Bionic update: upstream stable patchset 2019-07-18

Bug #1837161 reported by Kamal Mostafa
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Kamal Mostafa

Bug Description

SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2019-07-18

            Ported from the following upstream stable releases:
                v4.14.87, v4.19.8,
                v4.14.88, v4.19.9,
                v4.14.89, v4.19.10

       from git://

usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
iio:st_magn: Fix enable device after trigger
lib/test_kmod.c: fix rmmod double free
mm: use swp_offset as key in shmem_replace_page()
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
binder: fix race that allows malicious free of live buffer
libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
libceph: check authorizer reply/challenge length before reading
f2fs: fix missing up_read
net: don't keep lonely packets forever in the gro hash
net: phy: add workaround for issue where PHY driver doesn't bind to the device
KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset
udf: Allow mounting volumes with incorrect identification strings
btrfs: Always try all copies when reading extent buffers
Btrfs: fix rare chances for data loss when doing a fast fsync
Btrfs: fix race between enabling quotas and subvolume creation
perf/x86/intel: Disallow precise_ip on BTS events
ALSA: hda: Add ASRock H81M-HDS to the power_save blacklist
ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist
function_graph: Create function_graph_enter() to consolidate architecture code
ARM: function_graph: Simplify with function_graph_enter()
microblaze: function_graph: Simplify with function_graph_enter()
x86/function_graph: Simplify with function_graph_enter()
powerpc/function_graph: Simplify with function_graph_enter()
sh/function_graph: Simplify with function_graph_enter()
sparc/function_graph: Simplify with function_graph_enter()
parisc: function_graph: Simplify with function_graph_enter()
s390/function_graph: Simplify with function_graph_enter()
arm64: function_graph: Simplify with function_graph_enter()
MIPS: function_graph: Simplify with function_graph_enter()
function_graph: Make ftrace_push_return_trace() static
function_graph: Use new curr_ret_depth to manage depth instead of curr_ret_stack
function_graph: Have profiler use curr_ret_stack and not depth
function_graph: Move return callback before update of curr_ret_stack
function_graph: Reverse the order of pushing the ret_stack and the callback
ext2: initialize opts.s_mount_opt as zero before using it
ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0
staging: most: use format specifier "%s" in snprintf
iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers
mm: cleancache: fix corruption on missed inode invalidation
Kbuild: suppress packed-not-aligned warning for default setting only
disable stringop truncation warnings for now
test_hexdump: use memcpy instead of strncpy
kobject: Replace strncpy with memcpy
ALSA: intel_hdmi: Use strlcpy() instead of strncpy()
unifdef: use memcpy instead of strncpy
kernfs: Replace strncpy with memcpy
ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
scsi: bfa: convert to strlcpy/strlcat
kdb: use memmove instead of overlapping memcpy
iser: set sector for ambiguous mr status errors
uprobes: Fix handle_swbp() vs. unregister() + register() race once more
MIPS: ralink: Fix mt7620 nd_sd pinmux
mips: fix mips_get_syscall_arg o32 check
IB/mlx5: Avoid load failure due to unknown link width
drm/ast: Fix incorrect free on ioregs
drm: set is_master to 0 upon drm_new_set_master() failure
drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config
drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut()
ALSA: trident: Suppress gcc string warning
kgdboc: Fix restrict error
kgdboc: Fix warning with module build
svm: Add mutex_lock to protect apic_access_page_done on AMD systems
drm/msm: fix OF child-node lookup
Input: xpad - quirk all PDP Xbox One gamepads
Input: synaptics - add PNP ID for ThinkPad P50 to SMBus
Input: matrix_keypad - check for errors from of_get_named_gpio()
Input: cros_ec_keyb - fix button/switch capability reports
Input: elan_i2c - add ELAN0620 to the ACPI table
Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
Input: elan_i2c - add support for ELAN0621 touchpad
btrfs: tree-checker: Don't check max block group size as current max chunk size limit is unreliable
ARC: change defconfig defaults to ARCv2
arc: [devboards] Add support of NFSv3 ACL
reset: make device_reset_optional() really optional
reset: remove remaining WARN_ON() in <linux/reset.h>
mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
net: qed: use correct strncpy() size
tipc: use destination length for copy string
arm64: ftrace: Fix to enable syscall events on arm64
sched, trace: Fix prev_state output in sched_switch tracepoint
tracing/fgraph: Fix set_graph_function from showing interrupts
drm/meson: Fixes for drm_crtc_vblank_on/off support
scsi: lpfc: fix block guard enablement on SLI3 adapters
media: omap3isp: Unregister media device as first
iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
brcmutil: really fix decoding channel info for 160 MHz bandwidth
iommu/ipmmu-vmsa: Fix crash on early domain free
can: rcar_can: Fix erroneous registration
test_firmware: fix error return getting clobbered
HID: input: Ignore battery reported by Symbol DS4308
batman-adv: Use explicit tvlv padding for ELP packets
batman-adv: Expand merged fragment buffer for full packet
amd/iommu: Fix Guest Virtual APIC Log Tail Address Register
bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
qed: Fix PTT leak in qed_drain()
qed: Fix reading wrong value in loop condition
net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
net/mlx4_core: Fix uninitialized variable compilation warning
net/mlx4: Fix UBSAN warning of signed integer overflow
gpio: mockup: fix indicated direction
mtd: rawnand: qcom: Namespace prefix some commands
mtd: spi-nor: Fix Cadence QSPI page fault kernel panic
qed: Fix bitmap_weight() check
qed: Fix QM getters to always return a valid pq
net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts
iommu/vt-d: Use memunmap to free memremap
flexfiles: use per-mirror specified stateid for IO
ibmvnic: Fix RX queue buffer cleanup
team: no need to do team_notify_peers or team_mcast_rejoin when disabling port
net: amd: add missing of_node_put()
usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
usb: appledisplay: Add 27" Apple Cinema Display
USB: check usb_get_extra_descriptor for proper size
ALSA: hda: Add support for AMD Stoney Ridge
ALSA: pcm: Fix starvation on down_write_nonblock()
ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
ALSA: pcm: Fix interval evaluation with openmin/max
ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570
SUNRPC: Fix leak of krb5p encode pages
dmaengine: dw: Fix FIFO size for Intel Merrifield
dmaengine: cppi41: delete channel from pending list when stop channel
ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
xhci: Prevent U1/U2 link pm states if exit latency is too long
f2fs: fix to do sanity check with block address in main area v2
swiotlb: clean up reporting
Staging: lustre: remove two build warnings
staging: atomisp: remove "fun" strncpy warning
cifs: Fix separator when building path from dentry
staging: rtl8712: Fix possible buffer overrun
Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c"
drm/amdgpu: update mc firmware image for polaris12 variants
drm/amdgpu/gmc8: update MC firmware for polaris
tty: serial: 8250_mtk: always resume the device in probe.
kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
libnvdimm, pfn: Pad pfn namespaces relative to other regions
mac80211: Clear beacon_int in ieee80211_do_stop
mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
mac80211: fix reordering of buffered broadcast packets
mac80211: ignore NullFunc frames in the duplicate detection
qed: Fix rdma_info structure allocation
drm/amdgpu: Add amdgpu "max bpc" connector property (v2)
drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo
gpio: pxa: fix legacy non pinctrl aware builds again
tc-testing: ignore errors when decoding stdout/stderr
NFSv4: Fix a NFSv4 state manager deadlock
USB: serial: console: fix reported terminal settings
ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support
ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880
ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic
ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G
ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G
media: dvb-pll: don't re-validate tuner frequencies
parisc: Enable -ffunction-sections for modules on 32-bit kernel
Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved"
drm/lease: Send a distinct uevent
drm/msm: Move fence put to where failure occurs
drm/amdgpu/gmc8: always load MC firmware in the driver
drm/i915: Downgrade Gen9 Plane WM latency error
x86/efi: Allocate e820 buffer before calling efi_exit_boot_service
cfg80211: Fix busy loop regression in ieee80211_ie_split_ric()
ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
ipv6: Check available headroom in ip6_xmit() even without options
neighbour: Avoid writing before skb->head in neigh_hh_output()
ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
net: 8139cp: fix a BUG triggered by changing mtu with network traffic
net/mlx4_core: Correctly set PFC param if global pause is turned off.
net/mlx4_en: Change min MTU size to ETH_MIN_MTU
net: phy: don't allow __set_phy_supported to add unsupported modes
net: Prevent invalid access to skb->prev in __qdisc_drop_all
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
sctp: kfree_rcu asoc
tcp: Do not underestimate rwnd_limited
tcp: fix NULL ref in tail loss probe
tun: forbid iface creation with rtnl ops
virtio-net: keep vnet header zeroed after processing XDP
ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
ASoC: rsnd: fixup clock start checker
staging: rtl8723bs: Fix the return value in case of error in 'rtw_wx_read32()'
ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1
ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
sysv: return 'err' instead of 0 in __sysv_write_inode
selftests: add script to stress-test nft packet path vs. control plane
netfilter: nf_tables: fix use-after-free when deleting compat expressions
hwmon (ina2xx) Fix NULL id pointer in probe()
ASoC: wm_adsp: Fix dma-unsafe read of scratch registers
s390/cpum_cf: Reject request for sampling in event initialization
hwmon: (ina2xx) Fix current value calculation
ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing
ASoC: dapm: Recalculate audio map forcely when card instantiated
netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
hwmon: (w83795) temp4_type has writable permission
perf tools: Restore proper cwd on return from mnt namespace
PCI: imx6: Fix link training status detection in link up check
objtool: Fix double-free in .cold detection error path
objtool: Fix segfault in .cold detection with -ffunction-sections
ARM: dts: at91: sama5d2: use the divided clock for SMC
Btrfs: send, fix infinite loop due to directory rename dependencies
RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
RDMA/rdmavt: Fix rvt_create_ah function signature
ASoC: omap-mcbsp: Fix latency value calculation for pm_qos
ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
exportfs: do not read dentry after free
bpf: fix check of allowed specifiers in bpf_trace_printk
ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
USB: omap_udc: use devm_request_irq()
USB: omap_udc: fix crashes on probe error and module removal
USB: omap_udc: fix omap_udc_start() on 15xx machines
USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
USB: omap_udc: fix rejection of out transfers when DMA is used
drm/meson: add support for 1080p25 mode
netfilter: ipv6: Preserve link scope traffic original oif
IB/mlx5: Fix page fault handling for MW
KVM: x86: fix empty-body warnings
x86/kvm/vmx: fix old-style function declaration
net: thunderx: fix NULL pointer dereference in nic_remove
usb: gadget: u_ether: fix unsafe list iteration
netfilter: nf_tables: deactivate expressions in rule replecement routine
igb: fix uninitialized variables
ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
net: hisilicon: remove unexpected free_netdev
drm/amdgpu: Add delay after enable RLC ucode
drm/ast: fixed reading monitor EDID not stable issue
xen: xlate_mmu: add missing header to fix 'W=1' warning
Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
pstore/ram: Correctly calculate usable PRZ bytes
fscache, cachefiles: remove redundant variable 'cache'
nvme: flush namespace scanning work just before removing namespaces
ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value
ocfs2: fix deadlock caused by ocfs2_defrag_extent()
mm/page_alloc.c: fix calculation of pgdat->nr_zones
hfs: do not free node before using
hfsplus: do not free node before using
debugobjects: avoid recursive calls with kmemleak
ocfs2: fix potential use after free
printk: Add console owner and waiter logic to load balance console writes
printk: Hide console waiter logic into helpers
printk: Never set console_may_schedule in console_trylock()
printk: Wake klogd when passing console_lock owner
flexfiles: enforce per-mirror stateid only for v4 DSes
staging: speakup: Replace strncpy with memcpy
ALSA: fireface: fix reference to wrong register for clock configuration
IB/hfi1: Fix an out-of-bounds access in get_hw_stats
tcp: lack of available data can also cause TSO defer
Revert "net/ibm/emac: wrong bit is used for STA control"
tools: bpftool: prevent infinite loop in get_fdinfo()
ASoC: sun8i-codec: fix crash on module removal
ASoC: acpi: fix: continue searching when machine is ignored
RDMA/bnxt_re: Fix system hang when registration with L2 driver fails
RDMA/bnxt_re: Avoid accessing the device structure after it is freed
RDMA/hns: Bugfix pbl configuration for rereg mr
thunderbolt: Prevent root port runtime suspend during NVM upgrade
netfilter: add missing error handling code for register functions
netfilter: nat: fix double register in masquerade modules
cachefiles: Fix an assertion failure when trying to update a failed object
fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
pvcalls-front: fixes incorrect error handling
nvme: warn when finding multi-port subsystems without multipathing enabled
kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as notrace
ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294

Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
description: updated
description: updated
Changed in linux (Ubuntu Bionic):
status: New → In Progress
assignee: nobody → Kamal Mostafa (kamalmostafa)
Changed in linux (Ubuntu Bionic):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (171.3 KiB)

This bug was fixed in the package linux - 4.15.0-58.64

linux (4.15.0-58.64) bionic; urgency=medium

  * unable to handle kernel NULL pointer dereference at 000000000000002c (IP:
    iget5_locked+0x9e/0x1f0) (LP: #1838982)
    - Revert "ovl: set I_CREATING on inode being created"
    - Revert "new primitive: discard_new_inode()"

linux (4.15.0-57.63) bionic; urgency=medium

  * CVE-2019-1125
    - x86/cpufeatures: Carve out CQM features retrieval
    - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
    - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
    - x86/speculation: Enable Spectre v1 swapgs mitigations
    - x86/entry/64: Use JMP instead of JMPQ
    - x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS

  * Packaging resync (LP: #1786013)
    - update dkms package versions

linux (4.15.0-56.62) bionic; urgency=medium

  * bionic/linux: 4.15.0-56.62 -proposed tracker (LP: #1837626)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] update helper scripts

  * CVE-2019-2101
    - media: uvcvideo: Fix 'type' check leading to overflow

  * hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
    - [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
    - SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64

  * Bionic: support for Solarflare X2542 network adapter (sfc driver)
    (LP: #1836635)
    - sfc: make mem_bar a function rather than a constant
    - sfc: support VI strides other than 8k
    - sfc: add Medford2 (SFC9250) PCI Device IDs
    - sfc: improve PTP error reporting
    - sfc: update EF10 register definitions
    - sfc: populate the timer reload field
    - sfc: update MCDI protocol headers
    - sfc: support variable number of MAC stats
    - sfc: expose FEC stats on Medford2
    - sfc: expose CTPIO stats on NICs that support them
    - sfc: basic MCDI mapping of 25/50/100G link speeds
    - sfc: support the ethtool ksettings API properly so that 25/50/100G works
    - sfc: add bits for 25/50/100G supported/advertised speeds
    - sfc: remove tx and MCDI handling from NAPI budget consideration
    - sfc: handle TX timestamps in the normal data path
    - sfc: add function to determine which TX timestamping method to use
    - sfc: use main datapath for HW timestamps if available
    - sfc: only enable TX timestamping if the adapter is licensed for it
    - sfc: MAC TX timestamp handling on the 8000 series
    - sfc: on 8000 series use TX queues for TX timestamps
    - sfc: only advertise TX timestamping if we have the license for it
    - sfc: simplify RX datapath timestamping
    - sfc: support separate PTP and general timestamping
    - sfc: support second + quarter ns time format for receive datapath
    - sfc: support Medford2 frequency adjustment format
    - sfc: add suffix to large constant in ptp
    - sfc: mark some unexported symbols as static
    - sfc: update MCDI protocol headers
    - sfc: support FEC configuration through ethtool
    - sfc: remove ctpio_dmabuf_start from stats
    - sfc: stop the TX queue before pushing new buffers

  * [18.04 FEAT] zKVM: Add hardwar...

Changed in linux (Ubuntu Bionic):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers