Disco update: upstream stable patchset 2019-12-17
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Disco |
Fix Released
|
Undecided
|
Kamal Mostafa |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-12-17
from git://git.
rsi: release skb if rsi_prepare_beacon fails
arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator
sparc64: implement ioremap_uc
lp: fix sparc64 LPSETTIMEOUT ioctl
usb: gadget: u_serial: add missing port entry locking
tty: serial: fsl_lpuart: use the sg count from dma_map_sg
tty: serial: msm_serial: Fix flow control
serial: pl011: Fix DMA ->flush_buffer()
serial: serial_core: Perform NULL checks for break_ctl ops
serial: ifx6x60: add missed pm_runtime_disable
autofs: fix a leak in autofs_
RDMA/hns: Correct the value of HNS_ROCE_
iwlwifi: pcie: don't consider IV len in A-MSDU
exportfs_
audit_get_nd(): don't unlock parent too early
NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
xfrm: release device reference for invalid state
Input: cyttsp4_core - fix use after free bug
sched/core: Avoid spurious lock dependencies
perf/core: Consistently fail fork on allocation failures
ALSA: pcm: Fix stream lock usage in snd_pcm_
drm/sun4i: tcon: Set min division of TCON0_DCLK to 1.
selftests: kvm: fix build with glibc >= 2.30
rsxx: add missed destroy_workqueue calls in remove
net: ep93xx_eth: fix mismatch of request_mem_region in remove
i2c: core: fix use after free in of_i2c_notify
fuse: verify nlink
fuse: verify attributes
ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
ALSA: pcm: oss: Avoid potential buffer overflows
ALSA: hda - Add mute led support for HP ProBook 645 G4
Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
Input: goodix - add upside-down quirk for Teclast X89 tablet
coresight: etm4x: Fix input validation for sysfs.
Input: Fix memory leak in psxpad_spi_probe
x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
CIFS: Fix NULL-pointer dereference in smb2_push_
CIFS: Fix SMB2 oplock break processing
tty: vt: keyboard: reject invalid keycodes
can: slcan: Fix use-after-free Read in slcan_open
kernfs: fix ino wrap-around detection
jbd2: Fix possible overflow in jbd2_log_
drm/msm: fix memleak on release
drm/i810: Prevent underflow in ioctl
arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc node"
KVM: arm/arm64: vgic: Don't rely on the wrong pending table
KVM: x86: do not modify masked bits of shared MSRs
KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
KVM: x86: Grab KVM's srcu lock when setting nested state
crypto: crypto4xx - fix double-free in crypto4xx_
crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize
crypto: af_alg - cast ki_complete ternary op to int
crypto: ccp - fix uninitialized list head
crypto: ecdh - fix big endian bug in ECC library
crypto: user - fix memory leak in crypto_report
spi: atmel: Fix CS high support
mwifiex: update set_mac_address logic
can: ucan: fix non-atomic allocation in completion handler
RDMA/qib: Validate ->show()/store() callbacks before calling them
iomap: Fix pipe page leakage during splicing
thermal: Fix deadlock in thermal thermal_
vcs: prevent write access to vcsu devices
binder: Fix race between mmap() and binder_
binder: Handle start==NULL in binder_
ALSA: hda - Fix pending unsol events at shutdown
watchdog: aspeed: Fix clock behaviour for ast2600
perf script: Fix invalid LBR/binary mismatch error
xfs: add missing error check in xfs_prepare_shift()
KVM: x86: fix out-of-bounds write in KVM_GET_
net: qrtr: fix memort leak in qrtr_tun_write_iter
appletalk: Fix potential NULL pointer dereference in unregister_
appletalk: Set error code if register_
time: Zero the upper 32-bits in __kernel_timespec on 32-bit
RDMA/hns: Correct the value of srq_desc_size
ecryptfs: fix unlink and rmdir in face of underlying fs modifications
x86/resctrl: Fix potential lockdep warning
ravb: implement MTU change while device is up
net: hns3: reallocate SSU' buffer size when pfc_en changes
net: hns3: fix ETS bandwidth validation bug
media: rc: mark input device as pointing stick
nfsd: Ensure CLONE persists data and metadata changes to the target file
drm: damage_helper: Fix race checking plane->state->fb
KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter
crypto: geode-aes - switch to skcipher for cbc(aes) fallback
spi: stm32-qspi: Fix kernel oops when unbinding driver
spi: Fix SPI_CS_HIGH setting when using native and GPIO CS
spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS
EDAC/ghes: Fix locking and memory barrier issues
kselftest: Fix NULL INSTALL_PATH for TARGETS runlist
ALSA: hda: hdmi - fix pin setup on Tigerlake
UBUNTU: upstream stable to v4.19.89, v5.3.16
CVE References
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
Changed in linux (Ubuntu Disco): | |
status: | New → In Progress |
assignee: | nobody → Kamal Mostafa (kamalmostafa) |
description: | updated |
Changed in linux (Ubuntu Disco): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu): | |
status: | Confirmed → Invalid |
This bug was fixed in the package linux - 5.0.0-40.44
---------------
linux (5.0.0-40.44) disco; urgency=medium
* disco/linux: 5.0.0-40.44 -proposed tracker (LP: #1859724)
* use-after-free in i915_ppgtt_close (LP: #1859522) // CVE-2020-7053
- SAUCE: drm/i915: Fix use-after-free when destroying GEM context
* CVE-2019-14615
- drm/i915/gen9: Clear residual context state on context switch
* System hang with kernel traces while entering reboot process on a Disco
ARM64 moonshot node (LP: #1859582)
- Revert "RDMA/cm: Fix memory leak in cm_add/remove_one"
linux (5.0.0-39.43) disco; urgency=medium
* disco/linux: 5.0.0-39.43 -proposed tracker (LP: #1858547)
* [Regression] usb usb2-port2: Cannot enable. Maybe the USB cable is bad?
(LP: #1856608)
- SAUCE: Revert "usb: handle warm-reset port requests on hub resume"
* PAN is broken for execute-only user mappings on ARMv8 (LP: #1858815)
- arm64: Revert support for execute-only user mappings
* Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
- SAUCE: USB: core: Make port power cycle a seperate helper function
- SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
* [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_ T_nexus_ reset() T_nexus_ reset()
(LP: #1853992)
- scsi: hisi_sas: Fix out of bound at debug_I_
* [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
- scsi: hisi_sas: Assign NCQ tag for all NCQ commands
* [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
reset (LP: #1853997)
- scsi: hisi_sas: Fix the conflict between device gone and host reset
* scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
- scsi: hisi_sas: Check sas_port before using it
* CVE-2019-18885
- btrfs: refactor btrfs_find_device() take fs_devices as argument
- btrfs: merge btrfs_find_device and find_device
* Integrate Intel SGX driver into linux-azure (LP: #1844245)
- [Packaging] Add systemd service to load intel_sgx
* [SRU][B/ OEM-B/OEM- OSP1/D/ E/F] Add LG I2C touchscreen multitouch support
(LP: #1857541)
- SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
* cifs: DFS Caching feature causing problems traversing multi-tier DFS setups
(LP: #1854887)
- cifs: Fix retrieval of DFS referrals in cifs_mount()
* qede driver causes 100% CPU load (LP: #1855409)
- qede: Handle infinite driver spinning for Tx timestamp.
* [roce-1126] RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
(LP: #1853989)
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
* [roce-1126] RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
- RDMA/hns: Fixs hw access invalid dma memory error
* [hns-1126]net: hns3: revert to old channel when setting new channel num fail
(LP: #1853983)
- net: hns3: revert to old channel when setting new channel num fail
* [hns-1126]net: hns3: fix port setting handle for fibre port
(LP: #1853984)
- net: hns3: fix port setting handle for fibre...