Xenial update: 4.4.158 upstream stable release

Bug #1798587 reported by Stefan Bader on 2018-10-18
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Xenial
Medium
Stefan Bader

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       4.4.158 upstream stable release
       from git://git.kernel.org/

The following patches will be applied:
* iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
* ALSA: msnd: Fix the default sample sizes
* ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
* xfrm: fix 'passing zero to ERR_PTR()' warning
* gfs2: Special-case rindex for gfs2_grow
* clk: imx6ul: fix missing of_node_put()
* kbuild: add .DELETE_ON_ERROR special target
* dmaengine: pl330: fix irq race with terminate_all
* MIPS: ath79: fix system restart
* media: videobuf2-core: check for q->error in vb2_core_qbuf()
* mtd/maps: fix solutionengine.c printk format warnings
* fbdev: omapfb: off by one in omapfb_register_client()
* video: goldfishfb: fix memory leak on driver remove
* fbdev/via: fix defined but not used warning
* perf powerpc: Fix callchain ip filtering when return address is in a register
* fbdev: Distinguish between interlaced and progressive modes
* ARM: exynos: Clear global variable on init error path
* perf powerpc: Fix callchain ip filtering
* powerpc/powernv: opal_put_chars partial write fix
* MIPS: jz4740: Bump zload address
* mac80211: restrict delayed tailroom needed decrement
* xen-netfront: fix queue name setting
* arm64: dts: qcom: db410c: Fix Bluetooth LED trigger
* s390/qeth: fix race in used-buffer accounting
* s390/qeth: reset layer2 attribute on layer switch
* platform/x86: toshiba_acpi: Fix defined but not used build warnings
* crypto: sharah - Unregister correct algorithms for SAHARA 3
* xen-netfront: fix warn message as irq device name has '/'
* RDMA/cma: Protect cma dev list with lock
* pstore: Fix incorrect persistent ram buffer mapping
* xen/netfront: fix waiting for xenbus state change
* IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
* Tools: hv: Fix a bug in the key delete code
* misc: hmc6352: fix potential Spectre v1
* usb: Don't die twice if PCI xhci host is not responding in resume
* USB: Add quirk to support DJI CineSSD
* usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()
* usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
* USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller
* USB: net2280: Fix erroneous synchronization change
* USB: serial: io_ti: fix array underflow in completion handler
* usb: misc: uss720: Fix two sleep-in-atomic-context bugs
* USB: yurex: Fix buffer over-read in yurex_write()
* usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()
* cifs: prevent integer overflow in nxt_dir_entry()
* CIFS: fix wrapping bugs in num_entries()
* binfmt_elf: Respect error return from `regset->active'
* audit: fix use-after-free in audit_add_watch
* mtdchar: fix overflows in adjustment of `count`
* MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
* ARM: hisi: handle of_iomap and fix missing of_node_put
* ARM: hisi: fix error handling and missing of_node_put
* ARM: hisi: check of_iomap and fix missing of_node_put
* drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
* parport: sunbpp: fix error return code
* coresight: Handle errors in finding input/output ports
* coresight: tpiu: Fix disabling timeouts
* gpiolib: Mark gpio_suffixes array with __maybe_unused
* drm/amdkfd: Fix error codes in kfd_get_process
* rtc: bq4802: add error handling for devm_ioremap
* ALSA: pcm: Fix snd_interval_refine first/last with open min/max
* selftest: timers: Tweak raw_skew to SKIP when ADJ_OFFSET/other clock adjustments
  are in progress
* drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
* pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant
* USB: serial: ti_usb_3410_5052: fix array underflow in completion handler
* mei: bus: type promotion bug in mei_nfc_if_version()
* drivers: net: cpsw: fix segfault in case of bad phy-handle
* MIPS: VDSO: Match data page cache colouring when D$ aliases
* Linux 4.4.158

CVE References

Stefan Bader (smb) wrote :

All patches applied without changes, no config change observed.

tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Xenial):
assignee: nobody → Stefan Bader (smb)
importance: Undecided → Medium
status: New → In Progress
Changed in linux (Ubuntu):
status: New → Invalid
Stefan Bader (smb) on 2018-10-18
description: updated
Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (21.0 KiB)

This bug was fixed in the package linux - 4.4.0-139.165

---------------
linux (4.4.0-139.165) xenial; urgency=medium

  * linux: 4.4.0-139.165 -proposed tracker (LP: #1799401)

  * Kernel panic after the ubuntu_nbd_smoke_test on Xenial kernel (LP: #1793464)
    - nbd: Remove signal usage
    - nbd: Timeouts are not user requested disconnects
    - nbd: Cleanup reset of nbd and bdev after a disconnect
    - nbd: don't shutdown sock with irq's disabled
    - nbd: fix race in ioctl

  * fscache: bad refcounting in fscache_op_complete leads to OOPS (LP: #1797314)
    - SAUCE: fscache: Fix race in decrementing refcount of op->npages

  * xenial: virtio-scsi: CPU soft lockup due to loop in
    virtscsi_target_destroy() (LP: #1798110)
    - SAUCE: (no-up) virtio-scsi: Decrement reqs counter before SCSI command
      requeue

  * Error reported when creating ZFS pool with "-t" option, despite successful
    pool creation (LP: #1769937)
    - SAUCE: (noup) Update zfs to 0.6.5.6-0ubuntu26

  * Xenial update: 4.4.160 upstream stable release (LP: #1798770)
    - crypto: skcipher - Fix -Wstringop-truncation warnings
    - tsl2550: fix lux1_input error in low light
    - vmci: type promotion bug in qp_host_get_user_memory()
    - x86/numa_emulation: Fix emulated-to-physical node mapping
    - staging: rts5208: fix missing error check on call to rtsx_write_register
    - uwb: hwa-rc: fix memory leak at probe
    - power: vexpress: fix corruption in notifier registration
    - Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
    - USB: serial: kobil_sct: fix modem-status error handling
    - 6lowpan: iphc: reset mac_header after decompress to fix panic
    - md-cluster: clear another node's suspend_area after the copy is finished
    - media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
    - powerpc/kdump: Handle crashkernel memory reservation failure
    - media: fsl-viu: fix error handling in viu_of_probe()
    - x86/tsc: Add missing header to tsc_msr.c
    - x86/entry/64: Add two more instruction suffixes
    - scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
      buffer size
    - scsi: klist: Make it safe to use klists in atomic context
    - scsi: ibmvscsi: Improve strings handling
    - usb: wusbcore: security: cast sizeof to int for comparison
    - powerpc/powernv/ioda2: Reduce upper limit for DMA window size
    - alarmtimer: Prevent overflow for relative nanosleep
    - s390/extmem: fix gcc 8 stringop-overflow warning
    - ALSA: snd-aoa: add of_node_put() in error path
    - media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
    - media: soc_camera: ov772x: correct setting of banding filter
    - media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
    - staging: android: ashmem: Fix mmap size validation
    - drivers/tty: add error handling for pcmcia_loop_config
    - media: tm6000: add error handling for dvb_register_adapter
    - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
    - ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
    - rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
    - wlcore: Add missing PM call fo...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers