Bionic update: upstream stable patchset 2018-07-06

[Kamal Mostafa]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2018-07-06 (ported from v4.14.41 and v4.16.9)
       from git://git.kernel.org/

sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client
drm/i915: Adjust eDP's logical vco in a reliable place.
drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages
bdi: Fix use after free bug in debugfs_remove()
i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr()
perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map()
perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[]
perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver
perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr
perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_*
tracing/uprobe_event: Fix strncpy corner case
sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[]
smb3: directory sync should not return an error
nvme: add quirk to force medium priority for SQ creation
thermal: exynos: Propagate error value from tmu_read()
thermal: exynos: Reading temperature makes sense only when TMU is turned on
Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets
Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174"
cpufreq: schedutil: Avoid using invalid next_freq
atm: zatm: Fix potential Spectre v1
net: atm: Fix potential Spectre v1
drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear()
drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear()
drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log
drm/vc4: Fix scaling of uni-planar formats
can: hi311x: Work around TX complete interrupt erratum
can: hi311x: Acquire SPI lock on ->do_get_berr_counter
can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg()
ceph: fix rsize/wsize capping in ceph_direct_read_write()
mm, oom: fix concurrent munlock and oom reaper unmap, v3
mm: sections are not offlined during memory hotremove
z3fold: fix reclaim lock-ups
tracing: Fix regex_match_front() to not over compare the test string
dm integrity: use kvfree for kvmalloc'd memory
libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs
rfkill: gpio: fix memory leak in probe error path
gpio: fix error path in lineevent_create
gpio: fix aspeed_gpio unmask irq
gpioib: do not free unrequested descriptors
bdi: Fix oops in wb_workfn()
bdi: wake up concurrent wb_shutdown() callers.
tcp: fix TCP_REPAIR_QUEUE bound checking
perf: Remove superfluous allocation error check
memcg: fix per_node_info cleanup
inetpeer: fix uninit-value in inet_getpeer
soreuseport: initialise timewait reuseport field
ipv4: fix uninit-value in ip_route_output_key_hash_rcu()
dccp: initialize ireq->ir_mark
net: fix uninit-value in __hw_addr_add_ex()
net: initialize skb->peeked when cloning
net: fix rtnh_ok()
netlink: fix uninit-value in netlink_sendmsg
crypto: af_alg - fix possible uninit-value in alg_bind()
kcm: Call strp_stop before strp_done in kcm_attach
netfilter: ebtables: don't attempt to allocate 0-sized compat array
ipvs: fix rtnl_lock lockups caused by start_sync_thread
ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.15.0-33.36

---------------
linux (4.15.0-33.36) bionic; urgency=medium

  * linux: 4.15.0-33.36 -proposed tracker (LP: #1787149)

  * RTNL assertion failure on ipvlan (LP: #1776927)
    - ipvlan: drop ipv6 dependency
    - ipvlan: use per device spinlock to protect addrs list updates
    - SAUCE: fix warning from "ipvlan: drop ipv6 dependency"

  * ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941)
    - test_bpf: flag tests that cannot be jited on s390

  * HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689)
    - drm/nouveau: fix nouveau_dsm_get_client_id()'s return type
    - drm/radeon: fix radeon_atpx_get_client_id()'s return type
    - drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type
    - platform/x86: apple-gmux: fix gmux_get_client_id()'s return type
    - ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA
    - vga_switcheroo: set audio client id according to bound GPU id

  * locking sockets broken due to missing AppArmor socket mediation patches
    (LP: #1780227)
    - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets

  * Update2 for ocxl driver (LP: #1781436)
    - ocxl: Fix page fault handler in case of fault on dying process

  * netns: unable to follow an interface that moves to another netns
    (LP: #1774225)
    - net: core: Expose number of link up/down transitions
    - dev: always advertise the new nsid when the netns iface changes
    - dev: advertise the new ifindex when the netns iface changes

  * [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066)
    - block, bfq: fix occurrences of request finish method's old name
    - block, bfq: remove batches of confusing ifdefs
    - block, bfq: add requeue-request hook

  * HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763)
    - ALSA: hda: add mute led support for HP ProBook 455 G5

  * [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver
    (LP: #1781476)
    - i2c: xlp9xx: Fix issue seen when updating receive length
    - i2c: xlp9xx: Make sure the transfer size is not more than
      I2C_SMBUS_BLOCK_SIZE

  * x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486)
    - x86/kvm: fix LAPIC timer drift when guest uses periodic mode

  * Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823)
    - [Config:] d-i: Add ax88179_178a and r8152 to nic-modules

  * Nvidia fails after switching its mode (LP: #1778658)
    - PCI: Restore config space on runtime resume despite being unbound

  * Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364)
    - SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3

  * CVE-2018-12232
    - PATCH 1/1] socket: close race condition between sock_close() and
      sockfs_setattr()

  * CVE-2018-10323
    - xfs: set format back to extents if xfs_bmap_extents_to_btree

  * change front mic location for more lenovo m7/8/9xx machines (LP: #1781316)
    - ALSA: hda/realtek - Fix the problem of two front mics on more machines
    - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION

  * Cephfs + fscache: unab...