Eoan update: upstream stable patchset 2020-05-26

Bug #1880758 reported by Kamal Mostafa
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Eoan
Fix Released
Undecided
Kamal Mostafa

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2020-05-26

                Ported from the following upstream stable releases:
                        v4.19.123, v5.4.41

       from git://git.kernel.org/

USB: serial: qcserial: Add DW5816e support
tracing/kprobes: Fix a double initialization typo
vt: fix unicode console freeing with a common interface
dp83640: reverse arguments to list_add_tail
fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
net: macsec: preserve ingress frame ordering
net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
net_sched: sch_skbprio: add message validation to skbprio_change()
net: usb: qmi_wwan: add support for DW5816e
sch_choke: avoid potential panic in choke_reset()
sch_sfq: validate silly quantum values
tipc: fix partial topology connection closure
bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
net/mlx5: Fix forced completion access non initialized command entry
net/mlx5: Fix command entry leak in Internal Error State
bnxt_en: Improve AER slot reset.
bnxt_en: Fix VF anti-spoof filter setup.
net: stricter validation of untrusted gso packets
HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
USB: uas: add quirk for LaCie 2Big Quadra
USB: serial: garmin_gps: add sanity checking for data length
tracing: Add a vmalloc_sync_mappings() for safe measure
KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
KVM: arm64: Fix 32bit PC wrap-around
arm64: hugetlb: avoid potential NULL dereference
mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
staging: gasket: Check the return value of gasket_get_bar_index()
coredump: fix crash when umh is disabled
batman-adv: fix batadv_nc_random_weight_tq
batman-adv: Fix refcnt leak in batadv_show_throughput_override
batman-adv: Fix refcnt leak in batadv_store_throughput_override
batman-adv: Fix refcnt leak in batadv_v_ogm_process
x86/entry/64: Fix unwind hints in register clearing code
x86/entry/64: Fix unwind hints in kernel exit path
x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
x86/unwind/orc: Don't skip the first frame for inactive tasks
x86/unwind/orc: Prevent unwinding before ORC initialization
x86/unwind/orc: Fix error path for bad ORC entry type
x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
netfilter: nat: never update the UDP checksum when it's 0
netfilter: nf_osf: avoid passing pointer to local var
objtool: Fix stack offset tracking for indirect CFAs
scripts/decodecode: fix trapping instruction formatting
ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
net: macb: Fix runtime PM refcounting
drm/amdgpu: move kfd suspend after ip_suspend_phase1
drm/amdgpu: drop redundant cg/pg ungate on runpm enter
tty: xilinx_uartps: Fix missing id assignment to the console
devlink: fix return value after hitting end in region read
ipv6: Use global sernum for dst validation with nexthop objects
mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly
neigh: send protocol value in neighbor create notification
net: dsa: Do not leave DSA master with NULL netdev_ops
net: macb: fix an issue about leak related system resources
net: tc35815: Fix phydev supported/advertising mask
net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict()
net/tls: Fix sk_psock refcnt leak when in tls_data_ready()
nfp: abm: fix a memory leak bug
tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040
bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF.
bnxt_en: Return error when allocating zero size context memory.
net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx()
net: mvpp2: cls: Prevent buffer overflow in mvpp2_ethtool_cls_rule_del()
Revert "HID: wacom: generic: read the number of expected touches on a per collection basis"
HID: wacom: Report 2nd-gen Intuos Pro S center button status over BT
crypto: arch/nhpoly1305 - process in explicit 4k chunks
KVM: s390: Remove false WARN_ON_ONCE for the PQAP instruction
KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path
drm: ingenic-drm: add MODULE_DEVICE_TABLE
epoll: atomically remove wait entry on wake up
eventpoll: fix missing wakeup for ovflist in ep_poll_callback
mm: limit boost_watermark on small zones
ceph: fix endianness bug when handling MDS session feature bits
ceph: demote quotarealm lookup warning to a debug message
riscv: set max_pfn to the PFN of the last page
KVM: x86: Fixes posted interrupt check for IRQs delivery modes
arch/x86/kvm/svm/sev.c: change flag passed to GUP fast in sev_pin_memory()
iommu/virtio: Reverse arguments to list_add
mm, memcg: fix error return value of mem_cgroup_css_alloc()
fsnotify: replace inode pointer with an object id
fanotify: merge duplicate events on parent and child
UBUNTU: upstream stable to v4.19.123, v5.4.41

Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
description: updated
Changed in linux (Ubuntu Eoan):
status: New → In Progress
assignee: nobody → Kamal Mostafa (kamalmostafa)
Changed in linux (Ubuntu Eoan):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (32.7 KiB)

This bug was fixed in the package linux - 5.3.0-62.56

---------------
linux (5.3.0-62.56) eoan; urgency=medium

  * CVE-2020-0543
    - UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off when
      not supported

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * Eoan update: upstream stable patchset 2020-06-05 (LP: #1882303)
    - i2c: dev: Fix the race between the release of i2c_dev and cdev
    - KVM: SVM: Fix potential memory leak in svm_cpu_init()
    - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
    - evm: Check also if *tfm is an error pointer in init_desc()
    - ima: Fix return value of ima_write_policy()
    - mtd: spinand: Propagate ECC information to the MTD structure
    - fix multiplication overflow in copy_fdtable()
    - ubifs: remove broken lazytime support
    - iommu/amd: Fix over-read of ACPI UID from IVRS table
    - i2c: mux: demux-pinctrl: Fix an error handling path in
      'i2c_demux_pinctrl_probe()'
    - ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
    - gcc-common.h: Update for GCC 10
    - HID: multitouch: add eGalaxTouch P80H84 support
    - HID: alps: Add AUI1657 device ID
    - HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
    - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
    - scsi: qla2xxx: Delete all sessions before unregister local nvme port
    - configfs: fix config_item refcnt leak in configfs_rmdir()
    - vhost/vsock: fix packet delivery order to monitoring devices
    - aquantia: Fix the media type of AQC100 ethernet controller in the driver
    - component: Silence bind error on -EPROBE_DEFER
    - scsi: ibmvscsi: Fix WARN_ON during event pool release
    - HID: i2c-hid: reset Synaptics SYNA2393 on resume
    - x86/apic: Move TSC deadline timer debug printk
    - gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
    - HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
    - ceph: fix double unlock in handle_cap_export()
    - stmmac: fix pointer check after utilization in stmmac_interrupt
    - USB: core: Fix misleading driver bug report
    - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
    - ARM: futex: Address build warning
    - padata: Replace delayed timer with immediate workqueue in padata_reorder
    - padata: initialize pd->cpu with effective cpumask
    - padata: purge get_cpu and reorder_via_wq from padata_do_serial
    - ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
      option
    - ALSA: pcm: fix incorrect hw_base increase
    - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
    - ALSA: hda/realtek - Add more fixup entries for Clevo machines
    - drm/etnaviv: fix perfmon domain interation
    - apparmor: fix potential label refcnt leak in aa_change_profile
    - apparmor: Fix aa_label refcnt leak in policy_update
    - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
    - dmaengine: owl: Use correct lock in owl_dma_get_pchan()
    - drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of inheritance.
    - powerpc: Rem...

Changed in linux (Ubuntu Eoan):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.