Disco update: upstream stable patchset 2019-11-22
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Disco |
Fix Released
|
Undecided
|
Kamal Mostafa |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-11-22
from git://git.
bonding: fix state transition issue in link monitoring
CDC-NCM: handle incomplete transfer of MTU
ipv4: Fix table id reference in fib_sync_down_addr
net: ethernet: octeon_mgmt: Account for second possible VLAN header
net: fix data-race in neigh_event_send()
net: qualcomm: rmnet: Fix potential UAF when unregistering
net: usb: qmi_wwan: add support for DW5821e with eSIM support
NFC: fdp: fix incorrect free object
nfc: netlink: fix double device reference drop
NFC: st21nfca: fix double free
qede: fix NULL pointer deref in __qede_remove()
net: mscc: ocelot: don't handle netdev events for other netdevs
net: mscc: ocelot: fix NULL pointer on LAG slave removal
ipv6: fixes rt6_probe() and fib6_nh->last_probe init
net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
ALSA: timer: Fix incorrectly assigned timer instance
ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series
ALSA: hda/ca0132 - Fix possible workqueue stall
mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
mm, meminit: recalculate pcpu batch and high limits after init completes
mm: thp: handle page cache THP correctly in PageTransCompou
mm, vmstat: hide /proc/pagetypeinfo from normal users
dump_stack: avoid the livelock of the dump_lock
tools: gpio: Use !building_
perf tools: Fix time sorting
drm/radeon: fix si_enable_smc_cac() failed issue
HID: wacom: generic: Treat serial number and related fields as unsigned
soundwire: depend on ACPI
soundwire: bus: set initial value to port_status
arm64: Do not mask out PTE_RDONLY in pte_same()
ceph: fix use-after-free in __ceph_remove_cap()
ceph: add missing check in d_revalidate snapdir handling
iio: adc: stm32-adc: fix stopping dma
iio: imu: adis16480: make sure provided frequency is positive
iio: srf04: fix wrong limitation in distance measuring
ARM: sunxi: Fix CPU powerdown on A83T
netfilter: nf_tables: Align nft_expr private data to 64-bit
netfilter: ipset: Fix an error code in ip_set_sockfn_get()
intel_th: pci: Add Comet Lake PCH support
intel_th: pci: Add Jasper Lake PCH support
x86/apic/32: Avoid bogus LDR warnings
SMB3: Fix persistent handles reconnect
can: usb_8dev: fix use-after-free on disconnect
can: flexcan: disable completely the ECC mechanism
can: c_can: c_can_poll(): only read status register after status IRQ
can: peak_usb: fix a potential out-of-sync while decoding packets
can: rx-offload: can_rx_
can: gs_usb: gs_can_open(): prevent memory leak
can: dev: add missing of_node_put() after calling of_get_
can: mcba_usb: fix use-after-free on disconnect
can: peak_usb: fix slab info leak
configfs: stash the data we need into configfs_buffer at open time
configfs_
configfs: new object reprsenting tree fragments
configfs: provide exclusion between IO and removals
configfs: fix a deadlock in configfs_symlink()
ALSA: usb-audio: More validations of descriptor units
ALSA: usb-audio: Simplify parse_audio_unit()
ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
ALSA: usb-audio: Remove superfluous bLength checks
ALSA: usb-audio: Clean up check_input_term()
ALSA: usb-audio: Fix possible NULL dereference at create_
ALSA: usb-audio: remove some dead code
ALSA: usb-audio: Fix copy&paste error in the validator
usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
usbip: Implement SG support to vhci-hcd and stub driver
PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
HID: google: add magnemite/
dmaengine: xilinx_dma: Fix control reg update in vdma_channel_
dmaengine: sprd: Fix the possible memory leak issue
HID: intel-ish-hid: fix wrong error handling in ishtp_cl_
RDMA/mlx5: Clear old rate limit when closing QP
iw_cxgb4: fix ECN check on the passive accept
RDMA/qedr: Fix reported firmware version
net/mlx5e: TX, Fix consumer index of error cqe dump
net/mlx5: prevent memory leak in mlx5_fpga_
scsi: qla2xxx: fixup incorrect usage of host_byte
RDMA/uverbs: Prevent potential underflow
net: openvswitch: free vport unless register_
scsi: lpfc: Honor module parameter lpfc_use_adisc
scsi: qla2xxx: Initialized mailbox to prevent driver load failure
netfilter: nf_flow_table: set timeout before insertion into hashes
ipvs: don't ignore errors in case refcounting ip_vs module fails
ipvs: move old_secure_tcp into struct netns_ipvs
bonding: fix unexpected IFF_BONDING bit unset
macsec: fix refcnt leak in module exit routine
usb: fsl: Check memory resource before releasing it
usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
usb: gadget: composite: Fix possible double free memory bug
usb: dwc3: pci: prevent memory leak in dwc3_pci_probe
usb: gadget: configfs: fix concurrent issue between composite APIs
usb: dwc3: remove the call trace of USBx_GFLADJ
perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity
perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h)
perf/x86/uncore: Fix event group support
USB: Skip endpoints with 0 maxpacket length
USB: ldusb: use unsigned size format specifiers
usbip: tools: Fix read_usb_
RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
RDMA/hns: Prevent memory leaks of eq->buf_list
scsi: qla2xxx: stop timer in shutdown path
nvme-multipath: fix possible io hang after ctrl reconnect
fjes: Handle workqueue allocation failure
net: hisilicon: Fix "Trying to free already-free IRQ"
net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up
net: mscc: ocelot: refuse to overwrite the port's native vlan
iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41
drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
drm/amd/display: Passive DP->HDMI dongle detection fix
hv_netvsc: Fix error handling in netvsc_attach()
usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
NFSv4: Don't allow a cached open with a revoked delegation
net: ethernet: arc: add the missed clk_disable_
igb: Fix constant media auto sense switching when no cable is connected
e1000: fix memory leaks
pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
ocfs2: protect extent tree in ocfs2_prepare_
pinctrl: cherryview: Fix irq_valid_mask calculation
blkcg: make blkcg_print_stat() print stats only for online blkgs
iio: imu: mpu6050: Add support for the ICM 20602 IMU
iio: imu: inv_mpu6050: fix no data on MPU6050
mm/filemap.c: don't initiate writeback if mapping has no dirty pages
cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead
usbip: Fix free of unallocated memory in vhci tx
netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
net: prevent load/store tearing on sk->sk_stamp
iio: imu: mpu6050: Fix FIFO layout for ICM20602
vsock/virtio: fix sock refcnt holding during the shutdown
x86/speculation
x86/cpu: Add Tremont to the cpu vulnerability whitelist
Documentation: Add ITLB_MULTIHIT documentation
net/tls: fix sk_msg trim on fallback to copy mode
net/tls: add a TX lock
selftests/tls: add test for concurrent recv and send
net/smc: fix ethernet interface refcounting
perf map: Use zalloc for map_groups
soundwire: depend on ACPI || OF
ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address
ceph: fix RCU case handling in ceph_d_revalidate()
ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
ceph: don't allow copy_file_range when stripe_count != 1
cpufreq: intel_pstate: Fix invalid EPB setting
dmaengine: sprd: Fix the link-list pointer register configuration issue
dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer
net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
scsi: ufs-bsg: Wake the device before sending raw upiu commands
bpf: Fix use after free in subprog's jited symbol removal
bpf: Fix use after free in bpf_get_prog_name
xsk: Fix registration of Rx-only sockets
net: phy: smsc: LAN8740: add PHY_RST_
virt_wifi: fix refcnt leak in module exit routine
hwmon: (ina3221) Fix read timeout issue
sched/topology: Don't try to build empty sched domains
sched/topology: Allow sched_asym_
mt76: dma: fix buffer unmap with non-linear skbs
drm/amd/display: do not synchronize "drr" displays
SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding
efi: libstub/arm: Account for firmware reserved memory at the base of RAM
x86, efi: Never relocate kernel below lowest acceptable address
arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
arm64: apply ARM64_ERRATUM_
arm64: Brahma-B53 is SSB and spectre v2 safe
arm64: apply ARM64_ERRATUM_
arm64: errata: Update stale comment
net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run
UBUNTU: upstream stable to v4.19.84, v5.3.11
CVE References
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
Changed in linux (Ubuntu Disco): | |
status: | New → In Progress |
assignee: | nobody → Kamal Mostafa (kamalmostafa) |
description: | updated |
Changed in linux (Ubuntu Disco): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu): | |
status: | Confirmed → Invalid |
This bug was fixed in the package linux - 5.0.0-38.41
---------------
linux (5.0.0-38.41) disco; urgency=medium
* disco/linux: 5.0.0-38.41 -proposed tracker (LP: #1854788)
* [Regression] Failed to boot disco kernel built from master-next (kernel
kernel NULL pointer dereference) (LP: #1853981)
- SAUCE: blk-mq: Fix blk_mq_make_request for mq devices
* CVE-2019-14901 process_ tdls_action_ frame()
- SAUCE: mwifiex: Fix heap overflow in mmwifiex_
* CVE-2019-14896 // CVE-2019-14897
- SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor
* CVE-2019-14895 process_ country_ ie()
- SAUCE: mwifiex: fix possible heap overflow in mwifiex_
* [CML] New device id's for CMP-H (LP: #1846335)
- mmc: sdhci-pci: Add another Id for Intel CML
- i2c: i801: Add support for Intel Comet Lake PCH-H
- mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial flash
- mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs
* Please add patch fixing RK818 ID detection (LP: #1853192)
- SAUCE: mfd: rk808: Fix RK818 ID template
* [SRU][B/ OEM-B/OEM- OSP1/D] Enable new Elan touchpads which are not in current
whitelist (LP: #1853246)
- Input: elan_i2c - export the device id whitelist
- HID: quirks: Refactor ELAN 400 and 401 handling
* Lenovo dock MAC Address pass through doesn't work in Ubuntu (LP: #1827961)
- r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2
* [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2
(LP: #1847451)
- SAUCE: tools/power turbostat: Add Cometlake support
* External microphone can't work on some dell machines with the codec alc256
or alc236 (LP: #1853791)
- SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
- SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table
* Memory leak in net/xfrm/ xfrm_state. c - 8 pages per ipsec connection
(LP: #1853197)
- xfrm: Fix memleak on xfrm state destroy
* CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
- powerpc/64s: support nospectre_v2 cmdline option
- powerpc/book3s64: Fix link stack flush on context switch
- KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
* Raydium Touchscreen on ThinkPad L390 does not work (LP: #1849721)
- HID: i2c-hid: fix no irq after reset on raydium 3118
* Make Goodix I2C touchpads work (LP: #1853842)
- HID: i2c-hid: Remove runtime power management
- HID: i2c-hid: Send power-on command after reset
* Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901)
- Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390
2-in-1"
- lib: devres: add a helper function for ioremap_uc
- mfd: intel-lpss: Use devm_ioremap_uc for MMIO
* CVE-2019-19055 get_ftm_ responder_ stats
- nl80211: fix memory leak in nl80211_
* [CML-S62] Need enable intel_rapl patch support for Comet lake- S 6+2 intel_rapl: add support for CometLake Mobile intel_rapl: add support for Cometlake desktop
(LP: #1847454)
- powercap/
- powercap/
* [CML-S62] Need enable intel_pmc_core driver patch for Comet l...