Cosmic update to 4.18.9 stable release

Bug #1793682 reported by Thadeu Lima de Souza Cascardo on 2018-09-21
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Cosmic
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.18.9 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the 4.18.9 stable release shall be applied:

86e014f514f9 Linux 4.18.9
175ad0cbd818 mm: get rid of vmacache_flush_all() entirely
39998fd58036 autofs: fix autofs_sbi() does not check super block type
51d34e94c470 clocksource: Revert "Remove kthread"
777c7b8464de RDMA/cma: Do not ignore net namespace for unbound cm_id
9daa1d751d51 MIPS: mscc: ocelot: fix length of memory address space for MIIM
20452f8f04a2 MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
1c7b8cf2a76a RDMA/hns: Update the data type of immediate data
137fee538bb0 NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
1256eeb12678 RDMA/hns: Add illegal hop_num judgement
b6f493453c78 f2fs: fix to do sanity check with extra_attr feature
059311916fbb f2fs: fix to propagate return value of scan_nat_page()
8d65ffb36708 f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
ea08014059c6 mfd: ti_am335x_tscadc: Fix struct clk memory leak
ff418359bfcb iommu/ipmmu-vmsa: Fix allocation in atomic context
3ca5bae4d2d8 mfd: rave-sp: Initialize flow control and parity of the port
0342426f2bf7 f2fs: fix to do sanity check with secs_per_zone
ee0b97e19865 f2fs: avoid potential deadlock in f2fs_sbi_store
d92dadb83be8 media: em28xx: Fix DualHD disconnect oops
aba03a8b544a f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
eade994be5e6 f2fs: fix to wait on page writeback before updating page
f9ce9240ebbe iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel
1b210d52abf5 media: em28xx: Fix dual transport stream operation
088ce054c745 drm/amd/display: Prevent PSR from being enabled if initialization fails
fdc340f5a710 media: helene: fix xtal frequency setting at power on
18f4b79efb40 media: rcar-csi2: update stream start for V3M
e681be2362e8 partitions/aix: fix usage of uninitialized lv_info and lvname structures
06a557d12a90 partitions/aix: append null character to print data from disk
c57525ab6f77 media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions
3f6592445cbe Input: atmel_mxt_ts - only use first T9 instance
5864b9e06e17 dm cache: only allow a single io_mode cache feature to be requested
24983c8101c9 net: dcb: For wild-card lookups, use priority -1, not 0
e66813955581 thermal_hwmon: Sanitize attribute name passed to hwmon
8cc36414d815 thermal: rcar_thermal: avoid NULL dereference in absence of IRQ resources
273234f22e95 MIPS: generic: fix missing of_node_put()
9449bd8ff770 MIPS: Octeon: add missing of_node_put()
235fd393825b f2fs: fix to do sanity check with reserved blkaddr of inline inode
d44e0ddb577d tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
d229e7ecc0cb tpm_tis_spi: Pass the SPI IRQ down to the driver
4f268d981258 f2fs: fix to skip GC if type in SSA and SIT is inconsistent
2cf9708981e7 pktcdvd: Fix possible Spectre-v1 for pkt_devs
bf5cde3c685b f2fs: try grabbing node page lock aggressively in sync scenario
b493d05c0402 net: mvneta: fix mtu change on port without link
d35bf0a213ec pinctrl/amd: only handle irq if it is pending and unmasked
d288d8163c97 gpio: ml-ioh: Fix buffer underwrite on probe error path
9b9ceea29ad2 gpio: pxa: disable pinctrl calls for PXA3xx
6871146498a7 pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
9d8c6300d158 regulator: tps65217: Fix NULL pointer dereference on probe
0d268eaecd3d x86/mm: Remove in_nmi() warning from vmalloc_fault()
73941b28bcdd Bluetooth: hidp: Fix handling of strncpy for hid->name information
dc00dc4ccf8b powerpc/mm: Don't report PUDs as memory leaks when using kmemleak
81a4ff2429e7 PCI: mobiveil: Fix struct mobiveil_pcie.pcie_reg_base address type
94ee251c1ed4 PCI: mobiveil: Add missing ../pci.h include
1f1e9c39a6a7 media: em28xx: explicitly disable TS packet filter
ddd0ae7f02d4 ath10k: disable bundle mgmt tx completion event support
0bf7bf9931ad tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
83d9430bd43b scsi: 3ware: fix return 0 on the error path of probe
0a964871ccea nfs: Referrals not inheriting proto setting from parent
0c8b7991f40d ata: libahci: Correct setting of DEVSLP register
d12d3336fe95 ata: libahci: Allow reconfigure of DEVSLP register
b0f09f787d38 MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
2916355cbc9c scsi: tcmu: do not set max_blocks if data_bitmap has been setup
15ce90b8346f mtd: rawnand: make subop helpers return unsigned values
e5d9ae0077a5 rpmsg: core: add support to power domains for devices
d397e7c9d663 wlcore: Set rx_status boottime_ns field on rx
b19c6e698558 ath10k: prevent active scans on potential unusable channels
23aa633d564b ath9k_hw: fix channel maximum power level test
ce5127257d99 ath9k: report tx status on EOSP
1e83b3b9c60e perf build: Fix installation directory for eBPF
e01f7c77ce21 macintosh/via-pmu: Add missing mmio accessors
14335f6beb3f powerpc/pseries: fix EEH recovery of some IOV devices
d8551bc50c57 perf evlist: Fix error out while applying initial delay and LBR
96e8b14b1f42 perf c2c report: Fix crash for empty browser
3ce0566333dd NFSv4.0 fix client reference leak in callback
aa405740d359 device-dax: avoid hang on error before devm_memremap_pages()
f2d46f40bb92 perf tools: Allow overriding MAX_NR_CPUS at compile time
528000132554 ASoC: soc-pcm: Use delay set in component pointer function
9590fe082ac4 f2fs: fix to detect looped node chain correctly
7d2914dac206 f2fs: fix defined but not used build warnings
86750bef4029 f2fs: issue discard align to section in LFS mode
14580e8d9655 f2fs: Keep alloc_valid_block_count in sync
2ab744266b20 f2fs: do not set free of current section
9a83044805f9 f2fs: fix to active page in lru list for read path
b70fdc0ffc14 IB/IPoIB: Set ah valid flag in multicast send flow
17732e7759e8 iwlwifi: pcie: don't access periphery registers when not available
a1354f0d718a uio: fix possible circular locking dependency
40dc1eb129a5 tty: rocket: Fix possible buffer overwrite on register_PCI
e951163fb87c Drivers: hv: vmbus: Cleanup synic memory free path
15e5a96b1e1a firmware: vpd: Fix section enabled flag on vpd_section_destroy
386b28c2de45 uio: potential double frees if __uio_register_device() fails
baec9ce83ad5 misc: ti-st: Fix memory leak in the error path of probe()
7fef1a4f376a gpu: ipu-v3: default to id 0 on missing OF alias
0bbd7344b42a media: camss: csid: Configure data type and decode format properly
b3f70869623d timers: Clear timer_base::must_forward_clk with timer_base::lock held
5a149d67afa9 md/raid5: fix data corruption of replacements after originals dropped
b54ac5fd6d6a scsi: target: fix __transport_register_session locking
9db9eb8c4e30 scsi: lpfc: Fix driver crash when re-registering NVME rports.
abe0bde4dd8c blk-mq: fix updating tags depth
a73a10b78563 clk: scmi: Fix the rounding of clock rate
846f4edf32b6 scsi: qla2xxx: Silent erroneous message
8e2b7c2c14f5 scsi: qla2xxx: Fix session state stuck in Get Port DB
549f85194379 scsi: qla2xxx: Fix unintended Logout
8246055b5c6b net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
e78e5a975500 media: dw2102: Fix memleak on sequence of probes
e88a48b70c31 media: davinci: vpif_display: Mix memory leak on probe error path
c3b51c11c836 selftests/bpf: fix a typo in map in map test
c9feebab869c powerpc/4xx: Fix error return path in ppc4xx_msi_probe()
35fa5df6c79a powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage
7e3d17181c13 gpio: tegra: Move driver registration to subsys_init level
9a5cbf5c84a1 pinctrl: berlin: fix 'pctrl->functions' allocation in berlin_pinctrl_build_state
074f319a5c13 Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
516771283149 i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
e6ab983acd1b ethtool: Remove trailing semicolon for static inline
0906eb972eea ALSA: hda/realtek - Add mute LED quirk for HP Spectre x360
c6fe80156828 misc: mic: SCIF Fix scif_get_new_port() error handling
40b9d96cea9f tc-testing: remove duplicate spaces in connmark match patterns
86bebb604160 tc-testing: flush gact actions on test teardown
e114758826f5 ARC: [plat-axs*]: Enable SWAP
f688bf1511c9 switchtec: Fix Spectre v1 vulnerability
5b7497c02dac x86/apic/vector: Make error return value negative
0d07d02abd58 x86/process: Don't mix user/kernel regs in 64bit __show_regs()
c6f8e398c10e x86/microcode: Update the new microcode revision unconditionally
e0a8f85b0aee x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
875872547357 cpu/hotplug: Prevent state corruption on error rollback
6b7b020bef06 cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
a4db12abb871 ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
ce987db2b52f memory: ti-aemif: fix a potential NULL-pointer dereference
8bf0dc8d0a67 ACPI / LPSS: Force LPSS quirks on boot
e8cc3b38a0b6 ARC: [plat-axs*/plat-hsdk]: Allow U-Boot to pass MAC-address to the kernel
18d40b7836d4 KVM: x86: Do not re-{try,execute} after failed emulation in L2
4ff64069721a KVM: x86: Default to not allowing emulation retry in kvm_mmu_page_fault
3e88f92cd118 KVM: x86: Merge EMULTYPE_RETRY and EMULTYPE_ALLOW_REEXECUTE
172c718af8b2 KVM: x86: Invert emulation re-execute behavior to make it opt-in
9a89243cb1c7 KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr
a7e360b1086b KVM: x86: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation
625a6bcb11a2 KVM: s390: vsie: copy wrapping keys to right place
33cd6d44e8c6 KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix()
9e7e9f25ef3e KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW
a2359d3d80fe arm64: KVM: Only force FPEXC32_EL2.EN if trapping FPSIMD
e9773e97f502 Btrfs: fix data corruption when deduplicating between different files
29d76c9853a2 btrfs: fix qgroup_free wrong num_bytes in btrfs_subvolume_reserve_metadata
15c4b1902f0e cifs: connect to servername instead of IP for IPC$ share
dc0416dcd3ab smb3: check for and properly advertise directory lease support
d88717b6ce78 SMB3: Backup intent flag missing for directory opens with backupuid mounts
521983976c38 MIPS: VDSO: Match data page cache colouring when D$ aliases
67b987648258 android: binder: fix the race mmap and alloc_new_buf_locked
c583d8956d83 block: bfq: swap puts in bfqg_and_blkg_put
d927dea6392d block: don't warn when doing fsync on read-only devices
56935391aba9 nbd: don't allow invalid blocksize settings
e847a545edae scsi: lpfc: Correct MDS diag and nvmet configuration
faeb7c279e48 mac80211: don't update the PM state of a peer upon a multicast frame
15a6f8974a8c memory_hotplug: fix kernel_panic on offline page processing
f1549c67f23f mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported.
c0cbb9e5d448 HID: input: fix leaking custom input node name
81bb35902b63 HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen
7bc3f187fd30 HID: core: fix grouping by application
e114a409eef6 HID: multitouch: fix Elan panels with 2 input modes declaration
b94023f1ab51 i2c: i801: fix DNV's SMBCTRL register offset
824ca3763057 i2c: xiic: Make the start and the byte count write atomic

CVE References

tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Cosmic):
status: New → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (60.2 KiB)

This bug was fixed in the package linux - 4.18.0-9.10

---------------
linux (4.18.0-9.10) cosmic; urgency=medium

  * linux: 4.18.0-9.10 -proposed tracker (LP: #1796346)

  * Cosmic update: v4.18.12 upstream stable release (LP: #1796139)
    - crypto: skcipher - Fix -Wstringop-truncation warnings
    - iio: adc: ina2xx: avoid kthread_stop() with stale task_struct
    - tsl2550: fix lux1_input error in low light
    - misc: ibmvmc: Use GFP_ATOMIC under spin lock
    - vmci: type promotion bug in qp_host_get_user_memory()
    - siox: don't create a thread without starting it
    - x86/numa_emulation: Fix emulated-to-physical node mapping
    - staging: rts5208: fix missing error check on call to rtsx_write_register
    - power: supply: axp288_charger: Fix initial constant_charge_current value
    - misc: sram: enable clock before registering regions
    - serial: sh-sci: Stop RX FIFO timer during port shutdown
    - uwb: hwa-rc: fix memory leak at probe
    - power: vexpress: fix corruption in notifier registration
    - iommu/amd: make sure TLB to be flushed before IOVA freed
    - Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
    - USB: serial: kobil_sct: fix modem-status error handling
    - 6lowpan: iphc: reset mac_header after decompress to fix panic
    - iommu/msm: Don't call iommu_device_{,un}link from atomic context
    - s390/mm: correct allocate_pgste proc_handler callback
    - power: remove possible deadlock when unregistering power_supply
    - drm/amd/display/dc/dce: Fix multiple potential integer overflows
    - drm/amd/display: fix use of uninitialized memory
    - md-cluster: clear another node's suspend_area after the copy is finished
    - cxgb4: Fix the condition to check if the card is T5
    - RDMA/bnxt_re: Fix a couple off by one bugs
    - RDMA/i40w: Hold read semaphore while looking after VMA
    - RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
    - IB/core: type promotion bug in rdma_rw_init_one_mr()
    - media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
    - IB/mlx4: Test port number before querying type.
    - powerpc/kdump: Handle crashkernel memory reservation failure
    - media: fsl-viu: fix error handling in viu_of_probe()
    - vhost_net: Avoid tx vring kicks during busyloop
    - media: staging/imx: fill vb2_v4l2_buffer field entry
    - IB/mlx5: Fix GRE flow specification
    - include/rdma/opa_addr.h: Fix an endianness issue
    - x86/tsc: Add missing header to tsc_msr.c
    - ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
    - x86/entry/64: Add two more instruction suffixes
    - ARM: dts: ls1021a: Add missing cooling device properties for CPUs
    - scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
      buffer size
    - thermal: i.MX: Allow thermal probe to fail gracefully in case of bad
      calibration.
    - scsi: klist: Make it safe to use klists in atomic context
    - scsi: ibmvscsi: Improve strings handling
    - scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
    - usb: wusbcore: security: cast sizeof to int for comparison
    - ath10k: sdio: use same endpoint id for all packets...

Changed in linux (Ubuntu Cosmic):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers