Zesty update to 4.10.12 stable release

Bug #1687045 reported by Stefan Bader
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Zesty
Fix Released
Undecided
Stefan Bader

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.10.12 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

The following patches from the 4.10.12 stable release shall be applied:
* Un-revert "audit: fix auditd/kernel connection state tracking"(1)
* cgroup, kthread: close race window where new kthreads can be migrated to
  non-root cgroups
* audit: make sure we don't let the retry queue grow without bounds
* tcmu: Fix possible overwrite of t_data_sg's last iov[]
* tcmu: Fix wrongly calculating of the base_command_size
* tcmu: Skip Data-Out blocks before gathering Data-In buffer for BIDI case
* thp: fix MADV_DONTNEED vs. MADV_FREE race
* thp: fix MADV_DONTNEED vs clear soft dirty race
* zsmalloc: expand class bit
* orangefs: free superblock when mount fails
* drm/nouveau/mpeg: mthd returns true on success now
* drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
* drm/nouveau/kms/nv50: fix setting of HeadSetRasterVertBlankDmi method
* drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane
  state
* drm/nouveau: initial support (display-only) for GP107
* drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
* drm/fb-helper: Allow var->x/yres(_virtual) < fb->width/height again
* CIFS: reconnect thread reschedule itself
* CIFS: store results of cifs_reopen_file to avoid infinite wait
* Input: xpad - add support for Razer Wildcat gamepad
* perf annotate s390: Fix perf annotate error -95 (4.10 regression)
* perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()
* x86/efi: Don't try to reserve runtime regions
* x86/signals: Fix lower/upper bound reporting in compat siginfo
* x86/intel_rdt: Fix locking in rdtgroup_schemata_write()
* x86, pmem: fix broken __copy_user_nocache cache-bypass assumptions
* x86/vdso: Ensure vdso32_enabled gets set to valid values only
* x86/vdso: Plug race between mapping and ELF header setup
* acpi, nfit, libnvdimm: fix interleave set cookie calculation (64-bit
  comparison)
* ACPI / scan: Set the visited flag for all enumerated devices
* parisc: fix bugs in pa_memcpy
* efi/libstub: Skip GOP with PIXEL_BLT_ONLY format
* efi/fb: Avoid reconfiguration of BAR that covers the framebuffer
* iscsi-target: Fix TMR reference leak during session shutdown
* iscsi-target: Drop work-around for legacy GlobalSAN initiator
* scsi: sr: Sanity check returned mode data
* scsi: sd: Consider max_xfer_blocks if opt_xfer_blocks is unusable
* scsi: qla2xxx: Add fix to read correct register value for ISP82xx.
* scsi: sd: Fix capacity calculation with 32-bit sector_t
* target: Avoid mappedlun symlink creation during lun shutdown
* xen, fbfront: fix connecting to backend
* new privimitive: iov_iter_revert()
* make skb_copy_datagram_msg() et.al. preserve ->msg_iter on error
* libnvdimm: fix blk free space accounting
* libnvdimm: fix reconfig_mutex, mmap_sem, and jbd2_handle lockdep splat
* libnvdimm: band aid btt vs clear poison locking
* can: ifi: use correct register to read rx status
* pwm: rockchip: State of PWM clock should synchronize with PWM enabled state
* cpufreq: Bring CPUs up even if cpufreq_online() failed
* irqchip/irq-imx-gpcv2: Fix spinlock initialization
* ftrace: Fix removing of second function probe
* drm/i915/gvt: set the correct default value of CTX STATUS PTR
* char: lack of bool string made CONFIG_DEVPORT always on
* Revert "MIPS: Lantiq: Fix cascaded IRQ setup"
* zram: do not use copy_page with non-page aligned address
* ftrace: Fix function pid filter on instances
* crypto: algif_aead - Fix bogus request dereference in completion function
* crypto: xts - Fix use-after-free on EINPROGRESS
* crypto: ahash - Fix EINPROGRESS notification callback
* crypto: lrw - Fix use-after-free on EINPROGRESS
* parisc: Fix get_user() for 64-bit value on 32-bit kernel
* dvb-usb-v2: avoid use-after-free
* ASoC: Intel: select DW_DMAC_CORE since it's mandatory
* platform/x86: acer-wmi: setup accelerometer when machine has appropriate
  notify event
* x86/xen: Fix APIC id mismatch warning on Intel
* ACPI / EC: Use busy polling mode when GPE is not enabled
* rtc: tegra: Implement clock handling
* mm: Tighten x86 /dev/mem with zeroing reads
* cxusb: Use a dma capable buffer also for reading
* virtio-console: avoid DMA from stack
* Linux 4.10.12

(1) Stable patch got reverted as it caused regressions but the regression is now fixed in 4.10.12.

CVE References

Stefan Bader (smb)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Zesty):
assignee: nobody → Stefan Bader (smb)
status: New → In Progress
Stefan Bader (smb)
description: updated
description: updated
Revision history for this message
Stefan Bader (smb) wrote :

Additional patch to configs needed ([Config] CONFIG_SND_SOC_INTEL_BDW_RT5677_MACH=m) because of a stable patch (ASoC: Intel: select DW_DMAC_CORE since it's mandatory).

Changed in linux (Ubuntu Zesty):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (16.0 KiB)

This bug was fixed in the package linux - 4.10.0-22.24

---------------
linux (4.10.0-22.24) zesty; urgency=low

  * linux: 4.10.0-22.24 -proposed tracker (LP: #1691146)

  * Fix NVLINK2 TCE route (LP: #1690155)
    - powerpc/powernv: Fix TCE kill on NVLink2

  * CVE-2017-0605
    - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()

  * perf: qcom: Add L3 cache PMU driver (LP: #1689856)
    - [Config] CONFIG_QCOM_L3_PMU=y
    - perf: qcom: Add L3 cache PMU driver

  * No PMU support for ACPI-based arm64 systems (LP: #1689661)
    - drivers/perf: arm_pmu: rework per-cpu allocation
    - drivers/perf: arm_pmu: manage interrupts per-cpu
    - drivers/perf: arm_pmu: split irq request from enable
    - drivers/perf: arm_pmu: remove pointless PMU disabling
    - drivers/perf: arm_pmu: define armpmu_init_fn
    - drivers/perf: arm_pmu: fold init into alloc
    - drivers/perf: arm_pmu: factor out pmu registration
    - drivers/perf: arm_pmu: simplify cpu_pmu_request_irqs()
    - drivers/perf: arm_pmu: handle no platform_device
    - drivers/perf: arm_pmu: rename irq request/free functions
    - drivers/perf: arm_pmu: split cpu-local irq request/free
    - drivers/perf: arm_pmu: move irq request/free into probe
    - drivers/perf: arm_pmu: split out platform device probe logic
    - arm64: add function to get a cpu's MADT GICC table
    - [Config] CONFIG_ARM_PMU_ACPI=y
    - drivers/perf: arm_pmu: add ACPI framework
    - arm64: pmuv3: handle !PMUv3 when probing
    - arm64: pmuv3: use arm_pmu ACPI framework

  * [SRU][Zesty]QDF2400 kernel oops on ipmitool fru write 0 fru.bin
    (LP: #1689886)
    - ipmi: Fix kernel panic at ipmi_ssif_thread()

  * tty: pl011: fix earlycon work-around for QDF2400 erratum 44 (LP: #1689818)
    - tty: pl011: fix earlycon work-around for QDF2400 erratum 44
    - tty: pl011: use "qdf2400_e44" as the earlycon name for QDF2400 E44

  * kernel-wedge fails in artful due to leftover squashfs-modules d-i files
    (LP: #1688259)
    - Remove squashfs-modules files from d-i
    - [Config] as squashfs-modules is builtin kernel-image must Provides: it

  * arm64/ACPI support for SBSA watchdog (LP: #1688114)
    - clocksource: arm_arch_timer: clean up printk usage
    - clocksource: arm_arch_timer: rename type macros
    - clocksource: arm_arch_timer: rename the PPI enum
    - clocksource: arm_arch_timer: move enums and defines to header file
    - clocksource: arm_arch_timer: add a new enum for spi type
    - clocksource: arm_arch_timer: rework PPI selection
    - clocksource: arm_arch_timer: split dt-only rate handling
    - clocksource: arm_arch_timer: refactor arch_timer_needs_probing
    - clocksource: arm_arch_timer: move arch_timer_needs_of_probing into DT init
      call
    - clocksource: arm_arch_timer: add structs to describe MMIO timer
    - clocksource: arm_arch_timer: split MMIO timer probing.
    - [Config] CONFIG_ACPI_GTDT=y
    - acpi/arm64: Add GTDT table parse driver
    - clocksource: arm_arch_timer: simplify ACPI support code.
    - acpi/arm64: Add memory-mapped timer support in GTDT driver
    - clocksource: arm_arch_timer: add GTDT support for memory-mapped timer
    - acpi/arm64: Add SBS...

Changed in linux (Ubuntu):
status: New → Fix Released
Changed in linux (Ubuntu Zesty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.