Eoan update: v5.3.5 upstream stable release

Bug #1848047 reported by Paolo Pisati on 2019-10-14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)

Bug Description

    SRU Justification

       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.3.5 upstream stable release
       from git://git.kernel.org/

Linux 5.3.5
vfs: set fs_context::user_ns for reconfigure
9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel
kexec: bail out upon SIGKILL when allocating memory.
NFC: fix attrs checks in netlink interface
dm zoned: fix invalid memory access
dm raid: fix updating of max_discard_sectors limit
smack: use GFP_NOFS while holding inode_smack::smk_lock
Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
net: sched: taprio: Avoid division by zero on invalid link speed
net: sched: cbs: Avoid division by zero when calculating the port rate
net: socionext: netsec: always grab descriptor lock
net: dsa: sja1105: Prevent leaking memory
net: dsa: sja1105: Ensure PTP time for rxtstamp reconstruction is not in the past
ptp_qoriq: Initialize the registers' spinlock before calling ptp_qoriq_settime
net: dsa: sja1105: Fix sleeping while atomic in .port_hwtstamp_set
xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
net: dsa: sja1105: Initialize the meta_lock
net/rds: Fix error handling in rds_ib_add_one()
udp: only do GSO if # of segs > 1
tcp: adjust rto_base in retransmits_timed_out()
net: dsa: rtl8366: Check VLAN ID and not ports
vsock: Fix a lockdep warning in __vsock_release()
udp: fix gso_segs calculations
tipc: fix unlimited bundling of small messages
sch_dsmark: fix potential NULL deref in dsmark_init()
sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
rxrpc: Fix rxrpc_recvmsg tracepoint
qmi_wwan: add support for Cinterion CLS8 devices
nfc: fix memory leak in llcp_sock_bind()
net: Unpublish sk from sk_reuseport_cb before call_rcu
net: sched: taprio: Fix potential integer overflow in taprio_set_picos_per_byte
net: qlogic: Fix memory leak in ql_alloc_large_buffers
net: ipv4: avoid mixed n_redirects and rate_tokens usage
ipv6: Handle missing host route in __ipv6_ifa_notify
ipv6: drop incoming packets having a v4mapped source address
hso: fix NULL-deref on tty open
erspan: remove the incorrect mtu limit for erspan
cxgb4:Fix out-of-bounds MSI-X info array access
arm: use STACK_TOP when computing mmap base address
arm: properly account for stack randomization and stack guard gap
mips: properly account for stack randomization and stack guard gap
arm64: consider stack randomization for mmap base only when necessary
kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
ocfs2: wait for recovering done after direct unlock request
kbuild: clean compressed initramfs image
mm: add dummy can_do_mlock() helper
crypto: hisilicon - Fix double free in sec_free_hw_sgl()
tools/power/x86/intel-speed-select: Fix high priority core mask over count
hypfs: Fix error number left in struct pointer member
pktcdvd: remove warning on attempting to register non-passthrough dev
fat: work around race with userspace's read via blockdev while mounting
block, bfq: push up injection only after setting service time
i2c: tegra: Move suspend handling to NOIRQ phase
ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address
ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
PCI: Use static const struct, not const static struct
security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb()
PCI: exynos: Propagate errors for optional PHYs
PCI: imx6: Propagate errors for optional regulators
PCI: histb: Propagate errors for optional regulators
PCI: rockchip: Propagate errors for optional regulators
HID: apple: Fix stuck function keys when using FN
PCI: Add pci_info_ratelimited() to ratelimit PCI separately
selinux: fix residual uses of current_security() for the SELinux blob
power: supply: register HWMON devices with valid names
rtc: pcf85363/pcf85263: fix regmap error in set_time
rtc: snvs: fix possible race condition
ARM: 8875/1: Kconfig: default to AEABI w/ Clang
PCI: mobiveil: Fix the CPU base address setup in inbound window
soundwire: intel: fix channel number reported by hardware
ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as writes
mips/atomic: Fix smp_mb__{before,after}_atomic()
livepatch: Nullify obj->mod in klp_module_coming()'s error path
PCI: layerscape: Add the bar_fixed_64bit property to the endpoint driver
PCI: pci-hyperv: Fix build errors on non-SYSFS config
mips/atomic: Fix loongson_llsc_mb() wreckage
rtc: bd70528: fix driver dependencies
HID: wacom: Fix several minor compiler warnings
PCI: tegra: Fix OF node reference leak
mfd: intel-lpss: Remove D3cold delay
i2c-cht-wc: Fix lockdep warning
MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
MIPS: Ingenic: Disable broken BTB lookup optimization.
ext4: fix potential use after free after remounting with noblock_validity
f2fs: fix to drop meta/node pages during umount
dma-buf/sw_sync: Synchronize signal vs syncpt free
scsi: core: Reduce memory required for SCSI logging
clk: sprd: add missing kfree
mbox: qcom: add APCS child device for QCS404
powerpc: dump kernel log before carrying out fadump or kdump
clk: Make clk_bulk_get_all() return a valid "id"
clk: imx: clk-pll14xx: unbypass PLL by default
clk: imx: pll14xx: avoid glitch when set rate
clk: at91: select parent if main oscillator or bypass is enabled
arm64: fix unreachable code issue with cmpxchg
ARM: dts: dir685: Drop spi-cpol from the display
mailbox: mediatek: cmdq: clear the event in cmdq initial flow
pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
powerpc/pseries: correctly track irq state in default idle
clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
powerpc/eeh: Clean up EEH PEs after recovery finishes
pstore: fs superblock limits
powerpc/64s/exception: machine check use correct cfar for late handler
drm/amdgpu/si: fix ASIC tests
kbuild: Do not enable -Wimplicit-fallthrough for clang for now
selftests/powerpc: Retry on host facility unavailable
drm/amd/display: fix trigger not generated for freesync
drm/amd/display: fix MPO HUBP underflow with Scatter Gather
drm/amd/powerpaly: fix navi series custom peak level value error
drm/amd/display: support spdif
clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
pinctrl: amd: disable spurious-firing GPIO IRQs
drm/nouveau/volt: Fix for some cards having 0 maximum voltage
drm/nouveau/kms/tu102-: disable input lut when input is already FP16
drm/amdgpu/sdma5: fix number of sdma5 trap irq types for navi1x
vfio_pci: Restore original state on release
powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
pinctrl: tegra: Fix write barrier placement in pmx_writel
powerpc/perf: fix imc allocation failure handling
powerpc/pseries/mobility: use cond_resched when updating device tree
powerpc/64s/radix: Fix memory hotplug section page table creation
powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this function
powerpc/ptdump: fix walk_pagetables() address mismatch
powerpc/rtas: use device model APIs and serialization during LPM
powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
clk: zx296718: Don't reference clk_init_data after registration
clk: sprd: Don't reference clk_init_data after registration
clk: meson: axg-audio: Don't reference clk_init_data after registration
clk: sirf: Don't reference clk_init_data after registration
clk: actions: Don't reference clk_init_data after registration
powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window
drm/amd/display: Register VUPDATE_NO_LOCK interrupts for DCN2
drm/amd/display: reprogram VM config when system resume
drm/amd/display: Fix frames_to_insert math
drm/amd/display: fix issue where 252-255 values are clipped
clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
clk: qoriq: Fix -Wunused-const-variable
ipmi_si: Only schedule continuously in the thread in maintenance mode
pinctrl: stmfx: update pinconf settings
PCI: rpaphp: Avoid a sometimes-uninitialized warning
clk: imx8mq: Mark AHB clock as critical
gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property()
drm/radeon: Fix EEH during kexec
drm/amd/display: Use proper enum conversion functions
drm/amdgpu: Fix hard hang for S/G display BOs.
drm/rockchip: Check for fast link training before enabling psr
drm/panel: check failure cases in the probe func
drm/bridge: sii902x: fix missing reference to mclk clock
drm/stm: attach gem fence to atomic state
drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
video: ssd1307fb: Start page range at page_offset
drm/amd/display: Copy GSL groups when committing a new context
drm/amd/display: Clear FEC_READY shadow register if DPCD write fails
drm/amd/display: fix not calling ppsmu to trigger PME
drm/amd/display: Power-gate all DSCs at driver init time
drm/amd/display: add monitor patch to add T7 delay
drm/panel: simple: fix AUO g185han01 horizontal blanking
drm/vkms: Avoid assigning 0 for possible_crtc
drm/bridge: tc358767: Increase AUX transfer length limit
drm/mcde: Fix uninitialized variable
drm/vkms: Fix crc worker races

Paolo Pisati (p-pisati) on 2019-10-14
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Eoan):
status: Confirmed → Fix Committed

All autopkgtests for the newly accepted linux-gcp-5.3 (5.3.0-1008.9~18.04.1) for bionic have finished running.
The following regressions have been reported in tests triggered by the package:

linux-gcp-5.3/unknown (amd64)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].


[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

Launchpad Janitor (janitor) wrote :
Download full text (53.1 KiB)

This bug was fixed in the package linux - 5.3.0-22.24

linux (5.3.0-22.24) eoan; urgency=medium

  * [REGRESSION] md/raid0: cannot assemble multi-zone RAID0 with default_layout
    setting (LP: #1849682)
    - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."

  * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
    - SAUCE: shiftfs: Correct id translation for lower fs operations
    - SAUCE: shiftfs: prevent type confusion
    - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling

  * CVE-2018-12207
    - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
    - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
    - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
    - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
    - SAUCE: kvm: Add helper function for creating VM worker threads
    - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
    - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
    - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT

  * CVE-2019-11135
    - x86/msr: Add the IA32_TSX_CTRL MSR
    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
    - x86/speculation/taa: Add mitigation for TSX Async Abort
    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
    - x86/speculation/taa: Add documentation for TSX Async Abort
    - x86/tsx: Add config options to set tsx=on|off|auto
    - [Config] Disable TSX by default when possible

  * CVE-2019-0154
    - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
    - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA

  * CVE-2019-0155
    - SAUCE: drm/i915: Rename gen7 cmdparser tables
    - SAUCE: drm/i915: Disable Secure Batches for gen6+
    - SAUCE: drm/i915: Remove Master tables from cmdparser
    - SAUCE: drm/i915: Add support for mandatory cmdparsing
    - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
    - SAUCE: drm/i915: Allow parsing of unsized batches
    - SAUCE: drm/i915: Add gen9 BCS cmdparsing
    - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
    - SAUCE: drm/i915/cmdparser: Add support for backward jumps
    - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching

linux (5.3.0-21.22) eoan; urgency=medium

  * eoan/linux: 5.3.0-21.22 -proposed tracker (LP: #1850486)

  * Fix signing of staging modules in eoan (LP: #1850234)
    - [Packaging] Leave unsigned modules unsigned after adding .gnu_debuglink

linux (5.3.0-20.21) eoan; urgency=medium

  * eoan/linux: 5.3.0-20.21 -proposed tracker (LP: #1849064)

  * eoan: alsa/sof: Enable SOF_HDA link and codec (LP: #1848490)
    - [Config] Enable SOF_HDA link and codec

  * Eoan update: 5.3.7 upstream stable release (LP: #1848750)
    - panic: ensure preemption is disabled during panic()
    - [Config] updateconfigs for USB_RIO500
    - USB: rio500: Remove Rio 500 kernel driver

Changed in linux (Ubuntu Eoan):
status: Fix Committed → Fix Released
Launchpad Janitor (janitor) wrote :
Download full text (33.2 KiB)

This bug was fixed in the package linux - 5.3.0-24.26

linux (5.3.0-24.26) eoan; urgency=medium

  * eoan/linux: 5.3.0-24.26 -proposed tracker (LP: #1852232)

  * Eoan update: 5.3.9 upstream stable release (LP: #1851550)
    - io_uring: fix up O_NONBLOCK handling for sockets
    - dm snapshot: introduce account_start_copy() and account_end_copy()
    - dm snapshot: rework COW throttling to fix deadlock
    - Btrfs: fix inode cache block reserve leak on failure to allocate data space
    - btrfs: qgroup: Always free PREALLOC META reserve in
    - iio: adc: meson_saradc: Fix memory allocation order
    - iio: fix center temperature of bmc150-accel-core
    - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
    - perf tests: Avoid raising SEGV using an obvious NULL dereference
    - perf map: Fix overlapped map handling
    - perf script brstackinsn: Fix recovery from LBR/binary mismatch
    - perf jevents: Fix period for Intel fixed counters
    - perf tools: Propagate get_cpuid() error
    - perf annotate: Propagate perf_env__arch() error
    - perf annotate: Fix the signedness of failure returns
    - perf annotate: Propagate the symbol__annotate() error return
    - perf annotate: Fix arch specific ->init() failure errors
    - perf annotate: Return appropriate error code for allocation failures
    - perf annotate: Don't return -1 for error when doing BPF disassembly
    - staging: rtl8188eu: fix null dereference when kzalloc fails
    - RDMA/siw: Fix serialization issue in write_space()
    - RDMA/hfi1: Prevent memory leak in sdma_init
    - RDMA/iw_cxgb4: fix SRQ access from dump_qp()
    - RDMA/iwcm: Fix a lock inversion issue
    - HID: hyperv: Use in-place iterator API in the channel callback
    - kselftest: exclude failed TARGETS from runlist
    - selftests/kselftest/runner.sh: Add 45 second timeout per test
    - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
    - arm64: cpufeature: Effectively expose FRINT capability to userspace
    - arm64: Fix incorrect irqflag restore for priority masking for compat
    - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419
    - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
    - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()'
    - serial/sifive: select SERIAL_EARLYCON
    - tty: n_hdlc: fix build on SPARC
    - misc: fastrpc: prevent memory leak in fastrpc_dma_buf_attach
    - RDMA/core: Fix an error handling path in 'res_get_common_doit()'
    - RDMA/cm: Fix memory leak in cm_add/remove_one
    - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path
    - RDMA/mlx5: Do not allow rereg of a ODP MR
    - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu
    - RDMA/mlx5: Add missing synchronize_srcu() for MW cases
    - gpio: max77620: Use correct unit for debounce times
    - fs: cifs: mute -Wunused-const-variable message
    - arm64: vdso32: Fix broken compat vDSO build warnings
    - arm64: vdso32: Detect binutils support for dmb ishld
    - serial: mctrl_gpio: Check for NULL pointer
    - serial: 8250_...

Changed in linux (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers