Bionic update to 4.15.8 stable release

Bug #1755179 reported by Thadeu Lima de Souza Cascardo on 2018-03-12
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Bionic
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.15.8 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the 4.15.8 stable release shall be applied:

hrtimer: Ensure POSIX compliance (relative CLOCK_REALTIME hrtimers)
ipmi_si: Fix error handling of platform device
platform/x86: dell-laptop: Allocate buffer on heap rather than globally
powerpc/pseries: Enable RAS hotplug events later
Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking
ixgbe: fix crash in build_skb Rx code path
tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the bus
tpm: fix potential buffer overruns caused by bit glitches on the bus
tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus
tpm_tis: fix potential buffer overruns caused by bit glitches on the bus
ALSA: usb-audio: Add a quirck for B&W PX headphones
ALSA: control: Fix memory corruption risk in snd_ctl_elem_read
ALSA: x86: Fix missing spinlock and mutex initializations
ALSA: hda: Add a power_save blacklist
ALSA: hda - Fix pincfg at resume on Lenovo T470 dock
mmc: sdhci-pci: Fix S0i3 for Intel BYT-based controllers
mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias
mmc: dw_mmc: Avoid accessing registers in runtime suspended state
mmc: dw_mmc: Factor out dw_mci_init_slot_caps
mmc: dw_mmc: Fix out-of-bounds access for slot's caps
timers: Forward timer base before migrating timers
parisc: Use cr16 interval timers unconditionally on qemu
parisc: Reduce irq overhead when run in qemu
parisc: Fix ordering of cache and TLB flushes
parisc: Hide virtual kernel memory layout
btrfs: use proper endianness accessors for super_copy
block: fix the count of PGPGOUT for WRITE_SAME
block: kyber: fix domain token leak during requeue
block: pass inclusive 'lend' parameter to truncate_inode_pages_range
vfio: disable filesystem-dax page pinning
cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()
dax: fix vma_is_fsdax() helper
direct-io: Fix sleep in atomic due to sync AIO
x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend
x86/platform/intel-mid: Handle Intel Edison reboot correctly
x86/cpu_entry_area: Sync cpu_entry_area to initial_page_table
bridge: check brport attr show in brport_show
fib_semantics: Don't match route with mismatching tclassid
hdlc_ppp: carrier detect ok, don't turn off negotiation
ipv6 sit: work around bogus gcc-8 -Wrestrict warning
net: amd-xgbe: fix comparison to bitshift when dealing with a mask
net: ethernet: ti: cpsw: fix net watchdog timeout
net: fix race on decreasing number of TX queues
net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68
netlink: ensure to loop over all netns in genlmsg_multicast_allns()
net: sched: report if filter is too large to dump
ppp: prevent unregistered channels from connecting to PPP units
sctp: verify size of a new chunk in _sctp_make_chunk()
udplite: fix partial checksum initialization
net/mlx5e: Fix TCP checksum in LRO buffers
sctp: fix dst refcnt leak in sctp_v4_get_dst
mlxsw: spectrum_switchdev: Check success of FDB add operation
net/mlx5e: Specify numa node when allocating drop rq
net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT
tcp: Honor the eor bit in tcp_mtu_probe
rxrpc: Fix send in rxrpc_send_data_packet()
tcp_bbr: better deal with suboptimal GSO
doc: Change the min default value of tcp_wmem/tcp_rmem.
net/mlx5e: Fix loopback self test when GRO is off
net_sched: gen_estimator: fix broken estimators based on percpu stats
net/sched: cls_u32: fix cls_u32 on filter replace
sctp: do not pr_err for the duplicated node in transport rhlist
mlxsw: spectrum_router: Fix error path in mlxsw_sp_vr_create
net: ipv4: Set addr_type in hash_keys for forwarded case
sctp: fix dst refcnt leak in sctp_v6_get_dst()
bridge: Fix VLAN reference count problem
net/mlx5e: Verify inline header size do not exceed SKB linear size
tls: Use correct sk->sk_prot for IPV6
amd-xgbe: Restore PCI interrupt enablement setting on resume
cls_u32: fix use after free in u32_destroy_key()
mlxsw: spectrum_router: Do not unconditionally clear route offload indication
netlink: put module reference if dump start fails
tcp: purge write queue upon RST
tuntap: correctly add the missing XDP flush
tuntap: disable preemption during XDP processing
virtio-net: disable NAPI only when enabled during XDP set
cxgb4: fix trailing zero in CIM LA dump
net/mlx5: Fix error handling when adding flow rules
net: phy: Restore phy_resume() locking assumption
tcp: tracepoint: only call trace_tcp_send_reset with full socket
l2tp: don't use inet_shutdown on tunnel destroy
l2tp: don't use inet_shutdown on ppp session destroy
l2tp: fix races with tunnel socket close
l2tp: fix race in pppol2tp_release with session object destroy
l2tp: fix tunnel lookup use-after-free race
s390/qeth: fix underestimated count of buffer elements
s390/qeth: fix SETIP command handling
s390/qeth: fix overestimated count of buffer elements
s390/qeth: fix IP removal on offline cards
s390/qeth: fix double-free on IP add/remove race
Revert "s390/qeth: fix using of ref counter for rxip addresses"
s390/qeth: fix IP address lookup for L3 devices
s390/qeth: fix IPA command submission race
tcp: revert F-RTO middle-box workaround
tcp: revert F-RTO extension to detect more spurious timeouts
blk-mq: don't call io sched's .requeue_request when requeueing rq to ->dispatch
media: m88ds3103: don't call a non-initalized function
EDAC, sb_edac: Fix out of bound writes during DIMM configuration on KNL
KVM: s390: take care of clock-comparator sign control
KVM: s390: provide only a single function for setting the tod (fix SCK)
KVM: s390: consider epoch index on hotplugged CPUs
KVM: s390: consider epoch index on TOD clock syncs
nospec: Allow index argument to have const-qualified type
x86/mm: Fix {pmd,pud}_{set,clear}_flags()
ARM: orion: fix orion_ge00_switch_board_info initialization
ARM: dts: rockchip: Remove 1.8 GHz operation point from phycore som
ARM: mvebu: Fix broken PL310_ERRATA_753970 selects
ARM: kvm: fix building with gcc-8
KVM: X86: Fix SMRAM accessing even if VM is shutdown
KVM: mmu: Fix overlap between public and private memslots
KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
KVM: x86: move LAPIC initialization after VMCS creation
KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR path as unlikely()
KVM: x86: fix vcpu initialization with userspace lapic
KVM/x86: remove WARN_ON() for when vm_munmap() fails
ACPI / bus: Parse tables as term_list for Dell XPS 9570 and Precision M5530
ARM: dts: LogicPD SOM-LV: Fix I2C1 pinmux
ARM: dts: LogicPD Torpedo: Fix I2C1 pinmux
powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID
md: only allow remove_and_add_spares when no sync_thread running.
platform/x86: dell-laptop: fix kbd_get_state's request value
Linux 4.15.8

CVE References

tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Bionic):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (32.6 KiB)

This bug was fixed in the package linux - 4.15.0-13.14

---------------
linux (4.15.0-13.14) bionic; urgency=medium

  * linux: 4.15.0-13.14 -proposed tracker (LP: #1756408)

  * devpts: handle bind-mounts (LP: #1755857)
    - SAUCE: devpts: hoist out check for DEVPTS_SUPER_MAGIC
    - SAUCE: devpts: resolve devpts bind-mounts
    - SAUCE: devpts: comment devpts_mntget()
    - SAUCE: selftests: add devpts selftests

  * [bionic][arm64] d-i: add hisi_sas_v3_hw to scsi-modules (LP: #1756103)
    - d-i: add hisi_sas_v3_hw to scsi-modules

  * [Bionic][ARM64] enable ROCE and HNS3 driver support for hip08 SoC
    (LP: #1756097)
    - RDMA/hns: Refactor eq code for hip06
    - RDMA/hns: Add eq support of hip08
    - RDMA/hns: Add detailed comments for mb() call
    - RDMA/hns: Add rq inline data support for hip08 RoCE
    - RDMA/hns: Update the usage of sr_max and rr_max field
    - RDMA/hns: Set access flags of hip08 RoCE
    - RDMA/hns: Filter for zero length of sge in hip08 kernel mode
    - RDMA/hns: Fix QP state judgement before sending work requests
    - RDMA/hns: Assign dest_qp when deregistering mr
    - RDMA/hns: Fix endian problems around imm_data and rkey
    - RDMA/hns: Assign the correct value for tx_cqn
    - RDMA/hns: Create gsi qp in hip08
    - RDMA/hns: Add gsi qp support for modifying qp in hip08
    - RDMA/hns: Fill sq wqe context of ud type in hip08
    - RDMA/hns: Assign zero for pkey_index of wc in hip08
    - RDMA/hns: Update the verbs of polling for completion
    - RDMA/hns: Set the guid for hip08 RoCE device
    - net: hns3: Refactor of the reset interrupt handling logic
    - net: hns3: Add reset service task for handling reset requests
    - net: hns3: Refactors the requested reset & pending reset handling code
    - net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface
    - net: hns3: Add mailbox support to VF driver
    - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support
    - net: hns3: Add HNS3 VF driver to kernel build framework
    - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC
    - net: hns3: Add mailbox support to PF driver
    - net: hns3: Change PF to add ring-vect binding & resetQ to mailbox
    - net: hns3: Add mailbox interrupt handling to PF driver
    - net: hns3: add support to query tqps number
    - net: hns3: add support to modify tqps number
    - net: hns3: change the returned tqp number by ethtool -x
    - net: hns3: free the ring_data structrue when change tqps
    - net: hns3: get rss_size_max from configuration but not hardcode
    - net: hns3: add a mask initialization for mac_vlan table
    - net: hns3: add vlan offload config command
    - net: hns3: add ethtool related offload command
    - net: hns3: add handling vlan tag offload in bd
    - net: hns3: cleanup mac auto-negotiation state query
    - net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg
    - net: hns3: add support for set_pauseparam
    - net: hns3: add support to update flow control settings after autoneg
    - net: hns3: add Asym Pause support to phy default features
    - net: hns3: add support for querying advertised pause frame by ethtool ethx
    - net:...

Changed in linux (Ubuntu Bionic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers