Bionic update: upstream stable patchset 2018-07-24

Bug #1783418 reported by Kamal Mostafa
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Kamal Mostafa

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2018-07-24 (ported from v4.14.44 and v4.16.12)
       from git://

serial: mvebu-uart: fix tx lost characters
scsi: lpfc: Fix NVME Initiator FirstBurst
crypto: inside-secure - move the digest to the request context
staging: fsl-dpaa2/eth: Fix incorrect kfree
Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026]
powerpc: Move default security feature flags
qed: Fix LL2 race during connection terminate
qed: Fix possibility of list corruption during rmmod flows
qed: LL2 flush isles when connection is closed
net: ip6_gre: Split up ip6gre_changelink()
net: ip6_gre: Split up ip6gre_newlink()
net: ip6_gre: Split up ip6gre_tnl_change()
net: ip6_gre: Split up ip6gre_tnl_link_config()
net: ip6_gre: Request headroom in __gre6_xmit()
3c59x: convert to generic DMA API
net: dsa: bcm_sf2: Fix IPv6 rule half deletion
net: dsa: bcm_sf2: Fix IPv6 rules and chain ID
net: dsa: Do not register devlink for unused ports
net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule
cxgb4: Correct ntuple mask validation for hash filters
rtc: goldfish: Add missing MODULE_LICENSE
rtc: rp5c01: fix possible race condition
rtc: tx4939: avoid unintended sign extension on a 24 bit shift
rtc: m41t80: fix race conditions
rtc: rk808: fix possible race condition
rtc: hctosys: Ensure system time doesn't overflow time_t
rtc: snvs: Fix usage of snvs_rtc_enable
serial: altera: ensure port->regshift is honored consistently
serial: 8250: Don't service RX FIFO if interrupts are disabled
serial: arc_uart: Fix out-of-bounds access through DT alias
serial: fsl_lpuart: Fix out-of-bounds access through DT alias
serial: imx: Fix out-of-bounds access through serial port index
serial: mxs-auart: Fix out-of-bounds access through serial port index
serial: samsung: Fix out-of-bounds access through serial port index
serial: sh-sci: Fix out-of-bounds access through DT alias
serial: xuartps: Fix out-of-bounds access through DT alias
media: cx25821: prevent out-of-bounds read on array card
media: vivid: fix incorrect capabilities for radio
media: vb2: Fix videobuf2 to map correct area
media: i2c: adv748x: fix HDMI field heights
media: v4l: vsp1: Fix display stalls when requesting too many inputs
media: em28xx: Add Hauppauge SoloHD/DualHD bulk models
media: lgdt3306a: Fix a double kfree on i2c device remove
media: s3c-camif: fix out-of-bounds array access
media: cx23885: Set subdev host data to clk_freq pointer
media: cx23885: Override 888 ImpactVCBe crystal frequency
media: ov5645: add missing of_node_put() in error path
media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array
media: dmxdev: fix error code for invalid ioctls
clk: samsung: exynos3250: Fix PLL rates
clk: samsung: exynos5250: Fix PLL rates
clk: samsung: exynos5433: Fix PLL rates
clk: samsung: exynos5260: Fix PLL rates
clk: samsung: exynos7: Fix PLL rates
clk: samsung: s3c2410: Fix PLL rates
clk: rockchip: Prevent calculating mmc phase if clock rate is zero
clk: tegra: Fix pll_u rate configuration
clk: hisilicon: mark wdt_mux_p[] as const
clk: Don't show the incorrect clock phase
clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228
ASoC: samsung: i2s: Ensure the RCLK rate is properly determined
ASoC: topology: create TLV data for dapm widgets
ASoC: samsung: odroid: Fix 32000 sample rate handling
ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs
ASoC: hdmi-codec: Fix module unloading caused kernel crash
scsi: mvsas: fix wrong endianness of sgpio api
scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD
scsi: aacraid: Insure command thread is not recursively stopped
scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled
scsi: sd: Keep disk read-only when re-reading partition
scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM
scsi: qedi: Fix kernel crash during port toggle
scsi: qla4xxx: skip error recovery in case of register disconnect.
scsi: aacraid: fix shutdown crash when init fails
scsi: qedi: Fix truncation of CHAP name and secret
scsi: storvsc: Increase cmd_per_lun for higher speed devices
scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion()
scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo()
scsi: sym53c8xx_2: iterator underflow in sym_getsync()
scsi: bnx2fc: Fix check in SCSI completion handler for timed out request
scsi: ufs: Enable quirk to ignore sending WRITE_SAME command
scsi: mpt3sas: fix an out of bound write
crypto: inside-secure - fix the invalidation step during cra_exit
crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss
crypto: inside-secure - fix the extra cache computation
crypto: inside-secure - fix the cache_len computation
crypto: inside-secure - do not process request if no command was issued
crypto: ccp - don't disable interrupts while setting up debugfs
crypto: atmel-aes - fix the keys zeroing on errors
crypto: inside-secure - wait for the request to complete if in the backlog
staging: lustre: lmv: correctly iput lmo_root
staging: ks7010: Use constants from ieee80211_eid instead of literal ints.
staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr
staging: fsl-dpaa2/eth: Fix incorrect casts
staging: lustre: fix bug in osc_enter_cache_try
staging: bcm2835-audio: Release resources on module_exit()
xhci: Show what USB release number the xHC supports from protocol capablity
Bluetooth: btusb: Add device ID for RTL8822BE
media: em28xx: USB bulk packet size fix
media: lgdt3306a: Fix module count mismatch on usb unplug
usb: gadget: composite: fix incorrect handling of OS desc requests
usb: gadget: udc: change comparison to bitshift when dealing with a mask
usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS
usb: gadget: ffs: Execute copy_to_user() with USER_DS set
usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS
usb: dwc2: host: Fix transaction errors in host mode
usb: dwc2: hcd: Fix host channel halt flow
usb: dwc2: Fix interval type issue
xhci: zero usb device slot_id member when disabling and freeing a xhci slot
usb: dwc3: Makefile: fix link error on randconfig
usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields
usb: dwc3: Add SoftReset PHY synchonization delay
ALSA: usb-audio: Add native DSD support for Luxman DA-06
Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB
net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
net/usb/qmi_wwan.c: Add USB id for lt4120 modem
USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM
usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume timing"
ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name
net: usbnet: fix potential deadlock on 32bit hosts
usb: cdc_acm: prevent race at write to acm while system resumes
usb: dwc2: Fix dwc2_hsotg_core_init_disconnected()
usb: gadget: fsl_udc_core: fix ep valid checks
usb: gadget: core: Fix use-after-free of usb_request
usb: dwc3: omap: don't miss events during suspend/resume
usb: dwc3: Undo PHY init if soft reset fails
usb: gadget: f_uac2: fix bFirstInterface in composite gadget
x86/kexec: Avoid double free_page() upon do_kexec_load() failure
hfsplus: stop workqueue when fill_super() failed
cfg80211: limit wiphy names to 128 bytes
loop: fix LOOP_GET_STATUS lock imbalance
loop: don't call into filesystem while holding lo_ctl_mutex
scsi: zfcp: fix infinite iteration on ERP ready list
scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()
s390: use expoline thunks in the BPF JIT
s390: extend expoline to BC instructions
s390: move spectre sysfs attribute code
s390/kernel: use expoline for indirect branches
s390/ftrace: use expoline for indirect branches
s390/lib: use expoline for indirect branches
s390/crc32-vx: use expoline for indirect branches
s390: move expoline assembler macros to a header
s390: add assembler macros for CPU alternatives
ext2: fix a block leak
sparc: vio: use put_device() instead of kfree()
hv_netvsc: Fix a network regression after ifdown/ifup
hv_netvsc: Ensure correct teardown message sequence order
hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl()
hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown
hv_netvsc: common detach logic
hv_netvsc: change GPAD teardown order on older versions
hv_netvsc: use RCU to fix concurrent rx and queue changes
hv_netvsc: disable NAPI before channel close
hv_netvsc: defer queue selection to VF
hv_netvsc: fix race in napi poll when rescheduling
hv_netvsc: cancel subchannel setup before halting device
hv_netvsc: fix error unwind handling if vmbus_open fails
hv_netvsc: only wake transmit queue if link is up
hv_netvsc: avoid retry on send during shutdown
hv_netvsc: Use the num_online_cpus() for channel limit
hv_netvsc: empty current transmit aggregation if flow blocked
vmxnet3: use DMA memory barriers where required
vmxnet3: set the DMA mask before the first DMA map operation
tcp: purge write queue in tcp_connect_init()
sock_diag: fix use-after-free read in __sk_free
packet: in packet_snd start writing at link layer allocation
net: test tailroom before appending to linear skb
net/smc: check for missing nlattrs in SMC_PNETID messages
net: sched: red: avoid hashing NULL child
net/sched: fix refcnt leak in the error path of tcf_vlan_init()
net/mlx4_core: Fix error handling in mlx4_init_port_info.
net: Fix a bug in removing queues from XPS map

tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Bionic):
status: New → In Progress
assignee: nobody → Kamal Mostafa (kamalmostafa)
Changed in linux (Ubuntu Bionic):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (35.6 KiB)

This bug was fixed in the package linux - 4.15.0-33.36

linux (4.15.0-33.36) bionic; urgency=medium

  * linux: 4.15.0-33.36 -proposed tracker (LP: #1787149)

  * RTNL assertion failure on ipvlan (LP: #1776927)
    - ipvlan: drop ipv6 dependency
    - ipvlan: use per device spinlock to protect addrs list updates
    - SAUCE: fix warning from "ipvlan: drop ipv6 dependency"

  * ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941)
    - test_bpf: flag tests that cannot be jited on s390

  * HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689)
    - drm/nouveau: fix nouveau_dsm_get_client_id()'s return type
    - drm/radeon: fix radeon_atpx_get_client_id()'s return type
    - drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type
    - platform/x86: apple-gmux: fix gmux_get_client_id()'s return type
    - vga_switcheroo: set audio client id according to bound GPU id

  * locking sockets broken due to missing AppArmor socket mediation patches
    (LP: #1780227)
    - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets

  * Update2 for ocxl driver (LP: #1781436)
    - ocxl: Fix page fault handler in case of fault on dying process

  * netns: unable to follow an interface that moves to another netns
    (LP: #1774225)
    - net: core: Expose number of link up/down transitions
    - dev: always advertise the new nsid when the netns iface changes
    - dev: advertise the new ifindex when the netns iface changes

  * [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066)
    - block, bfq: fix occurrences of request finish method's old name
    - block, bfq: remove batches of confusing ifdefs
    - block, bfq: add requeue-request hook

  * HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763)
    - ALSA: hda: add mute led support for HP ProBook 455 G5

  * [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver
    (LP: #1781476)
    - i2c: xlp9xx: Fix issue seen when updating receive length
    - i2c: xlp9xx: Make sure the transfer size is not more than

  * x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486)
    - x86/kvm: fix LAPIC timer drift when guest uses periodic mode

  * Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823)
    - [Config:] d-i: Add ax88179_178a and r8152 to nic-modules

  * Nvidia fails after switching its mode (LP: #1778658)
    - PCI: Restore config space on runtime resume despite being unbound

  * Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364)
    - SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3

  * CVE-2018-12232
    - PATCH 1/1] socket: close race condition between sock_close() and

  * CVE-2018-10323
    - xfs: set format back to extents if xfs_bmap_extents_to_btree

  * change front mic location for more lenovo m7/8/9xx machines (LP: #1781316)
    - ALSA: hda/realtek - Fix the problem of two front mics on more machines
    - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION

  * Cephfs + fscache: unab...

Changed in linux (Ubuntu Bionic):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers