Cosmic update to 4.18.9 stable release

Bug #1793682 reported by Thadeu Lima de Souza Cascardo on 2018-09-21
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

    SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.18.9 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.



       The following patches from the 4.18.9 stable release shall be applied:

86e014f514f9 Linux 4.18.9
175ad0cbd818 mm: get rid of vmacache_flush_all() entirely
39998fd58036 autofs: fix autofs_sbi() does not check super block type
51d34e94c470 clocksource: Revert "Remove kthread"
777c7b8464de RDMA/cma: Do not ignore net namespace for unbound cm_id
9daa1d751d51 MIPS: mscc: ocelot: fix length of memory address space for MIIM
20452f8f04a2 MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
1c7b8cf2a76a RDMA/hns: Update the data type of immediate data
137fee538bb0 NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
1256eeb12678 RDMA/hns: Add illegal hop_num judgement
b6f493453c78 f2fs: fix to do sanity check with extra_attr feature
059311916fbb f2fs: fix to propagate return value of scan_nat_page()
8d65ffb36708 f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
ea08014059c6 mfd: ti_am335x_tscadc: Fix struct clk memory leak
ff418359bfcb iommu/ipmmu-vmsa: Fix allocation in atomic context
3ca5bae4d2d8 mfd: rave-sp: Initialize flow control and parity of the port
0342426f2bf7 f2fs: fix to do sanity check with secs_per_zone
ee0b97e19865 f2fs: avoid potential deadlock in f2fs_sbi_store
d92dadb83be8 media: em28xx: Fix DualHD disconnect oops
aba03a8b544a f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
eade994be5e6 f2fs: fix to wait on page writeback before updating page
f9ce9240ebbe iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel
1b210d52abf5 media: em28xx: Fix dual transport stream operation
088ce054c745 drm/amd/display: Prevent PSR from being enabled if initialization fails
fdc340f5a710 media: helene: fix xtal frequency setting at power on
18f4b79efb40 media: rcar-csi2: update stream start for V3M
e681be2362e8 partitions/aix: fix usage of uninitialized lv_info and lvname structures
06a557d12a90 partitions/aix: append null character to print data from disk
c57525ab6f77 media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions
3f6592445cbe Input: atmel_mxt_ts - only use first T9 instance
5864b9e06e17 dm cache: only allow a single io_mode cache feature to be requested
24983c8101c9 net: dcb: For wild-card lookups, use priority -1, not 0
e66813955581 thermal_hwmon: Sanitize attribute name passed to hwmon
8cc36414d815 thermal: rcar_thermal: avoid NULL dereference in absence of IRQ resources
273234f22e95 MIPS: generic: fix missing of_node_put()
9449bd8ff770 MIPS: Octeon: add missing of_node_put()
235fd393825b f2fs: fix to do sanity check with reserved blkaddr of inline inode
d44e0ddb577d tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
d229e7ecc0cb tpm_tis_spi: Pass the SPI IRQ down to the driver
4f268d981258 f2fs: fix to skip GC if type in SSA and SIT is inconsistent
2cf9708981e7 pktcdvd: Fix possible Spectre-v1 for pkt_devs
bf5cde3c685b f2fs: try grabbing node page lock aggressively in sync scenario
b493d05c0402 net: mvneta: fix mtu change on port without link
d35bf0a213ec pinctrl/amd: only handle irq if it is pending and unmasked
d288d8163c97 gpio: ml-ioh: Fix buffer underwrite on probe error path
9b9ceea29ad2 gpio: pxa: disable pinctrl calls for PXA3xx
6871146498a7 pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
9d8c6300d158 regulator: tps65217: Fix NULL pointer dereference on probe
0d268eaecd3d x86/mm: Remove in_nmi() warning from vmalloc_fault()
73941b28bcdd Bluetooth: hidp: Fix handling of strncpy for hid->name information
dc00dc4ccf8b powerpc/mm: Don't report PUDs as memory leaks when using kmemleak
81a4ff2429e7 PCI: mobiveil: Fix struct mobiveil_pcie.pcie_reg_base address type
94ee251c1ed4 PCI: mobiveil: Add missing ../pci.h include
1f1e9c39a6a7 media: em28xx: explicitly disable TS packet filter
ddd0ae7f02d4 ath10k: disable bundle mgmt tx completion event support
0bf7bf9931ad tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
83d9430bd43b scsi: 3ware: fix return 0 on the error path of probe
0a964871ccea nfs: Referrals not inheriting proto setting from parent
0c8b7991f40d ata: libahci: Correct setting of DEVSLP register
d12d3336fe95 ata: libahci: Allow reconfigure of DEVSLP register
b0f09f787d38 MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
2916355cbc9c scsi: tcmu: do not set max_blocks if data_bitmap has been setup
15ce90b8346f mtd: rawnand: make subop helpers return unsigned values
e5d9ae0077a5 rpmsg: core: add support to power domains for devices
d397e7c9d663 wlcore: Set rx_status boottime_ns field on rx
b19c6e698558 ath10k: prevent active scans on potential unusable channels
23aa633d564b ath9k_hw: fix channel maximum power level test
ce5127257d99 ath9k: report tx status on EOSP
1e83b3b9c60e perf build: Fix installation directory for eBPF
e01f7c77ce21 macintosh/via-pmu: Add missing mmio accessors
14335f6beb3f powerpc/pseries: fix EEH recovery of some IOV devices
d8551bc50c57 perf evlist: Fix error out while applying initial delay and LBR
96e8b14b1f42 perf c2c report: Fix crash for empty browser
3ce0566333dd NFSv4.0 fix client reference leak in callback
aa405740d359 device-dax: avoid hang on error before devm_memremap_pages()
f2d46f40bb92 perf tools: Allow overriding MAX_NR_CPUS at compile time
528000132554 ASoC: soc-pcm: Use delay set in component pointer function
9590fe082ac4 f2fs: fix to detect looped node chain correctly
7d2914dac206 f2fs: fix defined but not used build warnings
86750bef4029 f2fs: issue discard align to section in LFS mode
14580e8d9655 f2fs: Keep alloc_valid_block_count in sync
2ab744266b20 f2fs: do not set free of current section
9a83044805f9 f2fs: fix to active page in lru list for read path
b70fdc0ffc14 IB/IPoIB: Set ah valid flag in multicast send flow
17732e7759e8 iwlwifi: pcie: don't access periphery registers when not available
a1354f0d718a uio: fix possible circular locking dependency
40dc1eb129a5 tty: rocket: Fix possible buffer overwrite on register_PCI
e951163fb87c Drivers: hv: vmbus: Cleanup synic memory free path
15e5a96b1e1a firmware: vpd: Fix section enabled flag on vpd_section_destroy
386b28c2de45 uio: potential double frees if __uio_register_device() fails
baec9ce83ad5 misc: ti-st: Fix memory leak in the error path of probe()
7fef1a4f376a gpu: ipu-v3: default to id 0 on missing OF alias
0bbd7344b42a media: camss: csid: Configure data type and decode format properly
b3f70869623d timers: Clear timer_base::must_forward_clk with timer_base::lock held
5a149d67afa9 md/raid5: fix data corruption of replacements after originals dropped
b54ac5fd6d6a scsi: target: fix __transport_register_session locking
9db9eb8c4e30 scsi: lpfc: Fix driver crash when re-registering NVME rports.
abe0bde4dd8c blk-mq: fix updating tags depth
a73a10b78563 clk: scmi: Fix the rounding of clock rate
846f4edf32b6 scsi: qla2xxx: Silent erroneous message
8e2b7c2c14f5 scsi: qla2xxx: Fix session state stuck in Get Port DB
549f85194379 scsi: qla2xxx: Fix unintended Logout
8246055b5c6b net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
e78e5a975500 media: dw2102: Fix memleak on sequence of probes
e88a48b70c31 media: davinci: vpif_display: Mix memory leak on probe error path
c3b51c11c836 selftests/bpf: fix a typo in map in map test
c9feebab869c powerpc/4xx: Fix error return path in ppc4xx_msi_probe()
35fa5df6c79a powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage
7e3d17181c13 gpio: tegra: Move driver registration to subsys_init level
9a5cbf5c84a1 pinctrl: berlin: fix 'pctrl->functions' allocation in berlin_pinctrl_build_state
074f319a5c13 Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
516771283149 i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
e6ab983acd1b ethtool: Remove trailing semicolon for static inline
0906eb972eea ALSA: hda/realtek - Add mute LED quirk for HP Spectre x360
c6fe80156828 misc: mic: SCIF Fix scif_get_new_port() error handling
40b9d96cea9f tc-testing: remove duplicate spaces in connmark match patterns
86bebb604160 tc-testing: flush gact actions on test teardown
e114758826f5 ARC: [plat-axs*]: Enable SWAP
f688bf1511c9 switchtec: Fix Spectre v1 vulnerability
5b7497c02dac x86/apic/vector: Make error return value negative
0d07d02abd58 x86/process: Don't mix user/kernel regs in 64bit __show_regs()
c6f8e398c10e x86/microcode: Update the new microcode revision unconditionally
e0a8f85b0aee x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
875872547357 cpu/hotplug: Prevent state corruption on error rollback
6b7b020bef06 cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
a4db12abb871 ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
ce987db2b52f memory: ti-aemif: fix a potential NULL-pointer dereference
8bf0dc8d0a67 ACPI / LPSS: Force LPSS quirks on boot
e8cc3b38a0b6 ARC: [plat-axs*/plat-hsdk]: Allow U-Boot to pass MAC-address to the kernel
18d40b7836d4 KVM: x86: Do not re-{try,execute} after failed emulation in L2
4ff64069721a KVM: x86: Default to not allowing emulation retry in kvm_mmu_page_fault
172c718af8b2 KVM: x86: Invert emulation re-execute behavior to make it opt-in
9a89243cb1c7 KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr
a7e360b1086b KVM: x86: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation
625a6bcb11a2 KVM: s390: vsie: copy wrapping keys to right place
33cd6d44e8c6 KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix()
9e7e9f25ef3e KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW
a2359d3d80fe arm64: KVM: Only force FPEXC32_EL2.EN if trapping FPSIMD
e9773e97f502 Btrfs: fix data corruption when deduplicating between different files
29d76c9853a2 btrfs: fix qgroup_free wrong num_bytes in btrfs_subvolume_reserve_metadata
15c4b1902f0e cifs: connect to servername instead of IP for IPC$ share
dc0416dcd3ab smb3: check for and properly advertise directory lease support
d88717b6ce78 SMB3: Backup intent flag missing for directory opens with backupuid mounts
521983976c38 MIPS: VDSO: Match data page cache colouring when D$ aliases
67b987648258 android: binder: fix the race mmap and alloc_new_buf_locked
c583d8956d83 block: bfq: swap puts in bfqg_and_blkg_put
d927dea6392d block: don't warn when doing fsync on read-only devices
56935391aba9 nbd: don't allow invalid blocksize settings
e847a545edae scsi: lpfc: Correct MDS diag and nvmet configuration
faeb7c279e48 mac80211: don't update the PM state of a peer upon a multicast frame
15a6f8974a8c memory_hotplug: fix kernel_panic on offline page processing
f1549c67f23f mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported.
c0cbb9e5d448 HID: input: fix leaking custom input node name
81bb35902b63 HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen
7bc3f187fd30 HID: core: fix grouping by application
e114a409eef6 HID: multitouch: fix Elan panels with 2 input modes declaration
b94023f1ab51 i2c: i801: fix DNV's SMBCTRL register offset
824ca3763057 i2c: xiic: Make the start and the byte count write atomic

CVE References

tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Cosmic):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (60.2 KiB)

This bug was fixed in the package linux - 4.18.0-9.10

linux (4.18.0-9.10) cosmic; urgency=medium

  * linux: 4.18.0-9.10 -proposed tracker (LP: #1796346)

  * Cosmic update: v4.18.12 upstream stable release (LP: #1796139)
    - crypto: skcipher - Fix -Wstringop-truncation warnings
    - iio: adc: ina2xx: avoid kthread_stop() with stale task_struct
    - tsl2550: fix lux1_input error in low light
    - misc: ibmvmc: Use GFP_ATOMIC under spin lock
    - vmci: type promotion bug in qp_host_get_user_memory()
    - siox: don't create a thread without starting it
    - x86/numa_emulation: Fix emulated-to-physical node mapping
    - staging: rts5208: fix missing error check on call to rtsx_write_register
    - power: supply: axp288_charger: Fix initial constant_charge_current value
    - misc: sram: enable clock before registering regions
    - serial: sh-sci: Stop RX FIFO timer during port shutdown
    - uwb: hwa-rc: fix memory leak at probe
    - power: vexpress: fix corruption in notifier registration
    - iommu/amd: make sure TLB to be flushed before IOVA freed
    - Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
    - USB: serial: kobil_sct: fix modem-status error handling
    - 6lowpan: iphc: reset mac_header after decompress to fix panic
    - iommu/msm: Don't call iommu_device_{,un}link from atomic context
    - s390/mm: correct allocate_pgste proc_handler callback
    - power: remove possible deadlock when unregistering power_supply
    - drm/amd/display/dc/dce: Fix multiple potential integer overflows
    - drm/amd/display: fix use of uninitialized memory
    - md-cluster: clear another node's suspend_area after the copy is finished
    - cxgb4: Fix the condition to check if the card is T5
    - RDMA/bnxt_re: Fix a couple off by one bugs
    - RDMA/i40w: Hold read semaphore while looking after VMA
    - RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
    - IB/core: type promotion bug in rdma_rw_init_one_mr()
    - media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
    - IB/mlx4: Test port number before querying type.
    - powerpc/kdump: Handle crashkernel memory reservation failure
    - media: fsl-viu: fix error handling in viu_of_probe()
    - vhost_net: Avoid tx vring kicks during busyloop
    - media: staging/imx: fill vb2_v4l2_buffer field entry
    - IB/mlx5: Fix GRE flow specification
    - include/rdma/opa_addr.h: Fix an endianness issue
    - x86/tsc: Add missing header to tsc_msr.c
    - ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
    - x86/entry/64: Add two more instruction suffixes
    - ARM: dts: ls1021a: Add missing cooling device properties for CPUs
    - scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
      buffer size
    - thermal: i.MX: Allow thermal probe to fail gracefully in case of bad
    - scsi: klist: Make it safe to use klists in atomic context
    - scsi: ibmvscsi: Improve strings handling
    - scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
    - usb: wusbcore: security: cast sizeof to int for comparison
    - ath10k: sdio: use same endpoint id for all packets...

Changed in linux (Ubuntu Cosmic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers