Bionic update to 4.15.10 stable release

Bug #1756100 reported by Thadeu Lima de Souza Cascardo on 2018-03-15
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
High
Thadeu Lima de Souza Cascardo
Bionic
High
Thadeu Lima de Souza Cascardo

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.15.10 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the 4.15.10 stable release shall be applied:

RDMA/ucma: Limit possible option size
RDMA/ucma: Check that user doesn't overflow QP state
RDMA/mlx5: Fix integer overflow while resizing CQ
bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc()
IB/uverbs: Improve lockdep_check
mac80211_hwsim: don't use WQ_MEM_RECLAIM
net/smc: fix NULL pointer dereference on sock_create_kern() error path
regulator: stm32-vrefbuf: fix check on ready flag
drm/i915: Check for fused or unused pipes
drm/i915/audio: fix check for av_enc_map overflow
drm/i915: Fix rsvd2 mask when out-fence is returned
drm/i915: Clear the in-use marker on execbuf failure
drm/i915: Disable DC states around GMBUS on GLK
drm/i915: Update watermark state correctly in sanitize_watermarks
drm/i915: Try EDID bitbanging on HDMI after failed read
drm/i915/perf: fix perf stream opening lock
scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops
scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
drm/i915: Always call to intel_display_set_init_power() in resume_early.
workqueue: Allow retrieval of current task's work struct
drm: Allow determining if current task is output poll worker
drm/nouveau: Fix deadlock on runtime suspend
drm/radeon: Fix deadlock on runtime suspend
drm/amdgpu: Fix deadlock on runtime suspend
drm/nouveau: prefer XBGR2101010 for addfb ioctl
drm/amd/powerplay/smu7: allow mclk switching with no displays
drm/amd/powerplay/vega10: allow mclk switching with no displays
Revert "drm/radeon/pm: autoswitch power state when in balanced mode"
drm/amd/display: check for ipp before calling cursor operations
drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE
drm/amd/powerplay: fix power over limit on Fiji
drm/amd/display: Default HDMI6G support to true. Log VBIOS table error.
drm/amdgpu: used cached pcie gen info for SI (v2)
drm/amdgpu: Notify sbios device ready before send request
drm/radeon: fix KV harvesting
drm/amdgpu: fix KV harvesting
drm/amdgpu:Correct max uvd handles
drm/amdgpu:Always save uvd vcpu_bo in VM Mode
ovl: redirect_dir=nofollow should not follow redirect for opaque lower
MIPS: BMIPS: Do not mask IPIs during suspend
MIPS: ath25: Check for kzalloc allocation failure
MIPS: OCTEON: irq: Check for null return on kzalloc allocation
PCI: dwc: Fix enumeration end when reaching root subordinate
Input: matrix_keypad - fix race when disabling interrupts
Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI"
bug: use %pB in BUG and stack protector failure
lib/bug.c: exclude non-BUG/WARN exceptions from report_bug()
mm/memblock.c: hardcode the end_pfn being -1
Documentation/sphinx: Fix Directive import error
loop: Fix lost writes caused by missing flag
virtio_ring: fix num_free handling in error case
KVM: s390: fix memory overwrites when not using SCA entries
arm64: mm: fix thinko in non-global page table attribute check
IB/core: Fix missing RDMA cgroups release in case of failure to register device
Revert "nvme: create 'slaves' and 'holders' entries for hidden controllers"
kbuild: Handle builtin dtb file names containing hyphens
dm bufio: avoid false-positive Wmaybe-uninitialized warning
IB/mlx5: Fix incorrect size of klms in the memory region
bcache: fix crashes in duplicate cache device register
bcache: don't attach backing with duplicate UUID
x86/MCE: Save microcode revision in machine check records
x86/MCE: Serialize sysfs changes
perf tools: Fix trigger class trigger_on()
x86/spectre_v2: Don't check microcode versions when running under hypervisors
ALSA: hda/realtek - Add support headset mode for DELL WYSE
ALSA: hda/realtek - Add headset mode support for Dell laptop
ALSA: hda/realtek: Limit mic boost on T480
ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520
ALSA: hda/realtek - Make dock sound work on ThinkPad L570
ALSA: seq: Don't allow resizing pool in use
ALSA: seq: More protection for concurrent write and ioctl races
ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines
ALSA: hda: add dock and led support for HP EliteBook 820 G3
ALSA: hda: add dock and led support for HP ProBook 640 G2
scsi: qla2xxx: Fix NULL pointer crash due to probe failure
scsi: qla2xxx: Fix recursion while sending terminate exchange
dt-bindings: Document mti,mips-cpc binding
MIPS: CPC: Map registers using DT in mips_cpc_default_phys_base()
nospec: Kill array_index_nospec_mask_check()
nospec: Include <asm/barrier.h> dependency
x86/entry: Reduce the code footprint of the 'idtentry' macro
x86/entry/64: Use 'xorl' for faster register clearing
x86/mm: Remove stale comment about KMEMCHECK
x86/asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers
x86/IO-APIC: Avoid warning in 32-bit builds
x86/LDT: Avoid warning in 32-bit builds with older gcc
x86-64/realmode: Add instruction suffix
Revert "x86/retpoline: Simplify vmexit_fill_RSB()"
x86/speculation: Use IBRS if available before calling into firmware
x86/retpoline: Support retpoline builds with Clang
x86/speculation, objtool: Annotate indirect calls/jumps for objtool
x86/speculation: Move firmware_restrict_branch_speculation_*() from C to CPP
x86/paravirt, objtool: Annotate indirect calls
x86/boot, objtool: Annotate indirect jump in secondary_startup_64()
x86/mm/sme, objtool: Annotate indirect call in sme_encrypt_execute()
objtool: Use existing global variables for options
objtool: Add retpoline validation
objtool: Add module specific retpoline rules
objtool, retpolines: Integrate objtool with retpoline support more closely
objtool: Fix another switch table detection issue
objtool: Fix 32-bit build
x86/kprobes: Fix kernel crash when probing .entry_trampoline code
watchdog: hpwdt: SMBIOS check
watchdog: hpwdt: Check source of NMI
watchdog: hpwdt: fix unused variable warning
watchdog: hpwdt: Remove legacy NMI sourcing.
netfilter: add back stackpointer size checks
netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation
netfilter: xt_hashlimit: fix lock imbalance
netfilter: x_tables: fix missing timer initialization in xt_LED
netfilter: nat: cope with negative port range
netfilter: IDLETIMER: be syzkaller friendly
netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets
netfilter: bridge: ebt_among: add missing match size checks
netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt
netfilter: use skb_to_full_sk in ip6_route_me_harder
tpm_tis: Move ilb_base_addr to tpm_tis_data
tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd()
tpm: delete the TPM_TIS_CLK_ENABLE flag
tpm: remove unused variables
tpm: only attempt to disable the LPC CLKRUN if is already enabled
x86/xen: Calculate __max_logical_packages on PV domains
scsi: qla2xxx: Fix system crash for Notify ack timeout handling
scsi: qla2xxx: Fix gpnid error processing
scsi: qla2xxx: Move session delete to driver work queue
scsi: qla2xxx: Skip IRQ affinity for Target QPairs
scsi: qla2xxx: Fix re-login for Nport Handle in use
scsi: qla2xxx: Retry switch command on time out
scsi: qla2xxx: Serialize GPNID for multiple RSCN
scsi: qla2xxx: Fix login state machine stuck at GPDB
scsi: qla2xxx: Fix NPIV host cleanup in target mode
scsi: qla2xxx: Relogin to target port on a cable swap
scsi: qla2xxx: Fix Relogin being triggered too fast
scsi: qla2xxx: Fix PRLI state check
scsi: qla2xxx: Fix abort command deadlock due to spinlock
scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport
scsi: qla2xxx: Fix scan state field for fcport
scsi: qla2xxx: Clear loop id after delete
scsi: qla2xxx: Defer processing of GS IOCB calls
scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout.
scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref
scsi: qla2xxx: Fix memory leak in dual/target mode
NFS: Fix an incorrect type in struct nfs_direct_req
pNFS: Prevent the layout header refcount going to zero in pnfs_roc()
NFS: Fix unstable write completion
Linux 4.15.10

CVE References

tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Bionic):
status: New → In Progress
assignee: nobody → Thadeu Lima de Souza Cascardo (cascardo)
importance: Undecided → High
Changed in linux (Ubuntu Bionic):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (32.6 KiB)

This bug was fixed in the package linux - 4.15.0-13.14

---------------
linux (4.15.0-13.14) bionic; urgency=medium

  * linux: 4.15.0-13.14 -proposed tracker (LP: #1756408)

  * devpts: handle bind-mounts (LP: #1755857)
    - SAUCE: devpts: hoist out check for DEVPTS_SUPER_MAGIC
    - SAUCE: devpts: resolve devpts bind-mounts
    - SAUCE: devpts: comment devpts_mntget()
    - SAUCE: selftests: add devpts selftests

  * [bionic][arm64] d-i: add hisi_sas_v3_hw to scsi-modules (LP: #1756103)
    - d-i: add hisi_sas_v3_hw to scsi-modules

  * [Bionic][ARM64] enable ROCE and HNS3 driver support for hip08 SoC
    (LP: #1756097)
    - RDMA/hns: Refactor eq code for hip06
    - RDMA/hns: Add eq support of hip08
    - RDMA/hns: Add detailed comments for mb() call
    - RDMA/hns: Add rq inline data support for hip08 RoCE
    - RDMA/hns: Update the usage of sr_max and rr_max field
    - RDMA/hns: Set access flags of hip08 RoCE
    - RDMA/hns: Filter for zero length of sge in hip08 kernel mode
    - RDMA/hns: Fix QP state judgement before sending work requests
    - RDMA/hns: Assign dest_qp when deregistering mr
    - RDMA/hns: Fix endian problems around imm_data and rkey
    - RDMA/hns: Assign the correct value for tx_cqn
    - RDMA/hns: Create gsi qp in hip08
    - RDMA/hns: Add gsi qp support for modifying qp in hip08
    - RDMA/hns: Fill sq wqe context of ud type in hip08
    - RDMA/hns: Assign zero for pkey_index of wc in hip08
    - RDMA/hns: Update the verbs of polling for completion
    - RDMA/hns: Set the guid for hip08 RoCE device
    - net: hns3: Refactor of the reset interrupt handling logic
    - net: hns3: Add reset service task for handling reset requests
    - net: hns3: Refactors the requested reset & pending reset handling code
    - net: hns3: Add HNS3 VF IMP(Integrated Management Proc) cmd interface
    - net: hns3: Add mailbox support to VF driver
    - net: hns3: Add HNS3 VF HCL(Hardware Compatibility Layer) Support
    - net: hns3: Add HNS3 VF driver to kernel build framework
    - net: hns3: Unified HNS3 {VF|PF} Ethernet Driver for hip08 SoC
    - net: hns3: Add mailbox support to PF driver
    - net: hns3: Change PF to add ring-vect binding & resetQ to mailbox
    - net: hns3: Add mailbox interrupt handling to PF driver
    - net: hns3: add support to query tqps number
    - net: hns3: add support to modify tqps number
    - net: hns3: change the returned tqp number by ethtool -x
    - net: hns3: free the ring_data structrue when change tqps
    - net: hns3: get rss_size_max from configuration but not hardcode
    - net: hns3: add a mask initialization for mac_vlan table
    - net: hns3: add vlan offload config command
    - net: hns3: add ethtool related offload command
    - net: hns3: add handling vlan tag offload in bd
    - net: hns3: cleanup mac auto-negotiation state query
    - net: hns3: fix for getting auto-negotiation state in hclge_get_autoneg
    - net: hns3: add support for set_pauseparam
    - net: hns3: add support to update flow control settings after autoneg
    - net: hns3: add Asym Pause support to phy default features
    - net: hns3: add support for querying advertised pause frame by ethtool ethx
    - net:...

Changed in linux (Ubuntu Bionic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers