Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v4.18.11 upstream stable release from git://git.kernel.org/ The following patches from the v4.18.11 stable release shall be applied: gso_segment: Reset skb->mac_len after modifying network header ipv6: fix possible use-after-free in ip6_xmit() net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT net: hp100: fix always-true check for link up state pppoe: fix reception of frames with no mac header qmi_wwan: set DTR for modems in forced USB2 mode udp4: fix IP_CMSG_CHECKSUM for connected sockets tls: don't copy the key out of tls12_crypto_info_aes_gcm_128 tls: zero the crypto information from tls_context before freeing tls: clear key material from kernel memory when do_tls_setsockopt_conf fails neighbour: confirm neigh entries when ARP packet is received udp6: add missing checks on edumux packet processing net/sched: act_sample: fix NULL dereference in the data path hv_netvsc: fix schedule in RCU context net: dsa: mv88e6xxx: Fix ATU Miss Violation socket: fix struct ifreq size in compat ioctl tls: fix currently broken MSG_PEEK behavior bnxt_en: Fix VF mac address regression. ipv6: use rt6_info members when dst is set in rt6_fill_node net/ipv6: do not copy dst flags on rt init net: mvpp2: let phylink manage the carrier state net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags NFC: Fix possible memory corruption when handling SHDLC I-Frame commands NFC: Fix the number of pipes ASoC: wm9712: fix replace codec to component ASoC: cs4265: fix MMTLR Data switch control ASoC: tas6424: Save last fault register even when clear ASoC: rsnd: fixup not to call clk_get/set under non-atomic ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() ALSA: firewire-digi00x: fix memory leak of private data ALSA: firewire-tascam: fix memory leak of private data ALSA: fireworks: fix memory leak of response buffer at error path ALSA: oxfw: fix memory leak for model-dependent data at error path ALSA: oxfw: fix memory leak of discovered stream formats at error path ALSA: oxfw: fix memory leak of private data mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able mtd: rawnand: denali: fix a race condition when DMA is kicked platform/x86: dell-smbios-wmi: Correct a memory leak platform/x86: alienware-wmi: Correct a memory leak xen/netfront: don't bug in case of too many frags xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers Revert "PCI: Add ACS quirk for Intel 300 series" ring-buffer: Allow for rescheduling when removing pages crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2 fork: report pid exhaustion correctly mm: disable deferred struct page for 32-bit arches mm: shmem.c: Correctly annotate new inodes for lockdep Revert "rpmsg: core: add support to power domains for devices" bpf/verifier: disallow pointer subtraction Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name" scsi: target: iscsi: Use hex2bin instead of a re-implementation scsi: target: iscsi: Use bin2hex instead of a re-implementation Revert "ubifs: xattr: Don't operate on deleted inodes" libata: mask swap internal and hardware tag ocfs2: fix ocfs2 read block panic drm/i915/bdw: Increase IPS disable timeout to 100ms drm/nouveau: Reset MST branching unit before enabling drm/nouveau: Only write DP_MSTM_CTRL when needed drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend() drm/nouveau: Fix deadlocks in nouveau_connector_detect() drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early drm/vc4: Fix the "no scaling" case on multi-planar YUV formats drm: udl: Destroy framebuffer only if it was initialized drm/amdgpu: add new polaris pci id tty: vt_ioctl: fix potential Spectre v1 ext4: check to make sure the rename(2)'s destination is not freed ext4: avoid divide by zero fault when deleting corrupted inline directories ext4: avoid arithemetic overflow that can trigger a BUG ext4: recalucate superblock checksum after updating free blocks/inodes ext4: fix online resize's handling of a too-small final block group ext4: fix online resizing for bigalloc file systems with a 1k block size ext4: don't mark mmp buffer head dirty ext4: show test_dummy_encryption mount option in /proc/mounts ext4, dax: add ext4_bmap to ext4_dax_aops ext4, dax: set ext4_dax_aops for dax files sched/fair: Fix vruntime_normalized() for remote non-migration wakeup vmw_balloon: include asm/io.h iw_cxgb4: only allow 1 flush on user qps spi: Fix double IDR allocation with DT aliases Linux 4.18.11 ** Affects: linux (Ubuntu) Importance: Medium Assignee: Seth Forshee (sforshee) Status: Invalid ** Affects: linux (Ubuntu Cosmic) Importance: Medium Assignee: Seth Forshee (sforshee) Status: Invalid ** Tags: kernel-stable-tracking-bug ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Cosmic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Cosmic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Cosmic) Status: New => In Progress ** Changed in: linux (Ubuntu Cosmic) Assignee: (unassigned) => Seth Forshee (sforshee) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + v4.18.11 upstream stable release + from git://git.kernel.org/ - v4.18.11 upstream stable release - from git://git.kernel.org/ + The following patches from the v4.18.11 stable release shall be + applied: + + gso_segment: Reset skb->mac_len after modifying network header + ipv6: fix possible use-after-free in ip6_xmit() + net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT + net: hp100: fix always-true check for link up state + pppoe: fix reception of frames with no mac header + qmi_wwan: set DTR for modems in forced USB2 mode + udp4: fix IP_CMSG_CHECKSUM for connected sockets + tls: don't copy the key out of tls12_crypto_info_aes_gcm_128 + tls: zero the crypto information from tls_context before freeing + tls: clear key material from kernel memory when do_tls_setsockopt_conf fails + neighbour: confirm neigh entries when ARP packet is received + udp6: add missing checks on edumux packet processing + net/sched: act_sample: fix NULL dereference in the data path + hv_netvsc: fix schedule in RCU context + net: dsa: mv88e6xxx: Fix ATU Miss Violation + socket: fix struct ifreq size in compat ioctl + tls: fix currently broken MSG_PEEK behavior + bnxt_en: Fix VF mac address regression. + ipv6: use rt6_info members when dst is set in rt6_fill_node + net/ipv6: do not copy dst flags on rt init + net: mvpp2: let phylink manage the carrier state + net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags + NFC: Fix possible memory corruption when handling SHDLC I-Frame commands + NFC: Fix the number of pipes + ASoC: wm9712: fix replace codec to component + ASoC: cs4265: fix MMTLR Data switch control + ASoC: tas6424: Save last fault register even when clear + ASoC: rsnd: fixup not to call clk_get/set under non-atomic + ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors + ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path + ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping + ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO + ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() + ALSA: firewire-digi00x: fix memory leak of private data + ALSA: firewire-tascam: fix memory leak of private data + ALSA: fireworks: fix memory leak of response buffer at error path + ALSA: oxfw: fix memory leak for model-dependent data at error path + ALSA: oxfw: fix memory leak of discovered stream formats at error path + ALSA: oxfw: fix memory leak of private data + mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able + mtd: rawnand: denali: fix a race condition when DMA is kicked + platform/x86: dell-smbios-wmi: Correct a memory leak + platform/x86: alienware-wmi: Correct a memory leak + xen/netfront: don't bug in case of too many frags + xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code + spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers + Revert "PCI: Add ACS quirk for Intel 300 series" + ring-buffer: Allow for rescheduling when removing pages + crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2 + fork: report pid exhaustion correctly + mm: disable deferred struct page for 32-bit arches + mm: shmem.c: Correctly annotate new inodes for lockdep + Revert "rpmsg: core: add support to power domains for devices" + bpf/verifier: disallow pointer subtraction + Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name" + scsi: target: iscsi: Use hex2bin instead of a re-implementation + scsi: target: iscsi: Use bin2hex instead of a re-implementation + Revert "ubifs: xattr: Don't operate on deleted inodes" + libata: mask swap internal and hardware tag + ocfs2: fix ocfs2 read block panic + drm/i915/bdw: Increase IPS disable timeout to 100ms + drm/nouveau: Reset MST branching unit before enabling + drm/nouveau: Only write DP_MSTM_CTRL when needed + drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend() + drm/nouveau: Fix deadlocks in nouveau_connector_detect() + drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload + drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement + drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests + drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() + drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early + drm/vc4: Fix the "no scaling" case on multi-planar YUV formats + drm: udl: Destroy framebuffer only if it was initialized + drm/amdgpu: add new polaris pci id + tty: vt_ioctl: fix potential Spectre v1 + ext4: check to make sure the rename(2)'s destination is not freed + ext4: avoid divide by zero fault when deleting corrupted inline directories + ext4: avoid arithemetic overflow that can trigger a BUG + ext4: recalucate superblock checksum after updating free blocks/inodes + ext4: fix online resize's handling of a too-small final block group + ext4: fix online resizing for bigalloc file systems with a 1k block size + ext4: don't mark mmp buffer head dirty + ext4: show test_dummy_encryption mount option in /proc/mounts + ext4, dax: add ext4_bmap to ext4_dax_aops + ext4, dax: set ext4_dax_aops for dax files + sched/fair: Fix vruntime_normalized() for remote non-migration wakeup + vmw_balloon: include asm/io.h + iw_cxgb4: only allow 1 flush on user qps + spi: Fix double IDR allocation with DT aliases + Linux 4.18.11 ** Changed in: linux (Ubuntu Cosmic) Status: In Progress => Invalid -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1796136 Title: Cosmic update: v4.18.11 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Cosmic: Invalid Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v4.18.11 upstream stable release from git://git.kernel.org/ The following patches from the v4.18.11 stable release shall be applied: gso_segment: Reset skb->mac_len after modifying network header ipv6: fix possible use-after-free in ip6_xmit() net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT net: hp100: fix always-true check for link up state pppoe: fix reception of frames with no mac header qmi_wwan: set DTR for modems in forced USB2 mode udp4: fix IP_CMSG_CHECKSUM for connected sockets tls: don't copy the key out of tls12_crypto_info_aes_gcm_128 tls: zero the crypto information from tls_context before freeing tls: clear key material from kernel memory when do_tls_setsockopt_conf fails neighbour: confirm neigh entries when ARP packet is received udp6: add missing checks on edumux packet processing net/sched: act_sample: fix NULL dereference in the data path hv_netvsc: fix schedule in RCU context net: dsa: mv88e6xxx: Fix ATU Miss Violation socket: fix struct ifreq size in compat ioctl tls: fix currently broken MSG_PEEK behavior bnxt_en: Fix VF mac address regression. ipv6: use rt6_info members when dst is set in rt6_fill_node net/ipv6: do not copy dst flags on rt init net: mvpp2: let phylink manage the carrier state net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags NFC: Fix possible memory corruption when handling SHDLC I-Frame commands NFC: Fix the number of pipes ASoC: wm9712: fix replace codec to component ASoC: cs4265: fix MMTLR Data switch control ASoC: tas6424: Save last fault register even when clear ASoC: rsnd: fixup not to call clk_get/set under non-atomic ASoC: uapi: fix sound/skl-tplg-interface.h userspace compilation errors ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO ALSA: fireface: fix memory leak in ff400_switch_fetching_mode() ALSA: firewire-digi00x: fix memory leak of private data ALSA: firewire-tascam: fix memory leak of private data ALSA: fireworks: fix memory leak of response buffer at error path ALSA: oxfw: fix memory leak for model-dependent data at error path ALSA: oxfw: fix memory leak of discovered stream formats at error path ALSA: oxfw: fix memory leak of private data mtd: devices: m25p80: Make sure the buffer passed in op is DMA-able mtd: rawnand: denali: fix a race condition when DMA is kicked platform/x86: dell-smbios-wmi: Correct a memory leak platform/x86: alienware-wmi: Correct a memory leak xen/netfront: don't bug in case of too many frags xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers Revert "PCI: Add ACS quirk for Intel 300 series" ring-buffer: Allow for rescheduling when removing pages crypto: x86/aegis,morus - Do not require OSXSAVE for SSE2 fork: report pid exhaustion correctly mm: disable deferred struct page for 32-bit arches mm: shmem.c: Correctly annotate new inodes for lockdep Revert "rpmsg: core: add support to power domains for devices" bpf/verifier: disallow pointer subtraction Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name" scsi: target: iscsi: Use hex2bin instead of a re-implementation scsi: target: iscsi: Use bin2hex instead of a re-implementation Revert "ubifs: xattr: Don't operate on deleted inodes" libata: mask swap internal and hardware tag ocfs2: fix ocfs2 read block panic drm/i915/bdw: Increase IPS disable timeout to 100ms drm/nouveau: Reset MST branching unit before enabling drm/nouveau: Only write DP_MSTM_CTRL when needed drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend() drm/nouveau: Fix deadlocks in nouveau_connector_detect() drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early drm/vc4: Fix the "no scaling" case on multi-planar YUV formats drm: udl: Destroy framebuffer only if it was initialized drm/amdgpu: add new polaris pci id tty: vt_ioctl: fix potential Spectre v1 ext4: check to make sure the rename(2)'s destination is not freed ext4: avoid divide by zero fault when deleting corrupted inline directories ext4: avoid arithemetic overflow that can trigger a BUG ext4: recalucate superblock checksum after updating free blocks/inodes ext4: fix online resize's handling of a too-small final block group ext4: fix online resizing for bigalloc file systems with a 1k block size ext4: don't mark mmp buffer head dirty ext4: show test_dummy_encryption mount option in /proc/mounts ext4, dax: add ext4_bmap to ext4_dax_aops ext4, dax: set ext4_dax_aops for dax files sched/fair: Fix vruntime_normalized() for remote non-migration wakeup vmw_balloon: include asm/io.h iw_cxgb4: only allow 1 flush on user qps spi: Fix double IDR allocation with DT aliases Linux 4.18.11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1796136/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp