Xenial update to v4.4.20 stable release

Bug #1621113 reported by Tim Gardner on 2016-09-07
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.4.20 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches from the v4.4.20 stable release shall be applied:

hugetlb: fix nr_pmds accounting with shared page tables
x86/mm: Disable preemption during CR3 read+write
uprobes/x86: Fix RIP-relative handling of EVEX-encoded instructions
tools/testing/nvdimm: fix SIGTERM vs hotplug crash
SUNRPC: Handle EADDRNOTAVAIL on connection failures
SUNRPC: allow for upcalls for same uid but different gss service
powerpc/eeh: eeh_pci_enable(): fix checking of post-request state
ALSA: usb-audio: Add a sample rate quirk for Creative Live! Cam Socialize HD (VF0610)
ALSA: usb-audio: Add quirk for ELP HD USB Camera
parisc: Fix order of EREFUSED define in errno.h
virtio: fix memory leak in virtqueue_add()
vfio/pci: Fix NULL pointer oops in error interrupt setup handling
perf intel-pt: Fix occasional decoding errors when tracing system-wide
libnvdimm, nd_blk: mask off reserved status bits
ALSA: hda - Manage power well properly for resume
NVMe: Don't unmap controller registers on reset
PCI: Support PCIe devices with short cfg_size
PCI: Add Netronome vendor and device IDs
PCI: Limit config space size for Netronome NFP6000 family
PCI: Add Netronome NFP4000 PF device ID
PCI: Limit config space size for Netronome NFP4000
mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
ACPI: CPPC: Return error if _CPC is invalid on a CPU
ACPI / CPPC: Prevent cpc_desc_ptr points to the invalid data
um: Don't discard .text.exit section
genirq/msi: Remove unused MSI_FLAG_IDENTITY_MAP
genirq/msi: Make sure PCI MSIs are activated early
crypto: caam - fix non-hmac hashes
crypto: caam - fix echainiv(authenc) encrypt shared descriptor
crypto: caam - defer aead_set_sh_desc in case of zero authsize
usb: ehci: change order of register cleanup during shutdown
usb: misc: usbtest: add fix for driver hang
usb: dwc3: pci: add Intel Kabylake PCI ID
usb: dwc3: gadget: increment request->actual once
usb: hub: Fix unbalanced reference count/memory leak/deadlocks
USB: hub: fix up early-exit pathway in hub_activate
USB: hub: change the locking in hub_activate
usb: renesas_usbhs: clear the BRDYSTS in usbhsg_ep_enable()
usb: renesas_usbhs: Use dmac only if the pipe type is bulk
USB: validate wMaxPacketValue entries in endpoint descriptors
usb: gadget: fsl_qe_udc: off by one in setup_received_handle()
usb/gadget: fix gadgetfs aio support.
xhci: always handle "Command Ring Stopped" events
usb: xhci: Fix panic if disconnect
xhci: don't dereference a xhci member after removing xhci
USB: serial: fix memleak in driver-registration error path
USB: serial: option: add D-Link DWM-156/A3
USB: serial: option: add support for Telit LE920A4
USB: serial: ftdi_sio: add device ID for WICED USB UART dev board
USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices
iommu/dma: Don't put uninitialised IOVA domains
iommu/arm-smmu: Fix CMDQ error handling
iommu/arm-smmu: Don't BUG() if we find aborting STEs with disable_bypass
pinctrl/amd: Remove the default de-bounce time
EDAC: Increment correct counter in edac_inc_ue_error()
s390/dasd: fix hanging device after clear subchannel
mac80211: fix purging multicast PS buffer queue
arm64: dts: rockchip: add reset saradc node for rk3368 SoCs
of: fix reference counting in of_graph_get_endpoint_by_regs
sched/cputime: Fix NO_HZ_FULL getrusage() monotonicity regression
sched/nohz: Fix affine unpinned timers mess
iio: fix sched WARNING "do not call blocking ops when !TASK_RUNNING"
drm/amdgpu: Change GART offset to 64-bit
drm/amdgpu: fix amdgpu_move_blit on 32bit systems
drm/amdgpu: avoid a possible array overflow
drm/amdgpu: skip TV/CV in display parsing
drm/amd/amdgpu: sdma resume fail during S4 on CI
drm/amdgpu: record error code when ring test failed
drm/i915: fix aliasing_ppgtt leak
ARC: build: Better way to detect ISA compatible toolchain
ARC: use correct offset in pt_regs for saving/restoring user mode r25
ARC: Call trace_hardirqs_on() before enabling irqs
ARC: Elide redundant setup of DMA callbacks
aacraid: Check size values after double-fetch from user
mfd: cros_ec: Add cros_ec_cmd_xfer_status() helper
i2c: cros-ec-tunnel: Fix usage of cros_ec_cmd_xfer()
cdc-acm: fix wrong pipe type on rx interrupt xfers
mpt3sas: Fix resume on WarpDrive flash cards
megaraid_sas: Fix probing cards without io port
usb: renesas_usbhs: gadget: fix return value check in usbhs_mod_gadget_probe()
gpio: Fix OF build problem on UM
fs/seq_file: fix out-of-bounds read
btrfs: waiting on qgroup rescan should not always be interruptible
btrfs: properly track when rescan worker is running
Input: tegra-kbc - fix inverted reset logic
Input: i8042 - break load dependency between atkbd/psmouse and i8042
Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
crypto: nx - off by one bug in nx_of_update_msc()
crypto: qat - fix aes-xts key sizes
dmaengine: usb-dmac: check CHCR.DE bit in usb_dmac_isr_channel()
USB: avoid left shift by -1
usb: chipidea: udc: don't touch DP when controller is in host mode
USB: fix typo in wMaxPacketSize validation
USB: serial: mos7720: fix non-atomic allocation in write path
USB: serial: mos7840: fix non-atomic allocation in write path
USB: serial: option: add WeTelecom WM-D200
USB: serial: option: add WeTelecom 0x6802 and 0x6803 products
staging: comedi: daqboard2000: bug fix board type matching code
staging: comedi: comedi_test: fix timer race conditions
staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility
staging: comedi: ni_mio_common: fix wrong insn_write handler
ACPI / drivers: fix typo in ACPI_DECLARE_PROBE_ENTRY macro
ACPI / drivers: replace acpi_probe_lock spinlock with mutex
ACPI / sysfs: fix error code in get_status()
ACPI / SRAT: fix SRAT parsing order with both LAPIC and X2APIC present
ALSA: line6: Remove double line6_pcm_release() after failed acquire.
ALSA: line6: Give up on the lock while URBs are released.
ALSA: line6: Fix POD sysfs attributes segfault
hwmon: (iio_hwmon) fix memory leak in name attribute
sysfs: correctly handle read offset on PREALLOC attrs
Linux 4.4.20

CVE References

Tim Gardner (timg-tpi) on 2016-09-07
tags: added: kernel-stable-tracking-bug
Tim Gardner (timg-tpi) on 2016-09-07
description: updated
Changed in linux (Ubuntu Xenial):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (17.5 KiB)

This bug was fixed in the package linux - 4.4.0-42.62

linux (4.4.0-42.62) xenial; urgency=low

  * Fix GRO recursion overflow for tunneling protocols (LP: #1631287)
    - tunnels: Don't apply GRO to multiple layers of encapsulation.
    - gro: Allow tunnel stacking in the case of FOU/GUE

  * CVE-2016-7039
    - SAUCE: net: add recursion limit to GRO

linux (4.4.0-41.61) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1628204

  * nvme drive probe failure (LP: #1626894)
    - (fix) NVMe: Don't unmap controller registers on reset

linux (4.4.0-40.60) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1627074

  * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
    - Fix memory leaks in cifs_do_mount()
    - Compare prepaths when comparing superblocks
    - SAUCE: Fix regression which breaks DFS mounting

  * Backlight does not change when adjust it higher than 50% after S3
    (LP: #1625932)
    - SAUCE: i915_bpo: drm/i915/backlight: setup and cache pwm alternate
      increment value
    - SAUCE: i915_bpo: drm/i915/backlight: setup backlight pwm alternate
      increment on backlight enable

linux (4.4.0-39.59) xenial; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1625303

  * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
    - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet

  * thunder: faulty TSO padding (LP: #1623627)
    - net: thunderx: Fix for HW issue while padding TSO packet

  * CVE-2016-6828
    - tcp: fix use after free in tcp_xmit_retransmit_queue()

  * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
    - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner

  * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
    - EDAC, ie31200_edac: Add Skylake support

  * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - SAUCE: nvme: Don't suspend admin queue that wasn't created

  * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
    - blk-mq: Allow timeouts to run while queue is freezing
    - blk-mq: improve warning for running a queue on the wrong CPU
    - blk-mq: don't overwrite rq->mq_ctx

  * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
    (LP: #1619918)
    - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in

  * radeon: monitor connected to onboard VGA doesn't work with Xenial
    (LP: #1600092)
    - drm/radeon/dp: add back special handling for NUTMEG

  * initramfs includes qle driver, but not firmware (LP: #1623187)
    - qed: add MODULE_FIRMWARE()

  * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
    - hv_netvsc: Implement support for VF drivers on Hyper-V
    - hv_netvsc: Fix the list processing for network change event
    - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
    - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
    - Drivers: hv: vmbus: Export the vmbus_set_event() API
    - lcoking/barriers, arch: Use smp barriers...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Yu Ning (yuningdodo) wrote :

Oops, comment #3 is not for this bug, please ignore it.

Po-Hsu Lin (cypressyew) on 2019-10-03
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers