Bionic update to 4.15.8 stable release

Bug #1755179 reported by Thadeu Lima de Souza Cascardo on 2018-03-12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.15.8 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches from the 4.15.8 stable release shall be applied:

hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
ipmi_si: Fix error handling of platform device
platform/x86: dell-laptop: Allocate buffer on heap rather than globally
powerpc/pseries: Enable RAS hotplug events later
Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking
ixgbe: fix crash in build_skb Rx code path
tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the bus
tpm: fix potential buffer overruns caused by bit glitches on the bus
tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus
tpm_tis: fix potential buffer overruns caused by bit glitches on the bus
ALSA: usb-audio: Add a quirck for B&W PX headphones
ALSA: control: Fix memory corruption risk in snd_ctl_elem_read
ALSA: x86: Fix missing spinlock and mutex initializations
ALSA: hda: Add a power_save blacklist
ALSA: hda - Fix pincfg at resume on Lenovo T470 dock
mmc: sdhci-pci: Fix S0i3 for Intel BYT-based controllers
mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias
mmc: dw_mmc: Avoid accessing registers in runtime suspended state
mmc: dw_mmc: Factor out dw_mci_init_slot_caps
mmc: dw_mmc: Fix out-of-bounds access for slot's caps
timers: Forward timer base before migrating timers
parisc: Use cr16 interval timers unconditionally on qemu
parisc: Reduce irq overhead when run in qemu
parisc: Fix ordering of cache and TLB flushes
parisc: Hide virtual kernel memory layout
btrfs: use proper endianness accessors for super_copy
block: fix the count of PGPGOUT for WRITE_SAME
block: kyber: fix domain token leak during requeue
block: pass inclusive 'lend' parameter to truncate_inode_pages_range
vfio: disable filesystem-dax page pinning
cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()
dax: fix vma_is_fsdax() helper
direct-io: Fix sleep in atomic due to sync AIO
x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend
x86/platform/intel-mid: Handle Intel Edison reboot correctly
x86/cpu_entry_area: Sync cpu_entry_area to initial_page_table
bridge: check brport attr show in brport_show
fib_semantics: Don't match route with mismatching tclassid
hdlc_ppp: carrier detect ok, don't turn off negotiation
ipv6 sit: work around bogus gcc-8 -Wrestrict warning
net: amd-xgbe: fix comparison to bitshift when dealing with a mask
net: ethernet: ti: cpsw: fix net watchdog timeout
net: fix race on decreasing number of TX queues
net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
netlink: ensure to loop over all netns in genlmsg_multicast_allns()
net: sched: report if filter is too large to dump
ppp: prevent unregistered channels from connecting to PPP units
sctp: verify size of a new chunk in _sctp_make_chunk()
udplite: fix partial checksum initialization
net/mlx5e: Fix TCP checksum in LRO buffers
sctp: fix dst refcnt leak in sctp_v4_get_dst
mlxsw: spectrum_switchdev: Check success of FDB add operation
net/mlx5e: Specify numa node when allocating drop rq
net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT
tcp: Honor the eor bit in tcp_mtu_probe
rxrpc: Fix send in rxrpc_send_data_packet()
tcp_bbr: better deal with suboptimal GSO
doc: Change the min default value of tcp_wmem/tcp_rmem.
net/mlx5e: Fix loopback self test when GRO is off
net_sched: gen_estimator: fix broken estimators based on percpu stats
net/sched: cls_u32: fix cls_u32 on filter replace
sctp: do not pr_err for the duplicated node in transport rhlist
mlxsw: spectrum_router: Fix error path in mlxsw_sp_vr_create
net: ipv4: Set addr_type in hash_keys for forwarded case
sctp: fix dst refcnt leak in sctp_v6_get_dst()
bridge: Fix VLAN reference count problem
net/mlx5e: Verify inline header size do not exceed SKB linear size
tls: Use correct sk->sk_prot for IPV6
amd-xgbe: Restore PCI interrupt enablement setting on resume
cls_u32: fix use after free in u32_destroy_key()
mlxsw: spectrum_router: Do not unconditionally clear route offload indication
netlink: put module reference if dump start fails
tcp: purge write queue upon RST
tuntap: correctly add the missing XDP flush
tuntap: disable preemption during XDP processing
virtio-net: disable NAPI only when enabled during XDP set
cxgb4: fix trailing zero in CIM LA dump
net/mlx5: Fix error handling when adding flow rules
net: phy: Restore phy_resume() locking assumption
tcp: tracepoint: only call trace_tcp_send_reset with full socket
l2tp: don't use inet_shutdown on tunnel destroy
l2tp: don't use inet_shutdown on ppp session destroy
l2tp: fix races with tunnel socket close
l2tp: fix race in pppol2tp_release with session object destroy
l2tp: fix tunnel lookup use-after-free race
s390/qeth: fix underestimated count of buffer elements
s390/qeth: fix SETIP command handling
s390/qeth: fix overestimated count of buffer elements
s390/qeth: fix IP removal on offline cards
s390/qeth: fix double-free on IP add/remove race
Revert "s390/qeth: fix using of ref counter for rxip addresses"
s390/qeth: fix IP address lookup for L3 devices
s390/qeth: fix IPA command submission race
tcp: revert F-RTO middle-box workaround
tcp: revert F-RTO extension to detect more spurious timeouts
blk-mq: don't call io sched's .requeue_request when requeueing rq to ->dispatch
media: m88ds3103: don't call a non-initalized function
EDAC, sb_edac: Fix out of bound writes during DIMM configuration on KNL
KVM: s390: take care of clock-comparator sign control
KVM: s390: provide only a single function for setting the tod (fix SCK)
KVM: s390: consider epoch index on hotplugged CPUs
KVM: s390: consider epoch index on TOD clock syncs
nospec: Allow index argument to have const-qualified type
x86/mm: Fix {pmd,pud}_{set,clear}_flags()
ARM: orion: fix orion_ge00_switch_board_info initialization
ARM: dts: rockchip: Remove 1.8 GHz operation point from phycore som
ARM: mvebu: Fix broken PL310_ERRATA_753970 selects
ARM: kvm: fix building with gcc-8
KVM: X86: Fix SMRAM accessing even if VM is shutdown
KVM: mmu: Fix overlap between public and private memslots
KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
KVM: x86: move LAPIC initialization after VMCS creation
KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR path as unlikely()
KVM: x86: fix vcpu initialization with userspace lapic
KVM/x86: remove WARN_ON() for when vm_munmap() fails
ACPI / bus: Parse tables as term_list for Dell XPS 9570 and Precision M5530
ARM: dts: LogicPD SOM-LV: Fix I2C1 pinmux
ARM: dts: LogicPD Torpedo: Fix I2C1 pinmux
powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID
md: only allow remove_and_add_spares when no sync_thread running.
platform/x86: dell-laptop: fix kbd_get_state's request value
Linux 4.15.8

CVE References

tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Bionic):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (32.6 KiB)

This bug was fixed in the package linux - 4.15.0-13.14

linux (4.15.0-13.14) bionic; urgency=medium

  * linux: 4.15.0-13.14 -proposed tracker (LP: #1756408)

  * devpts: handle bind-mounts (LP: #1755857)
    - SAUCE: devpts: hoist out check for DEVPTS_SUPER_MAGIC
    - SAUCE: devpts: resolve devpts bind-mounts
    - SAUCE: devpts: comment devpts_mntget()
    - SAUCE: selftests: add devpts selftests

  * [bionic][arm64] d-i: add hisi_sas_v3_hw to scsi-modules (LP: #1756103)
    - d-i: add hisi_sas_v3_hw to scsi-modules

  * [Bionic][ARM64] enable ROCE and HNS3 driver support for hip08 SoC
    (LP: #1756097)
    - RDMA/hns: Refactor eq code for hip06
    - RDMA/hns: Add eq support of hip08
    - RDMA/hns: Add detailed comments for mb() call
    - RDMA/hns: Add rq inline data support for hip08 RoCE
    - RDMA/hns: Update the usage of sr_max and rr_max field
    - RDMA/hns: Set access flags of hip08 RoCE
    - RDMA/hns: Filter for zero length of sge in hip08 kernel mode
    - RDMA/hns: Fix QP state judgement before sending work requests
    - RDMA/hns: Assign dest_qp when deregistering mr
    - RDMA/hns: Fix endian problems around imm_data and rkey
    - RDMA/hns: Assign the correct value for tx_cqn
    - RDMA/hns: Create gsi qp in hip08
    - RDMA/hns: Add gsi qp support for modifying qp in hip08
    - RDMA/hns: Fill sq wqe context of ud type in hip08
    - RDMA/hns: Assign zero for pkey_index of wc in hip08
    - RDMA/hns: Update the verbs of polling for completion
    - RDMA/hns: Set the guid for hip08 RoCE device
    - net: hns3: Refactor of the reset interrupt handling logic
    - net: hns3: Add reset service task for handling reset requests
    - net: hns3: Refactors the requested reset & pending reset handling code
    - net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface
    - net: hns3: Add mailbox support to VF driver
    - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support
    - net: hns3: Add HNS3 VF driver to kernel build framework
    - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC
    - net: hns3: Add mailbox support to PF driver
    - net: hns3: Change PF to add ring-vect binding & resetQ to mailbox
    - net: hns3: Add mailbox interrupt handling to PF driver
    - net: hns3: add support to query tqps number
    - net: hns3: add support to modify tqps number
    - net: hns3: change the returned tqp number by ethtool -x
    - net: hns3: free the ring_data structrue when change tqps
    - net: hns3: get rss_size_max from configuration but not hardcode
    - net: hns3: add a mask initialization for mac_vlan table
    - net: hns3: add vlan offload config command
    - net: hns3: add ethtool related offload command
    - net: hns3: add handling vlan tag offload in bd
    - net: hns3: cleanup mac auto-negotiation state query
    - net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg
    - net: hns3: add support for set_pauseparam
    - net: hns3: add support to update flow control settings after autoneg
    - net: hns3: add Asym Pause support to phy default features
    - net: hns3: add support for querying advertised pause frame by ethtool ethx
    - net:...

Changed in linux (Ubuntu Bionic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers