Xenial update to 4.4.155 stable release

Bug #1792419 reported by Stefan Bader
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Xenial
Fix Released
Medium
Stefan Bader

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.4.155 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

The following patches from the 4.4.155 stable release shall be applied:
* net: 6lowpan: fix reserved space for single frames
* net: mac802154: tx: expand tailroom if necessary
* 9p/net: Fix zero-copy path in the 9p virtio transport
* net: lan78xx: Fix misplaced tasklet_schedule() call
* spi: davinci: fix a NULL pointer dereference
* drm/i915/userptr: reject zero user_size
* powerpc/fadump: handle crash memory ranges array index overflow
* powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
* fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
* 9p/virtio: fix off-by-one error in sg list bounds check
* net/9p/client.c: version pointer uninitialized
* net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
* dm cache metadata: save in-core policy_hint_size to on-disk superblock
* iio: ad9523: Fix displayed phase
* iio: ad9523: Fix return value for ad952x_store()
* vmw_balloon: fix inflation of 64-bit GFNs
* vmw_balloon: do not use 2MB without batching
* vmw_balloon: VMCI_DOORBELL_SET does not check status
* vmw_balloon: fix VMCI use when balloon built into kernel
* tracing: Do not call start/stop() functions when tracing_on does not change
* tracing/blktrace: Fix to allow setting same value
* kthread, tracing: Don't expose half-written comm when creating kthreads
* uprobes: Use synchronize_rcu() not synchronize_sched()
* 9p: fix multiple NULL-pointer-dereferences
* PM / sleep: wakeup: Fix build error caused by missing SRCU support
* pnfs/blocklayout: off by one in bl_map_stripe()
* ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
* mm/tlb: Remove tlb_remove_table() non-concurrent condition
* iommu/vt-d: Add definitions for PFSID
* iommu/vt-d: Fix dev iotlb pfsid use
* osf_getdomainname(): use copy_to_user()
* sys: don't hold uts_sem while accessing userspace memory
* userns: move user access out of the mutex
* ubifs: Fix memory leak in lprobs self-check
* Revert "UBIFS: Fix potential integer overflow in allocation"
* ubifs: Check data node size before truncate
* ubifs: Fix synced_i_size calculation for xattr inodes
* pwm: tiehrpwm: Fix disabling of output of PWMs
* fb: fix lost console when the user unplugs a USB adapter
* udlfb: set optimal write delay
* getxattr: use correct xattr length
* bcache: release dc->writeback_lock properly in bch_writeback_thread()
* perf auxtrace: Fix queue resize
* fs/quota: Fix spectre gadget in do_quotactl
* x86/io: add interface to reserve io memtype for a resource range. (v1.1)
* drm/drivers: add support for using the arch wc mapping API.
* Linux 4.4.155

CVE References

Stefan Bader (smb)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Xenial):
assignee: nobody → Stefan Bader (smb)
importance: Undecided → Medium
status: New → In Progress
Changed in linux (Ubuntu):
status: New → Invalid
Revision history for this message
Stefan Bader (smb) wrote :

Again skip "x86/mm/pat: Fix L1TF stable backport for CPA, 2nd call" because we did not revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers".

Stefan Bader (smb)
description: updated
Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (28.0 KiB)

This bug was fixed in the package linux - 4.4.0-138.164

---------------
linux (4.4.0-138.164) xenial; urgency=medium

  * linux: 4.4.0-138.164 -proposed tracker (LP: #1795582)

  * Linux 4.4.155 stable release build is broken on ppc64 (LP: #1795662)
    - powerpc/fadump: Return error when fadump registration fails

  * Kernel hang on drive pull caused by regression introduced by commit
    287922eb0b18 (LP: #1791790)
    - block: Fix a race between blk_cleanup_queue() and timeout handling

  * qeth: use vzalloc for QUERY OAT buffer (LP: #1793086)
    - s390/qeth: use vzalloc for QUERY OAT buffer

  * Page leaking in cachefiles_read_backing_file while vmscan is active
    (LP: #1793430)
    - SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan
      is active

  * Bugfix for handling of shadow doorbell buffer (LP: #1788222)
    - nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event

  * Xenial update to 4.4.155 stable release (LP: #1792419)
    - net: 6lowpan: fix reserved space for single frames
    - net: mac802154: tx: expand tailroom if necessary
    - 9p/net: Fix zero-copy path in the 9p virtio transport
    - net: lan78xx: Fix misplaced tasklet_schedule() call
    - spi: davinci: fix a NULL pointer dereference
    - drm/i915/userptr: reject zero user_size
    - powerpc/fadump: handle crash memory ranges array index overflow
    - powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
    - fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
    - 9p/virtio: fix off-by-one error in sg list bounds check
    - net/9p/client.c: version pointer uninitialized
    - net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
      kfree()
    - dm cache metadata: save in-core policy_hint_size to on-disk superblock
    - iio: ad9523: Fix displayed phase
    - iio: ad9523: Fix return value for ad952x_store()
    - vmw_balloon: fix inflation of 64-bit GFNs
    - vmw_balloon: do not use 2MB without batching
    - vmw_balloon: VMCI_DOORBELL_SET does not check status
    - vmw_balloon: fix VMCI use when balloon built into kernel
    - tracing: Do not call start/stop() functions when tracing_on does not change
    - tracing/blktrace: Fix to allow setting same value
    - kthread, tracing: Don't expose half-written comm when creating kthreads
    - uprobes: Use synchronize_rcu() not synchronize_sched()
    - 9p: fix multiple NULL-pointer-dereferences
    - PM / sleep: wakeup: Fix build error caused by missing SRCU support
    - pnfs/blocklayout: off by one in bl_map_stripe()
    - ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
    - mm/tlb: Remove tlb_remove_table() non-concurrent condition
    - iommu/vt-d: Add definitions for PFSID
    - iommu/vt-d: Fix dev iotlb pfsid use
    - osf_getdomainname(): use copy_to_user()
    - sys: don't hold uts_sem while accessing userspace memory
    - userns: move user access out of the mutex
    - ubifs: Fix memory leak in lprobs self-check
    - Revert "UBIFS: Fix potential integer overflow in allocation"
    - ubifs: Check data node size before truncate
    - ubifs: Fix synced_i_size calculation for xattr inodes
    - pwm: ti...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.