Disco update: 5.0.8 upstream stable release

Bug #1828415 reported by Kleber Sacilotto de Souza
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Disco
Fix Released
Undecided
Unassigned

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       5.0.8 upstream stable release
       from git://git.kernel.org/

The following patches were applied:
* drm/i915/gvt: do not let pin count of shadow mm go negative
* kbuild: pkg: use -f $(srctree)/Makefile to recurse to top Makefile
* netfilter: nft_compat: use .release_ops and remove list of extension
* netfilter: nf_tables: use-after-free in dynamic operations
* netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
* hv_netvsc: Fix unwanted wakeup after tx_disable
* ibmvnic: Fix completion structure initialization
* ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
* ipv6: Fix dangling pointer when ipv6 fragment
* ipv6: sit: reset ip header pointer in ipip6_rcv
* kcm: switch order of device registration to fix a crash
* net: ethtool: not call vzalloc for zero sized memory request
* net-gro: Fix GRO flush when receiving a GSO packet.
* net/mlx5: Decrease default mr cache size
* netns: provide pure entropy for net_hash_mix()
* net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock().
* net/sched: act_sample: fix divide by zero in the traffic path
* net/sched: fix ->get helper of the matchall cls
* qmi_wwan: add Olicard 600
* r8169: disable ASPM again
* sctp: initialize _pad of sockaddr_in before copying to user memory
* tcp: Ensure DCTCP reacts to losses
* tcp: fix a potential NULL pointer dereference in tcp_sk_exit
* vrf: check accept_source_route on the original netdevice
* net/mlx5e: Fix error handling when refreshing TIRs
* net/mlx5e: Add a lock on tir list
* nfp: validate the return code from dev_queue_xmit()
* nfp: disable netpoll on representors
* bnxt_en: Improve RX consumer index validity check.
* bnxt_en: Reset device on RX buffer errors.
* net: ip_gre: fix possible use-after-free in erspan_rcv
* net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
* net: bridge: always clear mcast matching struct on reports and leaves
* net: thunderx: fix NULL pointer dereference in nicvf_open/nicvf_stop
* net: vrf: Fix ping failed when vrf mtu is set to 0
* net: core: netif_receive_skb_list: unlist skb before passing to pt->func
* r8169: disable default rx interrupt coalescing on RTL8168
* net: mlx5: Add a missing check on idr_find, free buf
* net/mlx5e: Update xoff formula
* net/mlx5e: Update xon formula
* kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
* lib/string.c: implement a basic bcmp
* Revert "clk: meson: clean-up clock registration"
* tty: mark Siemens R3964 line discipline as BROKEN
* tty: ldisc: add sysctl to prevent autoloading of ldiscs
* hwmon: (w83773g) Select REGMAP_I2C to fix build error
* hwmon: (occ) Fix power sensor indexing
* SMB3: Allow persistent handle timeout to be configurable on mount
* HID: logitech: Handle 0 scroll events for the m560
* ACPICA: Clear status of GPEs before enabling them
* ACPICA: Namespace: remove address node from global list after method termination
* ALSA: seq: Fix OOB-reads from strlcpy
* ALSA: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233
* ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
* ALSA: xen-front: Do not use stream buffer size before it is set
* mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
* arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
* mmc: alcor: don't write data before command has completed
* mmc: sdhci-omap: Don't finish_mrq() on a command error during tuning
* parisc: Detect QEMU earlier in boot process
* parisc: regs_return_value() should return gpr28
* parisc: also set iaoq_b in instruction_pointer_set()
* alarmtimer: Return correct remaining time
* drm/i915/gvt: do not deliver a workload if its creation fails
* drm/sun4i: DW HDMI: Lower max. supported rate for H6
* drm/udl: add a release method and delay modeset teardown
* kvm: svm: fix potential get_num_contig_pages overflow
* include/linux/bitrev.h: fix constant bitrev
* mm: writeback: use exact memcg dirty counts
* ASoC: intel: Fix crash at suspend/resume after failed codec registration
* ASoC: fsl_esai: fix channel swap issue when stream starts
* Btrfs: do not allow trimming when a fs is mounted with the nologreplay option
* btrfs: prop: fix zstd compression parameter validation
* btrfs: prop: fix vanished compression property after failed set
* riscv: Fix syscall_get_arguments() and syscall_set_arguments()
* block: Revert v5.0 blk_mq_request_issue_directly() changes
* block: do not leak memory in bio_copy_user_iov()
* block: fix the return errno for direct IO
* genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
* genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
* virtio: Honour 'may_reduce_num' in vring_create_virtqueue
* ARM: OMAP1: ams-delta: Fix broken GPIO ID allocation
* ARM: dts: rockchip: fix rk3288 cpu opp node reference
* ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
* ARM: dts: am335x-evm: Correct the regulators for the audio codec
* ARM: dts: rockchip: Fix SD card detection on rk3288-tinker
* ARM: dts: at91: Fix typo in ISC_D0 on PC9
* arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
* arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
* arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
* arm64: backtrace: Don't bother trying to unwind the userspace stack
* IB/mlx5: Reset access mask when looping inside page fault handler
* xen: Prevent buffer overflow in privcmd ioctl
* sched/fair: Do not re-read ->h_load_next during hierarchical load calculation
* xtensa: fix return_address
* csky: Fix syscall_get_arguments() and syscall_set_arguments()
* x86/asm: Remove dead __GNUC__ conditionals
* x86/asm: Use stricter assembly constraints in bitops
* x86/perf/amd: Resolve race condition when disabling PMC
* x86/perf/amd: Resolve NMI latency issues for active PMCs
* x86/perf/amd: Remove need to check "running" bit in NMI handler
* PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
* PCI: pciehp: Ignore Link State Changes after powering off a slot
* xprtrdma: Fix helper that drains the transport
* powerpc/64s/radix: Fix radix segment exception handling
* dm integrity: change memcmp to strncmp in dm_integrity_ctr
* dm: revert 8f50e358153d ("dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE")
* dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
* dm: disable DISCARD if the underlying storage no longer supports it
* dm integrity: fix deadlock with overlapping I/O
* drm/virtio: do NOT reuse resource ids
* Linux 5.0.8

CVE References

Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :

The following patches have been skipped as they have already been applied:

f28cd2af22a0c134e4aa1c64a70f70d815d473fb - openvswitch: fix flow actions reallocation
cae30527901d9590db0e12ace994c1d58bea87fd - ALSA: hda - Add two more machines to the power_save_blacklist
21635d7311734d2d1b177f8a95e2f9386174b76d - drm/i915/dp: revert back to max link rate and lane count on eDP
5a3ae7b314a2259b1188b22b392f5eba01e443ee - arm64/ftrace: fix inadvertent BUG() in trampoline check
acff78477b9b4f26ecdf65733a4ed77fe837e9dc - KVM: x86: nVMX: close leak of L0's x2APIC MSRs (CVE-2019-3887)
c73f4c998e1fd4249b9edfa39e23f4fda2b9b041 - KVM: x86: nVMX: fix x2APIC VTPR read intercept

description: updated
Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :

The following commits had to be added due to config changes:

UBUNTU: [Packaging] remove n_r3964 from built modules list
UBUNTU: [Config]: remove CONFIG_R3964
UBUNTU: [Config]: add CONFIG_LDISC_AUTOLOAD=y

Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :

Compile tested on all supported architectures:

amd64-binary: PASSED
s390x-binary: PASSED
ppc64el-binary: PASSED
i386-binary: PASSED
arm64-binary: PASSED
armhf-binary: PASSED

Changed in linux (Ubuntu Disco):
status: New → In Progress
Revision history for this message
Kleber Sacilotto de Souza (kleber-souza) wrote :
Stefan Bader (smb)
Changed in linux (Ubuntu Disco):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (24.0 KiB)

This bug was fixed in the package linux - 5.0.0-16.17

---------------
linux (5.0.0-16.17) disco; urgency=medium

  * linux: 5.0.0-16.17 -proposed tracker (LP: #1829173)

  * shiftfs: lock security sensitive superblock flags (LP: #1827122)
    - SAUCE: shiftfs: lock down certain superblock flags

  * Please package libbpf (which is done out of the kernel src) in Debian [for
    19.10] (LP: #1826410)
    - SAUCE: tools -- fix add ability to disable libbfd

  * Disco update: 5.0.8 upstream stable release (LP: #1828415)
    - drm/i915/gvt: do not let pin count of shadow mm go negative
    - kbuild: pkg: use -f $(srctree)/Makefile to recurse to top Makefile
    - netfilter: nft_compat: use .release_ops and remove list of extension
    - netfilter: nf_tables: use-after-free in dynamic operations
    - netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
    - hv_netvsc: Fix unwanted wakeup after tx_disable
    - ibmvnic: Fix completion structure initialization
    - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
    - ipv6: Fix dangling pointer when ipv6 fragment
    - ipv6: sit: reset ip header pointer in ipip6_rcv
    - kcm: switch order of device registration to fix a crash
    - net: ethtool: not call vzalloc for zero sized memory request
    - net-gro: Fix GRO flush when receiving a GSO packet.
    - net/mlx5: Decrease default mr cache size
    - netns: provide pure entropy for net_hash_mix()
    - net: rds: force to destroy connection if t_sock is NULL in
      rds_tcp_kill_sock().
    - net/sched: act_sample: fix divide by zero in the traffic path
    - net/sched: fix ->get helper of the matchall cls
    - qmi_wwan: add Olicard 600
    - r8169: disable ASPM again
    - sctp: initialize _pad of sockaddr_in before copying to user memory
    - tcp: Ensure DCTCP reacts to losses
    - tcp: fix a potential NULL pointer dereference in tcp_sk_exit
    - vrf: check accept_source_route on the original netdevice
    - net/mlx5e: Fix error handling when refreshing TIRs
    - net/mlx5e: Add a lock on tir list
    - nfp: validate the return code from dev_queue_xmit()
    - nfp: disable netpoll on representors
    - bnxt_en: Improve RX consumer index validity check.
    - bnxt_en: Reset device on RX buffer errors.
    - net: ip_gre: fix possible use-after-free in erspan_rcv
    - net: ip6_gre: fix possible use-after-free in ip6erspan_rcv
    - net: bridge: always clear mcast matching struct on reports and leaves
    - net: thunderx: fix NULL pointer dereference in nicvf_open/nicvf_stop
    - net: vrf: Fix ping failed when vrf mtu is set to 0
    - net: core: netif_receive_skb_list: unlist skb before passing to pt->func
    - r8169: disable default rx interrupt coalescing on RTL8168
    - net: mlx5: Add a missing check on idr_find, free buf
    - net/mlx5e: Update xoff formula
    - net/mlx5e: Update xon formula
    - kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
    - lib/string.c: implement a basic bcmp
    - Revert "clk: meson: clean-up clock registration"
    - tty: mark Siemens R3964 line discipline as BROKEN
    - [Config]: remove CONFIG_R3964
    - [Config]: add CONFIG_LDISC_AUTOLOAD=y
    - tty: ldisc: add sysctl to p...

Changed in linux (Ubuntu Disco):
status: Fix Committed → Fix Released
Changed in linux (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.