Xenial update: 4.4.158 upstream stable release

Bug #1798587 reported by Stefan Bader on 2018-10-18
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Stefan Bader

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       4.4.158 upstream stable release
       from git://git.kernel.org/

The following patches will be applied:
* iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
* ALSA: msnd: Fix the default sample sizes
* ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
* xfrm: fix 'passing zero to ERR_PTR()' warning
* gfs2: Special-case rindex for gfs2_grow
* clk: imx6ul: fix missing of_node_put()
* kbuild: add .DELETE_ON_ERROR special target
* dmaengine: pl330: fix irq race with terminate_all
* MIPS: ath79: fix system restart
* media: videobuf2-core: check for q->error in vb2_core_qbuf()
* mtd/maps: fix solutionengine.c printk format warnings
* fbdev: omapfb: off by one in omapfb_register_client()
* video: goldfishfb: fix memory leak on driver remove
* fbdev/via: fix defined but not used warning
* perf powerpc: Fix callchain ip filtering when return address is in a register
* fbdev: Distinguish between interlaced and progressive modes
* ARM: exynos: Clear global variable on init error path
* perf powerpc: Fix callchain ip filtering
* powerpc/powernv: opal_put_chars partial write fix
* MIPS: jz4740: Bump zload address
* mac80211: restrict delayed tailroom needed decrement
* xen-netfront: fix queue name setting
* arm64: dts: qcom: db410c: Fix Bluetooth LED trigger
* s390/qeth: fix race in used-buffer accounting
* s390/qeth: reset layer2 attribute on layer switch
* platform/x86: toshiba_acpi: Fix defined but not used build warnings
* crypto: sharah - Unregister correct algorithms for SAHARA 3
* xen-netfront: fix warn message as irq device name has '/'
* RDMA/cma: Protect cma dev list with lock
* pstore: Fix incorrect persistent ram buffer mapping
* xen/netfront: fix waiting for xenbus state change
* IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
* Tools: hv: Fix a bug in the key delete code
* misc: hmc6352: fix potential Spectre v1
* usb: Don't die twice if PCI xhci host is not responding in resume
* USB: Add quirk to support DJI CineSSD
* usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()
* usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
* USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller
* USB: net2280: Fix erroneous synchronization change
* USB: serial: io_ti: fix array underflow in completion handler
* usb: misc: uss720: Fix two sleep-in-atomic-context bugs
* USB: yurex: Fix buffer over-read in yurex_write()
* usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()
* cifs: prevent integer overflow in nxt_dir_entry()
* CIFS: fix wrapping bugs in num_entries()
* binfmt_elf: Respect error return from `regset->active'
* audit: fix use-after-free in audit_add_watch
* mtdchar: fix overflows in adjustment of `count`
* MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
* ARM: hisi: handle of_iomap and fix missing of_node_put
* ARM: hisi: fix error handling and missing of_node_put
* ARM: hisi: check of_iomap and fix missing of_node_put
* drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
* parport: sunbpp: fix error return code
* coresight: Handle errors in finding input/output ports
* coresight: tpiu: Fix disabling timeouts
* gpiolib: Mark gpio_suffixes array with __maybe_unused
* drm/amdkfd: Fix error codes in kfd_get_process
* rtc: bq4802: add error handling for devm_ioremap
* ALSA: pcm: Fix snd_interval_refine first/last with open min/max
* selftest: timers: Tweak raw_skew to SKIP when ADJ_OFFSET/other clock adjustments
  are in progress
* drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
* pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant
* USB: serial: ti_usb_3410_5052: fix array underflow in completion handler
* mei: bus: type promotion bug in mei_nfc_if_version()
* drivers: net: cpsw: fix segfault in case of bad phy-handle
* MIPS: VDSO: Match data page cache colouring when D$ aliases
* Linux 4.4.158

CVE References

Stefan Bader (smb) wrote :

All patches applied without changes, no config change observed.

tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Xenial):
assignee: nobody → Stefan Bader (smb)
importance: Undecided → Medium
status: New → In Progress
Changed in linux (Ubuntu):
status: New → Invalid
Stefan Bader (smb) on 2018-10-18
description: updated
Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (21.0 KiB)

This bug was fixed in the package linux - 4.4.0-139.165

linux (4.4.0-139.165) xenial; urgency=medium

  * linux: 4.4.0-139.165 -proposed tracker (LP: #1799401)

  * Kernel panic after the ubuntu_nbd_smoke_test on Xenial kernel (LP: #1793464)
    - nbd: Remove signal usage
    - nbd: Timeouts are not user requested disconnects
    - nbd: Cleanup reset of nbd and bdev after a disconnect
    - nbd: don't shutdown sock with irq's disabled
    - nbd: fix race in ioctl

  * fscache: bad refcounting in fscache_op_complete leads to OOPS (LP: #1797314)
    - SAUCE: fscache: Fix race in decrementing refcount of op->npages

  * xenial: virtio-scsi: CPU soft lockup due to loop in
    virtscsi_target_destroy() (LP: #1798110)
    - SAUCE: (no-up) virtio-scsi: Decrement reqs counter before SCSI command

  * Error reported when creating ZFS pool with "-t" option, despite successful
    pool creation (LP: #1769937)
    - SAUCE: (noup) Update zfs to

  * Xenial update: 4.4.160 upstream stable release (LP: #1798770)
    - crypto: skcipher - Fix -Wstringop-truncation warnings
    - tsl2550: fix lux1_input error in low light
    - vmci: type promotion bug in qp_host_get_user_memory()
    - x86/numa_emulation: Fix emulated-to-physical node mapping
    - staging: rts5208: fix missing error check on call to rtsx_write_register
    - uwb: hwa-rc: fix memory leak at probe
    - power: vexpress: fix corruption in notifier registration
    - Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
    - USB: serial: kobil_sct: fix modem-status error handling
    - 6lowpan: iphc: reset mac_header after decompress to fix panic
    - md-cluster: clear another node's suspend_area after the copy is finished
    - media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
    - powerpc/kdump: Handle crashkernel memory reservation failure
    - media: fsl-viu: fix error handling in viu_of_probe()
    - x86/tsc: Add missing header to tsc_msr.c
    - x86/entry/64: Add two more instruction suffixes
    - scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
      buffer size
    - scsi: klist: Make it safe to use klists in atomic context
    - scsi: ibmvscsi: Improve strings handling
    - usb: wusbcore: security: cast sizeof to int for comparison
    - powerpc/powernv/ioda2: Reduce upper limit for DMA window size
    - alarmtimer: Prevent overflow for relative nanosleep
    - s390/extmem: fix gcc 8 stringop-overflow warning
    - ALSA: snd-aoa: add of_node_put() in error path
    - media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
    - media: soc_camera: ov772x: correct setting of banding filter
    - media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
    - staging: android: ashmem: Fix mmap size validation
    - drivers/tty: add error handling for pcmcia_loop_config
    - media: tm6000: add error handling for dvb_register_adapter
    - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
    - ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
    - rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
    - wlcore: Add missing PM call fo...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers