Yakkety update to v4.8.6 stable release

Bug #1638748 reported by Tim Gardner on 2016-11-02
This bug affects 2 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.8.6 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches from the v4.8.6 stable release shall be applied:

drm/vc4: Fix races when the CS reads from render targets.
drm/prime: Pass the right module owner through to dma_buf_export()
drm/i915/backlight: setup and cache pwm alternate increment value
drm/i915/backlight: setup backlight pwm alternate increment on backlight enable
drm/amdgpu: fix IB alignment for UVD
drm/amdgpu/dce10: disable hpd on local panels
drm/amdgpu/dce8: disable hpd on local panels
drm/amdgpu/dce11: disable hpd on local panels
drm/amdgpu/dce11: add missing drm_mode_config_cleanup call
drm/amdgpu: initialize the context reset_counter in amdgpu_ctx_init
drm/amdgpu: change vblank_time's calculation method to reduce computational error.
drm/radeon: narrow asic_init for virtualization
drm/radeon/si/dpm: fix phase shedding setup
drm/radeon: change vblank_time's calculation method to reduce computational error.
drm/vmwgfx: Limit the user-space command buffer size
drm/fsl-dcu: fix endian issue when using clk_register_divider
drm/amd/powerplay: fix mclk not switching back after multi-head was disabled
HID: add quirk for Akai MIDImix.
drm/i915/skl: Update plane watermarks atomically during plane updates
drm/i915: Move CRTC updating in atomic_commit into it's own hook
drm/i915/skl: Update DDB values atomically with wms/plane attrs
drm/i915/skl: Don't try to update plane watermarks if they haven't changed
drm/i915/gen9: only add the planes actually affected by ddb changes
drm/i915/gen9: fix the WaWmMemoryReadLatency implementation
drm/i915/gen9: minimum scanlines for Y tile is not always 4
drm/i915/gen9: fix plane_blocks_per_line on watermarks calculations
drm/i915/gen9: fix the watermark res_blocks value
drm/i915: SAGV is not SKL-only, so rename a few things
drm/i915: introduce intel_has_sagv()
drm/i915/kbl: KBL also needs to run the SAGV code
Revert "drm/i915: Check live status before reading edid"
drm/i915: Account for TSEG size when determining 865G stolen base
drm/i915/skl: Ensure pipes with changed wms get added to the state
drm/i915: Allow PCH DPLL sharing regardless of DPLL_SDVO_HIGH_SPEED
drm/i915: Move long hpd handling into the hotplug work
drm/i915: Allow DP to work w/o EDID
drm/i915: Just clear the mmiodebug before a register access
drm/i915: Unalias obj->phys_handle and obj->userptr
posix_acl: Clear SGID bit when setting file permissions
rt2x00usb: Fix error return code
scsi: cxlflash: Remove the device cleanly in the system shutdown path
genirq/generic_chip: Add irq_unmap callback
coresight: Remove erroneous dma_free_coherent in tmc_probe
uio: fix dmem_region_start computation
ARM: clk-imx35: fix name for ckil clk
spi: spi-fsl-dspi: Drop extra spi_master_put in device remove function
i40e: remove a stray unlock
i40e: fix broken i40e_config_rss_aq function
mwifiex: correct aid value during tdls setup
mwifiex: fix failed to reconnect after interface disabled/enabled
ath10k: fix sending frame in management path in push txq logic
ath10k: fix reporting channel survey data
ath10k: fix throughput regression in multi client mode
crypto: marvell - Don't overwrite default creq->state during initialization
crypto: gcm - Fix IV buffer size in crypto_gcm_setkey
crypto: marvell - Update transformation context for each dequeued req
crypto: arm/ghash-ce - add missing async import/export
crypto: ccp - Fix return value check in ccp_dmaengine_register()
hwrng: omap - Only fail if pm_runtime_get_sync returns < 0
ASoC: topology: Fix error return code in soc_tplg_dapm_widget_create()
ASoC: dapm: Fix possible uninitialized variable in snd_soc_dapm_get_volsw()
ASoC: dapm: Fix value setting for _ENUM_DOUBLE MUX's second channel
ASoC: dapm: Fix kcontrol creation for output driver widget
ASoC: sst-bxt-rt298: fix obsoleted initializers for array
ASoC: sst-bxt-da7219_max98357a: fix obsoleted initializers for array
iio: ad5755: fix off-by-one on devnr limit check
iio: light: us5182d: Add missing error code assignment before test
staging: android ion/hisi: fix dependencies
staging: sm750fb: Correctly set CLOCK_PHASE bit of display controller.
staging: r8188eu: Fix scheduling while atomic splat
staging: ks7010: fix wait_for_completion_interruptible_timeout return handling
staging: ks7010: declare private functions static
IB/hfi1: Move iowait_init() to priv allocate
IB/rdmavt: Correct sparse annotation
IB/qib: Remove qpt_mask global
IB/mlx5: Fix steering resource leak
power: bq24257: Fix use of uninitialized pointer bq->charger
dmaengine: ipu: remove bogus NO_IRQ reference
mm/hugetlb: check for reserved hugepages during memory offline
mm/hugetlb: improve locking in dissolve_free_huge_pages()
drm/vmwgfx: Avoid validating views on view destruction
s390/cio: fix accidental interrupt enabling during resume
s390/con3270: fix use of uninitialised data
s390/con3270: fix insufficient space padding
clk: bcm2835: Skip PLLC clocks when deciding on a new clock parent
clk: gcc-msm8996: Fix pcie 2 pipe register offset
clk: qcom: select GDSC for msm8996 gcc and mmcc
clk: qoriq: fix a register offset error
clk: Return errors from clk providers in __of_clk_get_from_provider()
clk: core: Force setting the phase delay when no change
clk: divider: Fix clk_divider_round_rate() to use clk_readl()
perf data: Fix building in 32 bit platform with libbabeltrace
perf hists browser: Fix event group display
perf powerpc: Fix build-test failure
perf ui/tui: Reset output width for hierarchy
perf ui/stdio: Always reset output width for hierarchy
perf symbols: Check symbol_conf.allow_aliases for kallsyms loading too
perf symbols: Fixup symbol sizes before picking best ones
iwlwifi: check for valid ethernet address provided by OEM
iwlwifi: mvm: fix pending frames tracking on tx resp
iwlwifi: mvm: call a different txq_enable function
iwlwifi: mvm: free reserved queue on STA removal
iwlwifi: mvm: support BAR in reorder buffer
iwlwifi: mvm: disable P2P queue on mac context release
iwlwifi: mvm: bail out if CTDP start operation fails
ARM: dts: sun9i: Add missing #interrupt-cells to R_PIO pinctrl device node
pinctrl: qcom: fix masking of pinmux functions
mpt3sas: Don't spam logs if logging level is 0
powerpc: Always restore FPU/VEC/VSX if hardware transactional memory in use
powerpc: Add check_if_tm_restore_required() to giveup_all()
powerpc/nvram: Fix an incorrect partition merge
powerpc: Fix usage of _PAGE_RO in hugepage
ARM: pxa: pxa_cplds: fix interrupt handling
ARM: pxa: fix GPIO double shifts
ARM: dts: NSP: Correct RAM amount for BCM958625HR board
ARM: dts: fix RealView EB SMSC ethernet version
ARM: dts: omap3: overo: add missing unit name for lcd35 display
PCI: rcar: Fix pci_remap_iospace() failure path
PCI: aardvark: Fix pci_remap_iospace() failure path
PCI: generic: Fix pci_remap_iospace() failure path
PCI: versatile: Fix pci_remap_iospace() failure path
PCI: designware: Fix pci_remap_iospace() failure path
PCI: tegra: Fix pci_remap_iospace() failure path
libnvdimm: clear the internal poison_list when clearing badblocks
Linux 4.8.6

CVE References

Tim Gardner (timg-tpi) on 2016-11-02
tags: added: kernel-stable-tracking-bug
Tim Gardner (timg-tpi) on 2016-11-03
description: updated
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in linux (Ubuntu Yakkety):
status: New → Confirmed
Changed in linux (Ubuntu):
status: New → Confirmed
Luis Henriques (henrix) on 2016-11-11
Changed in linux (Ubuntu Yakkety):
status: Confirmed → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (26.6 KiB)

This bug was fixed in the package linux - 4.8.0-28.30

linux (4.8.0-28.30) yakkety; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1641083

  * lxc-attach to malicious container allows access to host (LP: #1639345)
    - Revert "UBUNTU: SAUCE: (noup) ptrace: being capable wrt a process requires
      mapped uids/gids"
    - (upstream) mm: Add a user_ns owner to mm_struct and fix ptrace permission

  * [Feature] AVX-512 new instruction sets (avx512_4vnniw, avx512_4fmaps)
    (LP: #1637526)
    - x86/cpufeature: Add AVX512_4VNNIW and AVX512_4FMAPS features

  * zfs: importing zpool with vdev on zvol hangs kernel (LP: #1636517)
    - SAUCE: (noup) Update zfs to

  * Move some device drivers build from kernel built-in to modules
    (LP: #1637303)
    - [Config] CONFIG_TIGON3=m for all arches

  * I2C touchpad does not work on AMD platform (LP: #1612006)
    - pinctrl/amd: Configure GPIO register using BIOS settings

  * guest experiencing Transmit Timeouts on CX4 (LP: #1636330)
    - powerpc/64: Re-fix race condition between going idle and entering guest
    - powerpc/64: Fix race condition in setting lock bit in idle/wakeup code

  * QEMU throws failure msg while booting guest with SRIOV VF (LP: #1630554)
    - KVM: PPC: Always select KVM_VFIO, plus Makefile cleanup

  * [Feature] KBL - New device ID for Kabypoint(KbP) (LP: #1591618)
    - SAUCE: mfd: lpss: Fix Intel Kaby Lake PCH-H properties

  * hio: SSD data corruption under stress test (LP: #1638700)
    - SAUCE: hio: set bi_error field to signal an I/O error on a BIO
    - SAUCE: hio: splitting bio in the entry of .make_request_fn

  * cleanup primary tree for linux-hwe layering issues (LP: #1637473)
    - [Config] switch Vcs-Git: to yakkety repository
    - [Packaging] handle both linux-lts* and linux-hwe* as backports
    - [Config] linux-tools-common and linux-cloud-tools-common are one per series
    - [Config] linux-source-* is in the primary linux namespace
    - [Config] linux-tools -- always suggest the base package

  * SRU: sync zfsutils-linux and spl-linux changes to linux (LP: #1635656)
    - SAUCE: (noup) Update spl to, zfs to (LP:

  * [Feature] SKX: perf uncore PMU support (LP: #1591810)
    - perf/x86/intel/uncore: Add Skylake server uncore support
    - perf/x86/intel/uncore: Remove hard-coded implementation for Node ID mapping
    - perf/x86/intel/uncore: Handle non-standard counter offset

  * [Feature] Purley: Memory Protection Keys (LP: #1591804)
    - x86/pkeys: Add fault handling for PF_PK page fault bit
    - mm: Implement new pkey_mprotect() system call
    - x86/pkeys: Make mprotect_key() mask off additional vm_flags
    - x86/pkeys: Allocation/free syscalls
    - x86: Wire up protection keys system calls
    - generic syscalls: Wire up memory protection keys syscalls
    - pkeys: Add details of system call use to Documentation/
    - x86/pkeys: Default to a restrictive init PKRU
    - x86/pkeys: Allow configuration of init_pkru
    - x86/pkeys: Add self-tests

  * kernel invalid ...

Changed in linux (Ubuntu Yakkety):
status: Fix Committed → Fix Released

The verification of the Stable Release Update for linux has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux - 4.8.0-30.32

linux (4.8.0-30.32) yakkety; urgency=low

  * CVE-2016-8655 (LP: #1646318)
    - packet: fix race condition in packet_set_ring

 -- Brad Figg <email address hidden> Thu, 01 Dec 2016 08:02:53 -0800

Changed in linux (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers