Xenial update to 4.4.148 stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Xenial |
Fix Released
|
Medium
|
Stefan Bader |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The 4.4.148 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
TEST CASE: TBD
The following patches from the 4.4.148 stable release shall be applied:
* ext4: fix check to prevent initializing reserved inodes
* tpm: fix race condition in tpm_common_write()
* ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
* fork: unconditionally clear stack on fork
* parisc: Enable CONFIG_MLONGCALLS by default
* parisc: Define mb() and add memory barriers to assembler unlock sequences
* xen/netfront: don't cache skb_shinfo()
* ACPI / LPSS: Add missing prv_offset setting for byt/cht PWM devices
* scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled
* root dentries need RCU-delayed freeing
* fix mntput/mntput race
* fix __legitimize_
* IB/core: Make testing MR flags for writability a static inline function
* IB/mlx4: Mark user MR as writable if actual virtual memory is writable
* IB/ocrdma: fix out of bounds access to local buffer
* ARM: dts: imx6sx: fix irq for pcie bridge
* kprobes/x86: Fix %p uses in error messages
* x86/irqflags: Provide a declaration for native_save_fl
* UBUNTU: SAUCE: Sync pgtable_64.h with upstream stable
* mm: x86: move _PAGE_SWP_
* UBUNTU: SAUCE: Sync pgtable-3level.h with upstream stable
* UBUNTU: SAUCE: Sync pgtable.h with upstream stable
* mm: Add vm_insert_
* mm: fix cache mode tracking in vm_insert_mixed()
* x86/mm/kmmio: Make the tracer robust against L1TF
* x86/init: fix build with CONFIG_SWAP=n
* Linux 4.4.148
CVE References
tags: | added: kernel-stable-tracking-bug |
Changed in linux (Ubuntu Xenial): | |
assignee: | nobody → Stefan Bader (smb) |
importance: | Undecided → Medium |
status: | New → In Progress |
Changed in linux (Ubuntu): | |
status: | New → Invalid |
description: | updated |
Changed in linux (Ubuntu Xenial): | |
status: | In Progress → Fix Committed |
Skipped:
* "x86/paravirt: Fix spectre-v2 mitigations for paravirt
guests (CVE-2018-15594)
* "x86/speculation: Protect against userspace-userspace
spectreRSB" (CVE-2018-15572)
Skipped patches from L1TF (CVE-2018-3620, CVE-2018-3646): n/l1tf: Increase 32bit PAE PAGE_SHIFT" n/l1tf: Change order of offset/type in n/l1tf: Protect swap entries against L1TF" n/l1tf: Protect PROT_NONE PTEs against n/l1tf: Make sure the first page is n/l1tf: Add sysfs reporting for l1tf" n/l1tf: Disallow non privileged high MMIO n/l1tf: Limit swap file size to MAX_PA/2" n/l1tf: Extend 64bit swap file size limit" n/l1tf: Protect PAE swap entries against n/l1tf: Fix up pte->pfn conversion for n/l1tf: Invert all not present mappings" n/l1tf: Make pmd/pud_ mknotpresent( ) n/l1tf: Fix up CPU feature flags" n/l1tf: Unbreak ARCH_PFN_ MODIFY_ ALLOWED architectures"
* "x86/speculatio
__PHYSICAL_
* "x86/mm: Move swap offset/type up in PTE to work around
erratum"
* "x86/mm: Fix swap entry comment and macro"
* "x86/speculatio
swap entry"
* "x86/speculatio
* "x86/speculatio
speculation"
* "x86/speculatio
always reserved"
* "x86/speculatio
* "x86/speculatio
PROT_NONE mappings"
* "x86/speculatio
* "x86/bugs: Move the l1tf function and define pr_fmt
properly"
* "x86/speculatio
* "x86/cpufeatures: Add detection of L1D cache flush
support."
* "x86/speculatio
L1TF"
* "x86/speculatio
PAE"
* "x86/speculatio
* "x86/speculatio
invert"
* "x86/mm/pat: Make set_memory_np() L1TF safe"
* "x86/speculatio
* "x86/speculatio
!__HAVE_
Modified "mm: x86: move _PAGE_SWP_ SOFT_DIRTY from bit 7 to bit 1" to do the changes to arch/x86/ include/ asm/pgtable_ types.h only (because changes to arch/x86/ include/ asm/pgtable_ 64.h were already present).