Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The v4.18.8 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well. git://git.kernel.org/ TEST CASE: TBD The following patches from the v4.18.8 stable release shall be applied: act_ife: fix a potential use-after-free ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state net: bcmgenet: use MAC link status for fixed phy net: macb: do not disable MDIO bus at open/close time net: sched: Fix memory exposure from short TCA_U32_SEL qlge: Fix netdev features configuration. r8152: disable RX aggregation on new Dell TB16 dock r8169: add support for NCube 8168 network card tcp: do not restart timewait timer on rst reception vti6: remove !skb->ignore_df check from vti6_xmit() act_ife: move tcfa_lock down to where necessary act_ife: fix a potential deadlock net: sched: action_ife: take reference to meta module bnxt_en: Clean up unused functions. bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. net/sched: act_pedit: fix dump of extended layered op tipc: fix a missing rhashtable_walk_exit() hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() tipc: fix the big/little endian issue in tipc_dest sctp: remove useless start_fail from sctp_ht_iter in proc erspan: set erspan_ver to 1 by default when adding an erspan dev net: macb: Fix regression breaking non-MDIO fixed-link PHYs ipv6: don't get lwtstate twice in ip6_rt_copy_init() net/ipv6: init ip6 anycast rt->dst.input as ip6_input net/ipv6: Only update MTU metric if it set net/ipv6: Put lwtstate when destroying fib6_info net/mlx5: Fix SQ offset in QPs with small RQ r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices Revert "net: stmmac: Do not keep rearming the coalesce timer in stmmac_xmit" ip6_vti: fix creating fallback tunnel device for vti6 ip6_vti: fix a null pointer deference when destroy vti6 tunnel nfp: wait for posted reconfigs when disabling the device sctp: hold transport before accessing its asoc in sctp_transport_get_next mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge vhost: correctly check the iova range when waking virtqueue hv_netvsc: ignore devices that are not PCI cifs: check if SMB2 PDU size has been padded and suppress the warning hfsplus: don't return 0 when fill_super() failed hfs: prevent crash on exit from failed search sunrpc: Don't use stack buffer with scatterlist fork: don't copy inconsistent signal handler state to child fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds reiserfs: change j_timestamp type to time64_t iommu/rockchip: Handle errors returned from PM framework hfsplus: fix NULL dereference in hfsplus_lookup() iommu/rockchip: Move irq request past pm_runtime_enable fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries fat: validate ->i_start before using workqueue: skip lockdep wq dependency in cancel_work_sync() workqueue: re-add lockdep dependencies for flushing scripts: modpost: check memory allocation results apparmor: fix an error code in __aa_create_ns() virtio: pci-legacy: Validate queue pfn x86/mce: Add notifier_block forward declaration i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return value IB/hfi1: Invalid NUMA node information can cause a divide by zero pwm: meson: Fix mux clock names powerpc/topology: Get topology for shared processors at boot mm/fadvise.c: fix signed overflow UBSAN complaint mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() platform/x86: intel_punit_ipc: fix build errors bpf, sockmap: fix map elem deletion race with smap_stop_sock tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist net/xdp: Fix suspicious RCU usage warning bpf, sockmap: fix leakage of smap_psock_map_entry samples/bpf: all XDP samples should unload xdp/bpf prog on SIGTERM netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses s390/kdump: Fix memleak in nt_vmcoreinfo ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() mfd: sm501: Set coherent_dma_mask when creating subdevices netfilter: x_tables: do not fail xt_alloc_table_info too easilly platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 netfilter: fix memory leaks on netlink_dump_start error tcp, ulp: add alias for all ulp modules ubi: Initialize Fastmap checkmapping correctly RDMA/hns: Fix usage of bitmap allocation functions return values ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value perf arm spe: Fix uninitialized record error variable net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero block: don't warn for flush on read-only device net: hns3: Fix for phy link issue when using marvell phy driver PCI: Match Root Port's MPS to endpoint's MPSS as necessary drm/amd/display: Guard against null crtc in CRC IRQ coccicheck: return proper error code on fail perf tools: Check for null when copying nsinfo. f2fs: avoid race between zero_range and background GC f2fs: fix avoid race between truncate and background GC RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO irqchip/stm32: Fix init error handling irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP net/9p/trans_fd.c: fix race by holding the lock net/9p: fix error path of p9_virtio_probe f2fs: fix to clear PG_checked flag in set_page_dirty() pinctrl: axp209: Fix NULL pointer dereference after allocation bpf: fix bpffs non-array map seq_show issue powerpc/uaccess: Enable get_user(u64, *p) on 32-bit powerpc: Fix size calculation using resource_size() perf probe powerpc: Fix trace event post-processing block: bvec_nr_vecs() returns value for wrong slab brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference s390/dasd: fix hanging offline processing due to canceled worker s390/dasd: fix panic for failed online processing ACPI / scan: Initialize status to ACPI_STA_DEFAULT blk-mq: count the hctx as active before allocating tag scsi: aic94xx: fix an error code in aic94xx_init() NFSv4: Fix error handling in nfs4_sp4_select_mode() Input: do not use WARN() in input_alloc_absinfo() xen/balloon: fix balloon initialization for PVH Dom0 PCI: mvebu: Fix I/O space end address calculation dm kcopyd: avoid softlockup in run_complete_job staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice ASoC: rt5677: Fix initialization of rt5677_of_match.data iommu/omap: Fix cache flushes on L2 table entries selftests/powerpc: Kill child processes on SIGINT selinux: cleanup dentry and inodes on error in selinuxfs RDS: IB: fix 'passing zero to ERR_PTR()' warning cfq: Suppress compiler warnings about comparisons smb3: fix reset of bytes read and written stats CIFS: fix memory leak and remove dead code SMB3: Number of requests sent should be displayed for SMB3 not just CIFS smb3: if server does not support posix do not allow posix mount option powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning powerpc/64s: Make rfi_flush_fallback a little more robust um: fix parallel building with O= option powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 drm/amd/display: Read back max backlight value at boot KVM: vmx: track host_state.loaded using a loaded_vmcs pointer kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 drm/etnaviv: fix crash in GPU suspend when init failed due to buffer placement btrfs: Exit gracefully when chunk map cannot be inserted to the tree btrfs: replace: Reset on-disk dev stats value after replace btrfs: fix in-memory value of total_devices after seed device deletion btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized btrfs: tree-checker: Detect invalid and empty essential trees btrfs: check-integrity: Fix NULL pointer dereference for degraded mount btrfs: lift uuid_mutex to callers of btrfs_open_devices btrfs: Don't remove block group that still has pinned down bytes btrfs: Fix a C compliance issue arm64: rockchip: Force CONFIG_PM on Rockchip systems ARM: rockchip: Force CONFIG_PM on Rockchip systems btrfs: do btrfs_free_stale_devices outside of device_list_add btrfs: extend locked section when adding a new device in device_list_add btrfs: rename local devices for fs_devices in btrfs_free_stale_devices( btrfs: use device_list_mutex when removing stale devices btrfs: lift uuid_mutex to callers of btrfs_scan_one_device btrfs: lift uuid_mutex to callers of btrfs_parse_early_options btrfs: reorder initialization before the mount locks uuid_mutex btrfs: fix mount and ioctl device scan ioctl race drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" drm/i915: Nuke the LVDS lid notifier drm/i915: Increase LSPCON timeout drm/i915: Free write_buf that we allocated with kzalloc. drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet drm/amdgpu: fix a reversed condition drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST drm/amd/powerplay: fixed uninitialized value drm/amd/pp/Polaris12: Fix a chunk of registers missed to program drm/edid: Quirk Vive Pro VR headset non-desktop. drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 drm/amd/display: fix type of variable drm/amd/display: Don't share clk source between DP and HDMI drm/amd/display: update clk for various HDMI color depths drm/amd/display: Use requested HDMI aspect ratio drm/amd/display: Report non-DP display as disconnected without EDID drm/rockchip: lvds: add missing of_node_put drm/rockchip: vop: split out core clock enablement into separate functions drm/rockchip: vop: fix irq disabled after vop driver probed drm/amd/display: Pass connector id when executing VBIOS CT drm/amd/display: Check if clock source in use before disabling drm/amdgpu: update tmr mc address drm/amdgpu:add tmr mc address into amdgpu_firmware_info drm/amdgpu:add new firmware id for VCN drm/amdgpu:add VCN support in PSP driver drm/amdgpu:add VCN booting with firmware loaded by PSP drm/amdgpu: fix incorrect use of fcheck drm/amdgpu: fix incorrect use of drm_file->pid drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name mm: respect arch_dup_mmap() return value drm/i915: set DP Main Stream Attribute for color range on DDI platforms x86/tsc: Prevent result truncation on 32bit drm/amdgpu: Keep track of amount of pinned CPU visible VRAM drm/amdgpu: Make pin_size values atomic drm/amdgpu: Warn and update pin_size values when destroying a pinned BO drm/amdgpu: Don't warn on destroying a pinned BO debugobjects: Make stack check warning more informative x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear x86/xen: don't write ptes directly in 32-bit PV guests kbuild: make missing $DEPMOD a Warning instead of an Error kvm: x86: Set highest physical address bits in non-present/reserved SPTEs x86: kvm: avoid unused variable warning HID: redragon: fix num lock and caps lock LEDs ASoC: wm8994: Fix missing break in switch Linux 4.18.8 ** Affects: linux (Ubuntu) Importance: Medium Assignee: Seth Forshee (sforshee) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Tags added: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Importance: Undecided => Medium ** Changed in: linux (Ubuntu) Status: New => In Progress ** Changed in: linux (Ubuntu) Assignee: (unassigned) => Seth Forshee (sforshee) ** Description changed: - - SRU Justification - - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The v4.18.8 upstream stable - patch set is now available. It should be included in the Ubuntu - kernel as well. - - git://git.kernel.org/ - - TEST CASE: TBD - - The following patches from the v4.18.8 stable release shall be + SRU Justification + + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The v4.18.8 upstream stable + patch set is now available. It should be included in the Ubuntu + kernel as well. + + git://git.kernel.org/ + + TEST CASE: TBD + + The following patches from the v4.18.8 stable release shall be applied: + + act_ife: fix a potential use-after-free + ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state + net: bcmgenet: use MAC link status for fixed phy + net: macb: do not disable MDIO bus at open/close time + net: sched: Fix memory exposure from short TCA_U32_SEL + qlge: Fix netdev features configuration. + r8152: disable RX aggregation on new Dell TB16 dock + r8169: add support for NCube 8168 network card + tcp: do not restart timewait timer on rst reception + vti6: remove !skb->ignore_df check from vti6_xmit() + act_ife: move tcfa_lock down to where necessary + act_ife: fix a potential deadlock + net: sched: action_ife: take reference to meta module + bnxt_en: Clean up unused functions. + bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. + net/sched: act_pedit: fix dump of extended layered op + tipc: fix a missing rhashtable_walk_exit() + hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() + tipc: fix the big/little endian issue in tipc_dest + sctp: remove useless start_fail from sctp_ht_iter in proc + erspan: set erspan_ver to 1 by default when adding an erspan dev + net: macb: Fix regression breaking non-MDIO fixed-link PHYs + ipv6: don't get lwtstate twice in ip6_rt_copy_init() + net/ipv6: init ip6 anycast rt->dst.input as ip6_input + net/ipv6: Only update MTU metric if it set + net/ipv6: Put lwtstate when destroying fib6_info + net/mlx5: Fix SQ offset in QPs with small RQ + r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices + Revert "net: stmmac: Do not keep rearming the coalesce timer in stmmac_xmit" + ip6_vti: fix creating fallback tunnel device for vti6 + ip6_vti: fix a null pointer deference when destroy vti6 tunnel + nfp: wait for posted reconfigs when disabling the device + sctp: hold transport before accessing its asoc in sctp_transport_get_next + mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge + vhost: correctly check the iova range when waking virtqueue + hv_netvsc: ignore devices that are not PCI + cifs: check if SMB2 PDU size has been padded and suppress the warning + hfsplus: don't return 0 when fill_super() failed + hfs: prevent crash on exit from failed search + sunrpc: Don't use stack buffer with scatterlist + fork: don't copy inconsistent signal handler state to child + fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds + reiserfs: change j_timestamp type to time64_t + iommu/rockchip: Handle errors returned from PM framework + hfsplus: fix NULL dereference in hfsplus_lookup() + iommu/rockchip: Move irq request past pm_runtime_enable + fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries + fat: validate ->i_start before using + workqueue: skip lockdep wq dependency in cancel_work_sync() + workqueue: re-add lockdep dependencies for flushing + scripts: modpost: check memory allocation results + apparmor: fix an error code in __aa_create_ns() + virtio: pci-legacy: Validate queue pfn + x86/mce: Add notifier_block forward declaration + i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return value + IB/hfi1: Invalid NUMA node information can cause a divide by zero + pwm: meson: Fix mux clock names + powerpc/topology: Get topology for shared processors at boot + mm/fadvise.c: fix signed overflow UBSAN complaint + mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM + fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() + platform/x86: intel_punit_ipc: fix build errors + bpf, sockmap: fix map elem deletion race with smap_stop_sock + tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach + bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist + net/xdp: Fix suspicious RCU usage warning + bpf, sockmap: fix leakage of smap_psock_map_entry + samples/bpf: all XDP samples should unload xdp/bpf prog on SIGTERM + netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses + s390/kdump: Fix memleak in nt_vmcoreinfo + ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() + mfd: sm501: Set coherent_dma_mask when creating subdevices + netfilter: x_tables: do not fail xt_alloc_table_info too easilly + platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 + netfilter: fix memory leaks on netlink_dump_start error + tcp, ulp: add alias for all ulp modules + ubi: Initialize Fastmap checkmapping correctly + RDMA/hns: Fix usage of bitmap allocation functions return values + ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value + perf arm spe: Fix uninitialized record error variable + net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero + block: don't warn for flush on read-only device + net: hns3: Fix for phy link issue when using marvell phy driver + PCI: Match Root Port's MPS to endpoint's MPSS as necessary + drm/amd/display: Guard against null crtc in CRC IRQ + coccicheck: return proper error code on fail + perf tools: Check for null when copying nsinfo. + f2fs: avoid race between zero_range and background GC + f2fs: fix avoid race between truncate and background GC + RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO + irqchip/stm32: Fix init error handling + irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP + net/9p/trans_fd.c: fix race by holding the lock + net/9p: fix error path of p9_virtio_probe + f2fs: fix to clear PG_checked flag in set_page_dirty() + pinctrl: axp209: Fix NULL pointer dereference after allocation + bpf: fix bpffs non-array map seq_show issue + powerpc/uaccess: Enable get_user(u64, *p) on 32-bit + powerpc: Fix size calculation using resource_size() + perf probe powerpc: Fix trace event post-processing + block: bvec_nr_vecs() returns value for wrong slab + brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference + s390/dasd: fix hanging offline processing due to canceled worker + s390/dasd: fix panic for failed online processing + ACPI / scan: Initialize status to ACPI_STA_DEFAULT + blk-mq: count the hctx as active before allocating tag + scsi: aic94xx: fix an error code in aic94xx_init() + NFSv4: Fix error handling in nfs4_sp4_select_mode() + Input: do not use WARN() in input_alloc_absinfo() + xen/balloon: fix balloon initialization for PVH Dom0 + PCI: mvebu: Fix I/O space end address calculation + dm kcopyd: avoid softlockup in run_complete_job + staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice + ASoC: rt5677: Fix initialization of rt5677_of_match.data + iommu/omap: Fix cache flushes on L2 table entries + selftests/powerpc: Kill child processes on SIGINT + selinux: cleanup dentry and inodes on error in selinuxfs + RDS: IB: fix 'passing zero to ERR_PTR()' warning + cfq: Suppress compiler warnings about comparisons + smb3: fix reset of bytes read and written stats + CIFS: fix memory leak and remove dead code + SMB3: Number of requests sent should be displayed for SMB3 not just CIFS + smb3: if server does not support posix do not allow posix mount option + powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning + powerpc/64s: Make rfi_flush_fallback a little more robust + um: fix parallel building with O= option + powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. + clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 + drm/amd/display: Read back max backlight value at boot + KVM: vmx: track host_state.loaded using a loaded_vmcs pointer + kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 + drm/etnaviv: fix crash in GPU suspend when init failed due to buffer placement + btrfs: Exit gracefully when chunk map cannot be inserted to the tree + btrfs: replace: Reset on-disk dev stats value after replace + btrfs: fix in-memory value of total_devices after seed device deletion + btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized + btrfs: tree-checker: Detect invalid and empty essential trees + btrfs: check-integrity: Fix NULL pointer dereference for degraded mount + btrfs: lift uuid_mutex to callers of btrfs_open_devices + btrfs: Don't remove block group that still has pinned down bytes + btrfs: Fix a C compliance issue + arm64: rockchip: Force CONFIG_PM on Rockchip systems + ARM: rockchip: Force CONFIG_PM on Rockchip systems + btrfs: do btrfs_free_stale_devices outside of device_list_add + btrfs: extend locked section when adding a new device in device_list_add + btrfs: rename local devices for fs_devices in btrfs_free_stale_devices( + btrfs: use device_list_mutex when removing stale devices + btrfs: lift uuid_mutex to callers of btrfs_scan_one_device + btrfs: lift uuid_mutex to callers of btrfs_parse_early_options + btrfs: reorder initialization before the mount locks uuid_mutex + btrfs: fix mount and ioctl device scan ioctl race + drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" + drm/i915: Nuke the LVDS lid notifier + drm/i915: Increase LSPCON timeout + drm/i915: Free write_buf that we allocated with kzalloc. + drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet + drm/amdgpu: fix a reversed condition + drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode + drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST + drm/amd/powerplay: fixed uninitialized value + drm/amd/pp/Polaris12: Fix a chunk of registers missed to program + drm/edid: Quirk Vive Pro VR headset non-desktop. + drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 + drm/amd/display: fix type of variable + drm/amd/display: Don't share clk source between DP and HDMI + drm/amd/display: update clk for various HDMI color depths + drm/amd/display: Use requested HDMI aspect ratio + drm/amd/display: Report non-DP display as disconnected without EDID + drm/rockchip: lvds: add missing of_node_put + drm/rockchip: vop: split out core clock enablement into separate functions + drm/rockchip: vop: fix irq disabled after vop driver probed + drm/amd/display: Pass connector id when executing VBIOS CT + drm/amd/display: Check if clock source in use before disabling + drm/amdgpu: update tmr mc address + drm/amdgpu:add tmr mc address into amdgpu_firmware_info + drm/amdgpu:add new firmware id for VCN + drm/amdgpu:add VCN support in PSP driver + drm/amdgpu:add VCN booting with firmware loaded by PSP + drm/amdgpu: fix incorrect use of fcheck + drm/amdgpu: fix incorrect use of drm_file->pid + drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" + uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name + mm: respect arch_dup_mmap() return value + drm/i915: set DP Main Stream Attribute for color range on DDI platforms + x86/tsc: Prevent result truncation on 32bit + drm/amdgpu: Keep track of amount of pinned CPU visible VRAM + drm/amdgpu: Make pin_size values atomic + drm/amdgpu: Warn and update pin_size values when destroying a pinned BO + drm/amdgpu: Don't warn on destroying a pinned BO + debugobjects: Make stack check warning more informative + x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear + x86/xen: don't write ptes directly in 32-bit PV guests + kbuild: make missing $DEPMOD a Warning instead of an Error + kvm: x86: Set highest physical address bits in non-present/reserved SPTEs + x86: kvm: avoid unused variable warning + HID: redragon: fix num lock and caps lock LEDs + ASoC: wm8994: Fix missing break in switch + Linux 4.18.8 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1793069 Title: Cosmic update to v4.18.8 stable release Status in linux package in Ubuntu: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The v4.18.8 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well. git://git.kernel.org/ TEST CASE: TBD The following patches from the v4.18.8 stable release shall be applied: act_ife: fix a potential use-after-free ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state net: bcmgenet: use MAC link status for fixed phy net: macb: do not disable MDIO bus at open/close time net: sched: Fix memory exposure from short TCA_U32_SEL qlge: Fix netdev features configuration. r8152: disable RX aggregation on new Dell TB16 dock r8169: add support for NCube 8168 network card tcp: do not restart timewait timer on rst reception vti6: remove !skb->ignore_df check from vti6_xmit() act_ife: move tcfa_lock down to where necessary act_ife: fix a potential deadlock net: sched: action_ife: take reference to meta module bnxt_en: Clean up unused functions. bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. net/sched: act_pedit: fix dump of extended layered op tipc: fix a missing rhashtable_walk_exit() hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() tipc: fix the big/little endian issue in tipc_dest sctp: remove useless start_fail from sctp_ht_iter in proc erspan: set erspan_ver to 1 by default when adding an erspan dev net: macb: Fix regression breaking non-MDIO fixed-link PHYs ipv6: don't get lwtstate twice in ip6_rt_copy_init() net/ipv6: init ip6 anycast rt->dst.input as ip6_input net/ipv6: Only update MTU metric if it set net/ipv6: Put lwtstate when destroying fib6_info net/mlx5: Fix SQ offset in QPs with small RQ r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices Revert "net: stmmac: Do not keep rearming the coalesce timer in stmmac_xmit" ip6_vti: fix creating fallback tunnel device for vti6 ip6_vti: fix a null pointer deference when destroy vti6 tunnel nfp: wait for posted reconfigs when disabling the device sctp: hold transport before accessing its asoc in sctp_transport_get_next mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge vhost: correctly check the iova range when waking virtqueue hv_netvsc: ignore devices that are not PCI cifs: check if SMB2 PDU size has been padded and suppress the warning hfsplus: don't return 0 when fill_super() failed hfs: prevent crash on exit from failed search sunrpc: Don't use stack buffer with scatterlist fork: don't copy inconsistent signal handler state to child fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds reiserfs: change j_timestamp type to time64_t iommu/rockchip: Handle errors returned from PM framework hfsplus: fix NULL dereference in hfsplus_lookup() iommu/rockchip: Move irq request past pm_runtime_enable fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries fat: validate ->i_start before using workqueue: skip lockdep wq dependency in cancel_work_sync() workqueue: re-add lockdep dependencies for flushing scripts: modpost: check memory allocation results apparmor: fix an error code in __aa_create_ns() virtio: pci-legacy: Validate queue pfn x86/mce: Add notifier_block forward declaration i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return value IB/hfi1: Invalid NUMA node information can cause a divide by zero pwm: meson: Fix mux clock names powerpc/topology: Get topology for shared processors at boot mm/fadvise.c: fix signed overflow UBSAN complaint mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() platform/x86: intel_punit_ipc: fix build errors bpf, sockmap: fix map elem deletion race with smap_stop_sock tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist net/xdp: Fix suspicious RCU usage warning bpf, sockmap: fix leakage of smap_psock_map_entry samples/bpf: all XDP samples should unload xdp/bpf prog on SIGTERM netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses s390/kdump: Fix memleak in nt_vmcoreinfo ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() mfd: sm501: Set coherent_dma_mask when creating subdevices netfilter: x_tables: do not fail xt_alloc_table_info too easilly platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 netfilter: fix memory leaks on netlink_dump_start error tcp, ulp: add alias for all ulp modules ubi: Initialize Fastmap checkmapping correctly RDMA/hns: Fix usage of bitmap allocation functions return values ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value perf arm spe: Fix uninitialized record error variable net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero block: don't warn for flush on read-only device net: hns3: Fix for phy link issue when using marvell phy driver PCI: Match Root Port's MPS to endpoint's MPSS as necessary drm/amd/display: Guard against null crtc in CRC IRQ coccicheck: return proper error code on fail perf tools: Check for null when copying nsinfo. f2fs: avoid race between zero_range and background GC f2fs: fix avoid race between truncate and background GC RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO irqchip/stm32: Fix init error handling irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP net/9p/trans_fd.c: fix race by holding the lock net/9p: fix error path of p9_virtio_probe f2fs: fix to clear PG_checked flag in set_page_dirty() pinctrl: axp209: Fix NULL pointer dereference after allocation bpf: fix bpffs non-array map seq_show issue powerpc/uaccess: Enable get_user(u64, *p) on 32-bit powerpc: Fix size calculation using resource_size() perf probe powerpc: Fix trace event post-processing block: bvec_nr_vecs() returns value for wrong slab brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference s390/dasd: fix hanging offline processing due to canceled worker s390/dasd: fix panic for failed online processing ACPI / scan: Initialize status to ACPI_STA_DEFAULT blk-mq: count the hctx as active before allocating tag scsi: aic94xx: fix an error code in aic94xx_init() NFSv4: Fix error handling in nfs4_sp4_select_mode() Input: do not use WARN() in input_alloc_absinfo() xen/balloon: fix balloon initialization for PVH Dom0 PCI: mvebu: Fix I/O space end address calculation dm kcopyd: avoid softlockup in run_complete_job staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice ASoC: rt5677: Fix initialization of rt5677_of_match.data iommu/omap: Fix cache flushes on L2 table entries selftests/powerpc: Kill child processes on SIGINT selinux: cleanup dentry and inodes on error in selinuxfs RDS: IB: fix 'passing zero to ERR_PTR()' warning cfq: Suppress compiler warnings about comparisons smb3: fix reset of bytes read and written stats CIFS: fix memory leak and remove dead code SMB3: Number of requests sent should be displayed for SMB3 not just CIFS smb3: if server does not support posix do not allow posix mount option powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning powerpc/64s: Make rfi_flush_fallback a little more robust um: fix parallel building with O= option powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 drm/amd/display: Read back max backlight value at boot KVM: vmx: track host_state.loaded using a loaded_vmcs pointer kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 drm/etnaviv: fix crash in GPU suspend when init failed due to buffer placement btrfs: Exit gracefully when chunk map cannot be inserted to the tree btrfs: replace: Reset on-disk dev stats value after replace btrfs: fix in-memory value of total_devices after seed device deletion btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized btrfs: tree-checker: Detect invalid and empty essential trees btrfs: check-integrity: Fix NULL pointer dereference for degraded mount btrfs: lift uuid_mutex to callers of btrfs_open_devices btrfs: Don't remove block group that still has pinned down bytes btrfs: Fix a C compliance issue arm64: rockchip: Force CONFIG_PM on Rockchip systems ARM: rockchip: Force CONFIG_PM on Rockchip systems btrfs: do btrfs_free_stale_devices outside of device_list_add btrfs: extend locked section when adding a new device in device_list_add btrfs: rename local devices for fs_devices in btrfs_free_stale_devices( btrfs: use device_list_mutex when removing stale devices btrfs: lift uuid_mutex to callers of btrfs_scan_one_device btrfs: lift uuid_mutex to callers of btrfs_parse_early_options btrfs: reorder initialization before the mount locks uuid_mutex btrfs: fix mount and ioctl device scan ioctl race drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" drm/i915: Nuke the LVDS lid notifier drm/i915: Increase LSPCON timeout drm/i915: Free write_buf that we allocated with kzalloc. drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet drm/amdgpu: fix a reversed condition drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST drm/amd/powerplay: fixed uninitialized value drm/amd/pp/Polaris12: Fix a chunk of registers missed to program drm/edid: Quirk Vive Pro VR headset non-desktop. drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 drm/amd/display: fix type of variable drm/amd/display: Don't share clk source between DP and HDMI drm/amd/display: update clk for various HDMI color depths drm/amd/display: Use requested HDMI aspect ratio drm/amd/display: Report non-DP display as disconnected without EDID drm/rockchip: lvds: add missing of_node_put drm/rockchip: vop: split out core clock enablement into separate functions drm/rockchip: vop: fix irq disabled after vop driver probed drm/amd/display: Pass connector id when executing VBIOS CT drm/amd/display: Check if clock source in use before disabling drm/amdgpu: update tmr mc address drm/amdgpu:add tmr mc address into amdgpu_firmware_info drm/amdgpu:add new firmware id for VCN drm/amdgpu:add VCN support in PSP driver drm/amdgpu:add VCN booting with firmware loaded by PSP drm/amdgpu: fix incorrect use of fcheck drm/amdgpu: fix incorrect use of drm_file->pid drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse" uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name mm: respect arch_dup_mmap() return value drm/i915: set DP Main Stream Attribute for color range on DDI platforms x86/tsc: Prevent result truncation on 32bit drm/amdgpu: Keep track of amount of pinned CPU visible VRAM drm/amdgpu: Make pin_size values atomic drm/amdgpu: Warn and update pin_size values when destroying a pinned BO drm/amdgpu: Don't warn on destroying a pinned BO debugobjects: Make stack check warning more informative x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear x86/xen: don't write ptes directly in 32-bit PV guests kbuild: make missing $DEPMOD a Warning instead of an Error kvm: x86: Set highest physical address bits in non-present/reserved SPTEs x86: kvm: avoid unused variable warning HID: redragon: fix num lock and caps lock LEDs ASoC: wm8994: Fix missing break in switch Linux 4.18.8 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1793069/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp