This bug was fixed in the package linux - 4.8.0-38.41 --------------- linux (4.8.0-38.41) yakkety; urgency=low
[ Thadeu Lima de Souza Cascardo ] * Release Tracking Bug - LP: #1661232 * Backport Dirty COW patch to prevent wineserver freeze (LP: #1658270) - SAUCE: mm: Respect FOLL_FORCE/FOLL_COW for thp * Kdump through NMI SMP and single core not working on Ubuntu16.10 (LP: #1630924) - x86/hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic - SAUCE: hv: don't reset hv_context.tsc_page on crash * Call trace when testing fstat stressor on ppc64el with virtual keyboard and mouse present (LP: #1652132) - HID: usbhid: Quirk a AMI virtual mouse and keyboard with ALWAYS_POLL * regression in linux-libc-dev in yakkety: C++ style comments are not allowed in ISO C90 (LP: #1659654) - generic syscalls: kill cruft from removed pkey syscalls * [16.04.2] POWER9 patches on top of 4.8 (LP: #1650263) - powerpc/book3s: Add a cpu table entry for different POWER9 revs - powerpc/mm/radix: Use different RTS encoding for different POWER9 revs - powerpc/mm/radix: Use different pte update sequence for different POWER9 revs - powerpc/mm: Update the HID bit when switching from radix to hash - powerpc/64/kexec: NULL check "clear_all" in kexec_sequence - powerpc/64/kexec: Fix MMU cleanup on radix - powerpc/mm: Add radix flush all with IS=3 - powerpc/64/kexec: Copy image with MMU off when possible - powerpc/64: Simplify adaptation to new ISA v3.00 HPTE format - powerpc/mm/radix: Invalidate ERAT on tlbiel for POWER9 DD1 - powerpc/mm: Fix missing update of HID register on secondary CPUs - powerpc/64: Add some more SPRs and SPR bits for POWER9 - powerpc/64: Provide functions for accessing POWER9 partition table - powerpc/powernv: Define real-mode versions of OPAL XICS accessors - powerpc/64: Define new ISA v3.00 logical PVR value and PCR register value - mm: update mmu_gather range correctly - mm/hugetlb: add tlb_remove_hugetlb_entry for handling hugetlb pages - mm: add tlb_remove_check_page_size_change to track page size change - powerpc: Revert Load Monitor Register Support - powerpc/mm: Correct process and partition table max size - powernv: Clear SPRN_PSSCR when a POWER9 CPU comes online - powerpc/mm/radix: Setup AMOR in HV mode to allow key 0 - powerpc/mm: Detect instruction fetch denied and report - powerpc/mm/radix: Prevent kernel execution of user space - powerpc/mm: Rename hugetlb-radix.h to hugetlb.h - powerpc/mm/hugetlb: Handle hugepage size supported by hash config - powerpc/mm: Introduce _PAGE_LARGE software pte bits - powerpc/mm: Add radix__tlb_flush_pte_p9_dd1() - powerpc/mm: update radix__ptep_set_access_flag to not do full mm tlb flush - powerpc/mm: update radix__pte_update to not do full mm tlb flush - powerpc/mm: Batch tlb flush when invalidating pte entries - powerpc/sparse: Make a bunch of things static - powerpc/perf: factor out the event format field - powerpc/perf: update attribute_group data structure - powerpc/perf: power9 raw event format encoding - powerpc/perf: macros for power9 format encoding - KVM: PPC: Book3S: Don't crash if irqfd used with no in-kernel XICS emulation - KVM: PPC: Implement kvm_arch_intc_initialized() for PPC - KVM: PPC: Book3S HV: Move struct kvmppc_vcore from kvm_host.h to kvm_book3s.h - KVM: PPC: Book3S HV: Change vcore element runnable_threads from linked-list to array - KVM: Export kvm module parameter variables - KVM: PPC: Book3S HV: Implement halt polling - KVM: Add provisioning for ulong vm stats and u64 vcpu stats - KVM: PPC: Implement existing and add new halt polling vcpu stats - powerpc/mm: Speed up computation of base and actual page size for a HPTE - powerpc: Add simple cache inhibited MMIO accessors - KVM: PPC: Book3S HV: Convert kvmppc_read_intr to a C function - KVM: PPC: select IRQ_BYPASS_MANAGER - KVM: PPC: Book3S HV: Introduce kvmppc_passthru_irqmap - powerpc/powernv: Provide facilities for EOI, usable from real mode - KVM: PPC: Book3S HV: Enable IRQ bypass - KVM: PPC: Book3S HV: Handle passthrough interrupts in guest - KVM: PPC: Book3S HV: Complete passthrough interrupt in host - KVM: PPC: Book3S HV: Dump irqmap in debugfs - KVM: PPC: Book3S HV: Tunable to disable KVM IRQ bypass - KVM: PPC: Book3S HV: Update irq stats for IRQs handled in real mode - KVM: PPC: Book3S HV: Set server for passed-through interrupts - KVM: PPC: Book3S HV: Counters for passthrough IRQ stats - KVM: PPC: e500: Use kmalloc_array() in kvm_vcpu_ioctl_config_tlb() - KVM: PPC: e500: Less function calls in kvm_vcpu_ioctl_config_tlb() after error detection - KVM: PPC: e500: Delete an unnecessary initialisation in kvm_vcpu_ioctl_config_tlb() - KVM: PPC: e500: Replace kzalloc() calls by kcalloc() in two functions - KVM: PPC: e500: Use kmalloc_array() in kvmppc_e500_tlb_init() - KVM: PPC: e500: Rename jump labels in kvmppc_e500_tlb_init() - kvm: add stubs for arch specific debugfs support - KVM: PPC: Book3S: Treat VTB as a per-subcore register, not per-thread - KVM: PPC: Book3S HV: Take out virtual core piggybacking code - KVM: PPC: Book3S: Remove duplicate setting of the B field in tlbie - KVM: PPC: Book3S PR: Support 64kB page size on POWER8E and POWER8NVL - KVM: PPC: Book3S HV: Fix build error when SMP=n - KVM: PPC: Book3S HV: Fix sparse static warning - KVM: PPC: Book3S HV: sparse: prototypes for functions called from assembler - KVM: PPC: Book3S HV: Use list_move_tail instead of list_del/list_add_tail - KVM: PPC: Book3S HV: Clear the key field of HPTE when the page is paged out - KVM: PPC: Book3S HV: Add a per vcpu cache for recently page faulted MMIO entries - KVM: PPC: Book3S HV: Drop duplicate header asm/iommu.h - KVM: PPC: Book3S HV: Adapt to new HPTE format on POWER9 - KVM: PPC: Book3S HV: Set partition table rather than SDR1 on POWER9 - KVM: PPC: Book3S HV: Adjust host/guest context switch for POWER9 - KVM: PPC: Book3S HV: Add new POWER9 guest-accessible SPRs - KVM: PPC: Book3S HV: Adapt TLB invalidations to work on POWER9 - KVM: PPC: Book3S HV: Use msgsnd for IPIs to other cores on POWER9 - KVM: PPC: Book3S HV: Use OPAL XICS emulation on POWER9 - KVM: PPC: Book3S HV: Use stop instruction rather than nap on POWER9 - KVM: PPC: Book3S HV: Enable hypervisor virtualization interrupts while in guest - KVM: PPC: Book3S HV: Treat POWER9 CPU threads as independent subcores - KVM: PPC: Book3S HV: Update kvmppc_set_arch_compat() for ISA v3.00 - KVM: PPC: Book3S HV: Fix compilation with unusual configurations - KVM: PPC: Correctly report KVM_CAP_PPC_ALLOC_HTAB - KVM: PPC: Book3S HV: Use generic kvm module parameters - KVM: PPC: Book3S HV: Add check for module parameter halt_poll_ns - KVM: PPC: Decrease the powerpc default halt poll max value - KVM: PPC: Book3S HV: Comment style and print format fixups - KVM: PPC: Book3S: Move prototypes for KVM functions into kvm_ppc.h - KVM/PPC/Book3S HV: Convert to hotplug state machine - [Config] IRQ_BYPASS_MANAGER=y * [regression 4.8.0-14 -> 4.8.0-17] keyboard and touchscreen lost on Acer Chromebook R11 (LP: #1630238) - [Config] CONFIG_PINCTRL_CHERRYVIEW=y * Bug fixes for IBM VNIC Driver (LP: #1655379) - ibmvnic: Fix GFP_KERNEL allocation in interrupt context - ibmvnic: Update MTU after device initialization - ibmvnic: Fix releasing of sub-CRQ IRQs in interrupt context - ibmvnic: Fix missing brackets in init_sub_crq_irqs - ibmvnic: Start completion queue negotiation at server-provided optimum values - ibmvnic: Unmap ibmvnic_statistics structure - ibmvnic: Fix size of debugfs name buffer * Backport 3 patches to fix bugs with AIX clients using IBMVSCSI Target Driver (LP: #1657194) - SAUCE: ibmvscsis: Fix max transfer length - SAUCE: ibmvscsis: fix sleeping in interrupt context - SAUCE: ibmvscsis: Fix srp_transfer_data fail return code * NVMe: adapter is missing after abnormal shutdown followed by quick reboot, quirk needed (LP: #1656913) - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too * Ubuntu 16.10 KVM SRIOV: if enable sriov while ping flood is running ping will stop working (LP: #1625318) - PCI: Do any VF BAR updates before enabling the BARs - PCI: Ignore BAR updates on virtual functions - PCI: Update BARs using property bits appropriate for type - PCI: Separate VF BAR updates from standard BAR updates - PCI: Don't update VF BARs while VF memory space is enabled - PCI: Remove pci_resource_bar() and pci_iov_resource_bar() - PCI: Decouple IORESOURCE_ROM_ENABLE and PCI_ROM_ADDRESS_ENABLE - PCI: Add comments about ROM BAR updating * Ubuntu - ibmveth: abnormally large TCP MSS value caused a TCP session to hang with a zero window (LP: #1655420) - ibmveth: set correct gso_size and gso_type - ibmveth: calculate gso_segs for large packets * netfilter regression introducing a performance slowdown in binary arp/ip/ip6tables (LP: #1640786) - netfilter: x_tables: pass xt_counters struct instead of packet counter - netfilter: x_tables: pass xt_counters struct to counter allocator - netfilter: x_tables: pack percpu counter allocations * Move some kernel modules to the main kernel package (part 2) (LP: #1655002) - [Config] Add IBM power drivers to the inclusion list * [Hyper-V] netvsc: add rcu_read locked to netvsc callback (LP: #1657540) - netvsc: add rcu_read locking to netvsc callback * [Hyper-V] Rebase Hyper-V in 16.04 and 16.10 to the the upstream 4.9 kernel (LP: #1650059) - hv_netvsc: Add query for initial physical link speed - hv_netvsc: Add handler for physical link speed change - hv_netvsc: Implement batching of receive completions - PCI: hv: Use list_move_tail() instead of list_del() + list_add_tail() - hv_netvsc: fix rtnl locking in callback - hv_netvsc: make RSS hash key static - hv_netvsc: use kcalloc - hv_netvsc: style cleanups - hv_netvsc: make inline functions static - hv_netvsc: use ARRAY_SIZE() for NDIS versions - hv_netvsc: make device_remove void - hv_netvsc: init completion during alloc - hv_netvsc: rearrange start_xmit - hv_netvsc: refactor completion function - hv_netvsc: make netvsc_destroy_buf void - hv_netvsc: make variable local - hv_netvsc: report vmbus name in ethtool - hv_netvsc: add ethtool statistics for tx packet issues - Drivers: hv: get rid of redundant messagecount in create_gpadl_header() - Drivers: hv: don't leak memory in vmbus_establish_gpadl() - Drivers: hv: get rid of timeout in vmbus_open() - Drivers: hv: utils: fix a race on userspace daemons registration - Drivers: hv: vmbus: fix the race when querying & updating the percpu list - Drivers: hv: vmbus: Enable explicit signaling policy for NIC channels - Drivers: hv: vmbus: Reduce the delay between retries in vmbus_post_msg() - Drivers: hv: vmbus: Implement a mechanism to tag the channel for low latency - Tools: hv: kvp: ensure kvp device fd is closed on exec - Drivers: hv: balloon: keep track of where ha_region starts - Drivers: hv: balloon: account for gaps in hot add regions - Drivers: hv: balloon: don't wait for ol_waitevent when memhp_auto_online is enabled - Drivers: hv: balloon: replace ha_region_mutex with spinlock - Drivers: hv: balloon: Use available memory value in pressure report - Drivers: hv: cleanup vmbus_open() for wrap around mappings - Drivers: hv: ring_buffer: wrap around mappings for ring buffers - Drivers: hv: ring_buffer: use wrap around mappings in hv_copy{from, to}_ringbuffer() - Drivers: hv: ring_buffer: count on wrap around mappings in get_next_pkt_raw() - Drivers: hv: Introduce a policy for controlling channel affinity - Drivers: hv: utils: Continue to poll VSS channel after handling requests. - Drivers: hv: utils: Check VSS daemon is listening before a hot backup - PCI: hv: Use zero-length array in struct pci_packet - PCI: hv: Use pci_function_description[0] in struct definitions - PCI: hv: Remove the unused 'wrk' in struct hv_pcibus_device - PCI: hv: Handle vmbus_sendpacket() failure in hv_compose_msi_msg() - PCI: hv: Handle hv_pci_generic_compl() error case - Revert "Drivers: hv: ring_buffer: count on wrap around mappings in get_next_pkt_raw()" - Driver: hv: vmbus: Make mmio resource local - Drivers: hv: vmbus: suppress some "hv_vmbus: Unknown GUID" warnings - Drivers: hv: utils: Rename version definitions to reflect protocol version. - Drivers: hv: utils: Use TimeSync samples to adjust the clock after boot. - Drivers: hv: utils: Support TimeSync version 4.0 protocol samples. - Drivers: hv: hv_util: Avoid dynamic allocation in time synch - Revert "hv_netvsc: make inline functions static" - hv_netvsc: use consume_skb - hv_netvsc: dev hold/put reference to VF - hv_netvsc: simplify callback event code - hv_netvsc: improve VF device matching - hv_netvsc: use RCU to protect vf_netdev - hv_netvsc: remove VF in flight counters - hv_netvsc: count multicast packets received - hv_netvsc: fix comments - Drivers: hv: make VMBus bus ids persistent - Drivers: hv: get rid of id in struct vmbus_channel - netvsc: fix checksum on UDP IPV6 - netvsc: Remove mistaken udp.h inclusion. - net/hyperv: avoid uninitialized variable - Revert "hv_netvsc: report vmbus name in ethtool" - vmbus: make sysfs names consistent with PCI - netvsc: reduce maximum GSO size - Drivers: hv: vmbus: Base host signaling strictly on the ring state * Yakkety update to v4.8.17 stable release (LP: #1655057) - ssb: Fix error routine when fallback SPROM fails - rtlwifi: Fix enter/exit power_save - perf/x86: Fix exclusion of BTS and LBR for Goldmont - perf/x86/intel/cstate: Prevent hotplug callback leak - rtl8xxxu: Work around issue with 8192eu and 8723bu devices not reconnecting - cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts - ath9k: fix ath9k_hw_gpio_get() to return 0 or 1 on success - ath9k: Really fix LED polarity for some Mini PCI AR9220 MB92 cards. - mmc: sdhci: Fix recovery from tuning timeout - regulator: stw481x-vmmc: fix ages old enable error - timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion - gpio: chardev: Return error for seek operations - arm64: tegra: Add VDD_GPU regulator to Jetson TX1 - clk: bcm2835: Avoid overwriting the div info when disabling a pll_div clk - thermal: hwmon: Properly report critical temperature in sysfs - docs: sphinx-extensions: make rstFlatTable work with docutils 0.13 - hv: acquire vmbus_connection.channel_mutex in vmbus_free_channels() - staging: comedi: ni_mio_common: fix M Series ni_ai_insn_read() data mask - staging: comedi: ni_mio_common: fix E series ni_ai_insn_read() data - ACPI / video: Add force_native quirk for Dell XPS 17 L702X - ACPI / video: Add force_native quirk for HP Pavilion dv6 - drm/amd/amdgpu: enable GUI idle INT after enabling CGCG - drm/nouveau/gr: fallback to legacy paths during firmware lookup - drm/nouveau/kms: lvds panel strap moved again on maxwell - drm/nouveau/bios: require checksum to match for fast acpi shadow method - drm/nouveau/ltc: protect clearing of comptags with mutex - drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas - drm/nouveau/i2c/gk110b,gm10x: use the correct implementation - drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex - drm/radeon: Also call cursor_move_locked when the cursor size changes - drm/radeon: Hide the HW cursor while it's out of bounds - drm/radeon: add additional pci revision to dpm workaround - drm/radeon/si: load the proper firmware on 0x87 oland boards - drm/gma500: Add compat ioctl - drm/amdgpu: fix init save/restore list in gfx_v8.0 - drivers/gpu/drm/ast: Fix infinite loop if read fails - mei: request async autosuspend at the end of enumeration - mei: me: add lewisburg device ids - block: protect iterate_bdevs() against concurrent close - vt: fix Scroll Lock LED trigger name - stm class: Fix device leak in open error path - scsi: megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for 30secs before reset - scsi: megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW which does not support JBOD sequence map - iscsi-target: Return error if unable to add network portal - scsi: zfcp: fix use-after-"free" in FC ingress path after TMF - scsi: zfcp: do not trace pure benign residual HBA responses at default level - scsi: zfcp: fix rport unblock race with LUN recovery - scsi: avoid a permanent stop of the scsi device's request queue - ARC: mm: arc700: Don't assume 2 colours for aliasing VIPT dcache - firmware: fix usermode helper fallback loading - s390/vmlogrdr: fix IUCV buffer allocation - s390/kexec: use node 0 when re-adding crash kernel memory - arm64: KVM: pmu: Reset PMSELR_EL0.SEL to a sane value before entering the guest - sc16is7xx: Drop bogus use of IRQF_ONESHOT - md/raid5: limit request size according to implementation limits - scsi: aacraid: remove wildcard for series 9 controllers - KVM: PPC: Book3S HV: Save/restore XER in checkpointed register state - KVM: PPC: Book3S HV: Don't lose hardware R/C bit updates in H_PROTECT - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) - fsnotify: Fix possible use-after-free in inode iteration on umount - vsock/virtio: fix src/dst cid format - platform/x86: asus-nb-wmi.c: Add X45U quirk - fgraph: Handle a case where a tracer ignores set_graph_notrace - IB/mad: Fix an array index check - IPoIB: Avoid reading an uninitialized member variable - IB/multicast: Check ib_find_pkey() return value - IB/rxe: Fix a memory leak in rxe_qp_cleanup() - IB/cma: Fix a race condition in iboe_addr_get_sgid() - mn88472: fix chip id check on probe - mn88473: fix chip id check on probe - s5p-mfc: fix failure path of s5p_mfc_alloc_memdev() - media: solo6x10: fix lockup by avoiding delayed register write - v4l: tvp5150: Add missing break in set control handler - Input: drv260x - fix input device's parent assignment - i40iw: Use correct src address in memcpy to rdma stats counters - PCI: Check for PME in targeted sleep state - libceph: verify authorize reply on connect - nfs_write_end(): fix handling of short copies - pNFS: On error, do not send LAYOUTGET until the LAYOUTRETURN has completed - pNFS: Don't clear the layout stateid if a layout return is outstanding - pNFS: Clear NFS_LAYOUT_RETURN_REQUESTED when invalidating the layout stateid - pNFS: Fix a deadlock between read resends and layoutreturn - SUNRPC: fix refcounting problems with auth_gss messages. - powerpc/64e: Convert cmpi to cmpwi in head_64.S - powerpc/ps3: Fix system hang with GCC 5 builds - libnvdimm, pfn: fix align attribute - kconfig/nconf: Fix hang when editing symbol with a long prompt - sg_write()/bsg_write() is not fit to be called under KERNEL_DS - net: mvpp2: fix dma unmapping of TX buffers for fragments - drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting - drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating - drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things - drm/i915: Initialize dev_priv->atomic_cdclk_freq at init time - drm/i915: skip the first 4k of stolen memory on everything >= gen8 - Linux 4.8.17 * Ubuntu 16.10 KVM: Running out of memory if trying to bringup guest with more than 64VFs. (LP: #1654067) - powerpc/iommu: Pass mm_struct to init/cleanup helpers - powerpc/iommu: Stop using @current in mm_iommu_xxx - vfio/spapr: Postpone allocation of userspace version of TCE table - vfio/spapr: Add a helper to create default DMA window - vfio/spapr: Postpone default window creation - vfio/spapr: Reference mm in tce_container - powerpc/mm/iommu, vfio/spapr: Put pages on VFIO container shutdown * Miscellaneous Ubuntu changes - [Config] Drop elants_i2c and pinctrl-cherryview from ABI -- Benjamin M Romer <benjamin.ro...@canonical.com> Tue, 07 Feb 2017 13:59:06 -0500 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1657540 Title: [Hyper-V] netvsc: add rcu_read locked to netvsc callback Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: Fix Released Status in linux source package in Yakkety: Fix Released Status in linux source package in Zesty: Fix Released Bug description: Please add the following upstream commit (and its prerequisites) for SR-IOV on Azure: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0719e72ccb801829a3d735d187ca8417f0930459 author stephen hemminger <step...@networkplumber.org> 2017-01-11 17:16:32 (GMT) committer David S. Miller <da...@davemloft.net> 2017-01-11 21:13:53 (GMT) commit 0719e72ccb801829a3d735d187ca8417f0930459 (patch) tree a4f718fefcb15433fa59f6d4add44ae220edb806 parent 4ecb1d83f6abe8d49163427f4d431ebe98f8bd5f (diff) netvsc: add rcu_read locking to netvsc callback The receive callback (in tasklet context) is using RCU to get reference to associated VF network device but this is not safe. RCU read lock needs to be held. Found by running with full lockdep debugging enabled. Fixes: f207c10d9823 ("hv_netvsc: use RCU to protect vf_netdev") Signed-off-by: Stephen Hemminger <sthem...@microsoft.com> Signed-off-by: David S. Miller <da...@davemloft.net> To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1657540/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp