Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v4.11.5 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches from the v4.11.5 stable release shall be
applied:
bnx2x: Fix Multi-Cos
net: bridge: start hello timer only if device is up
vxlan: eliminate cached dst leak
net: systemport: Fix missing Wake-on-LAN interrupt for SYSTEMPORT Lite
ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
cxgb4: avoid enabling napi twice to the same queue
tcp: disallow cwnd undo when switching congestion control
vxlan: fix use-after-free on deletion
ip6_tunnel: fix traffic class routing for tunnels
sock: reset sk_err when the error queue is empty
geneve: fix needed_headroom and max_mtu for collect_metadata
ipv6: Fix leak in ipv6_gso_segment().
net: dsa: Fix stale cpu_switch reference after unbind then bind
net: ping: do not abuse udp_poll()
net/ipv6: Fix CALIPSO causing GPF with datagram support
ravb: Fix use-after-free on `ifconfig eth0 down`
net: bridge: fix a null pointer dereference in br_afspec
net: ethoc: enable NAPI before poll may be scheduled
net: stmmac: fix completely hung TX when using TSO
sparc64: Add __multi3 for gcc 7.x and later.
sparc64: mm: fix copy_tsb to correctly copy huge page TSBs
sparc: Machine description indices can vary
sparc/mm/hugepages: Fix setup_hugepagesz for invalid values.
sparc64: reset mm cpumask after wrap
sparc64: combine activate_mm and switch_mm
sparc64: redefine first version
sparc64: add per-cpu mm of secondary contexts
sparc64: new context wrap
sparc64: delete old wrap code
arch/sparc: support NR_CPUS = 4096
ftrace: Fix memory leak in ftrace_graph_release()
serial: exar: Fix stuck MSIs
serial: ifx6x60: fix use-after-free on module unload
serial: core: fix crash in uart_suspend_port
ptrace: Properly initialize ptracer_cred on fork
ARM: dts: keystone-k2l: fix broken Ethernet due to disabled OSR
crypto: asymmetric_keys - handle EBUSY due to backlog correctly
KEYS: fix dereferencing NULL payload with nonzero length
KEYS: fix freeing uninitialized memory in key_update()
KEYS: encrypted: avoid encrypting/decrypting stack buffers
crypto: drbg - wait for crypto op not signal safe
crypto: gcm - wait for crypto op not signal safe
ovl: fix creds leak in copy up error path
kthread: Fix use-after-free if kthread fork fails
drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
nfsd4: fix null dereference on replay
gfs2: Make flush bios explicitely sync
efi: Don't issue error message when booted under Xen
efi/bgrt: Skip efi_bgrt_init() in case of non-EFI boot
kvm: async_pf: fix rcu_irq_enter() with irqs enabled
KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation
arm64: KVM: Preserve RES1 bits in SCTLR_EL2
arm64: KVM: Allow unaligned accesses at EL2
arm: KVM: Allow unaligned accesses at HYP
KVM: async_pf: avoid async pf injection when in guest mode
dmaengine: usb-dmac: Fix DMAOR AE bit definition
dmaengine: ep93xx: Always start from BASE0
dmaengine: ep93xx: Don't drain the transfers in terminate_all()
dmaengine: mv_xor_v2: handle mv_xor_v2_prep_sw_desc() error properly
dmaengine: mv_xor_v2: properly handle wrapping in the array of HW descriptors
dmaengine: mv_xor_v2: do not use descriptors not acked by async_tx
dmaengine: mv_xor_v2: enable XOR engine after its configuration
dmaengine: mv_xor_v2: fix tx_submit() implementation
dmaengine: mv_xor_v2: remove interrupt coalescing
dmaengine: mv_xor_v2: set DMA mask to 40 bits
cfq-iosched: fix the delay of cfq_group's vdisktime under iops mode
reiserfs: Make flush bios explicitely sync
mtd: nand: tango: Export OF device ID table as module aliases
mtd: nand: tango: Update ecc_stats.corrected
xen/privcmd: Support correctly 64KB page granularity when mapping memory
ext4: fix SEEK_HOLE
ext4: keep existing extra fields when inode expands
ext4: fix data corruption with EXT4_GET_BLOCKS_ZERO
ext4: fix fdatasync(2) after extent manipulation operations
drm: Fix oops + Xserver hang when unplugging USB drm devices
usb: gadget: f_mass_storage: Serialize wake and sleep execution
usb: musb: dsps: keep VBUS on for host-only mode
usb: chipidea: imx: Do not access CLKONOFF on i.MX51
usb: chipidea: udc: fix NULL pointer dereference if udc_start failed
usb: chipidea: debug: check before accessing ci_role
staging/lustre/lov: remove set_fs() call from lov_getstripe()
iio: adc: bcm_iproc_adc: swap primary and secondary isr handler's
iio: light: ltr501 Fix interchanged als/ps register field
iio: trigger: fix NULL pointer dereference in iio_trigger_write_current()
iio: proximity: as3935: fix AS3935_INT mask
iio: proximity: as3935: fix iio_trigger_poll issue
block: Avoid that blk_exit_rl() triggers a use-after-free
mei: make sysfs modalias format similar as uevent modalias
random: invalidate batched entropy after crng init
cpufreq: cpufreq_register_driver() should return -ENODEV if init fails
target: Re-add check to reject control WRITEs with overflow data
drm/msm: Expose our reservation object when exporting a dmabuf.
drm/msm/mdp5: use __drm_atomic_helper_plane_duplicate_state()
ahci: Acer SA5-271 SSD Not Detected Fix
rc-core: race condition during ir_raw_event_register()
cgroup: Prevent kill_css() from being called more than once
Input: elantech - add Fujitsu Lifebook E546/E557 to force crc_enabled
cpuset: consider dying css as offline
ufs: restore proper tail allocation
fix ufs_isblockset()
ufs: restore maintaining ->i_blocks
ufs: set correct ->s_maxsize
ufs_extend_tail(): fix the braino in calling conventions of ufs_new_fragments()
ufs_getfrag_block(): we only grab ->truncate_mutex on block creation path
excessive checks in ufs_write_failed() and ufs_evict_inode()
cxl: Fix error path on bad ioctl
cxl: Avoid double free_irq() for psl,slice interrupts
btrfs: use correct types for page indices in btrfs_page_exists_in_range
btrfs: fix memory leak in update_space_info failure path
btrfs: fix race with relocation recovery and fs_root setup
Btrfs: fix delalloc accounting leak caused by u32 overflow
KVM: arm/arm64: Handle possible NULL stage2 pud when ageing pages
scsi: qla2xxx: don't disable a not previously enabled PCI device
scsi: qla2xxx: Fix recursive loop during target mode configuration for ISP25XX
leaving system unresponsive
scsi: qla2xxx: Fix crash due to mismatch mumber of Q-pair creation for Multi
queue
scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call
scsi: qla2xxx: Modify T262 FW dump template to specify same start/end to debug
customer issues
scsi: qla2xxx: Set bit 15 for DIAG_ECHO_TEST MBC
scsi: qla2xxx: Fix mailbox pointer error in fwdump capture
powerpc/sysdev/simple_gpio: Fix oops in gpio save_regs function
powerpc/numa: Fix percpu allocations to be NUMA aware
powerpc/hotplug-mem: Fix missing endian conversion of aa_index
powerpc/kernel: Fix FP and vector register restoration
powerpc/kernel: Initialize load_tm on task creation
Revert "ata: sata_mv: Convert to devm_ioremap_resource()"
perf/core: Drop kernel samples even though :u is specified
srcu: Allow use of Classic SRCU from both process and interrupt context
net: qcom/emac: do not use hardware mdio automatic polling
drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
drm/vmwgfx: Make sure backup_handle is always valid
x86/microcode/intel: Clear patch pointer before jettisoning the initrd
drm/nouveau/tmr: fully separate alarm execution/pending lists
ALSA: timer: Fix race between read and ioctl
ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
ASoC: Fix use-after-free at card unregistration
cpu/hotplug: Drop the device lock on error
drivers: char: mem: Fix wraparound check to allow mappings up to the end
drm/i915: Fix runtime PM for LPE audio
drm/i915/skl: Add missing SKL ID
serial: sh-sci: Fix panic when serial console and DMA are enabled
pinctrl: cherryview: Add terminate entry for dmi_system_id tables
cgroup: mark cgroup_get() with __maybe_unused
iomap_dio_rw: Prevent reading file data beyond iomap_dio->i_size
hwmon: (coretemp) Handle frozen hotplug state correctly
audit: fix the RCU locking for the auditd_connection structure
drm/i915/vbt: don't propagate errors from intel_bios_init()
drm/i915/vbt: split out defaults that are set when there is no VBT
netfilter: nft_set_rbtree: handle element re-addition after deletion
kthread: fix boot hang (regression) on MIPS/OpenRISC
Linux 4.11.5
** Affects: linux-raspi2 (Ubuntu)
Importance: Undecided
Status: Fix Committed
** Affects: linux-raspi2 (Ubuntu Artful)
Importance: Undecided
Status: Fix Committed
** Tags: kernel-stable-tracking-bug
** Tags added: kernel-stable-tracking-bug
** Also affects: linux-raspi2 (Ubuntu Artful)
Importance: Undecided
Status: New
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The v4.11.5 upstream stable
+ patch set is now available. It should be included in the Ubuntu
+ kernel as well.
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The v4.11.5 upstream stable
- patch set is now available. It should be included in the Ubuntu
- kernel as well.
+ git://git.kernel.org/
- git://git.kernel.org/
+ TEST CASE: TBD
- TEST CASE: TBD
+ The following patches from the v4.11.5 stable release shall be
+ applied:
- The following patches from the v4.11.5 stable release shall be
- applied:
+ bnx2x: Fix Multi-Cos
+ net: bridge: start hello timer only if device is up
+ vxlan: eliminate cached dst leak
+ net: systemport: Fix missing Wake-on-LAN interrupt for SYSTEMPORT Lite
+ ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
+ cxgb4: avoid enabling napi twice to the same queue
+ tcp: disallow cwnd undo when switching congestion control
+ vxlan: fix use-after-free on deletion
+ ip6_tunnel: fix traffic class routing for tunnels
+ sock: reset sk_err when the error queue is empty
+ geneve: fix needed_headroom and max_mtu for collect_metadata
+ ipv6: Fix leak in ipv6_gso_segment().
+ net: dsa: Fix stale cpu_switch reference after unbind then bind
+ net: ping: do not abuse udp_poll()
+ net/ipv6: Fix CALIPSO causing GPF with datagram support
+ ravb: Fix use-after-free on `ifconfig eth0 down`
+ net: bridge: fix a null pointer dereference in br_afspec
+ net: ethoc: enable NAPI before poll may be scheduled
+ net: stmmac: fix completely hung TX when using TSO
+ sparc64: Add __multi3 for gcc 7.x and later.
+ sparc64: mm: fix copy_tsb to correctly copy huge page TSBs
+ sparc: Machine description indices can vary
+ sparc/mm/hugepages: Fix setup_hugepagesz for invalid values.
+ sparc64: reset mm cpumask after wrap
+ sparc64: combine activate_mm and switch_mm
+ sparc64: redefine first version
+ sparc64: add per-cpu mm of secondary contexts
+ sparc64: new context wrap
+ sparc64: delete old wrap code
+ arch/sparc: support NR_CPUS = 4096
+ ftrace: Fix memory leak in ftrace_graph_release()
+ serial: exar: Fix stuck MSIs
+ serial: ifx6x60: fix use-after-free on module unload
+ serial: core: fix crash in uart_suspend_port
+ ptrace: Properly initialize ptracer_cred on fork
+ ARM: dts: keystone-k2l: fix broken Ethernet due to disabled OSR
+ crypto: asymmetric_keys - handle EBUSY due to backlog correctly
+ KEYS: fix dereferencing NULL payload with nonzero length
+ KEYS: fix freeing uninitialized memory in key_update()
+ KEYS: encrypted: avoid encrypting/decrypting stack buffers
+ crypto: drbg - wait for crypto op not signal safe
+ crypto: gcm - wait for crypto op not signal safe
+ ovl: fix creds leak in copy up error path
+ kthread: Fix use-after-free if kthread fork fails
+ drm/amdgpu/ci: disable mclk switching for high refresh rates (v2)
+ nfsd4: fix null dereference on replay
+ gfs2: Make flush bios explicitely sync
+ efi: Don't issue error message when booted under Xen
+ efi/bgrt: Skip efi_bgrt_init() in case of non-EFI boot
+ kvm: async_pf: fix rcu_irq_enter() with irqs enabled
+ KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation
+ arm64: KVM: Preserve RES1 bits in SCTLR_EL2
+ arm64: KVM: Allow unaligned accesses at EL2
+ arm: KVM: Allow unaligned accesses at HYP
+ KVM: async_pf: avoid async pf injection when in guest mode
+ dmaengine: usb-dmac: Fix DMAOR AE bit definition
+ dmaengine: ep93xx: Always start from BASE0
+ dmaengine: ep93xx: Don't drain the transfers in terminate_all()
+ dmaengine: mv_xor_v2: handle mv_xor_v2_prep_sw_desc() error properly
+ dmaengine: mv_xor_v2: properly handle wrapping in the array of HW descriptors
+ dmaengine: mv_xor_v2: do not use descriptors not acked by async_tx
+ dmaengine: mv_xor_v2: enable XOR engine after its configuration
+ dmaengine: mv_xor_v2: fix tx_submit() implementation
+ dmaengine: mv_xor_v2: remove interrupt coalescing
+ dmaengine: mv_xor_v2: set DMA mask to 40 bits
+ cfq-iosched: fix the delay of cfq_group's vdisktime under iops mode
+ reiserfs: Make flush bios explicitely sync
+ mtd: nand: tango: Export OF device ID table as module aliases
+ mtd: nand: tango: Update ecc_stats.corrected
+ xen/privcmd: Support correctly 64KB page granularity when mapping memory
+ ext4: fix SEEK_HOLE
+ ext4: keep existing extra fields when inode expands
+ ext4: fix data corruption with EXT4_GET_BLOCKS_ZERO
+ ext4: fix fdatasync(2) after extent manipulation operations
+ drm: Fix oops + Xserver hang when unplugging USB drm devices
+ usb: gadget: f_mass_storage: Serialize wake and sleep execution
+ usb: musb: dsps: keep VBUS on for host-only mode
+ usb: chipidea: imx: Do not access CLKONOFF on i.MX51
+ usb: chipidea: udc: fix NULL pointer dereference if udc_start failed
+ usb: chipidea: debug: check before accessing ci_role
+ staging/lustre/lov: remove set_fs() call from lov_getstripe()
+ iio: adc: bcm_iproc_adc: swap primary and secondary isr handler's
+ iio: light: ltr501 Fix interchanged als/ps register field
+ iio: trigger: fix NULL pointer dereference in iio_trigger_write_current()
+ iio: proximity: as3935: fix AS3935_INT mask
+ iio: proximity: as3935: fix iio_trigger_poll issue
+ block: Avoid that blk_exit_rl() triggers a use-after-free
+ mei: make sysfs modalias format similar as uevent modalias
+ random: invalidate batched entropy after crng init
+ cpufreq: cpufreq_register_driver() should return -ENODEV if init fails
+ target: Re-add check to reject control WRITEs with overflow data
+ drm/msm: Expose our reservation object when exporting a dmabuf.
+ drm/msm/mdp5: use __drm_atomic_helper_plane_duplicate_state()
+ ahci: Acer SA5-271 SSD Not Detected Fix
+ rc-core: race condition during ir_raw_event_register()
+ cgroup: Prevent kill_css() from being called more than once
+ Input: elantech - add Fujitsu Lifebook E546/E557 to force crc_enabled
+ cpuset: consider dying css as offline
+ ufs: restore proper tail allocation
+ fix ufs_isblockset()
+ ufs: restore maintaining ->i_blocks
+ ufs: set correct ->s_maxsize
+ ufs_extend_tail(): fix the braino in calling conventions of
ufs_new_fragments()
+ ufs_getfrag_block(): we only grab ->truncate_mutex on block creation path
+ excessive checks in ufs_write_failed() and ufs_evict_inode()
+ cxl: Fix error path on bad ioctl
+ cxl: Avoid double free_irq() for psl,slice interrupts
+ btrfs: use correct types for page indices in btrfs_page_exists_in_range
+ btrfs: fix memory leak in update_space_info failure path
+ btrfs: fix race with relocation recovery and fs_root setup
+ Btrfs: fix delalloc accounting leak caused by u32 overflow
+ KVM: arm/arm64: Handle possible NULL stage2 pud when ageing pages
+ scsi: qla2xxx: don't disable a not previously enabled PCI device
+ scsi: qla2xxx: Fix recursive loop during target mode configuration for
ISP25XX leaving system unresponsive
+ scsi: qla2xxx: Fix crash due to mismatch mumber of Q-pair creation for Multi
queue
+ scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call
+ scsi: qla2xxx: Modify T262 FW dump template to specify same start/end to
debug customer issues
+ scsi: qla2xxx: Set bit 15 for DIAG_ECHO_TEST MBC
+ scsi: qla2xxx: Fix mailbox pointer error in fwdump capture
+ powerpc/sysdev/simple_gpio: Fix oops in gpio save_regs function
+ powerpc/numa: Fix percpu allocations to be NUMA aware
+ powerpc/hotplug-mem: Fix missing endian conversion of aa_index
+ powerpc/kernel: Fix FP and vector register restoration
+ powerpc/kernel: Initialize load_tm on task creation
+ Revert "ata: sata_mv: Convert to devm_ioremap_resource()"
+ perf/core: Drop kernel samples even though :u is specified
+ srcu: Allow use of Classic SRCU from both process and interrupt context
+ net: qcom/emac: do not use hardware mdio automatic polling
+ drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
+ drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl()
+ drm/vmwgfx: Make sure backup_handle is always valid
+ x86/microcode/intel: Clear patch pointer before jettisoning the initrd
+ drm/nouveau/tmr: fully separate alarm execution/pending lists
+ ALSA: timer: Fix race between read and ioctl
+ ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
+ ASoC: Fix use-after-free at card unregistration
+ cpu/hotplug: Drop the device lock on error
+ drivers: char: mem: Fix wraparound check to allow mappings up to the end
+ drm/i915: Fix runtime PM for LPE audio
+ drm/i915/skl: Add missing SKL ID
+ serial: sh-sci: Fix panic when serial console and DMA are enabled
+ pinctrl: cherryview: Add terminate entry for dmi_system_id tables
+ cgroup: mark cgroup_get() with __maybe_unused
+ iomap_dio_rw: Prevent reading file data beyond iomap_dio->i_size
+ hwmon: (coretemp) Handle frozen hotplug state correctly
+ audit: fix the RCU locking for the auditd_connection structure
+ drm/i915/vbt: don't propagate errors from intel_bios_init()
+ drm/i915/vbt: split out defaults that are set when there is no VBT
+ netfilter: nft_set_rbtree: handle element re-addition after deletion
+ kthread: fix boot hang (regression) on MIPS/OpenRISC
+ Linux 4.11.5
** Changed in: linux-raspi2 (Ubuntu Artful)
Status: New => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1697955
Title:
Artful update to v4.11.5 stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-raspi2/+bug/1697955/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
