linux-euclid: 4.4.0-9024.25 -proposed tracker

Bug #1746939 reported by Stefan Bader on 2018-02-02
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Kernel SRU Workflow
Canonical Kernel Team
Canonical Hardware Certification
Kleber Sacilotto de Souza
Kleber Sacilotto de Souza
Łukasz Zemczak
Ubuntu Stable Release Updates Team
Ubuntu Stable Release Updates Team
Canonical Kernel Team
Canonical Security Team
Canonical Kernel Team
Canonical Kernel Team
linux-euclid (Ubuntu)

Bug Description

This bug is for tracking the <version to be filled> upload package. This bug will contain status and testing results related to that upload.

For an explanation of the tasks and the associated workflow see:
-- swm properties --
boot-testing-requested: true
kernel-stable-master-bug: 1746936
phase: Promoted to proposed
proposed-announcement-sent: true
proposed-testing-requested: true

CVE References

Stefan Bader (smb) on 2018-02-02
tags: added: kernel-release-tracking-bug
tags: added: kernel-release-tracking-bug-live
tags: added: xenial
Changed in linux-euclid (Ubuntu Xenial):
status: New → Confirmed
Changed in kernel-sru-workflow:
status: New → In Progress
importance: Undecided → Medium
Changed in linux-euclid (Ubuntu):
status: New → Invalid
Changed in linux-euclid (Ubuntu Xenial):
importance: Undecided → Medium
tags: added: kernel-sru-cycle-2018.02.01-1
tags: added: kernel-sru-derivative-of-1746936
Brad Figg (brad-figg) on 2018-02-08
description: updated
description: updated
summary: - linux-euclid: <version to be filled> -proposed tracker
+ linux-euclid: 4.4.0-9024.25 -proposed tracker
Brad Figg (brad-figg) on 2018-02-09
tags: added: block-proposed-xenial
tags: added: block-proposed
description: updated
description: updated
Brad Figg (brad-figg) on 2018-02-09
description: updated
description: updated
Launchpad Janitor (janitor) wrote :
Download full text (8.7 KiB)

This bug was fixed in the package linux-euclid - 4.4.0-9025.27

linux-euclid (4.4.0-9025.27) xenial; urgency=medium

  * linux-euclid: 4.4.0-9025.27 -proposed tracker (LP: #1749095)

  * BUG: unable to handle kernel NULL pointer dereference at 0000000000000009
    (LP: #1748671)
    - SAUCE: net: ipv4: fix for a race condition in raw_sendmsg -- fix backport

  * CVE-2017-5715 (Spectre v2 Intel)
    - SAUCE: drop lingering gmb() macro
    - x86/feature: Enable the x86 feature to control Speculation
    - x86/feature: Report presence of IBPB and IBRS control
    - x86/enter: MACROS to set/clear IBRS and set IBPB
    - x86/enter: Use IBRS on syscall and interrupts
    - x86/idle: Disable IBRS entering idle and enable it on wakeup
    - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup
    - x86/mm: Set IBPB upon context switch
    - x86/mm: Only set IBPB when the new thread cannot ptrace current thread
    - x86/kvm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD to kvm
    - x86/kvm: Set IBPB when switching VM
    - x86/kvm: Toggle IBRS on VM entry and exit
    - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature
    - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control
    - x86/cpu/amd, kvm: Satisfy guest kernel reads of IC_CFG MSR
    - x86/cpu/AMD: Add speculative control support for AMD
    - x86/microcode: Extend post microcode reload to support IBPB feature
    - KVM: SVM: Do not intercept new speculative control MSRs
    - x86/svm: Set IBRS value on VM entry and exit
    - x86/svm: Set IBPB when running a different VCPU
    - KVM: x86: Add speculative control CPUID support for guests
    - SAUCE: Fix spec_ctrl support in KVM
    - SAUCE: turn off IBRS when full retpoline is present
    - [Packaging] retpoline files must be sorted
    - [Packaging] pull in retpoline files
    - [Packaging] sort retpoline file from previous ABI

linux-euclid (4.4.0-9024.25) xenial; urgency=low

  * linux-euclid: 4.4.0-9024.25 -proposed tracker (LP: #1746939)

  * CVE-2017-5715 (Spectre v2 retpoline)
    - x86/cpuid: Provide get_scattered_cpuid_leaf()
    - x86/cpu: Factor out application of forced CPU caps
    - x86/cpufeatures: Make CPU bugs sticky
    - x86/cpufeatures: Add X86_BUG_CPU_INSECURE
    - x86/cpu, x86/pti: Do not enable PTI on AMD processors
    - x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN
    - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12]
    - x86/cpu: Merge bugs.c and bugs_64.c
    - sysfs/cpu: Add vulnerability folder
    - x86/cpu: Implement CPU vulnerabilites sysfs functions
    - x86/alternatives: Add missing '\n' at end of ALTERNATIVE inline asm
    - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier
    - x86/asm: Use register variable to get stack pointer value
    - x86/kbuild: enable modversions for symbols exported from asm
    - x86/asm: Make asm/alternative.h safe from assembly
    - EXPORT_SYMBOL() for asm
    - kconfig.h: use __is_defined() to check if MODULE is defined
    - x86/retpoline: Add initial retpoline support
    - x86/spectre: Add boot time option to select Spectre v2 mitigation
    - x86/retpoline/crypto: Convert crypto assemble...


Changed in linux-euclid (Ubuntu Xenial):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers