Cosmic update: 4.18.19 upstream stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Cosmic |
Fix Released
|
Undecided
|
Kamal Mostafa |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
4.18.19 upstream stable release
from git://git.
mtd: rawnand: marvell: fix the IRQ handler complete() condition
mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB
mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash
mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus
spi: spi-mem: Adjust op len based on message/transfer size limitations
spi: bcm-qspi: switch back to reading flash using smaller chunks
spi: bcm-qspi: fix calculation of address length
bcache: trace missed reading by cache_missed
bcache: correct dirty data statistics
bcache: fix miss key refill->end in writeback
hwmon: (pmbus) Fix page count auto-detection.
jffs2: free jffs2_sb_info through jffs2_kill_sb()
block: setup bounce bio_sets properly
block: don't deal with discard limit in blkdev_
block: make sure discard bio is aligned with logical block size
block: make sure writesame bio is aligned with logical block size
cpufreq: conservative: Take limits changes into account properly
dma-mapping: fix panic caused by passing empty cma command line argument
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended opcodes
kprobes/x86: Use preempt_enable() in optimized_
mailbox: PCC: handle parse error
acpi, nfit: Fix Address Range Scrub completion tracking
parisc: Fix address in HPMC IVA
parisc: Fix map_pages() to not overwrite existing pte entries
parisc: Fix exported address of os_hpmc handler
ALSA: hda - Add quirk for ASUS G751 laptop
ALSA: hda - Fix headphone pin config for ASUS G751
ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
ALSA: hda: Add 2 more models to the power_save blacklist
ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation
x86/xen: Fix boot loader version reported for PVH guests
x86/corruption-
x86/mm/pat: Disable preemption around __flush_tlb_all()
ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen
drm: fix use of freed memory in drm_mode_setcrtc
bpf: do not blindly change rlimit in reuseport net selftest
nvme: remove ns sibling before clearing path
Revert "perf tools: Fix PMU term format max value calculation"
selftests: usbip: add wait after attach and before checking port status
xsk: do not call synchronize_net() under RCU read lock
xfrm: policy: use hlist rcu variants on insert
perf vendor events intel: Fix wrong filter_band* values for uncore events
r8169: Enable MSI-X on RTL8106e
nfp: flower: fix pedit set actions for multiple partial masks
nfp: flower: use offsets provided by pedit instead of index for ipv6
sched/fair: Fix the min_vruntime update logic in dequeue_entity()
perf evsel: Store ids for events with their own cpus perf_event_
perf tools: Fix use of alternatives to find JDIR
perf cpu_map: Align cpu map synthesized events properly.
perf report: Don't crash on invalid inline debug information
x86/fpu: Remove second definition of fpu in __fpu__
net: qla3xxx: Remove overflowing shift statement
r8169: re-enable MSI-X on RTL8168g
drm: Get ref on CRTC commit object when waiting for flip_done
selftests: ftrace: Add synthetic event syntax testcase
i2c: rcar: cleanup DMA for all kinds of failure
net: socionext: Reset tx queue in ndo_stop
locking/lockdep: Fix debug_locks off performance problem
netfilter: xt_nat: fix DNAT target for shifted portmap ranges
ataflop: fix error handling during setup
swim: fix cleanup on setup error
arm64: cpufeature: ctr: Fix cpu capability check for late CPUs
nfp: devlink port split support for 1x100G CXP NIC
tun: Consistently configure generic netdev params via rtnetlink
s390/sthyi: Fix machine name validity indication
hwmon: (pwm-fan) Set fan speed to 0 on suspend
lightnvm: pblk: fix race on sysfs line state
lightnvm: pblk: fix two sleep-in-
lightnvm: pblk: fix race condition on metadata I/O
spi: spi-ep93xx: Use dma_data_direction for ep93xx_
perf tools: Free temporary 'sys' string in read_event_files()
perf tools: Cleanup trace-event-info 'tdata' leak
perf strbuf: Match va_{add,copy} with va_end
cpupower: Fix coredump on VMWare
