Bionic update to 4.15.10 stable release

Bug #1756100 reported by Thadeu Lima de Souza Cascardo on 2018-03-15
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Thadeu Lima de Souza Cascardo
Thadeu Lima de Souza Cascardo

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.15.10 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches from the 4.15.10 stable release shall be applied:

RDMA/ucma: Limit possible option size
RDMA/ucma: Check that user doesn't overflow QP state
RDMA/mlx5: Fix integer overflow while resizing CQ
bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
IB/uverbs: Improve lockdep_check
mac80211_hwsim: don't use WQ_MEM_RECLAIM
net/smc: fix NULL pointer dereference on sock_create_kern() error path
regulator: stm32-vrefbuf: fix check on ready flag
drm/i915: Check for fused or unused pipes
drm/i915/audio: fix check for av_enc_map overflow
drm/i915: Fix rsvd2 mask when out-fence is returned
drm/i915: Clear the in-use marker on execbuf failure
drm/i915: Disable DC states around GMBUS on GLK
drm/i915: Update watermark state correctly in sanitize_watermarks
drm/i915: Try EDID bitbanging on HDMI after failed read
drm/i915/perf: fix perf stream opening lock
scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
drm/i915: Always call to intel_display_set_init_power() in resume_early.
workqueue: Allow retrieval of current task's work struct
drm: Allow determining if current task is output poll worker
drm/nouveau: Fix deadlock on runtime suspend
drm/radeon: Fix deadlock on runtime suspend
drm/amdgpu: Fix deadlock on runtime suspend
drm/nouveau: prefer XBGR2101010 for addfb ioctl
drm/amd/powerplay/smu7: allow mclk switching with no displays
drm/amd/powerplay/vega10: allow mclk switching with no displays
Revert "drm/radeon/pm: autoswitch power state when in balanced mode"
drm/amd/display: check for ipp before calling cursor operations
drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE
drm/amd/powerplay: fix power over limit on Fiji
drm/amd/display: Default HDMI6G support to true. Log VBIOS table error.
drm/amdgpu: used cached pcie gen info for SI (v2)
drm/amdgpu: Notify sbios device ready before send request
drm/radeon: fix KV harvesting
drm/amdgpu: fix KV harvesting
drm/amdgpu:Correct max uvd handles
drm/amdgpu:Always save uvd vcpu_bo in VM Mode
ovl: redirect_dir=nofollow should not follow redirect for opaque lower
MIPS: BMIPS: Do not mask IPIs during suspend
MIPS: ath25: Check for kzalloc allocation failure
MIPS: OCTEON: irq: Check for null return on kzalloc allocation
PCI: dwc: Fix enumeration end when reaching root subordinate
Input: matrix_keypad - fix race when disabling interrupts
Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI"
bug: use %pB in BUG and stack protector failure
lib/bug.c: exclude non-BUG/WARN exceptions from report_bug()
mm/memblock.c: hardcode the end_pfn being -1
Documentation/sphinx: Fix Directive import error
loop: Fix lost writes caused by missing flag
virtio_ring: fix num_free handling in error case
KVM: s390: fix memory overwrites when not using SCA entries
arm64: mm: fix thinko in non-global page table attribute check
IB/core: Fix missing RDMA cgroups release in case of failure to register device
Revert "nvme: create 'slaves' and 'holders' entries for hidden controllers"
kbuild: Handle builtin dtb file names containing hyphens
dm bufio: avoid false-positive Wmaybe-uninitialized warning
IB/mlx5: Fix incorrect size of klms in the memory region
bcache: fix crashes in duplicate cache device register
bcache: don't attach backing with duplicate UUID
x86/MCE: Save microcode revision in machine check records
x86/MCE: Serialize sysfs changes
perf tools: Fix trigger class trigger_on()
x86/spectre_v2: Don't check microcode versions when running under hypervisors
ALSA: hda/realtek - Add support headset mode for DELL WYSE
ALSA: hda/realtek - Add headset mode support for Dell laptop
ALSA: hda/realtek: Limit mic boost on T480
ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520
ALSA: hda/realtek - Make dock sound work on ThinkPad L570
ALSA: seq: Don't allow resizing pool in use
ALSA: seq: More protection for concurrent write and ioctl races
ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines
ALSA: hda: add dock and led support for HP EliteBook 820 G3
ALSA: hda: add dock and led support for HP ProBook 640 G2
scsi: qla2xxx: Fix NULL pointer crash due to probe failure
scsi: qla2xxx: Fix recursion while sending terminate exchange
dt-bindings: Document mti,mips-cpc binding
MIPS: CPC: Map registers using DT in mips_cpc_default_phys_base()
nospec: Kill array_index_nospec_mask_check()
nospec: Include <asm/barrier.h> dependency
x86/entry: Reduce the code footprint of the 'idtentry' macro
x86/entry/64: Use 'xorl' for faster register clearing
x86/mm: Remove stale comment about KMEMCHECK
x86/asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers
x86/IO-APIC: Avoid warning in 32-bit builds
x86/LDT: Avoid warning in 32-bit builds with older gcc
x86-64/realmode: Add instruction suffix
Revert "x86/retpoline: Simplify vmexit_fill_RSB()"
x86/speculation: Use IBRS if available before calling into firmware
x86/retpoline: Support retpoline builds with Clang
x86/speculation, objtool: Annotate indirect calls/jumps for objtool
x86/speculation: Move firmware_restrict_branch_speculation_*() from C to CPP
x86/paravirt, objtool: Annotate indirect calls
x86/boot, objtool: Annotate indirect jump in secondary_startup_64()
x86/mm/sme, objtool: Annotate indirect call in sme_encrypt_execute()
objtool: Use existing global variables for options
objtool: Add retpoline validation
objtool: Add module specific retpoline rules
objtool, retpolines: Integrate objtool with retpoline support more closely
objtool: Fix another switch table detection issue
objtool: Fix 32-bit build
x86/kprobes: Fix kernel crash when probing .entry_trampoline code
watchdog: hpwdt: SMBIOS check
watchdog: hpwdt: Check source of NMI
watchdog: hpwdt: fix unused variable warning
watchdog: hpwdt: Remove legacy NMI sourcing.
netfilter: add back stackpointer size checks
netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
netfilter: xt_hashlimit: fix lock imbalance
netfilter: x_tables: fix missing timer initialization in xt_LED
netfilter: nat: cope with negative port range
netfilter: IDLETIMER: be syzkaller friendly
netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
netfilter: bridge: ebt_among: add missing match size checks
netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
netfilter: use skb_to_full_sk in ip6_route_me_harder
tpm_tis: Move ilb_base_addr to tpm_tis_data
tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd()
tpm: delete the TPM_TIS_CLK_ENABLE flag
tpm: remove unused variables
tpm: only attempt to disable the LPC CLKRUN if is already enabled
x86/xen: Calculate __max_logical_packages on PV domains
scsi: qla2xxx: Fix system crash for Notify ack timeout handling
scsi: qla2xxx: Fix gpnid error processing
scsi: qla2xxx: Move session delete to driver work queue
scsi: qla2xxx: Skip IRQ affinity for Target QPairs
scsi: qla2xxx: Fix re-login for Nport Handle in use
scsi: qla2xxx: Retry switch command on time out
scsi: qla2xxx: Serialize GPNID for multiple RSCN
scsi: qla2xxx: Fix login state machine stuck at GPDB
scsi: qla2xxx: Fix NPIV host cleanup in target mode
scsi: qla2xxx: Relogin to target port on a cable swap
scsi: qla2xxx: Fix Relogin being triggered too fast
scsi: qla2xxx: Fix PRLI state check
scsi: qla2xxx: Fix abort command deadlock due to spinlock
scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport
scsi: qla2xxx: Fix scan state field for fcport
scsi: qla2xxx: Clear loop id after delete
scsi: qla2xxx: Defer processing of GS IOCB calls
scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout.
scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref
scsi: qla2xxx: Fix memory leak in dual/target mode
NFS: Fix an incorrect type in struct nfs_direct_req
pNFS: Prevent the layout header refcount going to zero in pnfs_roc()
NFS: Fix unstable write completion
Linux 4.15.10

CVE References

tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Bionic):
status: New → In Progress
assignee: nobody → Thadeu Lima de Souza Cascardo (cascardo)
importance: Undecided → High
Changed in linux (Ubuntu Bionic):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (32.6 KiB)

This bug was fixed in the package linux - 4.15.0-13.14

linux (4.15.0-13.14) bionic; urgency=medium

  * linux: 4.15.0-13.14 -proposed tracker (LP: #1756408)

  * devpts: handle bind-mounts (LP: #1755857)
    - SAUCE: devpts: hoist out check for DEVPTS_SUPER_MAGIC
    - SAUCE: devpts: resolve devpts bind-mounts
    - SAUCE: devpts: comment devpts_mntget()
    - SAUCE: selftests: add devpts selftests

  * [bionic][arm64] d-i: add hisi_sas_v3_hw to scsi-modules (LP: #1756103)
    - d-i: add hisi_sas_v3_hw to scsi-modules

  * [Bionic][ARM64] enable ROCE and HNS3 driver support for hip08 SoC
    (LP: #1756097)
    - RDMA/hns: Refactor eq code for hip06
    - RDMA/hns: Add eq support of hip08
    - RDMA/hns: Add detailed comments for mb() call
    - RDMA/hns: Add rq inline data support for hip08 RoCE
    - RDMA/hns: Update the usage of sr_max and rr_max field
    - RDMA/hns: Set access flags of hip08 RoCE
    - RDMA/hns: Filter for zero length of sge in hip08 kernel mode
    - RDMA/hns: Fix QP state judgement before sending work requests
    - RDMA/hns: Assign dest_qp when deregistering mr
    - RDMA/hns: Fix endian problems around imm_data and rkey
    - RDMA/hns: Assign the correct value for tx_cqn
    - RDMA/hns: Create gsi qp in hip08
    - RDMA/hns: Add gsi qp support for modifying qp in hip08
    - RDMA/hns: Fill sq wqe context of ud type in hip08
    - RDMA/hns: Assign zero for pkey_index of wc in hip08
    - RDMA/hns: Update the verbs of polling for completion
    - RDMA/hns: Set the guid for hip08 RoCE device
    - net: hns3: Refactor of the reset interrupt handling logic
    - net: hns3: Add reset service task for handling reset requests
    - net: hns3: Refactors the requested reset & pending reset handling code
    - net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface
    - net: hns3: Add mailbox support to VF driver
    - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support
    - net: hns3: Add HNS3 VF driver to kernel build framework
    - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC
    - net: hns3: Add mailbox support to PF driver
    - net: hns3: Change PF to add ring-vect binding & resetQ to mailbox
    - net: hns3: Add mailbox interrupt handling to PF driver
    - net: hns3: add support to query tqps number
    - net: hns3: add support to modify tqps number
    - net: hns3: change the returned tqp number by ethtool -x
    - net: hns3: free the ring_data structrue when change tqps
    - net: hns3: get rss_size_max from configuration but not hardcode
    - net: hns3: add a mask initialization for mac_vlan table
    - net: hns3: add vlan offload config command
    - net: hns3: add ethtool related offload command
    - net: hns3: add handling vlan tag offload in bd
    - net: hns3: cleanup mac auto-negotiation state query
    - net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg
    - net: hns3: add support for set_pauseparam
    - net: hns3: add support to update flow control settings after autoneg
    - net: hns3: add Asym Pause support to phy default features
    - net: hns3: add support for querying advertised pause frame by ethtool ethx
    - net:...

Changed in linux (Ubuntu Bionic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers