Bug entry #1845033 also affects Xenial (16.04) and Trusty (14.04 HWE) v4.4 kernels. Is it possible to backport the fix to 4.4 kernels as well? Actually I believe this should have been material for 4.4/4.9 mainline stable trees in the first place.
Relates to following fix: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.2.21&id=d10e0cc113c9e1b64b5c6e3db37b5c839794f3df -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1840076 Title: Disco update: upstream stable patchset 2019-08-13 Status in linux package in Ubuntu: Confirmed Status in linux source package in Disco: Fix Released Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2019-08-13 Ported from the following upstream stable releases: v4.19.53, v5.1.12, v4.19.54, v5.1.13, v4.19.55, v5.1.14, from git://git.kernel.org/ UBUNTU: [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3) nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled HID: multitouch: handle faulty Elo touch device HID: wacom: Don't set tool type until we're in range HID: wacom: Don't report anything prior to the tool entering range HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary ALSA: oxfw: allow PCM capture for Stanton SCS.1m ALSA: hda/realtek - Update headset mode for ALC256 ALSA: firewire-motu: fix destruction of data for isochronous resources libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node fs/ocfs2: fix race in ocfs2_dentry_attach_lock() mm/vmscan.c: fix trying to reclaim unevictable LRU page signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO ptrace: restore smp_rmb() in __ptrace_may_access() iommu/arm-smmu: Avoid constant zero in TLBI writes i2c: acorn: fix i2c warning bcache: fix stack corruption by PRECEDING_KEY() cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() ASoC: cs42xx8: Add regcache mask dirty ASoC: fsl_asrc: Fix the issue about unsupported rate drm/i915/sdvo: Implement proper HDMI audio support for SDVO x86/uaccess, kcov: Disable stack protector ALSA: seq: Protect in-kernel ioctl calls with mutex ALSA: seq: Fix race of get-subscription call vs port-delete ioctls Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex" s390/kasan: fix strncpy_from_user kasan checks Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var f2fs: fix to avoid accessing xattr across the boundary scsi: qedi: remove memset/memcpy to nfunc and use func instead scsi: qedi: remove set but not used variables 'cdev' and 'udev' scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show scsi: lpfc: add check for loss of ndlp when sending RRQ arm64/mm: Inhibit huge-vmap with ptdump nvme: fix srcu locking on error return in nvme_get_ns_from_disk nvme: remove the ifdef around nvme_nvm_ioctl nvme: merge nvme_ns_ioctl into nvme_ioctl nvme: release namespace SRCU protection before performing controller ioctls nvme: fix memory leak for power latency tolerance platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table scsi: bnx2fc: fix incorrect cast to u64 on shift operation libnvdimm: Fix compilation warnings with W=1 selftests/timers: Add missing fflush(stdout) calls tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts usbnet: ipheth: fix racing condition KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid instrumentation KVM: x86/pmu: mask the result of rdpmc according to the width of the counters KVM: x86/pmu: do not mask the value that is written to fixed PMUs KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION tools/kvm_stat: fix fields filter for child events drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() usb: dwc2: Fix DMA cache alignment issues usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. USB: serial: pl2303: add Allied Telesis VT-Kit3 USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode USB: serial: option: add Telit 0x1260 and 0x1261 compositions timekeeping: Repair ktime_get_coarse*() granularity RAS/CEC: Convert the timer callback to a workqueue RAS/CEC: Fix binary search function x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback x86/kasan: Fix boot with 5-level paging and KASAN x86/mm/KASLR: Compute the size of the vmemmap section properly x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled drm/edid: abstract override/firmware EDID retrieval drm: add fallback override/firmware EDID modes workaround HID: input: make sure the wheel high resolution multiplier is set HID: input: fix assignment of .value Revert "HID: Increase maximum report size allowed by hid_field_extract()" selinux: fix a missing-check bug in selinux_add_mnt_opt( ) selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts() media: dvb: warning about dvb frequency limits produces too much noise drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc drm/i915/dsi: Use a fuzzy check for burst mode clock check drm/i915: Fix per-pixel alpha with CCS drm/i915/dmc: protect against reading random memory drivers/perf: arm_spe: Don't error on high-order pages for aux buf bpf: sockmap, only stop/flush strp if it was enabled at some point bpf: sockmap remove duplicate queue free bpf: sockmap fix msg->sg.size account on ingress skb scsi: qla2xxx: Add cleanup for PCI EEH recovery scsi: lpfc: resolve lockdep warnings arm64: Print physical address of page table base in show_pte() net: macb: fix error format in dev_err() bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr() nvme-pci: Fix controller freeze wait disabling scsi: myrs: Fix uninitialized variable nvme-pci: use blk-mq mapping for unmanaged irqs KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE KVM: selftests: Fix a condition in test_hv_cpuid() kvm: vmx: Fix -Wmissing-prototypes warnings KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow KVM: x86: do not spam dmesg with VMCS/VMCB dumps kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size kvm: selftests: aarch64: fix default vm mode tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create() powerpc: Fix kexec failure on book3s/32 powerpc/64s: Fix THP PMD collapse serialisation UBUNTU: upstream stable to v4.19.53, v5.1.12 ax25: fix inconsistent lock state in ax25_destroy_timer be2net: Fix number of Rx queues used for flow hashing hv_netvsc: Set probe mode to sync ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero lapb: fixed leak of control-blocks. neigh: fix use-after-free read in pneigh_get_next net: dsa: rtl8366: Fix up VLAN filtering net: openvswitch: do not free vport if register_netdevice() is failed. sctp: Free cookie before we memdup a new one sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg tipc: purge deferredq list for each grp member in tipc_group_delete vsock/virtio: set SOCK_DONE on peer shutdown net/mlx5: Avoid reloading already removed devices net: mvpp2: prs: Fix parser range for VID filtering net: mvpp2: prs: Use the correct helpers when removing all VID filters Staging: vc04_services: Fix a couple error codes perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints netfilter: nf_queue: fix reinject verdict handling ipvs: Fix use-after-free in ip_vs_in selftests: netfilter: missing error check when setting up veth interface clk: ti: clkctrl: Fix clkdm_clk handling powerpc/powernv: Return for invalid IMC domain usb: xhci: Fix a potential null pointer dereference in xhci_debugfs_create_endpoint() mISDN: make sure device name is NUL terminated x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor perf/ring_buffer: Fix exposing a temporarily decreased data_head perf/ring_buffer: Add ordering to rb->nest increment perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data gpio: fix gpio-adp5588 build errors net: stmmac: update rx tail pointer register to fix rx dma hang issue. net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() ACPI/PCI: PM: Add missing wakeup.flags.valid checks drm/etnaviv: lock MMU while dumping core net: aquantia: tx clean budget logic error net: aquantia: fix LRO with FCS error i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr ALSA: hda - Force polling mode on CNL for fixing codec communication configfs: Fix use-after-free when accessing sd->s_dentry perf data: Fix 'strncat may truncate' build failure with recent gcc perf namespace: Protect reading thread's namespace perf record: Fix s390 missing module symbol and warning for non-root users ia64: fix build errors by exporting paddr_to_nid() xen/pvcalls: Remove set but not used variable xenbus: Avoid deadlock during suspend due to open transactions KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu arm64: fix syscall_fn_t type arm64: use the correct function type in SYSCALL_DEFINE0 arm64: use the correct function type for __arm64_sys_ni_syscall net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs net: phylink: ensure consistent phy interface mode net: phy: dp83867: Set up RGMII TX delay scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask scsi: scsi_dh_alua: Fix possible null-ptr-deref mlxsw: spectrum: Prevent force of 56G ocfs2: fix error path kobject memory leak coredump: fix race condition between collapse_huge_page() and core dumping Abort file_remove_privs() for non-reg. files net: tls, correctly account for copied bytes with multiple sk_msgs vxlan: Don't assume linear buffers in error handler geneve: Don't assume linear buffers in error handler net/mlx5: Update pci error handler entries and command translation mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead net/mlx5e: Add ndo_set_feature for uplink representor mlxsw: spectrum_flower: Fix TOS matching net/mlx5e: Support tagged tunnel over bond net: correct udp zerocopy refcnt also when zerocopy only on append net/mlx5e: Avoid detaching non-existing netdev under switchdev mode staging: erofs: set sb->s_root to NULL when failing from __getname() staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup() pinctrl: intel: Clear interrupt status in mask/unmask callback netfilter: nf_tables: fix oops during rule dump netfilter: nft_fib: Fix existence check support net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write fail dpaa2-eth: Fix potential spectre issue dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate dpaa_eth: use only online CPU portals dfs_cache: fix a wrong use of kfree in flush_cache_ent() KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup blk-mq: Fix memory leak in error handling mm: mmu_gather: remove __tlb_reset_range() for force flush nvme-tcp: rename function to have nvme_tcp prefix nvme-tcp: fix possible null deref on a timed out io queue connect nvme-tcp: fix queue mapping when queue count is limited UBUNTU: upstream stable to v4.19.55, v5.1.14 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1840076/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
