This bug was fixed in the package linux-gcp - 4.13.0-1002.5 --------------- linux-gcp (4.13.0-1002.5) xenial; urgency=low * linux-gcp: 4.13.0-1002.5 -proposed tracker (LP: #1736153) [ Ubuntu: 4.13.0-19.22 ] * linux: 4.13.0-19.22 -proposed tracker (LP: #1736118) * CVE-2017-1000405 - mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() linux-gcp (4.13.0-1001.4) xenial; urgency=low * linux-gcp: 4.13.0-1001.4 -proposed tracker (LP: #1733526) - rebase to Ubuntu-4.13.0-18.21 - update configs following rebase to Ubuntu-4.13.0-18.21 [ Ubuntu: 4.13.0-18.21 ] * linux: 4.13.0-18.21 -proposed tracker (LP: #1733530) * NVMe timeout is too short (LP: #1729119) - nvme: update timeout module parameter type * CPU call trace on AMD Raven Ridge after S3 (LP: #1732894) - x86/mce/AMD: Allow any CPU to initialize the smca_banks array * Set PANIC_TIMEOUT=10 on Power Systems (LP: #1730660) - [Config]: Set PANIC_TIMEOUT=10 on ppc64el * Cannot pair BLE remote devices when using combo BT SoC (LP: #1731467) - Bluetooth: increase timeout for le auto connections * enable CONFIG_SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH easily confuse users (LP: #1732627) - [Config] CONFIG_SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH=n * Plantronics P610 does not support sample rate reading (LP: #1719853) - ALSA: usb-audio: Add sample rate quirk for Plantronics P610 * Allow drivers to use Relaxed Ordering on capable root ports (LP: #1721365) - Revert commit 1a8b6d76dc5b ("net:add one common config...") - net: ixgbe: Use new PCI_DEV_FLAGS_NO_RELAXED_ORDERING flag * support GICv3 ITS save/restore & migration (LP: #1710019) - KVM: arm/arm64: vgic-its: Fix return value for device table restore * Device hotplugging with MPT SAS cannot work for VMWare ESXi (LP: #1730852) - scsi: mptsas: Fixup device hotplug for VMWare ESXi * Artful update to 4.13.13 stable release (LP: #1732726) - netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable" - netfilter: nft_set_hash: disable fast_ops for 2-len keys - workqueue: Fix NULL pointer dereference - crypto: ccm - preserve the IV buffer - crypto: x86/sha1-mb - fix panic due to unaligned access - crypto: x86/sha256-mb - fix panic due to unaligned access - KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2] - ACPI / PM: Blacklist Low Power S0 Idle _DSM for Dell XPS13 9360 - ARM: 8720/1: ensure dump_instr() checks addr_limit - ALSA: timer: Limit max instances per timer - ALSA: usb-audio: support new Amanero Combo384 firmware version - ALSA: hda - fix headset mic problem for Dell machines with alc274 - ALSA: seq: Fix OSS sysex delivery in OSS emulation - ALSA: seq: Avoid invalid lockdep class warning - MIPS: Fix CM region target definitions - MIPS: BMIPS: Fix missing cbr address - MIPS: AR7: Defer registration of GPIO - MIPS: AR7: Ensure that serial ports are properly set up - KVM: PPC: Book3S HV: Fix exclusion between HPT resizing and other HPT updates - Input: elan_i2c - add ELAN060C to the ACPI table - rbd: use GFP_NOIO for parent stat and data requests - drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue - Revert "x86: CPU: Fix up "cpu MHz" in /proc/cpuinfo" - can: sun4i: handle overrun in RX FIFO - can: peak: Add support for new PCIe/M2 CAN FD interfaces - can: ifi: Fix transmitter delay calculation - can: c_can: don't indicate triple sampling support for D_CAN - x86/debug: Handle warnings before the notifier chain, to fix KGDB crash - x86/smpboot: Make optimization of delay calibration work correctly - x86/oprofile/ppro: Do not use __this_cpu*() in preemptible context - Linux 4.13.13 * ELANTECH Touchpad is not detected in 'Lenovo Ideapad 320 14AST' after fresh install (LP: #1727544) - Input: elan_i2c - add ELAN060C to the ACPI table * Power8 Nest PMU Instrumentation support (LP: #1481347) - powerpc/powernv: Add IMC OPAL APIs - powerpc/powernv: Detect and create IMC device - powerpc/perf: Add nest IMC PMU support - powerpc/perf: Add core IMC PMU support - powerpc/perf: Add thread IMC PMU support - powerpc/perf: Fix double unlock in imc_common_cpuhp_mem_free() - powerpc/perf/imc: Fix nest events on muti socket system - powerpc/powernv: Fix build error in opal-imc.c when NUMA=n - powerpc/perf: Fix usage of nest_imc_refc - powerpc/perf: Fix for core/nest imc call trace on cpuhotplug - powerpc/perf: Add ___GFP_NOWARN flag to alloc_pages_node() - powerpc/perf: Fix IMC initialization crash * Artful update to 4.13.12 stable release (LP: #1731971) - ALSA: timer: Add missing mutex lock for compat ioctls - ALSA: seq: Fix nested rwsem annotation for lockdep splat - cifs: check MaxPathNameComponentLength != 0 before using it - KEYS: return full count in keyring_read() if buffer is too small - KEYS: trusted: fix writing past end of buffer in trusted_read() - KEYS: fix out-of-bounds read during ASN.1 parsing - ASoC: adau17x1: Workaround for noise bug in ADC - virtio_blk: Fix an SG_IO regression - arm64: ensure __dump_instr() checks addr_limit - KVM: arm64: its: Fix missing dynamic allocation check in scan_its_table - arm/arm64: KVM: set right LR register value for 32 bit guest when inject abort - arm/arm64: kvm: Disable branch profiling in HYP code - ARM: dts: mvebu: pl310-cache disable double-linefill - ARM: 8715/1: add a private asm/unaligned.h - drm/amdgpu: return -ENOENT from uvd 6.0 early init for harvesting - drm/amdgpu: allow harvesting check for Polaris VCE - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size - ocfs2: fstrim: Fix start offset of first cluster group during fstrim - fs/hugetlbfs/inode.c: fix hwpoison reserve accounting - mm, swap: fix race between swap count continuation operations - drm/i915: Do not rely on wm preservation for ILK watermarks - drm/i915/edp: read edp display control registers unconditionally - Revert "powerpc64/elfv1: Only dereference function descriptor for non-text symbols" - MIPS: bpf: Fix a typo in build_one_insn() - MIPS: smp-cmp: Use right include for task_struct - MIPS: microMIPS: Fix incorrect mask in insn_table_MM - MIPS: SMP: Fix deadlock & online race - Revert "x86: do not use cpufreq_quick_get() for /proc/cpuinfo "cpu MHz"" - x86: CPU: Fix up "cpu MHz" in /proc/cpuinfo - powerpc/kprobes: Dereference function pointers only if the address does not belong to kernel text - futex: Fix more put_pi_state() vs. exit_pi_state_list() races - perf/cgroup: Fix perf cgroup hierarchy support - x86/mcelog: Get rid of RCU remnants - irqchip/irq-mvebu-gicp: Add missing spin_lock init - Linux 4.13.12 * Artful update to 4.13.11 stable release (LP: #1731961) - workqueue: replace pool->manager_arb mutex with a flag - nvme-fc: fix iowait hang - ALSA: hda/realtek - Add support for ALC236/ALC3204 - ALSA: hda - fix headset mic problem for Dell machines with alc236 - ceph: unlock dangling spinlock in try_flush_caps() - Fix tracing sample code warning. - KVM: PPC: Fix oops when checking KVM_CAP_PPC_HTM - KVM: PPC: Book3S HV: POWER9 more doorbell fixes - KVM: PPC: Book3S: Protect kvmppc_gpa_to_ua() with SRCU - s390/kvm: fix detection of guest machine checks - nbd: handle interrupted sendmsg with a sndtimeo set - spi: uapi: spidev: add missing ioctl header - spi: a3700: Return correct value on timeout detection - spi: bcm-qspi: Fix use after free in bcm_qspi_probe() in error path - spi: armada-3700: Fix failing commands with quad-SPI - ovl: add NULL check in ovl_alloc_inode - ovl: fix EIO from lookup of non-indexed upper - ovl: handle ENOENT on index lookup - ovl: do not cleanup unsupported index entries - fuse: fix READDIRPLUS skipping an entry - xen/gntdev: avoid out of bounds access in case of partial gntdev_mmap() - xen: fix booting ballooned down hvm guest - cifs: Select all required crypto modules - CIFS: Fix NULL pointer deref on SMB2_tcon() failure - Input: elan_i2c - add ELAN0611 to the ACPI table - Input: gtco - fix potential out-of-bound access - Fix encryption labels and lengths for SMB3.1.1 - SMB3: Validate negotiate request must always be signed - assoc_array: Fix a buggy node-splitting case - scsi: zfcp: fix erp_action use-before-initialize in REC action trace - scsi: aacraid: Fix controller initialization failure - scsi: qla2xxx: Initialize Work element before requesting IRQs - scsi: sg: Re-fix off by one in sg_fill_request_table() - x86/cpu/AMD: Apply the Erratum 688 fix when the BIOS doesn't - drm/amd/powerplay: fix uninitialized variable - drm/i915/perf: fix perf enable/disable ioctls with 32bits userspace - can: sun4i: fix loopback mode - can: kvaser_usb: Correct return value in printout - can: kvaser_usb: Ignore CMD_FLUSH_QUEUE_REPLY messages - cfg80211: fix connect/disconnect edge cases - ipsec: Fix aborted xfrm policy dump crash - regulator: fan53555: fix I2C device ids - powerpc/xive: Fix the size of the cpumask used in xive_find_target_in_mask() - Linux 4.13.11 * Touchpad not detected - Lenovo ideapad 320-15IKB (LP: #1723736) - Input: elan_i2c - add ELAN0611 to the ACPI table * Artful update to 4.13.10 stable release (LP: #1731951) - staging: bcm2835-audio: Fix memory corruption - USB: devio: Revert "USB: devio: Don't corrupt user memory" - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() - USB: serial: metro-usb: add MS7820 device id - usb: cdc_acm: Add quirk for Elatec TWN3 - usb: quirks: add quirk for WORLDE MINI MIDI keyboard - usb: hub: Allow reset retry for USB2 devices on connect bounce - ALSA: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital - can: gs_usb: fix busy loop if no more TX context is available - scsi: qla2xxx: Fix uninitialized work element - nbd: don't set the device size until we're connected - s390/cputime: fix guest/irq/softirq times after CPU hotplug - parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels - parisc: Fix detection of nonsynchronous cr16 cycle counters - iio: dummy: events: Add missing break - usb: musb: sunxi: Explicitly release USB PHY on exit - USB: musb: fix session-bit runtime-PM quirk - USB: musb: fix late external abort on suspend - usb: musb: musb_cppi41: Fix the address of teardown and autoreq registers - usb: musb: musb_cppi41: Fix cppi41_set_dma_mode() for DA8xx - usb: musb: musb_cppi41: Configure the number of channels for DA8xx - usb: musb: Check for host-mode using is_host_active() on reset interrupt - xhci: Identify USB 3.1 capable hosts by their port protocol capability - xhci: Cleanup current_cmd in xhci_cleanup_command_queue() - usb: xhci: Reset halted endpoint if trb is noop - usb: xhci: Handle error condition in xhci_stop_device() - can: esd_usb2: Fix can_dlc value for received RTR, frames - can: af_can: can_pernet_init(): add missing error handling for kzalloc returning NULL - can: flexcan: fix state transition regression - can: flexcan: rename legacy error state quirk - can: flexcan: implement error passive state quirk - can: flexcan: fix i.MX6 state transition issue - can: flexcan: fix i.MX28 state transition issue - can: flexcan: fix p1010 state transition issue - KEYS: encrypted: fix dereference of NULL user_key_payload - mmc: sdhci-pci: Fix default d3_retune for Intel host controllers - drm/i915: Use bdw_ddi_translations_fdi for Broadwell - drm/nouveau/kms/nv50: fix oops during DP IRQ handling on non-MST boards - drm/nouveau/bsp/g92: disable by default - drm/nouveau/mmu: flush tlbs before deleting page tables - media: s5p-cec: add NACK detection support - media: cec: Respond to unregistered initiators, when applicable - media: dvb: i2c transfers over usb cannot be done from stack - tracing/samples: Fix creation and deletion of simple_thread_fn creation - ALSA: seq: Enable 'use' locking in all configurations - ALSA: hda: Remove superfluous '-' added by printk conversion - ALSA: hda: Abort capability probe at invalid register read - i2c: ismt: Separate I2C block read from SMBus block read - i2c: piix4: Fix SMBus port selection for AMD Family 17h chips - Revert "tools/power turbostat: stop migrating, unless '-m'" - Input: stmfts - fix setting ABS_MT_POSITION_* maximum size - brcmfmac: Add check for short event packets - brcmsmac: make some local variables 'static const' to reduce stack size - ARM: dts: sun6i: Fix endpoint IDs in second display pipeline - bus: mbus: fix window size calculation for 4GB windows - clockevents/drivers/cs5535: Improve resilience to spurious interrupts - rtlwifi: rtl8821ae: Fix connection lost problem - x86/microcode/intel: Disable late loading on model 79 - lib/digsig: fix dereference of NULL user_key_payload - fscrypt: fix dereference of NULL user_key_payload - ecryptfs: fix dereference of NULL user_key_payload - KEYS: Fix race between updating and finding a negative key - FS-Cache: fix dereference of NULL user_key_payload - KEYS: don't let add_key() update an uninstantiated key - pkcs7: Prevent NULL pointer dereference, since sinfo is not always set. - arm64: dts: rockchip: correct vqmmc voltage for rk3399 platforms - ALSA: hda - Fix incorrect TLV callback check introduced during set_fs() removal - iomap_dio_rw: Allocate AIO completion queue before submitting dio - xfs: don't unconditionally clear the reflink flag on zero-block files - xfs: evict CoW fork extents when performing finsert/fcollapse - fs/xfs: Use %pS printk format for direct addresses - xfs: report zeroed or not correctly in xfs_zero_range() - xfs: update i_size after unwritten conversion in dio completion - xfs: perag initialization should only touch m_ag_max_usable for AG 0 - xfs: Capture state of the right inode in xfs_iflush_done - xfs: always swap the cow forks when swapping extents - xfs: handle racy AIO in xfs_reflink_end_cow - xfs: Don't log uninitialised fields in inode structures - xfs: move more RT specific code under CONFIG_XFS_RT - xfs: don't change inode mode if ACL update fails - xfs: reinit btree pointer on attr tree inactivation walk - xfs: handle error if xfs_btree_get_bufs fails - xfs: cancel dirty pages on invalidation - xfs: trim writepage mapping to within eof - xfs: move two more RT specific functions into CONFIG_XFS_RT - Linux 4.13.10 * Artful update to 4.13.9 stable release (LP: #1731926) - perf pmu: Unbreak perf record for arm/arm64 with events with explicit PMU - mm: page_vma_mapped: ensure pmd is loaded with READ_ONCE outside of lock - HID: hid-elecom: extend to fix descriptor for HUGE trackball - Drivers: hv: vmbus: Fix rescind handling issues - Drivers: hv: vmbus: Fix bugs in rescind handling - vmbus: simplify hv_ringbuffer_read - vmbus: refactor hv_signal_on_read - vmbus: eliminate duplicate cached index - vmbus: more host signalling avoidance - Linux 4.13.9 [ Ubuntu: 4.13.0-17.20 ] * linux: 4.13.0-17.20 -proposed tracker (LP: #1728927) * thunderx2 ahci errata workaround needs additional delays (LP: #1724117) - SAUCE: ahci: thunderx2: stop engine fix update * usb 3-1: 2:1: cannot get freq at ep 0x1 (LP: #1708499) - ALSA: usb-audio: Add sample rate quirk for Plantronics C310/C520-M * Plantronics Blackwire C520-M - Cannot get freq at ep 0x1, 0x81 (LP: #1709282) - ALSA: usb-audio: Add sample rate quirk for Plantronics C310/C520-M * TSC_DEADLINE incorrectly disabled inside virtual guests (LP: #1724912) - x86/apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on CPUs without the feature - x86/apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on hypervisors * x86/apic: Update TSC_DEADLINE quirk with additional SKX stepping (LP: #1724612) - x86/apic: Update TSC_DEADLINE quirk with additional SKX stepping * [Artful] Add support for Dell/Wyse 3040 audio codec (LP: #1723916) - SAUCE: ASoC: rt5670: Add support for Wyse 3040 * [Artful] Some Dell Monitors Doesn't Work Well with Dell/Wyse 3040 (LP: #1723915) - SAUCE: drm/i915: Workaround for DP DPMS D3 on Dell monitor * [Artful] Support headset mode for DELL WYSE (LP: #1723913) - SAUCE: ALSA: hda/realtek - Add support headset mode for DELL WYSE * Touchpad and TrackPoint Dose Not Work on Lenovo X1C6 and X280 (LP: #1723986) - SAUCE: Input: synaptics-rmi4 - RMI4 can also use SMBUS version 3 - SAUCE: Input: synaptics - Lenovo X1 Carbon 5 should use SMBUS/RMI - SAUCE: Input: synaptics - add Intertouch support on X1 Carbon 6th and X280 * Artful update to v4.13.8 stable release (LP: #1724669) - USB: dummy-hcd: Fix deadlock caused by disconnect detection - MIPS: math-emu: Remove pr_err() calls from fpu_emu() - MIPS: bpf: Fix uninitialised target compiler error - mei: always use domain runtime pm callbacks. - dmaengine: edma: Align the memcpy acnt array size with the transfer - dmaengine: ti-dma-crossbar: Fix possible race condition with dma_inuse - NFS: Fix uninitialized rpc_wait_queue - nfs/filelayout: fix oops when freeing filelayout segment - HID: usbhid: fix out-of-bounds bug - crypto: skcipher - Fix crash on zero-length input - crypto: shash - Fix zero-length shash ahash digest crash - KVM: MMU: always terminate page walks at level 1 - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit - usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet - pinctrl/amd: Fix build dependency on pinmux code - iommu/amd: Finish TLB flush in amd_iommu_unmap() - device property: Track owner device of device property - Revert "vmalloc: back off when the current task is killed" - fs/mpage.c: fix mpage_writepage() for pages with buffers - ALSA: usb-audio: Kill stray URB at exiting - ALSA: seq: Fix use-after-free at creating a port - ALSA: seq: Fix copy_from_user() call inside lock - ALSA: caiaq: Fix stray URB at probe error path - ALSA: line6: Fix NULL dereference at podhd_disconnect() - ALSA: line6: Fix missing initialization before error path - ALSA: line6: Fix leftover URB at error-path during probe - drm/atomic: Unref duplicated drm_atomic_state in drm_atomic_helper_resume() - drm/i915/edp: Get the Panel Power Off timestamp after panel is off - drm/i915: Read timings from the correct transcoder in intel_crtc_mode_get() - drm/i915/bios: parse DDI ports also for CHV for HDMI DDC pin and DP AUX channel - drm/i915: Use crtc_state_is_legacy_gamma in intel_color_check - usb: gadget: configfs: Fix memory leak of interface directory data - usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options - PCI: aardvark: Move to struct pci_host_bridge IRQ mapping functions - Revert "PCI: tegra: Do not allocate MSI target memory" - direct-io: Prevent NULL pointer access in submit_page_section - fix unbalanced page refcounting in bio_map_user_iov - more bio_map_user_iov() leak fixes - bio_copy_user_iov(): don't ignore ->iov_offset - perf script: Add missing separator for "-F ip,brstack" (and brstackoff) - genirq/cpuhotplug: Enforce affinity setting on startup of managed irqs - genirq/cpuhotplug: Add sanity check for effective affinity mask - USB: serial: ftdi_sio: add id for Cypress WICED dev board - USB: serial: cp210x: fix partnum regression - USB: serial: cp210x: add support for ELV TFD500 - USB: serial: option: add support for TP-Link LTE module - USB: serial: qcserial: add Dell DW5818, DW5819 - USB: serial: console: fix use-after-free on disconnect - USB: serial: console: fix use-after-free after failed setup - RAS/CEC: Use the right length for "cec_disable" - x86/microcode: Do the family check first - x86/alternatives: Fix alt_max_short macro to really be a max() - KVM: nVMX: update last_nonleaf_level when initializing nested EPT - Linux 4.13.8 * Artful update to v4.13.7 stable release (LP: #1724668) - watchdog: Revert "iTCO_wdt: all versions count down twice" - Linux 4.13.7 * libvirt - vnc port selection regression with newer kernels (LP: #1722702) - net: set tb->fast_sk_family - net: use inet6_rcv_saddr to compare sockets - inet: fix improper empty comparison * powerpc/64s: Add workaround for P9 vector CI load issue (LP: #1721070) - powerpc/mce: Move 64-bit machine check code into mce.c - powerpc/64s: Add workaround for P9 vector CI load issue * Artful update to v4.13.6 stable release (LP: #1723145) - imx-media-of: avoid uninitialized variable warning - usb: dwc3: ep0: fix DMA starvation by assigning req->trb on ep0 - mlxsw: spectrum: Fix EEPROM access in case of SFP/SFP+ - net: bonding: Fix transmit load balancing in balance-alb mode if specified by sysfs - openvswitch: Fix an error handling path in 'ovs_nla_init_match_and_action()' - mlxsw: spectrum: Prevent mirred-related crash on removal - net: bonding: fix tlb_dynamic_lb default value - net_sched: gen_estimator: fix scaling error in bytes/packets samples - net: sched: fix use-after-free in tcf_action_destroy and tcf_del_walker - sctp: potential read out of bounds in sctp_ulpevent_type_enabled() - tcp: update skb->skb_mstamp more carefully - bpf/verifier: reject BPF_ALU64|BPF_END - tcp: fix data delivery rate - udpv6: Fix the checksum computation when HW checksum does not apply - ip6_gre: skb_push ipv6hdr before packing the header in ip6gre_header - net: phy: Fix mask value write on gmii2rgmii converter speed register - ip6_tunnel: do not allow loading ip6_tunnel if ipv6 is disabled in cmdline - net/sched: cls_matchall: fix crash when used with classful qdisc - 8139too: revisit napi_complete_done() usage - bpf: do not disable/enable BH in bpf_map_free_id() - tcp: fastopen: fix on syn-data transmit failure - net: emac: Fix napi poll list corruption - net: ipv6: fix regression of no RTM_DELADDR sent after DAD failure - packet: hold bind lock when rebinding to fanout hook - bpf: one perf event close won't free bpf program attached by another perf event - net: change skb->mac_header when Generic XDP calls adjust_head - isdn/i4l: fetch the ppp_write buffer in one shot - net_sched: always reset qdisc backlog in qdisc_reset() - net: stmmac: Cocci spatch "of_table" - net: qcom/emac: specify the correct size when mapping a DMA buffer - vti: fix use after free in vti_tunnel_xmit/vti6_tnl_xmit - l2tp: fix race condition in l2tp_tunnel_delete - tun: bail out from tun_get_user() if the skb is empty - net: dsa: mv88e6xxx: Allow dsa and cpu ports in multiple vlans - net: dsa: Fix network device registration order - packet: in packet_do_bind, test fanout with bind_lock held - packet: only test po->has_vnet_hdr once in packet_snd - net: dsa: mv88e6xxx: lock mutex when freeing IRQs - net: Set sk_prot_creator when cloning sockets to the right proto - net/mlx5e: IPoIB, Fix access to invalid memory address - netlink: do not proceed if dump's start() errs - ip6_gre: ip6gre_tap device should keep dst - ip6_tunnel: update mtu properly for ARPHRD_ETHER tunnel device in tx path - IPv4: early demux can return an error code - tipc: use only positive error codes in messages - l2tp: fix l2tp_eth module loading - socket, bpf: fix possible use after free - net: rtnetlink: fix info leak in RTM_GETSTATS call - bpf: fix bpf_tail_call() x64 JIT - usb: gadget: core: fix ->udc_set_speed() logic - USB: gadgetfs: Fix crash caused by inadequate synchronization - USB: gadgetfs: fix copy_to_user while holding spinlock - usb: gadget: udc: atmel: set vbus irqflags explicitly - usb: gadget: udc: renesas_usb3: fix for no-data control transfer - usb: gadget: udc: renesas_usb3: fix Pn_RAMMAP.Pn_MPKT value - usb: gadget: udc: renesas_usb3: Fix return value of usb3_write_pipe() - usb-storage: unusual_devs entry to fix write-access regression for Seagate external drives - usb-storage: fix bogus hardware error messages for ATA pass-thru devices - usb: renesas_usbhs: fix the BCLR setting condition for non-DCP pipe - usb: renesas_usbhs: fix usbhsf_fifo_clear() for RX direction - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor - usb: pci-quirks.c: Corrected timeout values used in handshake - USB: cdc-wdm: ignore -EPIPE from GetEncapsulatedResponse - USB: dummy-hcd: fix connection failures (wrong speed) - USB: dummy-hcd: fix infinite-loop resubmission bug - USB: dummy-hcd: Fix erroneous synchronization change - USB: devio: Prevent integer overflow in proc_do_submiturb() - USB: devio: Don't corrupt user memory - USB: g_mass_storage: Fix deadlock when driver is unbound - USB: uas: fix bug in handling of alternate settings - USB: core: harden cdc_parse_cdc_header - usb: Increase quirk delay for USB devices - USB: fix out-of-bounds in usb_set_configuration - usb: xhci: Free the right ring in xhci_add_endpoint() - xhci: fix finding correct bus_state structure for USB 3.1 hosts - xhci: fix wrong endpoint ESIT value shown in tracing - usb: host: xhci-plat: allow sysdev to inherit from ACPI - xhci: Fix sleeping with spin_lock_irq() held in ASmedia 1042A workaround - Revert "xhci: Limit USB2 port wake support for AMD Promontory hosts" - iio: adc: twl4030: Fix an error handling path in 'twl4030_madc_probe()' - iio: adc: twl4030: Disable the vusb3v1 rugulator in the error handling path of 'twl4030_madc_probe()' - iio: ad_sigma_delta: Implement a dedicated reset function - staging: iio: ad7192: Fix - use the dedicated reset function avoiding dma from stack. - iio: core: Return error for failed read_reg - IIO: BME280: Updates to Humidity readings need ctrl_reg write! - iio: trigger: stm32-timer: preset shouldn't be buffered - iio: trigger: stm32-timer: fix a corner case to write preset - iio: ad7793: Fix the serial interface reset - iio: adc: stm32: fix bad error check on max_channels - iio: adc: mcp320x: Fix readout of negative voltages - iio: adc: mcp320x: Fix oops on module unload - uwb: properly check kthread_run return value - uwb: ensure that endpoint is interrupt - staging: vchiq_2835_arm: Fix NULL ptr dereference in free_pagelist - ksm: fix unlocked iteration over vmas in cmp_and_merge_page() - mm, hugetlb, soft_offline: save compound page order before page migration - mm, oom_reaper: skip mm structs with mmu notifiers - mm: fix RODATA_TEST failure "rodata_test: test data was not read only" - mm: avoid marking swap cached page as lazyfree - mm: fix data corruption caused by lazyfree page - userfaultfd: non-cooperative: fix fork use after free - lib/ratelimit.c: use deferred printk() version - lsm: fix smack_inode_removexattr and xattr_getsecurity memleak - ALSA: compress: Remove unused variable - Revert "ALSA: echoaudio: purge contradictions between dimension matrix members and total number of members" - ALSA: usx2y: Suppress kernel warning at page allocation failures - powerpc/powernv: Increase memory block size to 1GB on radix - powerpc: Fix action argument for cpufeatures-based TLB flush - powerpc/64s: Use emergency stack for kernel TM Bad Thing program checks - powerpc/tm: Fix illegal TM state in signal handler - percpu: make this_cpu_generic_read() atomic w.r.t. interrupts - intel_th: pci: Add Lewisburg PCH support - driver core: platform: Don't read past the end of "driver_override" buffer - cgroup: Reinit cgroup_taskset structure before cgroup_migrate_execute() returns - Drivers: hv: fcopy: restore correct transfer length - vmbus: don't acquire the mutex in vmbus_hvsock_device_unregister() - stm class: Fix a use-after-free - auxdisplay: charlcd: properly restore atomic counter on error path - ftrace: Fix kmemleak in unregister_ftrace_graph - ovl: fix error value printed in ovl_lookup_index() - ovl: fix dput() of ERR_PTR in ovl_cleanup_index() - ovl: fix dentry leak in ovl_indexdir_cleanup() - ovl: fix missing unlock_rename() in ovl_do_copy_up() - ovl: fix regression caused by exclusive upper/work dir protection - arm64: dt marvell: Fix AP806 system controller size - arm64: Ensure the instruction emulation is ready for userspace - HID: rmi: Make sure the HID device is opened on resume - HID: i2c-hid: allocate hid buffers for real worst case - HID: wacom: leds: Don't try to control the EKR's read-only LEDs - HID: wacom: Properly report negative values from Intuos Pro 2 Bluetooth - HID: wacom: Correct coordinate system of touchring and pen twist - HID: wacom: generic: Send MSC_SERIAL and ABS_MISC when leaving prox - HID: wacom: generic: Clear ABS_MISC when tool leaves proximity - HID: wacom: Always increment hdev refcount within wacom_get_hdev_data - HID: wacom: bits shifted too much for 9th and 10th buttons - btrfs: avoid overflow when sector_t is 32 bit - Btrfs: fix overlap of fs_info::flags values - rocker: fix rocker_tlv_put_* functions for KASAN - netlink: fix nla_put_{u8,u16,u32} for KASAN - dm crypt: reject sector_size feature if device length is not aligned to it - dm ioctl: fix alignment of event number in the device list - dm crypt: fix memory leak in crypt_ctr_cipher_old() - KVM: PPC: Book3S: Fix server always zero from kvmppc_xive_get_xive() - kvm/x86: Avoid async PF preempting the kernel incorrectly - iwlwifi: mvm: use IWL_HCMD_NOCOPY for MCAST_FILTER_CMD - scsi: sd: Implement blacklist option for WRITE SAME w/ UNMAP - scsi: sd: Do not override max_sectors_kb sysfs setting - brcmfmac: add length check in brcmf_cfg80211_escan_handler() - brcmfmac: setup passive scan if requested by user-space - drm/i915: always update ELD connector type after get modes - drm/i915/bios: ignore HDMI on port A - bsg-lib: fix use-after-free under memory-pressure - nvme-pci: Use PCI bus address for data/queues in CMB - mmc: core: add driver strength selection when selecting hs400es - nl80211: Define policy for packet pattern attributes - clk: samsung: exynos4: Enable VPLL and EPLL clocks for suspend/resume cycle - udp: perform source validation for mcast early demux - udp: fix bcast packet reception - base: arch_topology: fix section mismatch build warnings - Linux 4.13.6 * Artful update to v4.13.5 stable release (LP: #1721777) - cifs: check rsp for NULL before dereferencing in SMB2_open - cifs: release cifs root_cred after exit_cifs - cifs: release auth_key.response for reconnect. - nvme-pci: fix host memory buffer allocation fallback - nvme-pci: use appropriate initial chunk size for HMB allocation - nvme-pci: propagate (some) errors from host memory buffer setup - dax: remove the pmem_dax_ops->flush abstraction - dm integrity: do not check integrity for failed read operations - mmc: block: Fix incorrectly initialized requests - fs/proc: Report eip/esp in /prod/PID/stat for coredumping - scsi: scsi_transport_fc: fix NULL pointer dereference in fc_bsg_job_timeout - SMB3: Add support for multidialect negotiate (SMB2.1 and later) - mac80211: fix VLAN handling with TXQs - mac80211_hwsim: Use proper TX power - mac80211: flush hw_roc_start work before cancelling the ROC - mac80211: fix deadlock in driver-managed RX BA session start - genirq: Make sparse_irq_lock protect what it should protect - genirq/msi: Fix populating multiple interrupts - genirq: Fix cpumask check in __irq_startup_managed() - KVM: PPC: Book3S HV: Hold kvm->lock around call to kvmppc_update_lpcr - KVM: PPC: Book3S HV: Fix bug causing host SLB to be restored incorrectly - KVM: PPC: Book3S HV: Don't access XIVE PIPR register using byte accesses - tracing: Fix trace_pipe behavior for instance traces - tracing: Erase irqsoff trace with empty write - tracing: Remove RCU work arounds from stack tracer - md/raid5: fix a race condition in stripe batch - md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_list - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly - scsi: aacraid: Fix 2T+ drives on SmartIOC-2000 - scsi: aacraid: Add a small delay after IOP reset - drm/exynos: Fix locking in the suspend/resume paths - drm/i915/gvt: Fix incorrect PCI BARs reporting - Revert "drm/i915/bxt: Disable device ready before shutdown command" - drm/amdgpu: revert tile table update for oland - drm/radeon: disable hard reset in hibernate for APUs - crypto: drbg - fix freeing of resources - crypto: talitos - Don't provide setkey for non hmac hashing algs. - crypto: talitos - fix sha224 - crypto: talitos - fix hashing - security/keys: properly zero out sensitive key material in big_key - security/keys: rewrite all of big_key crypto - KEYS: fix writing past end of user-supplied buffer in keyring_read() - KEYS: prevent creating a different user's keyrings - KEYS: prevent KEYCTL_READ on negative key - libnvdimm, namespace: fix btt claim class crash - powerpc/eeh: Create PHB PEs after EEH is initialized - powerpc/pseries: Fix parent_dn reference leak in add_dt_node() - powerpc/tm: Flush TM only if CPU has TM feature - MIPS: Fix perf event init - s390/perf: fix bug when creating per-thread event - s390/mm: make pmdp_invalidate() do invalidation only - s390/mm: fix write access check in gup_huge_pmd() - PM: core: Fix device_pm_check_callbacks() - Revert "IB/ipoib: Update broadcast object if PKey value was changed in index 0" - Fix SMB3.1.1 guest authentication to Samba - SMB3: Fix endian warning - SMB3: Warn user if trying to sign connection that authenticated as guest - SMB: Validate negotiate (to protect against downgrade) even if signing off - SMB3: handle new statx fields - SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags - vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets - libceph: don't allow bidirectional swap of pg-upmap-items - nl80211: check for the required netlink attributes presence - brd: fix overflow in __brd_direct_access - gfs2: Fix debugfs glocks dump - bsg-lib: don't free job in bsg_prepare_job - iw_cxgb4: drop listen destroy replies if no ep found - iw_cxgb4: remove the stid on listen create failure - iw_cxgb4: put ep reference in pass_accept_req() - rcu: Allow for page faults in NMI handlers - mmc: sdhci-pci: Fix voltage switch for some Intel host controllers - extable: Consolidate *kernel_text_address() functions - extable: Enable RCU if it is not watching in kernel_text_address() - seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter() - arm64: Make sure SPsel is always set - arm64: fault: Route pte translation faults via do_translation_fault - KVM: VMX: extract __pi_post_block - KVM: VMX: avoid double list add with VT-d posted interrupts - KVM: VMX: simplify and fix vmx_vcpu_pi_load - KVM: nVMX: fix HOST_CR3/HOST_CR4 cache - kvm/x86: Handle async PF in RCU read-side critical sections - kvm: nVMX: Don't allow L2 to access the hardware CR8 - xfs: validate bdev support for DAX inode flag - fix infoleak in waitid(2) - sched/sysctl: Check user input value of sysctl_sched_time_avg - irq/generic-chip: Don't replace domain's name - mtd: Fix partition alignment check on multi-erasesize devices - mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user - etnaviv: fix submit error path - etnaviv: fix gem object list corruption - futex: Fix pi_state->owner serialization - md: fix a race condition for flush request handling - md: separate request handling - PCI: Fix race condition with driver_override - btrfs: fix NULL pointer dereference from free_reloc_roots() - btrfs: clear ordered flag on cleaning up ordered extents - btrfs: finish ordered extent cleaning if no progress is found - btrfs: propagate error to btrfs_cmp_data_prepare caller - btrfs: prevent to set invalid default subvolid - platform/x86: fujitsu-laptop: Don't oops when FUJ02E3 is not presnt - PM / OPP: Call notifier without holding opp_table->lock - x86/mm: Fix fault error path using unsafe vma pointer - x86/fpu: Don't let userspace set bogus xcomp_bv - KVM: VMX: do not change SN bit in vmx_update_pi_irte() - KVM: VMX: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt - KVM: VMX: use cmpxchg64 - video: fbdev: aty: do not leak uninitialized padding in clk to userspace - Linux 4.13.5 - [Config] Update configs for v4.13.5 [ Ubuntu: 4.13.0-16.19 ] * 20170817 - ISO hangs on boot on qemu with splash screen enabled and qxl graphics driver (LP: #1711358) - qxl: fix framebuffer unpinning * [Bug] USB controller failed to respond on Denverton after loading intel_th_pci module (LP: #1715833) - SAUCE: PCI: Disable broken RTIT_BAR of Intel TH * CVE-2017-5123 - waitid(): Add missing access_ok() checks linux-gcp (4.13.0-1001.3) xenial; urgency=low * Blacklist floppy module to increase boot performance (LP: #1729673) - [Config] disable floppy disk driver module linux-gcp (4.13.0-1001.2) xenial; urgency=low * Rebase linux-gcp to v4.13 kernel base (LP: #1728085) - [Configs] reset configuration to master - [Config] reapply GCP configuration overlay - update base kernel version - Revert "UBUNTU: [Packaging] Set do_tools_common in common vars" - [Config] resync control and d-i with 4.13 master kernel - [Config] ensure common tools is not built - [Config] announce as suitable for GKE and GCP - [Packaging] drop incorrect update-from-* script -- Stefan Bader