Xenial update to v4.4.20 stable release

Bug #1621113 reported by Tim Gardner on 2016-09-07
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Xenial
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.4.20 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the v4.4.20 stable release shall be applied:

hugetlb: fix nr_pmds accounting with shared page tables
x86/mm: Disable preemption during CR3 read+write
uprobes/x86: Fix RIP-relative handling of EVEX-encoded instructions
tools/testing/nvdimm: fix SIGTERM vs hotplug crash
SUNRPC: Handle EADDRNOTAVAIL on connection failures
SUNRPC: allow for upcalls for same uid but different gss service
powerpc/eeh: eeh_pci_enable(): fix checking of post-request state
ALSA: usb-audio: Add a sample rate quirk for Creative Live! Cam Socialize HD (VF0610)
ALSA: usb-audio: Add quirk for ELP HD USB Camera
arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
parisc: Fix order of EREFUSED define in errno.h
virtio: fix memory leak in virtqueue_add()
vfio/pci: Fix NULL pointer oops in error interrupt setup handling
perf intel-pt: Fix occasional decoding errors when tracing system-wide
libnvdimm, nd_blk: mask off reserved status bits
ALSA: hda - Manage power well properly for resume
NVMe: Don't unmap controller registers on reset
PCI: Support PCIe devices with short cfg_size
PCI: Add Netronome vendor and device IDs
PCI: Limit config space size for Netronome NFP6000 family
PCI: Add Netronome NFP4000 PF device ID
PCI: Limit config space size for Netronome NFP4000
mmc: sdhci-acpi: Reduce Baytrail eMMC/SD/SDIO hangs
ACPI: CPPC: Return error if _CPC is invalid on a CPU
ACPI / CPPC: Prevent cpc_desc_ptr points to the invalid data
um: Don't discard .text.exit section
genirq/msi: Remove unused MSI_FLAG_IDENTITY_MAP
genirq/msi: Make sure PCI MSIs are activated early
crypto: caam - fix non-hmac hashes
crypto: caam - fix echainiv(authenc) encrypt shared descriptor
crypto: caam - defer aead_set_sh_desc in case of zero authsize
usb: ehci: change order of register cleanup during shutdown
usb: misc: usbtest: add fix for driver hang
usb: dwc3: pci: add Intel Kabylake PCI ID
usb: dwc3: gadget: increment request->actual once
usb: hub: Fix unbalanced reference count/memory leak/deadlocks
USB: hub: fix up early-exit pathway in hub_activate
USB: hub: change the locking in hub_activate
usb: renesas_usbhs: clear the BRDYSTS in usbhsg_ep_enable()
usb: renesas_usbhs: Use dmac only if the pipe type is bulk
USB: validate wMaxPacketValue entries in endpoint descriptors
usb: gadget: fsl_qe_udc: off by one in setup_received_handle()
usb/gadget: fix gadgetfs aio support.
xhci: always handle "Command Ring Stopped" events
usb: xhci: Fix panic if disconnect
xhci: don't dereference a xhci member after removing xhci
USB: serial: fix memleak in driver-registration error path
USB: serial: option: add D-Link DWM-156/A3
USB: serial: option: add support for Telit LE920A4
USB: serial: ftdi_sio: add device ID for WICED USB UART dev board
USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices
iommu/dma: Don't put uninitialised IOVA domains
iommu/arm-smmu: Fix CMDQ error handling
iommu/arm-smmu: Don't BUG() if we find aborting STEs with disable_bypass
pinctrl/amd: Remove the default de-bounce time
EDAC: Increment correct counter in edac_inc_ue_error()
s390/dasd: fix hanging device after clear subchannel
mac80211: fix purging multicast PS buffer queue
arm64: dts: rockchip: add reset saradc node for rk3368 SoCs
of: fix reference counting in of_graph_get_endpoint_by_regs
sched/cputime: Fix NO_HZ_FULL getrusage() monotonicity regression
sched/nohz: Fix affine unpinned timers mess
iio: fix sched WARNING "do not call blocking ops when !TASK_RUNNING"
drm/amdgpu: Change GART offset to 64-bit
drm/amdgpu: fix amdgpu_move_blit on 32bit systems
drm/amdgpu: avoid a possible array overflow
drm/amdgpu: skip TV/CV in display parsing
drm/amd/amdgpu: sdma resume fail during S4 on CI
drm/amdgpu: record error code when ring test failed
drm/i915: fix aliasing_ppgtt leak
ARC: build: Better way to detect ISA compatible toolchain
ARC: use correct offset in pt_regs for saving/restoring user mode r25
ARC: Call trace_hardirqs_on() before enabling irqs
ARC: Elide redundant setup of DMA callbacks
aacraid: Check size values after double-fetch from user
mfd: cros_ec: Add cros_ec_cmd_xfer_status() helper
i2c: cros-ec-tunnel: Fix usage of cros_ec_cmd_xfer()
cdc-acm: fix wrong pipe type on rx interrupt xfers
mpt3sas: Fix resume on WarpDrive flash cards
megaraid_sas: Fix probing cards without io port
usb: renesas_usbhs: gadget: fix return value check in usbhs_mod_gadget_probe()
gpio: Fix OF build problem on UM
fs/seq_file: fix out-of-bounds read
btrfs: waiting on qgroup rescan should not always be interruptible
btrfs: properly track when rescan worker is running
Input: tegra-kbc - fix inverted reset logic
Input: i8042 - break load dependency between atkbd/psmouse and i8042
Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
crypto: nx - off by one bug in nx_of_update_msc()
crypto: qat - fix aes-xts key sizes
dmaengine: usb-dmac: check CHCR.DE bit in usb_dmac_isr_channel()
USB: avoid left shift by -1
usb: chipidea: udc: don't touch DP when controller is in host mode
USB: fix typo in wMaxPacketSize validation
USB: serial: mos7720: fix non-atomic allocation in write path
USB: serial: mos7840: fix non-atomic allocation in write path
USB: serial: option: add WeTelecom WM-D200
USB: serial: option: add WeTelecom 0x6802 and 0x6803 products
staging: comedi: daqboard2000: bug fix board type matching code
staging: comedi: comedi_test: fix timer race conditions
staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility
staging: comedi: ni_mio_common: fix wrong insn_write handler
ACPI / drivers: fix typo in ACPI_DECLARE_PROBE_ENTRY macro
ACPI / drivers: replace acpi_probe_lock spinlock with mutex
ACPI / sysfs: fix error code in get_status()
ACPI / SRAT: fix SRAT parsing order with both LAPIC and X2APIC present
ALSA: line6: Remove double line6_pcm_release() after failed acquire.
ALSA: line6: Give up on the lock while URBs are released.
ALSA: line6: Fix POD sysfs attributes segfault
hwmon: (iio_hwmon) fix memory leak in name attribute
sysfs: correctly handle read offset on PREALLOC attrs
Linux 4.4.20

CVE References

Tim Gardner (timg-tpi) on 2016-09-07
tags: added: kernel-stable-tracking-bug
Tim Gardner (timg-tpi) on 2016-09-07
description: updated
Changed in linux (Ubuntu Xenial):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (17.5 KiB)

This bug was fixed in the package linux - 4.4.0-42.62

---------------
linux (4.4.0-42.62) xenial; urgency=low

  * Fix GRO recursion overflow for tunneling protocols (LP: #1631287)
    - tunnels: Don't apply GRO to multiple layers of encapsulation.
    - gro: Allow tunnel stacking in the case of FOU/GUE

  * CVE-2016-7039
    - SAUCE: net: add recursion limit to GRO

linux (4.4.0-41.61) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1628204

  * nvme drive probe failure (LP: #1626894)
    - (fix) NVMe: Don't unmap controller registers on reset

linux (4.4.0-40.60) xenial; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1627074

  * Permission denied in CIFS with kernel 4.4.0-38 (LP: #1626112)
    - Fix memory leaks in cifs_do_mount()
    - Compare prepaths when comparing superblocks
    - SAUCE: Fix regression which breaks DFS mounting

  * Backlight does not change when adjust it higher than 50% after S3
    (LP: #1625932)
    - SAUCE: i915_bpo: drm/i915/backlight: setup and cache pwm alternate
      increment value
    - SAUCE: i915_bpo: drm/i915/backlight: setup backlight pwm alternate
      increment on backlight enable

linux (4.4.0-39.59) xenial; urgency=low

  [ Joseph Salisbury ]

  * Release Tracking Bug
    - LP: #1625303

  * thunder: chip errata w/ multiple CQEs for a TSO packet (LP: #1624569)
    - net: thunderx: Fix for issues with multiple CQEs posted for a TSO packet

  * thunder: faulty TSO padding (LP: #1623627)
    - net: thunderx: Fix for HW issue while padding TSO packet

  * CVE-2016-6828
    - tcp: fix use after free in tcp_xmit_retransmit_queue()

  * Sennheiser Officerunner - cannot get freq at ep 0x83 (LP: #1622763)
    - SAUCE: (no-up) ALSA: usb-audio: Add quirk for sennheiser officerunner

  * Backport E3 Skylake Support in ie31200_edac to Xenial (LP: #1619766)
    - EDAC, ie31200_edac: Add Skylake support

  * Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - SAUCE: nvme: Don't suspend admin queue that wasn't created

  * ISST-LTE:pNV: system ben is hung during ST (nvme) (LP: #1620317)
    - blk-mq: Allow timeouts to run while queue is freezing
    - blk-mq: improve warning for running a queue on the wrong CPU
    - blk-mq: don't overwrite rq->mq_ctx

  * lsattr 32bit does not work on 64bit kernel (Inappropriate ioctl error)
    (LP: #1619918)
    - btrfs: bugfix: handle FS_IOC32_{GETFLAGS, SETFLAGS, GETVERSION} in
      btrfs_ioctl

  * radeon: monitor connected to onboard VGA doesn't work with Xenial
    (LP: #1600092)
    - drm/radeon/dp: add back special handling for NUTMEG

  * initramfs includes qle driver, but not firmware (LP: #1623187)
    - qed: add MODULE_FIRMWARE()

  * [Hyper-V] Rebase Hyper-V to 4.7.2 (stable) (LP: #1616677)
    - hv_netvsc: Implement support for VF drivers on Hyper-V
    - hv_netvsc: Fix the list processing for network change event
    - Drivers: hv: vmbus: Introduce functions for estimating room in the ring
      buffer
    - Drivers: hv: vmbus: Use READ_ONCE() to read variables that are volatile
    - Drivers: hv: vmbus: Export the vmbus_set_event() API
    - lcoking/barriers, arch: Use smp barriers...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu):
status: New → Confirmed
Yu Ning (yuningdodo) wrote :

Oops, comment #3 is not for this bug, please ignore it.

Po-Hsu Lin (cypressyew) on 2019-10-03
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers