Eoan update: v5.3.5 upstream stable release

Bug #1848047 reported by Paolo Pisati on 2019-10-14
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Undecided
Unassigned
Eoan
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.3.5 upstream stable release
       from git://git.kernel.org/

Linux 5.3.5
vfs: set fs_context::user_ns for reconfigure
9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel
kexec: bail out upon SIGKILL when allocating memory.
NFC: fix attrs checks in netlink interface
dm zoned: fix invalid memory access
dm raid: fix updating of max_discard_sectors limit
smack: use GFP_NOFS while holding inode_smack::smk_lock
Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
net: sched: taprio: Avoid division by zero on invalid link speed
net: sched: cbs: Avoid division by zero when calculating the port rate
net: socionext: netsec: always grab descriptor lock
net: dsa: sja1105: Prevent leaking memory
net: dsa: sja1105: Ensure PTP time for rxtstamp reconstruction is not in the past
ptp_qoriq: Initialize the registers' spinlock before calling ptp_qoriq_settime
net: dsa: sja1105: Fix sleeping while atomic in .port_hwtstamp_set
xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
net: dsa: sja1105: Initialize the meta_lock
net/rds: Fix error handling in rds_ib_add_one()
udp: only do GSO if # of segs > 1
tcp: adjust rto_base in retransmits_timed_out()
net: dsa: rtl8366: Check VLAN ID and not ports
vsock: Fix a lockdep warning in __vsock_release()
udp: fix gso_segs calculations
tipc: fix unlimited bundling of small messages
sch_dsmark: fix potential NULL deref in dsmark_init()
sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
rxrpc: Fix rxrpc_recvmsg tracepoint
qmi_wwan: add support for Cinterion CLS8 devices
nfc: fix memory leak in llcp_sock_bind()
net: Unpublish sk from sk_reuseport_cb before call_rcu
net: sched: taprio: Fix potential integer overflow in taprio_set_picos_per_byte
net: qlogic: Fix memory leak in ql_alloc_large_buffers
net: ipv4: avoid mixed n_redirects and rate_tokens usage
ipv6: Handle missing host route in __ipv6_ifa_notify
ipv6: drop incoming packets having a v4mapped source address
hso: fix NULL-deref on tty open
erspan: remove the incorrect mtu limit for erspan
cxgb4:Fix out-of-bounds MSI-X info array access
arm: use STACK_TOP when computing mmap base address
arm: properly account for stack randomization and stack guard gap
mips: properly account for stack randomization and stack guard gap
arm64: consider stack randomization for mmap base only when necessary
kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
ocfs2: wait for recovering done after direct unlock request
kbuild: clean compressed initramfs image
mm: add dummy can_do_mlock() helper
crypto: hisilicon - Fix double free in sec_free_hw_sgl()
tools/power/x86/intel-speed-select: Fix high priority core mask over count
hypfs: Fix error number left in struct pointer member
pktcdvd: remove warning on attempting to register non-passthrough dev
fat: work around race with userspace's read via blockdev while mounting
block, bfq: push up injection only after setting service time
i2c: tegra: Move suspend handling to NOIRQ phase
ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned address
ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
PCI: Use static const struct, not const static struct
security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb()
PCI: exynos: Propagate errors for optional PHYs
PCI: imx6: Propagate errors for optional regulators
PCI: histb: Propagate errors for optional regulators
PCI: rockchip: Propagate errors for optional regulators
HID: apple: Fix stuck function keys when using FN
PCI: Add pci_info_ratelimited() to ratelimit PCI separately
selinux: fix residual uses of current_security() for the SELinux blob
power: supply: register HWMON devices with valid names
rtc: pcf85363/pcf85263: fix regmap error in set_time
rtc: snvs: fix possible race condition
ARM: 8875/1: Kconfig: default to AEABI w/ Clang
PCI: mobiveil: Fix the CPU base address setup in inbound window
soundwire: intel: fix channel number reported by hardware
ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as writes
mips/atomic: Fix smp_mb__{before,after}_atomic()
livepatch: Nullify obj->mod in klp_module_coming()'s error path
PCI: layerscape: Add the bar_fixed_64bit property to the endpoint driver
PCI: pci-hyperv: Fix build errors on non-SYSFS config
mips/atomic: Fix loongson_llsc_mb() wreckage
rtc: bd70528: fix driver dependencies
HID: wacom: Fix several minor compiler warnings
PCI: tegra: Fix OF node reference leak
mfd: intel-lpss: Remove D3cold delay
i2c-cht-wc: Fix lockdep warning
MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
MIPS: Ingenic: Disable broken BTB lookup optimization.
ext4: fix potential use after free after remounting with noblock_validity
f2fs: fix to drop meta/node pages during umount
dma-buf/sw_sync: Synchronize signal vs syncpt free
scsi: core: Reduce memory required for SCSI logging
clk: sprd: add missing kfree
mbox: qcom: add APCS child device for QCS404
powerpc: dump kernel log before carrying out fadump or kdump
clk: Make clk_bulk_get_all() return a valid "id"
clk: imx: clk-pll14xx: unbypass PLL by default
clk: imx: pll14xx: avoid glitch when set rate
clk: at91: select parent if main oscillator or bypass is enabled
arm64: fix unreachable code issue with cmpxchg
ARM: dts: dir685: Drop spi-cpol from the display
mailbox: mediatek: cmdq: clear the event in cmdq initial flow
pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
powerpc/pseries: correctly track irq state in default idle
clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
powerpc/eeh: Clean up EEH PEs after recovery finishes
pstore: fs superblock limits
powerpc/64s/exception: machine check use correct cfar for late handler
drm/amdgpu/si: fix ASIC tests
kbuild: Do not enable -Wimplicit-fallthrough for clang for now
selftests/powerpc: Retry on host facility unavailable
drm/amd/display: fix trigger not generated for freesync
drm/amd/display: fix MPO HUBP underflow with Scatter Gather
drm/amd/powerpaly: fix navi series custom peak level value error
drm/amd/display: support spdif
clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
pinctrl: amd: disable spurious-firing GPIO IRQs
drm/nouveau/volt: Fix for some cards having 0 maximum voltage
drm/nouveau/kms/tu102-: disable input lut when input is already FP16
drm/amdgpu/sdma5: fix number of sdma5 trap irq types for navi1x
vfio_pci: Restore original state on release
powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
pinctrl: tegra: Fix write barrier placement in pmx_writel
powerpc/perf: fix imc allocation failure handling
powerpc/pseries/mobility: use cond_resched when updating device tree
powerpc/64s/radix: Fix memory hotplug section page table creation
powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this function
powerpc/ptdump: fix walk_pagetables() address mismatch
powerpc/rtas: use device model APIs and serialization during LPM
powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
clk: zx296718: Don't reference clk_init_data after registration
clk: sprd: Don't reference clk_init_data after registration
clk: meson: axg-audio: Don't reference clk_init_data after registration
clk: sirf: Don't reference clk_init_data after registration
clk: actions: Don't reference clk_init_data after registration
powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window
drm/amd/display: Register VUPDATE_NO_LOCK interrupts for DCN2
drm/amd/display: reprogram VM config when system resume
drm/amd/display: Fix frames_to_insert math
drm/amd/display: fix issue where 252-255 values are clipped
clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
clk: qoriq: Fix -Wunused-const-variable
ipmi_si: Only schedule continuously in the thread in maintenance mode
pinctrl: stmfx: update pinconf settings
PCI: rpaphp: Avoid a sometimes-uninitialized warning
clk: imx8mq: Mark AHB clock as critical
gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property()
drm/radeon: Fix EEH during kexec
drm/amd/display: Use proper enum conversion functions
drm/amdgpu: Fix hard hang for S/G display BOs.
drm/rockchip: Check for fast link training before enabling psr
drm/panel: check failure cases in the probe func
drm/bridge: sii902x: fix missing reference to mclk clock
drm/stm: attach gem fence to atomic state
drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
video: ssd1307fb: Start page range at page_offset
drm/amd/display: Copy GSL groups when committing a new context
drm/amd/display: Clear FEC_READY shadow register if DPCD write fails
drm/amd/display: fix not calling ppsmu to trigger PME
drm/amd/display: Power-gate all DSCs at driver init time
drm/amd/display: add monitor patch to add T7 delay
drm/panel: simple: fix AUO g185han01 horizontal blanking
drm/vkms: Avoid assigning 0 for possible_crtc
drm/bridge: tc358767: Increase AUX transfer length limit
drm/mcde: Fix uninitialized variable
drm/vkms: Fix crc worker races

Paolo Pisati (p-pisati) on 2019-10-14
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Eoan):
status: Confirmed → Fix Committed

All autopkgtests for the newly accepted linux-gcp-5.3 (5.3.0-1008.9~18.04.1) for bionic have finished running.
The following regressions have been reported in tests triggered by the package:

linux-gcp-5.3/unknown (amd64)

Please visit the excuses page listed below and investigate the failures, proceeding afterwards as per the StableReleaseUpdates policy regarding autopkgtest regressions [1].

https://people.canonical.com/~ubuntu-archive/proposed-migration/bionic/update_excuses.html#linux-gcp-5.3

[1] https://wiki.ubuntu.com/StableReleaseUpdates#Autopkgtest_Regressions

Thank you!

Launchpad Janitor (janitor) wrote :
Download full text (53.1 KiB)

This bug was fixed in the package linux - 5.3.0-22.24

---------------
linux (5.3.0-22.24) eoan; urgency=medium

  * [REGRESSION] md/raid0: cannot assemble multi-zone RAID0 with default_layout
    setting (LP: #1849682)
    - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."

  * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
    - SAUCE: shiftfs: Correct id translation for lower fs operations
    - SAUCE: shiftfs: prevent type confusion
    - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling

  * CVE-2018-12207
    - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
    - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
      active
    - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
    - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
    - SAUCE: kvm: Add helper function for creating VM worker threads
    - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
    - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
    - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT

  * CVE-2019-11135
    - x86/msr: Add the IA32_TSX_CTRL MSR
    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
    - x86/speculation/taa: Add mitigation for TSX Async Abort
    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
    - x86/speculation/taa: Add documentation for TSX Async Abort
    - x86/tsx: Add config options to set tsx=on|off|auto
    - [Config] Disable TSX by default when possible

  * CVE-2019-0154
    - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
    - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA

  * CVE-2019-0155
    - SAUCE: drm/i915: Rename gen7 cmdparser tables
    - SAUCE: drm/i915: Disable Secure Batches for gen6+
    - SAUCE: drm/i915: Remove Master tables from cmdparser
    - SAUCE: drm/i915: Add support for mandatory cmdparsing
    - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
    - SAUCE: drm/i915: Allow parsing of unsized batches
    - SAUCE: drm/i915: Add gen9 BCS cmdparsing
    - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
    - SAUCE: drm/i915/cmdparser: Add support for backward jumps
    - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching

linux (5.3.0-21.22) eoan; urgency=medium

  * eoan/linux: 5.3.0-21.22 -proposed tracker (LP: #1850486)

  * Fix signing of staging modules in eoan (LP: #1850234)
    - [Packaging] Leave unsigned modules unsigned after adding .gnu_debuglink

linux (5.3.0-20.21) eoan; urgency=medium

  * eoan/linux: 5.3.0-20.21 -proposed tracker (LP: #1849064)

  * eoan: alsa/sof: Enable SOF_HDA link and codec (LP: #1848490)
    - [Config] Enable SOF_HDA link and codec

  * Eoan update: 5.3.7 upstream stable release (LP: #1848750)
    - panic: ensure preemption is disabled during panic()
    - [Config] updateconfigs for USB_RIO500
    - USB: rio500: Remove Rio 500 kernel driver
   ...

Changed in linux (Ubuntu Eoan):
status: Fix Committed → Fix Released
Launchpad Janitor (janitor) wrote :
Download full text (33.2 KiB)

This bug was fixed in the package linux - 5.3.0-24.26

---------------
linux (5.3.0-24.26) eoan; urgency=medium

  * eoan/linux: 5.3.0-24.26 -proposed tracker (LP: #1852232)

  * Eoan update: 5.3.9 upstream stable release (LP: #1851550)
    - io_uring: fix up O_NONBLOCK handling for sockets
    - dm snapshot: introduce account_start_copy() and account_end_copy()
    - dm snapshot: rework COW throttling to fix deadlock
    - Btrfs: fix inode cache block reserve leak on failure to allocate data space
    - btrfs: qgroup: Always free PREALLOC META reserve in
      btrfs_delalloc_release_extents()
    - iio: adc: meson_saradc: Fix memory allocation order
    - iio: fix center temperature of bmc150-accel-core
    - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
    - perf tests: Avoid raising SEGV using an obvious NULL dereference
    - perf map: Fix overlapped map handling
    - perf script brstackinsn: Fix recovery from LBR/binary mismatch
    - perf jevents: Fix period for Intel fixed counters
    - perf tools: Propagate get_cpuid() error
    - perf annotate: Propagate perf_env__arch() error
    - perf annotate: Fix the signedness of failure returns
    - perf annotate: Propagate the symbol__annotate() error return
    - perf annotate: Fix arch specific ->init() failure errors
    - perf annotate: Return appropriate error code for allocation failures
    - perf annotate: Don't return -1 for error when doing BPF disassembly
    - staging: rtl8188eu: fix null dereference when kzalloc fails
    - RDMA/siw: Fix serialization issue in write_space()
    - RDMA/hfi1: Prevent memory leak in sdma_init
    - RDMA/iw_cxgb4: fix SRQ access from dump_qp()
    - RDMA/iwcm: Fix a lock inversion issue
    - HID: hyperv: Use in-place iterator API in the channel callback
    - kselftest: exclude failed TARGETS from runlist
    - selftests/kselftest/runner.sh: Add 45 second timeout per test
    - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
    - arm64: cpufeature: Effectively expose FRINT capability to userspace
    - arm64: Fix incorrect irqflag restore for priority masking for compat
    - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419
    - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
    - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()'
    - serial/sifive: select SERIAL_EARLYCON
    - tty: n_hdlc: fix build on SPARC
    - misc: fastrpc: prevent memory leak in fastrpc_dma_buf_attach
    - RDMA/core: Fix an error handling path in 'res_get_common_doit()'
    - RDMA/cm: Fix memory leak in cm_add/remove_one
    - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path
    - RDMA/mlx5: Do not allow rereg of a ODP MR
    - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu
    - RDMA/mlx5: Add missing synchronize_srcu() for MW cases
    - gpio: max77620: Use correct unit for debounce times
    - fs: cifs: mute -Wunused-const-variable message
    - arm64: vdso32: Fix broken compat vDSO build warnings
    - arm64: vdso32: Detect binutils support for dmb ishld
    - serial: mctrl_gpio: Check for NULL pointer
    - serial: 8250_...

Changed in linux (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers