This bug was fixed in the package linux - 4.9.0-15.16 --------------- linux (4.9.0-15.16) zesty; urgency=low
[ Tim Gardner ] * Release Tracking Bug - LP: #1658101 * Zesty update to v4.9.5 stable release (LP: #1658099) - Input: xpad - use correct product id for x360w controllers - Input: i8042 - add Pegatron touchpad to noloop table - pinctrl: imx: fix imx_pinctrl_desc initialization - pinctrl: sh-pfc: r8a7795: Use lookup function for bias data - pinctrl: sh-pfc: Add helper to handle bias lookup table - regulator: tps65086: Fix 25mV ranges for BUCK regulators - regulator: axp20x: Fix axp809 ldo_io registration error on cold boot - drm/tegra: dpaux: Fix error handling - drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos() - drm/savage: dereferencing an error pointer - selftests: do not require bash to run netsocktests testcase - selftests: do not require bash for the generated test - zram: revalidate disk under init_lock - zram: support BDI_CAP_STABLE_WRITES - dax: fix deadlock with DAX 4k holes - mm: pmd dirty emulation in page fault handler - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done} - ocfs2: fix crash caused by stale lvb with fsdlm plugin - mm, memcg: fix the active list aging for lowmem requests when memcg is enabled - mm: support anonymous stable page - mm/slab.c: fix SLAB freelist randomization duplicate entries - mm/hugetlb.c: fix reservation race when freeing surplus pages - KVM: x86: fix emulation of "MOV SS, null selector" - KVM: eventfd: fix NULL deref irqbypass consumer - jump_labels: API for flushing deferred jump label updates - KVM: x86: flush pending lapic jump label updates on module unload - KVM: x86: fix NULL deref in vcpu_scan_ioapic - KVM: x86: add Align16 instruction flag - KVM: x86: add asm_safe wrapper - KVM: x86: emulate FXSAVE and FXRSTOR - KVM: x86: Introduce segmented_write_std - efi/libstub/arm*: Pass latest memory map to the kernel - efi/x86: Prune invalid memory map entries and fix boot regression - x86/efi: Don't allocate memmap through memblock after mm_init() - nl80211: fix sched scan netlink socket owner destruction - gpio: Move freeing of GPIO hogs before numbing of the device - xfs: Timely free truncated dirty pages - bridge: netfilter: Fix dropping packets that moving through bridge interface - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature - x86/bugs: Separate AMD E400 erratum and C1E bug - x86/CPU/AMD: Fix Bulldozer topology - wusbcore: Fix one more crypto-on-the-stack bug - usb: musb: fix runtime PM in debugfs - USB: serial: kl5kusb105: fix line-state error handling - USB: serial: ch341: fix initial modem-control state - USB: serial: ch341: fix resume after reset - USB: serial: ch341: fix open error handling - USB: serial: ch341: fix control-message error handling - USB: serial: ch341: fix open and resume after B0 - Input: elants_i2c - avoid divide by 0 errors on bad touchscreen data - i2c: print correct device invalid address - i2c: fix kernel memory disclosure in dev interface - fix a fencepost error in pipe_advance() - xhci: fix deadlock at host remove by running watchdog correctly - btrfs: fix crash when tracepoint arguments are freed by wq callbacks - ASoC: hdmi-codec: use unsigned type to structure members with bit-field - Revert "tty: serial: 8250: add CON_CONSDEV to flags" - vme: Fix wrong pointer utilization in ca91cx42_slave_get - pid: fix lockdep deadlock warning due to ucount_lock - mnt: Protect the mountpoint hashtable with mount_lock - drivers: char: mem: Fix thinkos in kmem address checks - dmaengine: omap-dma: Fix dynamic lch_map allocation - virtio_blk: avoid DMA to stack for the sense buffer - tty/serial: atmel: RS485 half duplex w/DMA: enable RX after TX is done - tty/serial: atmel_serial: BUG: stop DMA from transmitting in stop_tx - orinoco: Use shash instead of ahash for MIC calculations - sysrq: attach sysrq handler correctly for 32-bit kernel - extcon: return error code on failure - Clearing FIFOs in RS485 emulation mode causes subsequent transmits to break - sysctl: Drop reference added by grab_header in proc_sys_readdir - net/af_iucv: don't use paged skbs for TX on HiperSockets - drm/i915/gen9: Fix PCODE polling timeout in stable backport - drm: Clean up planes in atomic commit helper failure path - drm/radeon: update smc firmware selection for SI - drm/radeon: drop verde dpm quirks - drm/amdgpu: update si kicker smc firmware - drm/amdgpu: drop verde dpm quirks - USB: serial: ch341: fix modem-control and B0 handling - net/mlx5: Only cancel recovery work when cleaning up device - i2c: piix4: Avoid race conditions with IMC - x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too - btrfs: fix locking when we put back a delayed ref that's too new - btrfs: fix error handling when run_delayed_extent_op fails - pinctrl: meson: fix gpio request disabling other modes - NFS: fix typo in parameter description - pNFS: Fix race in pnfs_wait_on_layoutreturn - NFS: Fix a performance regression in readdir - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. - i2c: mux: pca954x: fix i2c mux selection caching - drm/i915/gen9: Fix PCODE polling during SAGV disabling - drm: avoid uninitialized timestamp use in wait_vblank - drm/panel: simple: Check against num_timings when setting preferred for timing - drm/i915: Move the min_pixclk[] handling to the end of readout - drm: Initialise drm_mm.head_node.allocated - remoteproc: qcom_wcnss: Fix circular module dependency - remoteproc: st: Fix error return code in st_rproc_probe() - powerpc/64: Simplify adaptation to new ISA v3.00 HPTE format - cpufreq: powernv: Disable preemption while checking CPU throttling state - regulators: helpers: Fix handling of bypass_val_on in get_bypass_regmap - ACPI / CPPC: set an error code on probe error path - block: Change extern inline to static inline - block: cfq_cpd_alloc() should use @gfp - ACPI / APEI: Fix NMI notification handling - powercap/intel_rapl: fix and tidy up error handling - iw_cxgb4: Fix error return code in c4iw_rdev_open() - bq24190_charger: Fix PM runtime use for bq24190_battery_set_property - power: supply: bq27xxx_battery: Fix register map for BQ27510 and BQ27520 - blk-mq: Always schedule hctx->next_cpu - bus: vexpress-config: fix device reference leak - powerpc/mm: Correct process and partition table max size - powerpc/ibmebus: Fix further device reference leaks - powerpc/ibmebus: Fix device reference leaks in sysfs interface - powerpc/powernv: Don't warn on PE init if unfreeze is unsupported - arm64: hugetlb: fix the wrong address for several functions - arm64: hugetlb: remove the wrong pmd check in find_num_contig() - arm64: hugetlb: fix the wrong return value for huge_ptep_set_access_flags - pinctrl: sh-pfc: Do not unconditionally support PIN_CONFIG_BIAS_DISABLE - Linux 4.9.5 * KVM module handling different per Architecture - ppc64el (LP: #1657734) - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list * ENA network driver moved to -extra (LP: #1657767) - [Config] Move Amazon ENA network driver to the main kernel package * [Hyper-V] netvsc: add rcu_read locked to netvsc callback (LP: #1657540) - netvsc: add rcu_read locking to netvsc callback * Backport 3 patches to fix bugs with AIX clients using IBMVSCSI Target Driver (LP: #1657194) - SAUCE: ibmvscsis: Fix max transfer length - SAUCE: ibmvscsis: fix sleeping in interrupt context - SAUCE: ibmvscsis: Fix srp_transfer_data fail return code -- Tim Gardner <tim.gard...@canonical.com> Tue, 17 Jan 2017 11:27:33 -0700 ** Changed in: linux (Ubuntu Zesty) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1655956 Title: Zesty update to v4.9.3 stable release Status in linux package in Ubuntu: Fix Released Status in linux source package in Zesty: Fix Released Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The v4.9.3 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well. git://git.kernel.org/ TEST CASE: TBD The following patches from the v4.9.3 stable release shall be applied: iio: common: st_sensors: fix channel data parsing iio: max44000: correct value in illuminance_integration_time_available iio: bmi160: Fix time needed to sleep after command execution staging: octeon: Call SET_NETDEV_DEV() ALSA: hda - Fix up GPIO for ASUS ROG Ranger ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL ALSA: usb-audio: Fix irq/process data synchronization fscrypt: fix renaming and linking special files parisc: Add line-break when printing segfault info parisc: Mark cr16 clocksource unstable on SMP systems HID: sensor-hub: Move the memset to sensor_hub_get_feature() ARM: davinci: da850: don't add emac clock to lookup table twice pinctrl/amd: Set the level based on ACPI tables mac80211: initialize fast-xmit 'info' later asm-prototypes: Clear any CPP defines before declaring the functions gcc-plugins: update gcc-common.h for gcc-7 drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff drm/i915: Fix oops in overlay due to frontbuffer tracking drm/i915: Force VDD off on the new power seqeuencer before starting to use it drm/i915: Initialize overlay->last_flip properly KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS KVM: MIPS: Don't clobber CP0_Status.UX KVM: MIPS: Flush KVM entry code from icache globally usb: musb: core: add clear_ep_rxintr() to musb_platform_ops usb: musb: dsps: implement clear_ep_rxintr() callback usb: storage: unusual_uas: Add JMicron JMS56x to unusual device usb: gadgetfs: restrict upper bound on device configuration size USB: gadgetfs: fix unbounded memory allocation bug USB: gadgetfs: fix use-after-free bug USB: gadgetfs: fix checks of wTotalLength in config descriptors USB: fix problems with duplicate endpoint addresses USB: dummy-hcd: fix bug in stop_activity (handle ep0) usb: gadget: composite: Test get_alt() presence instead of set_alt() usb: dwc3: core: avoid Overflow events usb: xhci: fix possible wild pointer usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake xhci: free xhci virtual devices with leaf nodes first usb: xhci: fix return value of xhci_setup_device() usb: host: xhci: Fix possible wild pointer when handling abort command xhci: Handle command completion and timeout race usb: xhci: hold lock over xhci_abort_cmd_ring() usb: return error code when platform_get_irq fails USB: serial: omninet: fix NULL-derefs at open and disconnect USB: serial: quatech2: fix sleep-while-atomic in close USB: serial: pl2303: fix NULL-deref at open USB: serial: keyspan_pda: verify endpoints at probe USB: serial: spcp8x5: fix NULL-deref at open USB: serial: io_ti: fix NULL-deref at open USB: serial: io_ti: fix another NULL-deref at open USB: serial: io_ti: fix I/O after disconnect USB: serial: iuu_phoenix: fix NULL-deref at open USB: serial: garmin_gps: fix memory leak on failed URB submit USB: serial: ti_usb_3410_5052: fix NULL-deref at open USB: serial: io_edgeport: fix NULL-deref at open USB: serial: oti6858: fix NULL-deref at open USB: serial: cyberjack: fix NULL-deref at open USB: serial: kobil_sct: fix NULL-deref in write USB: serial: mos7840: fix NULL-deref at open USB: serial: mos7720: fix NULL-deref at open USB: serial: mos7720: fix use-after-free on probe errors USB: serial: mos7720: fix parport use-after-free on probe errors USB: serial: mos7720: fix parallel probe usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL xhci: Use delayed_work instead of timer for command timeout xhci: Fix race related to abort operation usb: dwc3: pci: add Intel Gemini Lake PCI ID usb: dwc3: pci: Fix dr_mode misspelling usb: dwc3: gadget: Fix full speed mode usb: musb: Fix trying to free already-free IRQ 4 usb: hub: Move hub_port_disable() to fix warning if PM is disabled usb: gadget: udc: core: fix return code of usb_gadget_probe_driver() usb: musb: blackfin: add bfin_fifo_offset in bfin_ops ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream() USB: serial: kl5kusb105: abort on open exception path usb: gadget: Fix second argument of percpu_ida_alloc() usb: gadget: fix request length error for isoc transfer ARM: dts: r8a7794: Correct hsusb parent clock USB: phy: am335x-control: fix device and of_node leaks arm64: dts: hip06: Correct hardware pin number of usb node ARM: dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host support dibusb: fix possible memory leak in dibusb_rc_query() USB: serial: io_ti: bind to interface after fw download mei: fix parameter rename KDoc mei: bus: fix mei_cldev_enable KDoc mei: move write cb to completion on credentials failures staging: iio: ad7606: fix improper setting of oversampling pins iio: accel: st_accel: fix LIS3LV02 reading and scaling usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb() usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb() usb: dwc3: gadget: always unmap EP0 requests drm/i915/dp: add lane_count check in intel_dp_check_link_status drm/i915: tune down the fast link training vs boot fail mac80211: fix tid_agg_rx NULL dereference nl80211: Use different attrs for BSSID and random MAC addr in scan req ath10k: fix failure to send NULL func frame for 10.4 mfd: tps65217: Fix page fault on unloading modules ath10k: use the right length of "background" cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected efi/efivar_ssdt_load: Don't return success on allocation failure clk: renesas: cpg-mssr: Fix inverted debug check debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS x86/prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 platform/x86: fujitsu-laptop: use brightness_set_blocking for LED-setting callbacks hwmon: (scpi) Fix module autoload hwmon: (amc6821) sign extension temperature hwmon: (ds620) Fix overflows seen when writing temperature limits hwmon: (nct7802) Fix overflows seen when writing into limit attributes hwmon: (g762) Fix overflows and crash seen when writing limit attributes hwmon: (lm90) fix temp1_max_alarm attribute Input: synaptics-rmi4 - unlock on error clk: qcom: ipq806x: Fix board clk rates clk: clk-wm831x: fix a logic error clk: ti: dra7: fix "failed to lookup clock node gmac_gmii_ref_clk_div" boot message clk: sunxi-ng: sun8i-a23: Set CLK_SET_RATE_PARENT for audio module clocks clk: sunxi-ng: sun8i-h3: Set CLK_SET_RATE_PARENT for audio module clocks clk: imx31: fix rewritten input argument of mx31_clocks_init() clk: renesas: mstp: Support 8-bit registers for r7s72100 iommu/amd: Missing error code in amd_iommu_init_device() iommu/amd: Fix the left value check of cmd buffer iommu/vt-d: Fix pasid table size encoding iommu/vt-d: Flush old iommu caches for kdump when the device gets context mapped ASoC: lpass-platform: initialize dma channel number ASoC: cht_bsw_rt5645: Fix leftover kmalloc ASoC: Intel: Skylake: Fix a shift wrapping bug ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call scsi: g_NCR5380: Fix release_region in error handling scsi: mvsas: fix command_active typo target/iscsi: Fix double free in lio_target_tiqn_addtpg() sbp-target: Fix second argument of percpu_ida_alloc() relay: check array offset before using it ima: fix memory leak in ima_release_policy PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity() irqchip/bcm7038-l1: Implement irq_cpu_offline() callback PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend genirq/affinity: Fix node generation from cpumask mmc: mmc_test: Uninitialized return value rpmsg: qcom_smd: Correct return value for O_NONBLOCK mm/hugetlb.c: use the right pte val for compare in hugetlb_cow docs-rst: fix LaTeX DURole renewcommand with Sphinx 1.3+ mm: khugepaged: close use-after-free race during shmem collapsing mm: khugepaged: fix radix tree node leak in shmem collapse error path mm, compaction: fix NR_ISOLATED_* stats for pfn based migration s390/crypto: unlock on error in prng_tdes_read() crypto: arm64/sha2-ce - fix for big endian crypto: arm64/ghash-ce - fix for big endian crypto: arm/aes-ce - fix for big endian crypto: arm64/aes-ccm-ce: fix for big endian crypto: arm64/aes-neon - fix for big endian crypto: arm64/sha1-ce - fix for big endian crypto: arm64/aes-xts-ce: fix for big endian crypto: arm64/aes-ce - fix for big endian md: MD_RECOVERY_NEEDED is set for mddev->recovery md: fix refcount problem on mddev when stopping array. f2fs: remove percpu_count due to performance regression f2fs: hide a maybe-uninitialized warning staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs() PCI: rockchip: Fix negotiated lanes calculation PCI: rockchip: Correct the use of FTS mask PCI: Add Mellanox device IDs PCI: Convert broken INTx masking quirks from HEADER to FINAL PCI: Convert Mellanox broken INTx quirks to be for listed devices only PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+ PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3) powerpc/pci/rpadlpar: Fix device reference leaks s390/topology: always use s390 specific sched_domain_topology_level s390/pci: fix dma address calculation in map_sg drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values drm/i915: disable PSR by default on HSW/BDW drm/i915/gen9: unconditionally apply the memory bandwidth WA drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases tpm_tis: Check return values from get_burstcount. xfs: don't call xfs_sb_quota_from_disk twice xfs: check return value of _trans_reserve_quota_nblks xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan xfs: don't BUG() on mixed direct and mapped I/O xfs: provide helper for counting extents from if_bytes xfs: check minimum block size for CRC filesystems xfs: fix unbalanced inode reclaim flush locking xfs: new inode extent list lookup helpers xfs: factor rmap btree size into the indlen calculations xfs: always succeed when deduping zero bytes xfs: remove prev argument to xfs_bmapi_reserve_delalloc xfs: track preallocation separately in xfs_bmapi_reserve_delalloc() xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow xfs: clean up cow fork reservation and tag inodes correctly xfs: use new extent lookup helpers xfs_file_iomap_begin_delay xfs: pass post-eof speculative prealloc blocks to bmapi xfs: Move AGI buffer type setting to xfs_read_agi xfs: pass state not whichfork to trace_xfs_extlist xfs: handle cow fork in xfs_bmap_trace_exlist xfs: forbid AG btrees with level == 0 xfs: check for bogus values in btree block headers xfs: complain if we don't get nextents bmap records xfs: don't crash if reading a directory results in an unexpected hole xfs: error out if trying to add attrs and anextents > 0 xfs: don't allow di_size with high bit set xfs: don't cap maximum dedupe request length xfs: ignore leaf attr ichdr.count in verifier during log replay xfs: use GPF_NOFS when allocating btree cursors xfs: fix double-cleanup when CUI recovery fails xfs: use the actual AG length when reserving blocks xfs: fix crash and data corruption due to removal of busy COW extents xfs: fix max_retries _show and _store functions clocksource/dummy_timer: Move hotplug callback after the real timers tick/broadcast: Prevent NULL pointer dereference Revert "rtlwifi: Fix enter/exit power_save" Revert "usb: gadget: composite: always set ep->mult to a sensible value" usb: gadget: composite: always set ep->mult to a sensible value Linux 4.9.3 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1655956/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp