This bug was fixed in the package linux - 4.19.0-12.13 --------------- linux (4.19.0-12.13) disco; urgency=medium
* linux: 4.19.0-12.13 -proposed tracker (LP: #1813664) * kernel oops in bcache module (LP: #1793901) - SAUCE: bcache: never writeback a discard operation * Disco update: 4.19.18 upstream stable release (LP: #1813611) - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address - mlxsw: spectrum: Disable lag port TX before removing it - mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion - net: dsa: mv88x6xxx: mv88e6390 errata - net, skbuff: do not prefer skb allocation fails early - qmi_wwan: add MTU default to qmap network interface - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses - net: clear skb->tstamp in bridge forwarding path - netfilter: ipset: Allow matching on destination MAC address for mac and ipmac sets - gpio: pl061: Move irq_chip definition inside struct pl061 - drm/amd/display: Guard against null stream_state in set_crc_source - drm/amdkfd: fix interrupt spin lock - ixgbe: allow IPsec Tx offload in VEPA mode - platform/x86: asus-wmi: Tell the EC the OS will handle the display off hotkey - e1000e: allow non-monotonic SYSTIM readings - usb: typec: tcpm: Do not disconnect link for self powered devices - selftests/bpf: enable (uncomment) all tests in test_libbpf.sh - of: overlay: add missing of_node_put() after add new node to changeset - writeback: don't decrement wb->refcnt if !wb->bdi - serial: set suppress_bind_attrs flag only if builtin - bpf: Allow narrow loads with offset > 0 - ALSA: oxfw: add support for APOGEE duet FireWire - x86/mce: Fix -Wmissing-prototypes warnings - MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur - crypto: ecc - regularize scalar for scalar multiplication - arm64: perf: set suppress_bind_attrs flag to true - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier - clk: meson: meson8b: fix incorrect divider mapping in cpu_scale_table - samples: bpf: fix: error handling regarding kprobe_events - usb: gadget: udc: renesas_usb3: add a safety connection way for forced_b_device - fpga: altera-cvp: fix probing for multiple FPGAs on the bus - selinux: always allow mounting submounts - ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined - scsi: qedi: Check for session online before getting iSCSI TLV data. - drm/amdgpu: Reorder uvd ring init before uvd resume - rxe: IB_WR_REG_MR does not capture MR's iova field - efi/libstub: Disable some warnings for x86{,_64} - jffs2: Fix use of uninitialized delayed_work, lockdep breakage - clk: imx: make mux parent strings const - pstore/ram: Do not treat empty buffers as valid - media: uvcvideo: Refactor teardown of uvc on USB disconnect - powerpc/xmon: Fix invocation inside lock region - powerpc/pseries/cpuidle: Fix preempt warning - media: firewire: Fix app_info parameter type in avc_ca{,_app}_info - ASoC: use dma_ops of parent device for acp_audio_dma - media: venus: core: Set dma maximum segment size - staging: erofs: fix use-after-free of on-stack `z_erofs_vle_unzip_io' - net: call sk_dst_reset when set SO_DONTROUTE - scsi: target: use consistent left-aligned ASCII INQUIRY data - scsi: target/core: Make sure that target_wait_for_sess_cmds() waits long enough - selftests: do not macro-expand failed assertion expressions - arm64: kasan: Increase stack size for KASAN_EXTRA - clk: imx6q: reset exclusive gates on init - arm64: Fix minor issues with the dcache_by_line_op macro - bpf: relax verifier restriction on BPF_MOV | BPF_ALU - kconfig: fix file name and line number of warn_ignored_character() - kconfig: fix memory leak when EOF is encountered in quotation - mmc: atmel-mci: do not assume idle after atmci_request_end - btrfs: volumes: Make sure there is no overlap of dev extents at mount time - btrfs: alloc_chunk: fix more DUP stripe size handling - btrfs: fix use-after-free due to race between replace start and cancel - btrfs: improve error handling of btrfs_add_link - tty/serial: do not free trasnmit buffer page under port lock - perf intel-pt: Fix error with config term "pt=0" - perf tests ARM: Disable breakpoint tests 32-bit - perf svghelper: Fix unchecked usage of strncpy() - perf parse-events: Fix unchecked usage of strncpy() - perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX - netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set - netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine - netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine - x86/topology: Use total_cpus for max logical packages calculation - dm crypt: use u64 instead of sector_t to store iv_offset - dm kcopyd: Fix bug causing workqueue stalls - perf stat: Avoid segfaults caused by negated options - tools lib subcmd: Don't add the kernel sources to the include path - dm snapshot: Fix excessive memory usage and workqueue stalls - perf cs-etm: Correct packets swapping in cs_etm__flush() - perf tools: Add missing sigqueue() prototype for systems lacking it - perf tools: Add missing open_memstream() prototype for systems lacking it - quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls. - clocksource/drivers/integrator-ap: Add missing of_node_put() - dm: Check for device sector overflow if CONFIG_LBDAF is not set - Bluetooth: btusb: Add support for Intel bluetooth device 8087:0029 - ALSA: bebob: fix model-id of unit for Apogee Ensemble - sysfs: Disable lockdep for driver bind/unbind files - IB/usnic: Fix potential deadlock - scsi: mpt3sas: fix memory ordering on 64bit writes - scsi: smartpqi: correct lun reset issues - ath10k: fix peer stats null pointer dereference - scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() - scsi: megaraid: fix out-of-bound array accesses - iomap: don't search past page end in iomap_is_partially_uptodate - ocfs2: fix panic due to unrecovered local alloc - mm/page-writeback.c: don't break integrity writeback on ->writepage() error - mm/swap: use nr_node_ids for avail_lists in swap_info_struct - userfaultfd: clear flag if remap event not enabled - mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps - iwlwifi: mvm: Send LQ command as async when necessary - Bluetooth: Fix unnecessary error message for HCI request completion - ipmi: fix use-after-free of user->release_barrier.rda - ipmi: msghandler: Fix potential Spectre v1 vulnerabilities - ipmi: Prevent use-after-free in deliver_response - ipmi:ssif: Fix handling of multi-part return messages - ipmi: Don't initialize anything in the core until something uses it - Linux 4.19.18 * tls selftest failures/hangs on i386 (LP: #1813607) - [Config] CONFIG_TLS=n for i386 * Intel XL710 - i40e driver does not work with kernel 4.15 (Ubuntu 18.04) (LP: #1779756) - i40e: prevent overlapping tx_timeout recover * Disco update: 4.19.17 upstream stable release (LP: #1813016) - tty/ldsem: Wake up readers after timed out down_write() - tty: Don't hold ldisc lock in tty_reopen() if ldisc present - can: gw: ensure DLC boundaries after CAN frame modification - netfilter: nf_conncount: replace CONNCOUNT_LOCK_SLOTS with CONNCOUNT_SLOTS - netfilter: nf_conncount: split gc in two phases - netfilter: nf_conncount: restart search when nodes have been erased - netfilter: nf_conncount: merge lookup and add functions - netfilter: nf_conncount: move all list iterations under spinlock - netfilter: nf_conncount: speculative garbage collection on empty lists - netfilter: nf_conncount: fix argument order to find_next_bit - mmc: sdhci-msm: Disable CDR function on TX - Revert "scsi: target: iscsi: cxgbit: fix csk leak" - scsi: target: iscsi: cxgbit: fix csk leak - scsi: target: iscsi: cxgbit: fix csk leak - arm64/kvm: consistently handle host HCR_EL2 flags - arm64: Don't trap host pointer auth use to EL2 - ipv6: fix kernel-infoleak in ipv6_local_error() - net: bridge: fix a bug on using a neighbour cache entry without checking its state - packet: Do not leak dev refcounts on error exit - tcp: change txhash on SYN-data timeout - tun: publish tfile after it's fully initialized - lan743x: Remove phy_read from link status change function - smc: move unhash as early as possible in smc_release() - r8169: don't try to read counters if chip is in a PCI power-save state - bonding: update nest level on unlink - ip: on queued skb use skb_header_pointer instead of pskb_may_pull - r8169: load Realtek PHY driver module before r8169 - crypto: sm3 - fix undefined shift by >= width of value - crypto: caam - fix zero-length buffer DMA mapping - crypto: authencesn - Avoid twice completion call in decrypt path - crypto: ccree - convert to use crypto_authenc_extractkeys() - crypto: bcm - convert to use crypto_authenc_extractkeys() - crypto: authenc - fix parsing key with misaligned rta_len - crypto: talitos - reorder code in talitos_edesc_alloc() - crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK - xen: Fix x86 sched_clock() interface for xen - Revert "btrfs: balance dirty metadata pages in btrfs_finish_ordered_io" - btrfs: wait on ordered extents on abort cleanup - Yama: Check for pid death before checking ancestry - scsi: core: Synchronize request queue PM status only on successful resume - scsi: sd: Fix cache_type_store() - mips: fix n32 compat_ipc_parse_version - MIPS: BCM47XX: Setup struct device for the SoC - MIPS: lantiq: Fix IPI interrupt handling - drm/i915/gvt: Fix mmap range check - OF: properties: add missing of_node_put - mfd: tps6586x: Handle interrupts on suspend - media: v4l: ioctl: Validate num_planes for debug messages - RDMA/nldev: Don't expose unsafe global rkey to regular user - RDMA/vmw_pvrdma: Return the correct opcode when creating WR - kbuild: Disable LD_DEAD_CODE_DATA_ELIMINATION with ftrace & GCC <= 4.7 - net: dsa: realtek-smi: fix OF child-node lookup - pstore/ram: Avoid allocation and leak of platform data - arm64: kaslr: ensure randomized quantities are clean to the PoC - arm64: dts: marvell: armada-ap806: reserve PSCI area - Disable MSI also when pcie-octeon.pcie_disable on - fix int_sqrt64() for very large numbers - omap2fb: Fix stack memory disclosure - media: vivid: fix error handling of kthread_run - media: vivid: set min width/height to a value > 0 - bpf: in __bpf_redirect_no_mac pull mac only if present - ipv6: make icmp6_send() robust against null skb->dev - LSM: Check for NULL cred-security on free - media: vb2: vb2_mmap: move lock up - sunrpc: handle ENOMEM in rpcb_getport_async - netfilter: ebtables: account ebt_table_info to kmemcg - block: use rcu_work instead of call_rcu to avoid sleep in softirq - selinux: fix GPF on invalid policy - blockdev: Fix livelocks on loop device - sctp: allocate sctp_sockaddr_entry with kzalloc - tipc: fix uninit-value in in tipc_conn_rcv_sub - tipc: fix uninit-value in tipc_nl_compat_link_reset_stats - tipc: fix uninit-value in tipc_nl_compat_bearer_enable - tipc: fix uninit-value in tipc_nl_compat_link_set - tipc: fix uninit-value in tipc_nl_compat_name_table_dump - tipc: fix uninit-value in tipc_nl_compat_doit - block/loop: Don't grab "struct file" for vfs_getattr() operation. - block/loop: Use global lock for ioctl() operation. - loop: Fold __loop_release into loop_release - loop: Get rid of loop_index_mutex - loop: Push lo_ctl_mutex down into individual ioctls - loop: Split setting of lo_state from loop_clr_fd - loop: Push loop_ctl_mutex down into loop_clr_fd() - loop: Push loop_ctl_mutex down to loop_get_status() - loop: Push loop_ctl_mutex down to loop_set_status() - loop: Push loop_ctl_mutex down to loop_set_fd() - loop: Push loop_ctl_mutex down to loop_change_fd() - loop: Move special partition reread handling in loop_clr_fd() - loop: Move loop_reread_partitions() out of loop_ctl_mutex - loop: Fix deadlock when calling blkdev_reread_part() - loop: Avoid circular locking dependency between loop_ctl_mutex and bd_mutex - loop: Get rid of 'nested' acquisition of loop_ctl_mutex - loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl() - loop: drop caches if offset or block_size are changed - drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock - selftests: Fix test errors related to lib.mk khdr target - media: vb2: be sure to unlock mutex on errors - nbd: Use set_blocksize() to set device blocksize - Linux 4.19.17 * Enable sound card power saving by default (LP: #1804265) - [Config] CONFIG_SND_HDA_POWER_SAVE_DEFAULT=1 * Fix non-working QCA Rome Bluetooth after S3 (LP: #1812812) - USB: Add new USB LPM helpers - USB: Consolidate LPM checks to avoid enabling LPM twice * [SRU] Fix Xorg crash with nomodeset when BIOS enable 64-bit fb addr (LP: #1812797) - vgaarb: Add support for 64-bit frame buffer address - vgaarb: Keep adding VGA device in queue * bluetooth controller not detected with 4.15 kernel (LP: #1810797) - SAUCE: btqcomsmd: introduce BT_QCOMSMD_HACK - [Config] arm64: snapdragon: BT_QCOMSMD_HACK=y * [19.04 FEAT| Enable virtio-gpu for s390x (LP: #1799467) - [Config] enable virtio-gpu for s390x * Miscellaneous Ubuntu changes - Revert "UBUNTU: SAUCE: selftests: disable some failing networking tests" - SAUCE: selftests: net: replace AF_MAX with INT_MAX in socket.c - SAUCE: selftests/ftrace: Fix tab expansion in trace_marker snapshot trigger test - update dkms package versions * Miscellaneous upstream changes - selftests/ftrace: Fix checkbashisms errors - selftests/powerpc/pmu: Link ebb tests with -no-pie -- Seth Forshee <seth.fors...@canonical.com> Mon, 28 Jan 2019 15:38:30 -0600 ** Changed in: linux (Ubuntu Disco) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1810788 Title: Disco update: 4.19.9 upstream stable release Status in linux package in Ubuntu: Fix Released Status in linux source package in Disco: Fix Released Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: 4.19.9 upstream stable release from git://git.kernel.org/ Linux 4.19.9 HID: quirks: fix RetroUSB.com devices mac80211: ignore NullFunc frames in the duplicate detection mac80211: fix reordering of buffered broadcast packets mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: Clear beacon_int in ieee80211_do_stop mac80211: fix GFP_KERNEL under tasklet context mac80211_hwsim: Timer should be initialized before device registered cfg80211: Fix busy loop regression in ieee80211_ie_split_ric() libnvdimm, pfn: Pad pfn namespaces relative to other regions kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() gnss: sirf: fix activation retry handling tty: do not set TTY_IO_ERROR flag if console port tty: serial: 8250_mtk: always resume the device in probe. x86/efi: Allocate e820 buffer before calling efi_exit_boot_service kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction drm/i915: Downgrade Gen9 Plane WM latency error drm/amdgpu/gmc8: always load MC firmware in the driver drm/amdgpu/gmc8: update MC firmware for polaris drm/msm: Move fence put to where failure occurs drm/lease: Send a distinct uevent drm/amdgpu: update mc firmware image for polaris12 variants crypto: do not free algorithm before using Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c" staging: rtl8712: Fix possible buffer overrun cifs: Fix separator when building path from dentry Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved" arm64: dts: rockchip: remove vdd_log from rock960 to fix a stability issues xhci: Prevent U1/U2 link pm states if exit latency is too long ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE dmaengine: cppi41: delete channel from pending list when stop channel dmaengine: imx-sdma: use GFP_NOWAIT for dma descriptor allocations dmaengine: imx-sdma: implement channel termination via worker Revert "dmaengine: imx-sdma: alloclate bd memory from dma pool" Revert "dmaengine: imx-sdma: Use GFP_NOWAIT for dma allocations" dmaengine: dw: Fix FIFO size for Intel Merrifield SUNRPC: Fix leak of krb5p encode pages arm64: hibernate: Avoid sending cross-calling with interrupts disabled vhost/vsock: fix use-after-free in network stack callers virtio/s390: fix race in ccw_io_helper() virtio/s390: avoid race on vcdev->config parisc: Enable -ffunction-sections for modules on 32-bit kernel Revert "mfd: cros_ec: Use devm_kzalloc for private data" media: dvb-pll: don't re-validate tuner frequencies media: dvb-pll: fix tuner frequency ranges media: vicodec: fix memchr() kernel oops media: gspca: fix frame overflow error ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880 ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570 ALSA: pcm: Fix interval evaluation with openmin/max ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix starvation on down_write_nonblock() ALSA: hda: Add support for AMD Stoney Ridge ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support USB: serial: console: fix reported terminal settings USB: check usb_get_extra_descriptor for proper size usb: appledisplay: Add 27" Apple Cinema Display usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device net: amd: add missing of_node_put() team: no need to do team_notify_peers or team_mcast_rejoin when disabling port ibmvnic: Update driver queues after change in ring size support ibmvnic: Fix RX queue buffer cleanup flexfiles: use per-mirror specified stateid for IO NFSv4.2 copy do not allocate memory under the lock iommu/vt-d: Use memunmap to free memremap net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts riscv: fix warning in arch/riscv/include/asm/module.h net/ibmnvic: Fix deadlock problem in reset qed: Fix QM getters to always return a valid pq qed: Fix bitmap_weight() check NFSv4: Fix a NFSv4 state manager deadlock net: ena: fix crash during failed resume from hibernation mtd: spi-nor: Fix Cadence QSPI page fault kernel panic Revert "HID: uhid: use strlcpy() instead of strncpy()" cpufreq: ti-cpufreq: Only register platform_device when supported mtd: rawnand: qcom: Namespace prefix some commands tc-testing: tdc.py: Guard against lack of returncode in executed command tc-testing: tdc.py: ignore errors when decoding stdout/stderr gpio: mockup: fix indicated direction gpio: pxa: fix legacy non pinctrl aware builds again drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo net/mlx4: Fix UBSAN warning of signed integer overflow net/mlx4_core: Fix uninitialized variable compilation warning net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command drm/amd/display: Support amdgpu "max bpc" connector property (v2) drm/amdgpu: Add amdgpu "max bpc" connector property (v2) bnxt_en: Fix filling time in bnxt_fill_coredump_record() nvme-fc: resolve io failures during connect s390/ism: clear dmbe_mask bit before SMC IRQ handling Revert "usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers" usb: dwc2: pci: Fix an error code in probe qed: Fix reading wrong value in loop condition qed: Fix rdma_info structure allocation qed: Fix overriding offload_tc by protocols without APP TLV qed: Fix PTT leak in qed_drain() bnx2x: Assign unique DMAE channel number for FW DMAE transactions. amd/iommu: Fix Guest Virtual APIC Log Tail Address Register batman-adv: Expand merged fragment buffer for full packet batman-adv: Use explicit tvlv padding for ELP packets HID: input: Ignore battery reported by Symbol DS4308 test_firmware: fix error return getting clobbered can: rcar_can: Fix erroneous registration can: ucan: remove set but not used variable 'udev' scsi: ufs: Fix hynix ufs bug with quirk on hi36xx SoC iommu/ipmmu-vmsa: Fix crash on early domain free mt76: fix building without CONFIG_LEDS_CLASS brcmutil: really fix decoding channel info for 160 MHz bandwidth iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() media: ipu3-cio2: Unregister device nodes first, then release resources media: omap3isp: Unregister media device as first media: cec: check for non-OK/NACK conditions while claiming a LA media: vicodec: lower minimum height to 360 The following patches from this stable update had already been applied: HID: multitouch: Add pointstick support for Cirque Touchpad xhci: workaround CSS timeout on AMD SNPS 3.0 xHC Drivers: hv: vmbus: Offload the handling of channels to two workqueues To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1810788/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp