NVMe timeout is too short

[Daniel Axtens]

[SRU Justification]

[Impact]
Some NVMe operations time out too quickly. The module parameters allow the timeouts to be extended, but only up to 255s, as the counters are bytes.

[Fix]
The underlying parameters are unsigned ints, so make the module parameters unsigned ints too, by picking patch http://lists.infradead.org/pipermail/linux-nvme/2017-September/012701.html

(Trusty specific) This also requires picking the patch that converts
the constant into a parameter, which is a clean cherry-pick.

[Regression Potential]
(X/Z/A) Very limited: only types of module parameters are changing, the patch is easily reviewable.

(Trusty specific) Limited: a module parameter is added and its type is
changed. The patches are easily reviewable.

[Testing]
(Trusty only) Boot tested on a c5.large instance on AWS which uses
NVMe to boot. Verified that the system still boots with the patches,
and that a timeout of 123456s is permitted.

[Kleber Sacilotto de Souza (kleber-souza)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-xenial' to 'verification-done-xenial'. If the problem still exists, change the tag 'verification-needed-xenial' to 'verification-failed-xenial'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-aws - 4.4.0-1041.50

---------------
linux-aws (4.4.0-1041.50) xenial; urgency=low

  * linux-aws: 4.4.0-1041.50 -proposed tracker (LP: #1732535)

  * xen hibernation support for linux-aws (LP: #1732512)
    - aws: [Config] disable SUSPEND
    - aws: [Config] disable XEN_FBDEV_FRONTEND, INPUT_XEN_KBDDEV_FRONTEND
    - xen: move xen_setup_runstate_info and get_runstate_snapshot to
      drivers/xen/time.c
    - xen/time: use READ_ONCE
    - xen: add steal_clock support on x86
    - xen: support runqueue steal time on xen
    - xen: introduce xen_vcpu_id mapping
    - x86/xen: use xen_vcpu_id mapping for HYPERVISOR_vcpu_op
    - xen: add static initialization of steal_clock op to xen_time_ops
    - x86/xen: update cpuid.h from Xen-4.7
    - x86/acpi: store ACPI ids from MADT for future usage
    - xen: update xen headers
    - xen: change the type of xen_vcpu_id to uint32_t
    - xen/blkfront: separate per ring information out of device info
    - xen/blkfront: pseudo support for multi hardware queues/rings
    - xen/blkfront: split per device io_lock
    - xen/blkfront: negotiate number of queues/rings to be used with backend
    - xen/blkfront: Cleanup of comments, fix unaligned variables, and syntax
      errors.
    - xen/blkfront: Remove duplicate setting of ->xbdev.
    - xen/blkfront: make persistent grants pool per-queue
    - xen/blkfront: correct setting for xen_blkif_max_ring_order
    - xen/blkfront: realloc ring info in blkif_resume
    - blk-mq: dynamic h/w context count
    - xen-blkfront: save uncompleted reqs in blkfront_resume()
    - xen-blkfront: fix places not updated after introducing 64KB page granularity
    - blk-mq: mark request queue as mq asap
    - blk-mq: Fix NULL pointer updating nr_requests
    - xen-blkfront: fix resume issues after a migration
    - xen-blkfront: introduce blkif_set_queue_limits()
    - xen/pvhvm: run xen_vcpu_setup() for the boot CPU
    - SAUCE: [aws] xen/manage: keep track of the on-going suspend mode
    - SAUCE: [aws] xen/manage: introduce helper function to know the on-going
      suspend mode
    - SAUCE: [aws] xenbus: add freeze/thaw/restore callbacks support
    - SAUCE: [aws] x86/xen: decouple shared_info mapping from
      xen_hvm_init_shared_info()
    - SAUCE: [aws] x86/xen: add system core suspend and resume callbacks
    - SAUCE: [aws] xen/time: introduce xen_{save,restore}_steal_clock
    - SAUCE: [aws] x86/xen: save and restore steal clock
    - SAUCE: [aws] xen/events: add xen_shutdown_pirqs helper function
    - SAUCE: [aws] x86/xen: close event channels for PIRQs in system core suspend
      callback
    - SAUCE: [aws] xen-netfront: add callbacks for PM suspend and hibernation
      support
    - SAUCE: [aws] xen-blkfront: add callbacks for PM suspend and hibernation
      support
    - SAUCE: [aws] x86/xen: handle CPU_UP_PREPARE_FROZEN for PM
      suspend/hibernation
    - SAUCE: [aws] xen-netfront: add longer default freeze timeout as a module
      parameter
    - SAUCE: [aws] PM / hibernate: update the resume offset on
      SNAPSHOT_SET_SWAP_AREA

  * Switch Vcs-Git: url to fully expanded form (LP: #1730648)
    - [Config] Change...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-aws - 4.4.0-1003.3

---------------
linux-aws (4.4.0-1003.3) trusty; urgency=low

  * linux-aws: 4.4.0-1003.3 -proposed tracker (LP: #1729277)

  * Remove vmbus-rdma driver from Xenial kernel (LP: #1721538)
    - [config] update config for master changes

  * NVMe timeout is too short (LP: #1729119)
    - SAUCE: nvme: update timeout module parameter type

  * update ENA driver to 1.3.0K from net-next (LP: #1727856)
    - MAINTAINERS: change ENA driver maintainers email domain
    - net: ena: Remove redundant unlikely()
    - net: ena: reduce the severity of some printouts
    - net: ena: fix rare kernel crash when bar memory remap fails
    - net: ena: fix wrong max Tx/Rx queues on ethtool
    - net: ena: improve ENA driver boot time.
    - net: ena: remove legacy suspend suspend/resume support
    - net: ena: add power management ops to the ENA driver
    - net: ena: add statistics for missed tx packets
    - net: ena: add new admin define for future support of IPv6 RSS
    - net: ena: increase ena driver version to 1.3.0

  * linux-aws needs module: nls_utf8 (LP: #1726493)
    - [config] AWS: nls_utf8.ko moved to linux-image package

  [ Ubuntu: 4.4.0-100.123 ]

  * linux: 4.4.0-100.123 -proposed tracker (LP: #1729273)
  * Xenial update to 4.4.95 stable release (LP: #1729107)
    - USB: devio: Revert "USB: devio: Don't corrupt user memory"
    - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
    - USB: serial: metro-usb: add MS7820 device id
    - usb: cdc_acm: Add quirk for Elatec TWN3
    - usb: quirks: add quirk for WORLDE MINI MIDI keyboard
    - usb: hub: Allow reset retry for USB2 devices on connect bounce
    - ALSA: usb-audio: Add native DSD support for Pro-Ject Pre Box S2 Digital
    - can: gs_usb: fix busy loop if no more TX context is available
    - usb: musb: sunxi: Explicitly release USB PHY on exit
    - usb: musb: Check for host-mode using is_host_active() on reset interrupt
    - can: esd_usb2: Fix can_dlc value for received RTR, frames
    - drm/nouveau/bsp/g92: disable by default
    - drm/nouveau/mmu: flush tlbs before deleting page tables
    - ALSA: seq: Enable 'use' locking in all configurations
    - ALSA: hda: Remove superfluous '-' added by printk conversion
    - i2c: ismt: Separate I2C block read from SMBus block read
    - brcmsmac: make some local variables 'static const' to reduce stack size
    - bus: mbus: fix window size calculation for 4GB windows
    - clockevents/drivers/cs5535: Improve resilience to spurious interrupts
    - rtlwifi: rtl8821ae: Fix connection lost problem
    - KEYS: encrypted: fix dereference of NULL user_key_payload
    - lib/digsig: fix dereference of NULL user_key_payload
    - KEYS: don't let add_key() update an uninstantiated key
    - pkcs7: Prevent NULL pointer dereference, since sinfo is not always set.
    - parisc: Avoid trashing sr2 and sr3 in LWS code
    - parisc: Fix double-word compare and exchange in LWS code on 32-bit kernels
    - sched/autogroup: Fix autogroup_move_group() to never skip sched_move_task()
    - f2fs crypto: replace some BUG_ON()'s with error checks
    - f2fs crypto: add missing locking for ...

[Eric Desrochers (slashd)]

Patches has been submitted by Daniel to kernel-team ML for Trusty kernel (v3.13) as follow :

[SRU][T][PATCH 0/2] LP#1729119: NVMe timeout parameter type change
[SRU][T][PATCH 1/2] NVMe: Make I/O timeout a module parameter
[SRU][T][PATCH 2/2] nvme: update timeout module parameter type

[Khaled El Mously (kmously)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-zesty' to 'verification-done-zesty'. If the problem still exists, change the tag 'verification-needed-zesty' to 'verification-failed-zesty'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Eric Desrochers (slashd)]

[VERIFICATION ZESTY]

# rmadison
linux-image-4.10.0-41-generic | 4.10.0-41.45 | zesty-proposed | amd64, arm64, armhf, i386, ppc64el, s390x

# lsb_release -r
Release: 17.04

# apt-get changelog linux-image-4.10.0-41-generic | grep -A2 1729119
  * NVMe timeout is too short (LP: #1729119)
    - nvme: update timeout module parameter type

# uname -r
4.10.0-41-generic

I had no nvme drive at my disposal but the following test should suffice :

# lsmod | grep -i nvme

# modprobe nvme_core io_timeout=123456

# lsmod | grep -i nvme
nvme_core 57344 0

# cat /sys/module/nvme_core/parameters/io_timeout
123456

** Note that it doesn't seems to work at runtime (if the module is already loaded). It only works when the module haven't been previously loaded for some reasons **

But I don't see this as a blocker for the current SRU.

root@zesty:~# lsmod | grep -i nvme
nvme_core 57344 0

root@zesty:~# modprobe nvme_core io_timeout=123457

root@zesty:~# cat /sys/module/nvme_core/parameters/io_timeout
123456

- Eric

[Khaled El Mously (kmously)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-artful' to 'verification-done-artful'. If the problem still exists, change the tag 'verification-needed-artful' to 'verification-failed-artful'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Khaled El Mously (kmously)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-trusty' to 'verification-done-trusty'. If the problem still exists, change the tag 'verification-needed-trusty' to 'verification-failed-trusty'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Eric Desrochers (slashd)]

[VERIFICATION ARTFUL]

# rmadison
 linux-image-4.13.0-18-generic | 4.13.0-18.21 | artful-proposed | amd64, arm64, armhf, i386, ppc64el, s390x

# apt-get changelog linux-image-4.13.0-18-generic
  * NVMe timeout is too short (LP: #1729119)
    - nvme: update timeout module parameter type

# lsb_release -r
Release: 17.10

# uname -r
4.13.0-18-generic

I had no nvme drive at my disposal but the following test should suffice :

# lsmod | grep -i nvme

# modprobe nvme_core io_timeout=123456

# lsmod | grep -i nvme
nvme_core 53248 0

# cat /sys/module/nvme_core/parameters/io_timeout
123456

- Eric

[Eric Desrochers (slashd)]

[VERIFICATION TRUSTY]

#changelog
linux (3.13.0-136.185) trusty; urgency=low

  * linux: 3.13.0-136.185 -proposed tracker (LP: #1734733)

  * NVMe timeout is too short (LP: #1729119)
    - NVMe: Make I/O timeout a module parameter
    - nvme: update timeout module parameter type

# lsb_release -r
Release: 14.04

# uname -r
3.13.0-136-generic

# lsmod | grep -i nvme

# modprobe nvme io_timeout=123456

# lsmod | grep -i nvme
nvme 59545 0

# cat /sys/module/nvme/parameters/io_timeout
123456

- Eric

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.13.0-19.22

---------------
linux (4.13.0-19.22) artful; urgency=low

  * linux: 4.13.0-19.22 -proposed tracker (LP: #1736118)

  * CVE-2017-1000405
    - mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()

linux (4.13.0-18.21) artful; urgency=low

  * linux: 4.13.0-18.21 -proposed tracker (LP: #1733530)

  * NVMe timeout is too short (LP: #1729119)
    - nvme: update timeout module parameter type

  * CPU call trace on AMD Raven Ridge after S3 (LP: #1732894)
    - x86/mce/AMD: Allow any CPU to initialize the smca_banks array

  * Set PANIC_TIMEOUT=10 on Power Systems (LP: #1730660)
    - [Config]: Set PANIC_TIMEOUT=10 on ppc64el

  * Cannot pair BLE remote devices when using combo BT SoC (LP: #1731467)
    - Bluetooth: increase timeout for le auto connections

  * enable CONFIG_SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH easily confuse users
    (LP: #1732627)
    - [Config] CONFIG_SND_SOC_INTEL_BYT_CHT_NOCODEC_MACH=n

  * Plantronics P610 does not support sample rate reading (LP: #1719853)
    - ALSA: usb-audio: Add sample rate quirk for Plantronics P610

  * Allow drivers to use Relaxed Ordering on capable root ports (LP: #1721365)
    - Revert commit 1a8b6d76dc5b ("net:add one common config...")
    - net: ixgbe: Use new PCI_DEV_FLAGS_NO_RELAXED_ORDERING flag

  * support GICv3 ITS save/restore & migration (LP: #1710019)
    - KVM: arm/arm64: vgic-its: Fix return value for device table restore

  * Device hotplugging with MPT SAS cannot work for VMWare ESXi (LP: #1730852)
    - scsi: mptsas: Fixup device hotplug for VMWare ESXi

  * Artful update to 4.13.13 stable release (LP: #1732726)
    - netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to
      rhashtable"
    - netfilter: nft_set_hash: disable fast_ops for 2-len keys
    - workqueue: Fix NULL pointer dereference
    - crypto: ccm - preserve the IV buffer
    - crypto: x86/sha1-mb - fix panic due to unaligned access
    - crypto: x86/sha256-mb - fix panic due to unaligned access
    - KEYS: fix NULL pointer dereference during ASN.1 parsing [ver #2]
    - ACPI / PM: Blacklist Low Power S0 Idle _DSM for Dell XPS13 9360
    - ARM: 8720/1: ensure dump_instr() checks addr_limit
    - ALSA: timer: Limit max instances per timer
    - ALSA: usb-audio: support new Amanero Combo384 firmware version
    - ALSA: hda - fix headset mic problem for Dell machines with alc274
    - ALSA: seq: Fix OSS sysex delivery in OSS emulation
    - ALSA: seq: Avoid invalid lockdep class warning
    - MIPS: Fix CM region target definitions
    - MIPS: BMIPS: Fix missing cbr address
    - MIPS: AR7: Defer registration of GPIO
    - MIPS: AR7: Ensure that serial ports are properly set up
    - KVM: PPC: Book3S HV: Fix exclusion between HPT resizing and other HPT
      updates
    - Input: elan_i2c - add ELAN060C to the ACPI table
    - rbd: use GFP_NOIO for parent stat and data requests
    - drm/vmwgfx: Fix Ubuntu 17.10 Wayland black screen issue
    - Revert "x86: CPU: Fix up "cpu MHz" in /proc/cpuinfo"
    - can: sun4i: handle overrun in RX FIFO
    - can: peak: Add support for new PCIe/M2 CAN FD interfaces
    - can: ifi: Fix transmitter del...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.10.0-42.46

---------------
linux (4.10.0-42.46) zesty; urgency=low

  * linux: 4.10.0-42.46 -proposed tracker (LP: #1736152)

  * CVE-2017-1000405
    - mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()

  * CVE-2017-16939
    - ipsec: Fix aborted xfrm policy dump crash

linux (4.10.0-41.45) zesty; urgency=low

  * linux: 4.10.0-41.45 -proposed tracker (LP: #1733524)

  * tar -x sometimes fails on overlayfs (LP: #1728489)
    - ovl: check if all layers are on the same fs
    - ovl: persistent inode number for directories

  * CVE-2017-12146
    - driver core: platform: fix race condition with driver_override

  * NVMe timeout is too short (LP: #1729119)
    - nvme: update timeout module parameter type

  * Set PANIC_TIMEOUT=10 on Power Systems (LP: #1730660)
    - [Config]: Set PANIC_TIMEOUT=10 on ppc64el

  * Cannot pair BLE remote devices when using combo BT SoC (LP: #1731467)
    - Bluetooth: increase timeout for le auto connections

  * Plantronics P610 does not support sample rate reading (LP: #1719853)
    - ALSA: usb-audio: Add sample rate quirk for Plantronics P610

  * Invalid btree pointer causes the kernel NULL pointer dereference
    (LP: #1729256)
    - xfs: reinit btree pointer on attr tree inactivation walk

  * Samba mount/umount in docker container triggers kernel Oops (LP: #1729637)
    - ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER
    - ipv6: fix NULL dereference in ip6_route_dev_notify()

  * Device hotplugging with MPT SAS cannot work for VMWare ESXi (LP: #1730852)
    - scsi: mptsas: Fixup device hotplug for VMWare ESXi

  * Boot/Installation crash of Ubuntu-16.04.3 HWE kernel on R940 (LP: #1719697)
    - Revert "x86/acpi: Set persistent cpuid <-> nodeid mapping when booting"

 -- Stefan Bader <email address hidden> Mon, 04 Dec 2017 15:04:01 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-103.126

---------------
linux (4.4.0-103.126) xenial; urgency=low

  * linux: 4.4.0-103.126 -proposed tracker (LP: #1736181)

  * CVE-2017-1000405
    - mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()

  * CVE-2017-16939
    - netlink: add a start callback for starting a netlink dump
    - ipsec: Fix aborted xfrm policy dump crash

linux (4.4.0-102.125) xenial; urgency=low

  * linux: 4.4.0-102.125 -proposed tracker (LP: #1733541)

  * tar -x sometimes fails on overlayfs (LP: #1728489)
    - ovl: check if all layers are on the same fs
    - ovl: persistent inode number for directories

  * NVMe timeout is too short (LP: #1729119)
    - nvme: update timeout module parameter type

  * Set PANIC_TIMEOUT=10 on Power Systems (LP: #1730660)
    - [Config]: Set PANIC_TIMEOUT=10 on ppc64el

  * Cannot pair BLE remote devices when using combo BT SoC (LP: #1731467)
    - Bluetooth: increase timeout for le auto connections

  * CIFS errors on 4.4.0-98, but not on 4.4.0-97 with same config (LP: #1729337)
    - SMB3: Validate negotiate request must always be signed

  * Plantronics P610 does not support sample rate reading (LP: #1719853)
    - ALSA: usb-audio: Add sample rate quirk for Plantronics P610

  * Invalid btree pointer causes the kernel NULL pointer dereference
    (LP: #1729256)
    - xfs: reinit btree pointer on attr tree inactivation walk

  * Samba mount/umount in docker container triggers kernel Oops (LP: #1729637)
    - ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER
    - ipv6: fix NULL dereference in ip6_route_dev_notify()

  * [kernel] tty/hvc: Use opal irqchip interface if available (LP: #1728098)
    - tty/hvc: Use opal irqchip interface if available

  * Device hotplugging with MPT SAS cannot work for VMWare ESXi (LP: #1730852)
    - scsi: mptsas: Fixup device hotplug for VMWare ESXi

  * NMI watchdog: BUG: soft lockup on Guest upon boot (KVM) (LP: #1727331)
    - KVM: PPC: Book3S: Treat VTB as a per-subcore register, not per-thread

  * Attempt to map rbd image from ceph jewel/luminous hangs (LP: #1728739)
    - crush: ensure bucket id is valid before indexing buckets array
    - crush: ensure take bucket value is valid
    - crush: add chooseleaf_stable tunable
    - crush: decode and initialize chooseleaf_stable
    - libceph: advertise support for TUNABLES5
    - libceph: MOSDOpReply v7 encoding

  * Xenial update to 4.4.98 stable release (LP: #1732698)
    - adv7604: Initialize drive strength to default when using DT
    - video: fbdev: pmag-ba-fb: Remove bad `__init' annotation
    - PCI: mvebu: Handle changes to the bridge windows while enabled
    - xen/netback: set default upper limit of tx/rx queues to 8
    - drm: drm_minor_register(): Clean up debugfs on failure
    - KVM: PPC: Book 3S: XICS: correct the real mode ICP rejecting counter
    - iommu/arm-smmu-v3: Clear prior settings when updating STEs
    - powerpc/corenet: explicitly disable the SDHC controller on kmcoge4
    - ARM: omap2plus_defconfig: Fix probe errors on UARTs 5 and 6
    - crypto: vmx - disable preemption to enable vsx in aes_ctr.c
    - iio: trigger: free trigger...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.13.0-137.186

---------------
linux (3.13.0-137.186) trusty; urgency=low

  * linux: 3.13.0-137.186 -proposed tracker (LP: #1736194)

  * CVE-2017-1000405
    - mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()

  * CVE-2017-16939
    - netlink: add a start callback for starting a netlink dump
    - ipsec: Fix aborted xfrm policy dump crash

linux (3.13.0-136.185) trusty; urgency=low

  * linux: 3.13.0-136.185 -proposed tracker (LP: #1734733)

  * NVMe timeout is too short (LP: #1729119)
    - NVMe: Make I/O timeout a module parameter
    - nvme: update timeout module parameter type

 -- Stefan Bader <email address hidden> Mon, 04 Dec 2017 19:45:06 +0100

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-aws - 4.4.0-1005.5

---------------
linux-aws (4.4.0-1005.5) trusty; urgency=low

  * linux-aws: 4.4.0-1005.5 -proposed tracker (LP: #1736182)

  * Update config with NET_DSA=n as required by changes in
     upstream stable update to 4.4.98 (LP: #1732698)

  [ Ubuntu: 4.4.0-103.126 ]

  * linux: 4.4.0-103.126 -proposed tracker (LP: #1736181)
  * CVE-2017-1000405
    - mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d()
  * CVE-2017-16939
    - netlink: add a start callback for starting a netlink dump
    - ipsec: Fix aborted xfrm policy dump crash

  [ Ubuntu: 4.4.0-102.125 ]

  * linux: 4.4.0-102.125 -proposed tracker (LP: #1733541)
  * tar -x sometimes fails on overlayfs (LP: #1728489)
    - ovl: check if all layers are on the same fs
    - ovl: persistent inode number for directories
  * NVMe timeout is too short (LP: #1729119)
    - nvme: update timeout module parameter type
  * Set PANIC_TIMEOUT=10 on Power Systems (LP: #1730660)
    - [Config]: Set PANIC_TIMEOUT=10 on ppc64el
  * Cannot pair BLE remote devices when using combo BT SoC (LP: #1731467)
    - Bluetooth: increase timeout for le auto connections
  * CIFS errors on 4.4.0-98, but not on 4.4.0-97 with same config (LP: #1729337)
    - SMB3: Validate negotiate request must always be signed
  * Plantronics P610 does not support sample rate reading (LP: #1719853)
    - ALSA: usb-audio: Add sample rate quirk for Plantronics P610
  * Invalid btree pointer causes the kernel NULL pointer dereference
    (LP: #1729256)
    - xfs: reinit btree pointer on attr tree inactivation walk
  * Samba mount/umount in docker container triggers kernel Oops (LP: #1729637)
    - ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER
    - ipv6: fix NULL dereference in ip6_route_dev_notify()
  * [kernel] tty/hvc: Use opal irqchip interface if available (LP: #1728098)
    - tty/hvc: Use opal irqchip interface if available
  * Device hotplugging with MPT SAS cannot work for VMWare ESXi (LP: #1730852)
    - scsi: mptsas: Fixup device hotplug for VMWare ESXi
  * NMI watchdog: BUG: soft lockup on Guest upon boot (KVM) (LP: #1727331)
    - KVM: PPC: Book3S: Treat VTB as a per-subcore register, not per-thread
  * Attempt to map rbd image from ceph jewel/luminous hangs (LP: #1728739)
    - crush: ensure bucket id is valid before indexing buckets array
    - crush: ensure take bucket value is valid
    - crush: add chooseleaf_stable tunable
    - crush: decode and initialize chooseleaf_stable
    - libceph: advertise support for TUNABLES5
    - libceph: MOSDOpReply v7 encoding
  * Xenial update to 4.4.98 stable release (LP: #1732698)
    - adv7604: Initialize drive strength to default when using DT
    - video: fbdev: pmag-ba-fb: Remove bad `__init' annotation
    - PCI: mvebu: Handle changes to the bridge windows while enabled
    - xen/netback: set default upper limit of tx/rx queues to 8
    - drm: drm_minor_register(): Clean up debugfs on failure
    - KVM: PPC: Book 3S: XICS: correct the real mode ICP rejecting counter
    - iommu/arm-smmu-v3: Clear prior settings when updating STEs
    - powerpc/corenet: explicitly disable the SDHC contr...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.13.0-25.29

---------------
linux (4.13.0-25.29) artful; urgency=low

  * linux: 4.13.0-25.29 -proposed tracker (LP: #1741955)

  * CVE-2017-5754
    - Revert "UBUNTU: [Config] updateconfigs to enable PTI"
    - [Config] Enable PTI with UNWINDER_FRAME_POINTER

linux (4.13.0-24.28) artful; urgency=low

  * linux: 4.13.0-24.28 -proposed tracker (LP: #1741745)

  * CVE-2017-5754
    - x86/cpu, x86/pti: Do not enable PTI on AMD processors

linux (4.13.0-23.27) artful; urgency=low

  * linux: 4.13.0-23.27 -proposed tracker (LP: #1741556)

  [ Kleber Sacilotto de Souza ]
  * CVE-2017-5754
    - x86/mm: Add the 'nopcid' boot option to turn off PCID
    - x86/mm: Enable CR4.PCIDE on supported systems
    - x86/mm: Document how CR4.PCIDE restore works
    - x86/entry/64: Refactor IRQ stacks and make them NMI-safe
    - x86/entry/64: Initialize the top of the IRQ stack before switching stacks
    - x86/entry/64: Add unwind hint annotations
    - xen/x86: Remove SME feature in PV guests
    - x86/xen/64: Rearrange the SYSCALL entries
    - irq: Make the irqentry text section unconditional
    - x86/xen/64: Fix the reported SS and CS in SYSCALL
    - x86/paravirt/xen: Remove xen_patch()
    - x86/traps: Simplify pagefault tracing logic
    - x86/idt: Unify gate_struct handling for 32/64-bit kernels
    - x86/asm: Replace access to desc_struct:a/b fields
    - x86/xen: Get rid of paravirt op adjust_exception_frame
    - x86/paravirt: Remove no longer used paravirt functions
    - x86/entry: Fix idtentry unwind hint
    - x86/mm/64: Initialize CR4.PCIDE early
    - objtool: Add ORC unwind table generation
    - objtool, x86: Add facility for asm code to provide unwind hints
    - x86/unwind: Add the ORC unwinder
    - x86/kconfig: Consolidate unwinders into multiple choice selection
    - objtool: Upgrade libelf-devel warning to error for CONFIG_ORC_UNWINDER
    - x86/ldt/64: Refresh DS and ES when modify_ldt changes an entry
    - x86/mm: Give each mm TLB flush generation a unique ID
    - x86/mm: Track the TLB's tlb_gen and update the flushing algorithm
    - x86/mm: Rework lazy TLB mode and TLB freshness tracking
    - x86/mm: Implement PCID based optimization: try to preserve old TLB entries
      using PCID
    - x86/mm: Factor out CR3-building code
    - x86/mm/64: Stop using CR3.PCID == 0 in ASID-aware code
    - x86/mm: Flush more aggressively in lazy TLB mode
    - Revert "x86/mm: Stop calling leave_mm() in idle code"
    - kprobes/x86: Set up frame pointer in kprobe trampoline
    - x86/tracing: Introduce a static key for exception tracing
    - x86/boot: Add early cmdline parsing for options with arguments
    - mm, x86/mm: Fix performance regression in get_user_pages_fast()
    - x86/asm: Remove unnecessary \n\t in front of CC_SET() from asm templates
    - objtool: Don't report end of section error after an empty unwind hint
    - x86/head: Remove confusing comment
    - x86/head: Remove unused 'bad_address' code
    - x86/head: Fix head ELF function annotations
    - x86/boot: Annotate verify_cpu() as a callable function
    - x86/xen: Fix xen head ELF annotations
    - x86/xen: Add unwind hint anno...