: Discard undersized packets
* net: add annotations on hh->hh_len lockless accesses
* s390/smp: fix physical to logical CPU map for SMT
* locking/x86: Remove the unused atomic_inc_short() methd
* pstore/ram: Write new dumps to start of recycled zones
* locking/spinlock/debug: Fix various data races
* netfilter: ctnetlink: netns exit must wait for callbacks
* ARM: vexpress: Set-up shared OPP table instead of individual for each CPU
* netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
* ARM: dts: am437x-gp/epos-evm: fix panel compatible
* powerpc: Ensure that swiotlb buffer is allocated from low memory
* bnx2x: Do not handle requests from VFs after parity
* bnx2x: Fix logic to get total no. of PFs per engine
* net: usb: lan78xx: Fix error message format specifier
* rfkill: Fix incorrect check to avoid NULL pointer dereference
* ASoC: wm8962: fix lambda value
* regulator: rn5t618: fix module aliases
* kconfig: don't crash on NULL expressions in expr_eq()
* parisc: Fix compiler warnings in debug_core.c
* llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c)
* net: stmmac: dwmac-sunxi: Allow all RGMII modes
* net: usb: lan78xx: fix possible skb leak
* pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
* sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
* tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
* vlan: vlan_changelink() should propagate errors
* vlan: fix memory leak in vlan_dev_set_egress_priority
* vxlan: fix tos value before xmit
* macvlan: do not assume mac_header is set in macvlan_broadcast()
* USB: core: fix check for duplicate endpoints
* USB: serial: option: add Telit ME910G1 0x110a composition
* Linux 4.4.209
* UBUNTU: upstream stable to v4.4.209

       4.4.209 upstream stable release
       from git://git.kernel.org/

CVE References

Connor Kuehl (connork)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Connor Kuehl (connork)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
Changed in linux (Ubuntu Xenial):
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Connor Kuehl (connork)
Revision history for this message
Connor Kuehl (connork) wrote :

Note, the following commit was skipped because it has already been applied:

* Revert "perf report: Add warning when libunwind not compiled in"

description: updated
Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (10.7 KiB)

This bug was fixed in the package linux - 4.4.0-174.204

---------------
linux (4.4.0-174.204) xenial; urgency=medium

  * xenial/linux: 4.4.0-174.204 -proposed tracker (LP: #1861122)

  * Xenial update: 4.4.211 upstream stable release (LP: #1860681)
    - hidraw: Return EPOLLOUT from hidraw_poll
    - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
    - HID: hidraw, uhid: Always report EPOLLOUT
    - cfg80211/mac80211: make ieee80211_send_layer2_update a public function
    - mac80211: Do not send Layer 2 Update frame before authorization
    - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
    - p54usb: Fix race between disconnect and firmware loading
    - ALSA: line6: Fix write on zero-sized buffer
    - ALSA: line6: Fix memory leak at line6_init_pcm() error path
    - xen: let alloc_xenballooned_pages() fail if not enough memory free
    - wimax: i2400: fix memory leak
    - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
    - ext4: fix use-after-free race with debug_want_extra_isize
    - ext4: add more paranoia checking in ext4_expand_extra_isize handling
    - rtc: mt6397: fix alarm register overwrite
    - iommu: Remove device link to group on failure
    - gpio: Fix error message on out-of-range GPIO in lookup table
    - hsr: reset network header when supervision frame is created
    - cifs: Adjust indentation in smb2_open_file
    - RDMA/srpt: Report the SCSI residual to the initiator
    - scsi: enclosure: Fix stale device oops with hot replug
    - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
    - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
    - iio: imu: adis16480: assign bias value only if operation succeeded
    - mei: fix modalias documentation
    - clk: samsung: exynos5420: Preserve CPU clocks configuration during
      suspend/resume
    - compat_ioctl: handle SIOCOUTQNSD
    - tty: serial: imx: use the sg count from dma_map_sg
    - tty: serial: pch_uart: correct usage of dma_unmap_sg
    - media: exynos4-is: Fix recursive locking in isp_video_release()
    - spi: atmel: fix handling of cs_change set on non-last xfer
    - rtlwifi: Remove unnecessary NULL check in rtl_regd_init
    - rtc: msm6242: Fix reading of 10-hour digit
    - rseq/selftests: Turn off timeout setting
    - hexagon: work around compiler crash
    - ocfs2: call journal flush to mark journal as empty after journal recovery
      when mount
    - ALSA: seq: Fix racy access for queue timer in proc read
    - Fix built-in early-load Intel microcode alignment
    - block: fix an integer overflow in logical block size
    - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
    - USB: serial: opticon: fix control-message timeouts
    - USB: serial: suppress driver bind attributes
    - USB: serial: ch341: handle unbound port at reset_resume
    - USB: serial: io_edgeport: add missing active-port sanity check
    - USB: serial: quatech2: handle unbound ports
    - scsi: mptfusion: Fix double fetch bug in ioctl
    - usb: core: hub: Improved device recognition on remote wakeup
    - x86/efistub: Disable paging at mixed mode entry
    - mm/pag...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.