bcache: Populate writeback_
mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
sdhci: acpi: add free_slot callback
mtd: rawnand: denali: set SPARE_AREA_
iwlwifi: pcie: avoid empty free RB queue
iwlwifi: mvm: clear HW_RESTART_
iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC
ACPI/PPTT: Handle architecturally unknown cache types
ACPI / PM: LPIT: Register sysfs attributes based on FADT
ACPI / processor: Fix the return value of acpi_processor_
cpufreq: dt: Try freeing static OPPs only if we have added them
x86/intel_rdt: Show missing resctrl mount options
mtd: rawnand: atmel: Fix potential NULL pointer dereference
signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_
ice: fix changing of ring descriptor size (ethtool -G)
ice: update fw version check logic
net: hns3: Fix for packet buffer setting bug
Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth
x86: boot: Fix EFI stub alignment
net: hns3: Add nic state check before calling netif_tx_wake_queue
net: hns3: Fix ets validate issue
pinctrl: sunxi: fix 'pctrl->functions' allocation in sunxi_pinctrl_
pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
brcmfmac: fix for proper support of 160MHz bandwidth
net: hns3: Check hdev state when getting link status
net: hns3: Set STATE_DOWN bit of hdev state when stopping net
net: phy: phylink: ensure the carrier is off when starting phylink
block, bfq: correctly charge and reset entity service in all cases
arm64: entry: Allow handling of undefined instructions from EL1
kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
spi: gpio: No MISO does not imply no RX
ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
pinctrl: qcom: spmi-mpp: Fix drive strength setting
bpf/verifier: fix verifier instability
failover: Add missing check to validate 'slave_dev' in net_failover_
perf tests: Fix record+
pinctrl: spmi-mpp: Fix pmic_mpp_
pinctrl: ssbi-gpio: Fix pm8xxx_
net: hns3: Preserve vlan 0 in hardware table
net: hns3: Fix ping exited problem when doing lp selftest
net: hns3: Fix for vf vlan delete failed problem
net: dsa: mv88e6xxx: Fix writing to a PHY page.
rsi: fix memory alignment issue in ARM32 platforms
iwlwifi: mvm: fix BAR seq ctrl reporting
gpio: brcmstb: allow 0 width GPIO banks
ixgbe: disallow IPsec Tx offload when in SR-IOV mode
ixgbevf: VF2VF TCP RSS
ath10k: schedule hardware restart if WMI command times out
libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
thermal: rcar_thermal: Prevent doing work after unbind
thermal: da9062/61: Prevent hardware access during system suspend
cgroup, netclassid: add a preemption point to write_classid
net: stmmac: dwmac-sun8i: fix OF child-node lookup
f2fs: fix to account IO correctly for cgroup writeback
MD: Memory leak when flush bio size is zero
md: fix memleak for mempool
scsi: esp_scsi: Track residual for PIO transfers
scsi: ufs: Schedule clk gating work on correct queue
UAPI: ndctl: Fix g++-unsupported initialisation in headers
KVM: nVMX: Clear reserved bits of #DB exit qualification
scsi: megaraid_sas: fix a missing-check bug
RDMA/core: Do not expose unsupported counters
IB/ipoib: Clear IPCB before icmp_send
RDMA/bnxt_re: Avoid accessing nq->bar_reg_iomem in failure case
RDMA/bnxt_re: Fix recursive lock warning in debug kernel
usb: host: ohci-at91: fix request of irq for optional gpio
PCI: mediatek: Fix mtk_pcie_
PCI: cadence: Use AXI region 0 to signal interrupts from EP
usb: typec: tcpm: Report back negotiated PPS voltage and current
tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/
f2fs: clear PageError on the read path
Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
VMCI: Resource wildcard match fixed
PCI / ACPI: Enable wake automatically for power managed bridges
xprtrdma: Reset credit grant properly after a disconnect
irqchip/pdc: Setup all edge interrupts as rising edge at GIC
usb: dwc2: fix a race with external vbus supply
usb: gadget: udc: atmel: handle at91sam9rl PMC
ext4: fix argument checking in EXT4_IOC_MOVE_EXT
MD: fix invalid stored role for a disk
nvmem: check the return value of nvmem_add_cells()
xhci: Avoid USB autosuspend when resuming USB2 ports.
f2fs: fix to recover inode's crtime during POR
f2fs: fix to recover inode's i_flags during POR
PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
coresight: etb10: Fix handling of perf mode
PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode
crypto: caam - fix implicit casts in endianness helpers
usb: chipidea: Prevent unbalanced IRQ disable
Smack: ptrace capability use fixes
driver/dma/ioat: Call del_timer_sync() without holding prep_lock
firmware: coreboot: Unmap ioregion after device population
IB/mlx5: Allow transition of DCI QP to reset
uio: ensure class is registered before devices
scsi: lpfc: Correct soft lockup when running mds diagnostics
scsi: lpfc: Correct race with abort on completion path
f2fs: avoid sleeping under spin_lock
f2fs: report error if quota off error during umount
signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init
mfd: menelaus: Fix possible race condition and leak
dmaengine: dma-jz4780: Return error if not probed from DT
IB/rxe: fix for duplicate request processing and ack psns
ALSA: hda: Check the non-cached stream buffers more explicitly
cpupower: Fix AMD Family 0x17 msr_pstate size
Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()"
f2fs: fix to recover cold bit of inode block during POR
f2fs: fix to account IO correctly
OPP: Free OPP table properly on performance state irregularities
arm: dts: exynos: Add missing cooling device properties for CPUs
ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
xen-swiotlb: use actually allocated size on check physical continuous
tpm: Restore functionality to xen vtpm driver.
xen/blkfront: avoid NULL blkfront_info dereference on device removal
xen/balloon: Support xend-based toolstack
xen: fix race in xen_qlock_wait()
xen: make xen_qlock_wait() nestable
xen/pvh: increase early stack size
xen/pvh: don't try to unplug emulated devices
libertas: don't set URB_ZERO_PACKET on IN USB transfer
usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage
usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"
mt76: mt76x2: fix multi-interface beacon configuration
iwlwifi: mvm: check return value of rs_rate_
net/ipv4: defensive cipso option parsing
dmaengine: ppc4xx: fix off-by-one build failure
libnvdimm: Hold reference on parent while scheduling async init
libnvdimm, region: Fail badblocks listing for inactive regions
libnvdimm, pmem: Fix badblocks population for 'raw' namespaces
ASoC: intel: skylake: Add missing break in skl_tplg_
ASoC: sta32x: set ->component pointer in private struct
IB/mlx5: Fix MR cache initialization
IB/rxe: Revise the ib_wr_opcode enum
jbd2: fix use after free in jbd2_log_
gfs2_meta: ->mount() can get NULL dev_name
ext4: fix EXT4_IOC_SWAP_BOOT
ext4: initialize retries variable in ext4_da_
ext4: fix setattr project check in fssetxattr ioctl
ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
ext4: fix use-after-free race in ext4_remount()'s error path
selinux: fix mounting of cgroup2 under older policies
HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452
HID: hiddev: fix potential Spectre v1
EDAC, amd64: Add Family 17h, models 10h-2fh support
EDAC, {i7core,
EDAC, skx_edac: Fix logical channel intermediate decoding
ARM: dts: dra7: Fix up unaligned access setting for PCIe EP
PCI/ASPM: Fix link_state teardown on device removal
PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk
PCI: vmd: White list for fast interrupt handlers
signal/GenWQE: Fix sending of SIGKILL
signal: Guard against negative signal numbers in copy_siginfo_
crypto: lrw - Fix out-of bounds access on counter overflow
crypto: tcrypt - fix ghash-generic speed test
crypto: aesni - don't use GFP_ATOMIC allocation if the request doesn't cross a page in gcm
crypto: morus/generic - fix for big endian systems
crypto: aegis/generic - fix for big endian systems
crypto: speck - remove Speck
mm: /proc/pid/
ima: fix showing large 'violations' or 'runtime_
hugetlbfs: dirty pages as they are added to pagecache
mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
mm/hmm: fix race between hmm_mirror_
KVM: arm/arm64: Ensure only THP is candidate for adjustment
KVM: arm64: Fix caching of host MDCR_EL2 value
kbuild: fix kernel/bounds.c 'W=1' warning
iio: ad5064: Fix regulator handling
iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_
iio: adc: at91: fix acking DRDY irq on simple conversions
iio: adc: at91: fix wrong channel number in triggered buffer mode
w1: omap-hdq: fix missing bus unregister at removal
smb3: allow stats which track session and share reconnects to be reset
smb3: do not attempt cifs operation in smb3 query info error path
smb3: on kerberos mount if server doesn't specify auth type use krb5
printk: Fix panic caused by passing log_buf_len to command line
genirq: Fix race on spurious interrupt detection
NFC: nfcmrvl_uart: fix OF child-node lookup
NFSv4.1: Fix the r/wsize checking
nfs: Fix a missed page unlock after pg_doio()
nfsd: correctly decrement odstate refcount in error path
nfsd: Fix an Oops in free_session()
lockd: fix access beyond unterminated strings in prints
dm ioctl: harden copy_params()'s copy_from_user() from malicious users
dm zoned: fix metadata block ref counting
dm zoned: fix various dmz_get_mblock() issues
media: ov7670: make "xclk" clock optional
fsnotify: Fix busy inodes during unmount
powerpc/msi: Fix compile error on mpc83xx
powerpc/tm: Fix HFSCR bit for no suspend case
powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
MIPS: memset: Fix CPU_DADDI_
MIPS: OCTEON: fix out of bounds array access on CN68XX
rtc: ds1307: fix ds1339 wakealarm support
rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_
rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI
power: supply: twl4030-charger: fix OF sibling-node lookup
ocxl: Fix access to the AFU Descriptor Data
iommu/arm-smmu: Ensure that page-table updates are visible before TLBI
TC: Set DMA masks for devices
net: bcmgenet: fix OF child-node lookup
media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
Revert "media: dvbsky: use just one mutex for serializing device R/W ops"
kgdboc: Passing ekgdboc to command line causes panic
media: cec: make cec_get_
media: cec: integrate cec_validate_
xen: fix xen_qlock_wait()
xen: remove size limit of privcmd-buf mapping interface
xen-blkfront: fix kernel panic with negotiate_mq error path
media: cec: add new tx/rx status bits to detect aborts/timeouts
media: cec: fix the Signal Free Time calculation
media: cec: forgot to cancel delayed work
media: em28xx: use a default format if TRY_FMT fails
media: tvp5150: avoid going past array on v4l2_querymenu()
media: em28xx: fix input name for Terratec AV 350
media: em28xx: make v4l2-compliance happier by starting sequence on zero
media: em28xx: fix handler for vidioc_s_input()
media: adv7604: when the EDID is cleared, unconfigure CEC as well
media: adv7842: when the EDID is cleared, unconfigure CEC as well
drm/mediatek: fix OF sibling-node lookup
media: media colorspaces*.rst: rename AdobeRGB to opRGB
media: replace ADOBERGB by OPRGB
media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
arm64: lse: remove -fcall-used-x0 flag
rpmsg: smd: fix memory leak on channel create
Cramfs: fix abad comparison when wrap-arounds occur
ARM: dts: socfpga: Fix SDRAM node address for Arria10
arm64: dts: stratix10: Correct System Manager register size
soc: qcom: rmtfs-mem: Validate that scm is available
soc/tegra: pmc: Fix child-node lookup
selftests/ftrace: Fix synthetic event test to delete event correctly
selftests/powerpc: Fix ptrace tm failure
tracing: Return -ENOENT if there is no target synthetic event
btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
btrfs: Handle owner mismatch gracefully when walking up tree
btrfs: locking: Add extra check in btrfs_init_
btrfs: fix error handling in free_log_tree
btrfs: fix error handling in btrfs_dev_
btrfs: Enhance btrfs_trim_fs function to handle error better
btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
btrfs: iterate all devices during trim, instead of fs_devices:
btrfs: don't attempt to trim devices that don't support it
btrfs: keep trim from interfering with transaction commits
btrfs: wait on caching when putting the bg cache
Btrfs: don't clean dirty pages during buffered writes
btrfs: release metadata before running delayed refs
btrfs: protect space cache inode alloc with GFP_NOFS
btrfs: reset max_extent_size on clear in a bitmap
btrfs: make sure we create all new block groups
Btrfs: fix warning when replaying log after fsync of a tmpfile
Btrfs: fix wrong dentries after fsync of file that got its parent replaced
btrfs: qgroup: Dirty all qgroups before rescan
Btrfs: fix null pointer dereference on compressed write path error
Btrfs: fix assertion on fsync of regular file when using no-holes feature
Btrfs: fix deadlock when writing out free space caches
btrfs: reset max_extent_size properly
btrfs: set max_extent_size properly
btrfs: don't use ctl->free_space for max_extent_size
btrfs: only free reserved extent if we didn't insert it
btrfs: fix insert_reserved error handling
btrfs: don't run delayed_iputs in commit
btrfs: move the dio_sem higher up the callchain
Btrfs: fix use-after-free during inode eviction
Btrfs: fix use-after-free when dumping free space
net: sched: Remove TCA_OPTIONS from policy
bpf: wait for running BPF programs when updating map-in-map
MD: fix invalid stored role for a disk - try2
Linux 4.18.19
CVE References
tags: | added: kernel-stable-tracking-bug |
Changed in linux (Ubuntu Cosmic): | |
status: | New → In Progress |
assignee: | nobody → Kamal Mostafa (kamalmostafa) |
description: | updated |
Changed in linux (Ubuntu): | |
status: | New → Invalid |
Changed in linux (Ubuntu Cosmic): | |
status: | In Progress → Fix Committed |
tags: | added: cscc |
This bug was fixed in the package linux - 4.18.0-14.15
---------------
linux (4.18.0-14.15) cosmic; urgency=medium
* linux: 4.18.0-14.15 -proposed tracker (LP: #1811406)
* CPU hard lockup with rigorous writes to NVMe drive (LP: #1810998)
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait
- blk-wbt: move disable check into get_limit()
- blk-wbt: use wq_has_sleeper() for wq active check
- blk-wbt: fix has-sleeper queueing check
- blk-wbt: abstract out end IO completion handler
- blk-wbt: improve waking of tasks
* To reduce the Realtek USB cardreader power consumption (LP: #1811337) SYNC_RUNTIME_ PM disable( ) in probe function
- mmc: core: Introduce MMC_CAP_
- mmc: rtsx_usb_sdmmc: Don't runtime resume the device while changing led
- mmc: rtsx_usb_sdmmc: Re-work runtime PM support
- mmc: rtsx_usb_sdmmc: Re-work card detection/removal support
- memstick: rtsx_usb_ms: Add missing pm_runtime_
- misc: rtsx_usb: Use USB remote wakeup signaling for card insertion detection
- memstick: Prevent memstick host from getting runtime suspended during card
detection
- memstick: rtsx_usb_ms: Use ms_dev() helper
- memstick: rtsx_usb_ms: Support runtime power management
* Support non-strict iommu mode on arm64 (LP: #1806488) pgtable- arm: Fix race handling in split_blk_unmap() pgtable- arm: Add support for non-strict mode pgtable- arm-v7s: Add support for non-strict mode
- iommu/io-
- iommu/arm-smmu-v3: Implement flush_iotlb_all hook
- iommu/dma: Add support for non-strict mode
- iommu: Add "iommu.strict" command line option
- iommu/io-
- iommu/arm-smmu-v3: Add support for non-strict mode
- iommu/io-
- iommu/arm-smmu: Support non-strict mode
* [Regression] crashkernel fails on HiSilicon D05 (LP: #1806766) reserve_ persistent( ) from atomic context
- efi: honour memory reservations passed via a linux specific config table
- efi/arm: libstub: add a root memreserve config table
- efi: add API to reserve memory persistently across kexec reboot
- irqchip/gic-v3-its: Change initialization ordering for LPIs
- irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage
- irqchip/gic-v3-its: Split property table clearing from allocation
- irqchip/gic-v3-its: Move pending table allocation to init time
- irqchip/gic-v3-its: Keep track of property table's PA and VA
- irqchip/gic-v3-its: Allow use of pre-programmed LPI tables
- irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump
kernels
- irqchip/gic-v3-its: Check that all RDs have the same property table
- irqchip/gic-v3-its: Register LPI tables with EFI config table
- irqchip/gic-v3-its: Allow use of LPI tables in reserved memory
- arm64: memblock: don't permit memblock resizing until linear mapping is up
- efi/arm: Defer persistent reservations until after paging_init()
- efi: Permit calling efi_mem_
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use
* ELAN900C:00 04F3:2844 touchscreen doesn't work (LP: #1811335)
- pinctrl: cannonlake: Fix community ordering for H variant
- pinctrl: c...