Disco update: 5.0.8 upstream stable release

Bug #1828415 reported by Kleber Sacilotto de Souza on 2019-05-09
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Disco
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       5.0.8 upstream stable release
       from git://git.kernel.org/

The following patches were applied:
* drm/i915/gvt: do not let pin count of shadow mm go negative
* kbuild: pkg: use -f $(srctree)/Makefile to recurse to top Makefile
* netfilter: nft_compat: use .release_ops and remove list of extension
* netfilter: nf_tables: use-after-free in dynamic operations
* netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
* hv_netvsc: Fix unwanted wakeup after tx_disable
* ibmvnic: Fix completion structure initialization
* ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
* ipv6: Fix dangling pointer when ipv6 fragment
* ipv6: sit: reset ip header pointer in ipip6_rcv
* kcm: switch order of device registration to fix a crash
* net: ethtool: not call vzalloc for zero sized memory request
* net-gro: Fix GRO flush when receiving a GSO packet.
* net/mlx5: Decrease default mr cache size
* netns: provide pure entropy for net_hash_mix()
* net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock().
* net/sched: act_sample: fix divide by zero in the traffic path
* net/sched: fix ->get helper of the matchall cls
* qmi_wwan: add Olicard 600
* r8169: disable ASPM again
* sctp: initialize _pad of sockaddr_in before copying to user memory
* tcp: Ensure DCTCP reacts to losses
* tcp: fix a potential NULL pointer dereference in tcp_sk_exit
* vrf: check accept_source_route on the original netdevice
* net/mlx5e: Fix error handling when refreshing TIRs
* net/mlx5e: Add a lock on tir list
* nfp: validate the return code from dev_queue_xmit()
* nfp: disable netpoll on representors
* bnxt_en: Improve RX consumer index validity check.
* bnxt_en: Reset device on RX buffer errors.
* net: ip_gre: fix possible use-after-free in erspan_rcv
* net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
* net: bridge: always clear mcast matching struct on reports and leaves
* net: thunderx: fix NULL pointer dereference in nicvf_open/nicvf_stop
* net: vrf: Fix ping failed when vrf mtu is set to 0
* net: core: netif_receive_skb_list: unlist skb before passing to pt->func
* r8169: disable default rx interrupt coalescing on RTL8168
* net: mlx5: Add a missing check on idr_find, free buf
* net/mlx5e: Update xoff formula
* net/mlx5e: Update xon formula
* kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
* lib/string.c: implement a basic bcmp
* Revert "clk: meson: clean-up clock registration"
* tty: mark Siemens R3964 line discipline as BROKEN
* tty: ldisc: add sysctl to prevent autoloading of ldiscs
* hwmon: (w83773g) Select REGMAP_I2C to fix build error
* hwmon: (occ) Fix power sensor indexing
* SMB3: Allow persistent handle timeout to be configurable on mount
* HID: logitech: Handle 0 scroll events for the m560
* ACPICA: Clear status of GPEs before enabling them
* ACPICA: Namespace: remove address node from global list after method termination
* ALSA: seq: Fix OOB-reads from strlcpy
* ALSA: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233
* ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
* ALSA: xen-front: Do not use stream buffer size before it is set
* mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
* arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
* mmc: alcor: don't write data before command has completed
* mmc: sdhci-omap: Don't finish_mrq() on a command error during tuning
* parisc: Detect QEMU earlier in boot process
* parisc: regs_return_value() should return gpr28
* parisc: also set iaoq_b in instruction_pointer_set()
* alarmtimer: Return correct remaining time
* drm/i915/gvt: do not deliver a workload if its creation fails
* drm/sun4i: DW HDMI: Lower max. supported rate for H6
* drm/udl: add a release method and delay modeset teardown
* kvm: svm: fix potential get_num_contig_pages overflow
* include/linux/bitrev.h: fix constant bitrev
* mm: writeback: use exact memcg dirty counts
* ASoC: intel: Fix crash at suspend/resume after failed codec registration
* ASoC: fsl_esai: fix channel swap issue when stream starts
* Btrfs: do not allow trimming when a fs is mounted with the nologreplay option
* btrfs: prop: fix zstd compression parameter validation
* btrfs: prop: fix vanished compression property after failed set
* riscv: Fix syscall_get_arguments() and syscall_set_arguments()
* block: Revert v5.0 blk_mq_request_issue_directly() changes
* block: do not leak memory in bio_copy_user_iov()
* block: fix the return errno for direct IO
* genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
* genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
* virtio: Honour 'may_reduce_num' in vring_create_virtqueue
* ARM: OMAP1: ams-delta: Fix broken GPIO ID allocation
* ARM: dts: rockchip: fix rk3288 cpu opp node reference
* ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
* ARM: dts: am335x-evm: Correct the regulators for the audio codec
* ARM: dts: rockchip: Fix SD card detection on rk3288-tinker
* ARM: dts: at91: Fix typo in ISC_D0 on PC9
* arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
* arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
* arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
* arm64: backtrace: Don't bother trying to unwind the userspace stack
* IB/mlx5: Reset access mask when looping inside page fault handler
* xen: Prevent buffer overflow in privcmd ioctl
* sched/fair: Do not re-read ->h_load_next during hierarchical load calculation
* xtensa: fix return_address
* csky: Fix syscall_get_arguments() and syscall_set_arguments()
* x86/asm: Remove dead __GNUC__ conditionals
* x86/asm: Use stricter assembly constraints in bitops
* x86/perf/amd: Resolve race condition when disabling PMC
* x86/perf/amd: Resolve NMI latency issues for active PMCs
* x86/perf/amd: Remove need to check "running" bit in NMI handler
* PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
* PCI: pciehp: Ignore Link State Changes after powering off a slot
* xprtrdma: Fix helper that drains the transport
* powerpc/64s/radix: Fix radix segment exception handling
* dm integrity: change memcmp to strncmp in dm_integrity_ctr
* dm: revert 8f50e358153d ("dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE")
* dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
* dm: disable DISCARD if the underlying storage no longer supports it
* dm integrity: fix deadlock with overlapping I/O
* drm/virtio: do NOT reuse resource ids
* Linux 5.0.8

CVE References

Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug

The following patches have been skipped as they have already been applied:

f28cd2af22a0c134e4aa1c64a70f70d815d473fb - openvswitch: fix flow actions reallocation
cae30527901d9590db0e12ace994c1d58bea87fd - ALSA: hda - Add two more machines to the power_save_blacklist
21635d7311734d2d1b177f8a95e2f9386174b76d - drm/i915/dp: revert back to max link rate and lane count on eDP
5a3ae7b314a2259b1188b22b392f5eba01e443ee - arm64/ftrace: fix inadvertent BUG() in trampoline check
acff78477b9b4f26ecdf65733a4ed77fe837e9dc - KVM: x86: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887)
c73f4c998e1fd4249b9edfa39e23f4fda2b9b041 - KVM: x86: nVMX: fix x2APIC VTPR read intercept

description: updated

The following commits had to be added due to config changes:

UBUNTU: [Packaging] remove n_r3964 from built modules list
UBUNTU: [Config]: remove CONFIG_R3964
UBUNTU: [Config]: add CONFIG_LDISC_AUTOLOAD=y

Compile tested on all supported architectures:

amd64-binary: PASSED
s390x-binary: PASSED
ppc64el-binary: PASSED
i386-binary: PASSED
arm64-binary: PASSED
armhf-binary: PASSED

Changed in linux (Ubuntu Disco):
status: New → In Progress
Stefan Bader (smb) on 2019-05-15
Changed in linux (Ubuntu Disco):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :
Download full text (24.0 KiB)

This bug was fixed in the package linux - 5.0.0-16.17

---------------
linux (5.0.0-16.17) disco; urgency=medium

  * linux: 5.0.0-16.17 -proposed tracker (LP: #1829173)

  * shiftfs: lock security sensitive superblock flags (LP: #1827122)
    - SAUCE: shiftfs: lock down certain superblock flags

  * Please package libbpf (which is done out of the kernel src) in Debian [for
    19.10] (LP: #1826410)
    - SAUCE: tools -- fix add ability to disable libbfd

  * Disco update: 5.0.8 upstream stable release (LP: #1828415)
    - drm/i915/gvt: do not let pin count of shadow mm go negative
    - kbuild: pkg: use -f $(srctree)/Makefile to recurse to top Makefile
    - netfilter: nft_compat: use .release_ops and remove list of extension
    - netfilter: nf_tables: use-after-free in dynamic operations
    - netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
    - hv_netvsc: Fix unwanted wakeup after tx_disable
    - ibmvnic: Fix completion structure initialization
    - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
    - ipv6: Fix dangling pointer when ipv6 fragment
    - ipv6: sit: reset ip header pointer in ipip6_rcv
    - kcm: switch order of device registration to fix a crash
    - net: ethtool: not call vzalloc for zero sized memory request
    - net-gro: Fix GRO flush when receiving a GSO packet.
    - net/mlx5: Decrease default mr cache size
    - netns: provide pure entropy for net_hash_mix()
    - net: rds: force to destroy connection if t_sock is NULL in
      rds_tcp_kill_sock().
    - net/sched: act_sample: fix divide by zero in the traffic path
    - net/sched: fix ->get helper of the matchall cls
    - qmi_wwan: add Olicard 600
    - r8169: disable ASPM again
    - sctp: initialize _pad of sockaddr_in before copying to user memory
    - tcp: Ensure DCTCP reacts to losses
    - tcp: fix a potential NULL pointer dereference in tcp_sk_exit
    - vrf: check accept_source_route on the original netdevice
    - net/mlx5e: Fix error handling when refreshing TIRs
    - net/mlx5e: Add a lock on tir list
    - nfp: validate the return code from dev_queue_xmit()
    - nfp: disable netpoll on representors
    - bnxt_en: Improve RX consumer index validity check.
    - bnxt_en: Reset device on RX buffer errors.
    - net: ip_gre: fix possible use-after-free in erspan_rcv
    - net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
    - net: bridge: always clear mcast matching struct on reports and leaves
    - net: thunderx: fix NULL pointer dereference in nicvf_open/nicvf_stop
    - net: vrf: Fix ping failed when vrf mtu is set to 0
    - net: core: netif_receive_skb_list: unlist skb before passing to pt->func
    - r8169: disable default rx interrupt coalescing on RTL8168
    - net: mlx5: Add a missing check on idr_find, free buf
    - net/mlx5e: Update xoff formula
    - net/mlx5e: Update xon formula
    - kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
    - lib/string.c: implement a basic bcmp
    - Revert "clk: meson: clean-up clock registration"
    - tty: mark Siemens R3964 line discipline as BROKEN
    - [Config]: remove CONFIG_R3964
    - [Config]: add CONFIG_LDISC_AUTOLOAD=y
    - tty: ldisc: add sysctl to p...

Changed in linux (Ubuntu Disco):
status: Fix Committed → Fix Released
Changed in linux (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers