Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.11.12 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the v4.11.12 stable release shall be
applied:

net/phy: micrel: configure intterupts after autoneg workaround
ipv6: avoid unregistering inet6_dev for loopback
netvsc: don't access netdev->num_rx_queues directly
sfc: Fix MCDI command size for filter operations
net: account for current skb length when deciding about UFO
net: dp83640: Avoid NULL pointer dereference.
tcp: reset sk_rx_dst in tcp_disconnect()
net: prevent sign extension in dev_get_stats()
virtio-net: serialize tx routine during reset
net: sched: Fix one possible panic when no destroy callback
mlxsw: spectrum_router: Fix NULL pointer dereference
rocker: move dereference before free
bpf: prevent leaking pointer via xadd on unpriviledged
net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish()
net/mlx5: Cancel delayed recovery work when unloading the driver
net/mlx5e: Fix TX carrier errors report in get stats ndo
ipv6: dad: don't remove dynamic addresses if link is down
vxlan: fix hlist corruption
geneve: fix hlist corruption
net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64
liquidio: fix bug in soft reset failure detection
net: ipv6: Compare lwstate in detecting duplicate nexthops
vrf: fix bug_on triggered by rx when destroying a vrf
rds: tcp: use sock_create_lite() to create the accept socket
net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff
cxgb4: fix BUG() on interrupt deallocating path of ULD
tap: convert a mutex to a spinlock
bridge: mdb: fix leak on complete_info ptr on fail path
brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
sfc: don't read beyond unicast address list
Adding asm-prototypes.h for genksyms to generate crc
sed regex in Makefile.build requires line break between exported symbols
Adding the type of exported symbols
sparc64: Fix gup_huge_pmd
block: Fix a blk_exit_rl() regression
brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach'
brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain
efi: Process the MEMATTR table only if EFI_MEMMAP is enabled
cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE
cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES
cfg80211: Check if PMKID attribute is of expected size
cfg80211: Check if NAN service ID is of expected size
drm/amdgpu/gfx6: properly cache mc_arb_ramcfg
irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity
parisc: Report SIGSEGV instead of SIGBUS when running out of stack
parisc: use compat_sys_keyctl()
parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs
parisc/mm: Ensure IRQs are off in switch_mm()
tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: Depth
thp, mm: fix crash due race in MADV_FREE handling
kernel/extable.c: mark core_kernel_text notrace
mm/list_lru.c: fix list_lru_count_node() to be race free
fs/dcache.c: fix spin lockup issue on nlru->lock
checkpatch: silence perl 5.26.0 unescaped left brace warnings
binfmt_elf: use ELF_ET_DYN_BASE only for PIE
arm: move ELF_ET_DYN_BASE to 4MB
arm64: move ELF_ET_DYN_BASE to 4GB / 4MB
powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB
s390: reduce ELF_ET_DYN_BASE
exec: Limit arg stack to at most 75% of _STK_LIM
powerpc/kexec: Fix radix to hash kexec due to IAMR/AMOR
ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers
arm64: Preventing READ_IMPLIES_EXEC propagation
vt: fix unchecked __put_user() in tioclinux ioctls
rcu: Add memory barriers for NOCB leader wakeup
nvmem: core: fix leaks on registration errors
Drivers: hv: vmbus: Close timing hole that can corrupt per-cpu page
mnt: In umount propagation reparent in a separate pass
mnt: In propgate_umount handle visiting mounts in any order
mnt: Make propagate_umount less slow for overlapping mount propagation trees
selftests/capabilities: Fix the test_execve test
mm: fix overflow check in expand_upwards()
crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD
crypto: atmel - only treat EBUSY as transient if backlog
crypto: sha1-ssse3 - Disable avx2
crypto: caam - properly set IV after {en,de}crypt
crypto: caam - fix signals handling
sched/fair, cpumask: Export for_each_cpu_wrap()
sched/topology: Fix building of overlapping sched-groups
sched/topology: Optimize build_group_mask()
sched/topology: Fix overlapping sched_group_mask
PM / wakeirq: Convert to SRCU
ALSA: x86: Clear the pdata.notify_lpe_audio pointer before teardown
PM / QoS: return -EINVAL for bogus strings
kvm: vmx: Do not disable intercepts for BNDCFGS
kvm: x86: Guest BNDCFGS requires guest MPX support
kvm: vmx: Check value written to IA32_BNDCFGS
kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS
Linux 4.11.12

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Fix Committed

** Affects: linux (Ubuntu Artful)
     Importance: Undecided
         Status: Fix Committed


** Tags: kernel-stable-tracking-bug

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Artful)
   Importance: Undecided
       Status: New

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The v4.11.12 upstream stable
+        patch set is now available. It should be included in the Ubuntu
+        kernel as well.
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The v4.11.12 upstream stable
-        patch set is now available. It should be included in the Ubuntu
-        kernel as well.
+        git://git.kernel.org/
  
-        git://git.kernel.org/
+     TEST CASE: TBD
  
-     TEST CASE: TBD
+        The following patches from the v4.11.12 stable release shall be
+ applied:
  
-        The following patches from the v4.11.12 stable release shall be
- applied:
+ net/phy: micrel: configure intterupts after autoneg workaround
+ ipv6: avoid unregistering inet6_dev for loopback
+ netvsc: don't access netdev->num_rx_queues directly
+ sfc: Fix MCDI command size for filter operations
+ net: account for current skb length when deciding about UFO
+ net: dp83640: Avoid NULL pointer dereference.
+ tcp: reset sk_rx_dst in tcp_disconnect()
+ net: prevent sign extension in dev_get_stats()
+ virtio-net: serialize tx routine during reset
+ net: sched: Fix one possible panic when no destroy callback
+ mlxsw: spectrum_router: Fix NULL pointer dereference
+ rocker: move dereference before free
+ bpf: prevent leaking pointer via xadd on unpriviledged
+ net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish()
+ net/mlx5: Cancel delayed recovery work when unloading the driver
+ net/mlx5e: Fix TX carrier errors report in get stats ndo
+ ipv6: dad: don't remove dynamic addresses if link is down
+ vxlan: fix hlist corruption
+ geneve: fix hlist corruption
+ net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64
+ liquidio: fix bug in soft reset failure detection
+ net: ipv6: Compare lwstate in detecting duplicate nexthops
+ vrf: fix bug_on triggered by rx when destroying a vrf
+ rds: tcp: use sock_create_lite() to create the accept socket
+ net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff
+ cxgb4: fix BUG() on interrupt deallocating path of ULD
+ tap: convert a mutex to a spinlock
+ bridge: mdb: fix leak on complete_info ptr on fail path
+ brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
+ sfc: don't read beyond unicast address list
+ Adding asm-prototypes.h for genksyms to generate crc
+ sed regex in Makefile.build requires line break between exported symbols
+ Adding the type of exported symbols
+ sparc64: Fix gup_huge_pmd
+ block: Fix a blk_exit_rl() regression
+ brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach'
+ brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain
+ efi: Process the MEMATTR table only if EFI_MEMMAP is enabled
+ cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE
+ cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES
+ cfg80211: Check if PMKID attribute is of expected size
+ cfg80211: Check if NAN service ID is of expected size
+ drm/amdgpu/gfx6: properly cache mc_arb_ramcfg
+ irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity
+ parisc: Report SIGSEGV instead of SIGBUS when running out of stack
+ parisc: use compat_sys_keyctl()
+ parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs
+ parisc/mm: Ensure IRQs are off in switch_mm()
+ tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: 
Depth
+ thp, mm: fix crash due race in MADV_FREE handling
+ kernel/extable.c: mark core_kernel_text notrace
+ mm/list_lru.c: fix list_lru_count_node() to be race free
+ fs/dcache.c: fix spin lockup issue on nlru->lock
+ checkpatch: silence perl 5.26.0 unescaped left brace warnings
+ binfmt_elf: use ELF_ET_DYN_BASE only for PIE
+ arm: move ELF_ET_DYN_BASE to 4MB
+ arm64: move ELF_ET_DYN_BASE to 4GB / 4MB
+ powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB
+ s390: reduce ELF_ET_DYN_BASE
+ exec: Limit arg stack to at most 75% of _STK_LIM
+ powerpc/kexec: Fix radix to hash kexec due to IAMR/AMOR
+ ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers
+ arm64: Preventing READ_IMPLIES_EXEC propagation
+ vt: fix unchecked __put_user() in tioclinux ioctls
+ rcu: Add memory barriers for NOCB leader wakeup
+ nvmem: core: fix leaks on registration errors
+ Drivers: hv: vmbus: Close timing hole that can corrupt per-cpu page
+ mnt: In umount propagation reparent in a separate pass
+ mnt: In propgate_umount handle visiting mounts in any order
+ mnt: Make propagate_umount less slow for overlapping mount propagation trees
+ selftests/capabilities: Fix the test_execve test
+ mm: fix overflow check in expand_upwards()
+ crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD
+ crypto: atmel - only treat EBUSY as transient if backlog
+ crypto: sha1-ssse3 - Disable avx2
+ crypto: caam - properly set IV after {en,de}crypt
+ crypto: caam - fix signals handling
+ sched/fair, cpumask: Export for_each_cpu_wrap()
+ sched/topology: Fix building of overlapping sched-groups
+ sched/topology: Optimize build_group_mask()
+ sched/topology: Fix overlapping sched_group_mask
+ PM / wakeirq: Convert to SRCU
+ ALSA: x86: Clear the pdata.notify_lpe_audio pointer before teardown
+ PM / QoS: return -EINVAL for bogus strings
+ kvm: vmx: Do not disable intercepts for BNDCFGS
+ kvm: x86: Guest BNDCFGS requires guest MPX support
+ kvm: vmx: Check value written to IA32_BNDCFGS
+ kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS
+ Linux 4.11.12

** Changed in: linux (Ubuntu Artful)
       Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1706067

Title:
  Artful update to v4.11.12 stable release

Status in linux package in Ubuntu:
  Fix Committed
Status in linux source package in Artful:
  Fix Committed

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The v4.11.12 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches from the v4.11.12 stable release shall be
  applied:

  net/phy: micrel: configure intterupts after autoneg workaround
  ipv6: avoid unregistering inet6_dev for loopback
  netvsc: don't access netdev->num_rx_queues directly
  sfc: Fix MCDI command size for filter operations
  net: account for current skb length when deciding about UFO
  net: dp83640: Avoid NULL pointer dereference.
  tcp: reset sk_rx_dst in tcp_disconnect()
  net: prevent sign extension in dev_get_stats()
  virtio-net: serialize tx routine during reset
  net: sched: Fix one possible panic when no destroy callback
  mlxsw: spectrum_router: Fix NULL pointer dereference
  rocker: move dereference before free
  bpf: prevent leaking pointer via xadd on unpriviledged
  net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish()
  net/mlx5: Cancel delayed recovery work when unloading the driver
  net/mlx5e: Fix TX carrier errors report in get stats ndo
  ipv6: dad: don't remove dynamic addresses if link is down
  vxlan: fix hlist corruption
  geneve: fix hlist corruption
  net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64
  liquidio: fix bug in soft reset failure detection
  net: ipv6: Compare lwstate in detecting duplicate nexthops
  vrf: fix bug_on triggered by rx when destroying a vrf
  rds: tcp: use sock_create_lite() to create the accept socket
  net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff
  cxgb4: fix BUG() on interrupt deallocating path of ULD
  tap: convert a mutex to a spinlock
  bridge: mdb: fix leak on complete_info ptr on fail path
  brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()
  sfc: don't read beyond unicast address list
  Adding asm-prototypes.h for genksyms to generate crc
  sed regex in Makefile.build requires line break between exported symbols
  Adding the type of exported symbols
  sparc64: Fix gup_huge_pmd
  block: Fix a blk_exit_rl() regression
  brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach'
  brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain
  efi: Process the MEMATTR table only if EFI_MEMMAP is enabled
  cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE
  cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES
  cfg80211: Check if PMKID attribute is of expected size
  cfg80211: Check if NAN service ID is of expected size
  drm/amdgpu/gfx6: properly cache mc_arb_ramcfg
  irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity
  parisc: Report SIGSEGV instead of SIGBUS when running out of stack
  parisc: use compat_sys_keyctl()
  parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs
  parisc/mm: Ensure IRQs are off in switch_mm()
  tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: 
Depth
  thp, mm: fix crash due race in MADV_FREE handling
  kernel/extable.c: mark core_kernel_text notrace
  mm/list_lru.c: fix list_lru_count_node() to be race free
  fs/dcache.c: fix spin lockup issue on nlru->lock
  checkpatch: silence perl 5.26.0 unescaped left brace warnings
  binfmt_elf: use ELF_ET_DYN_BASE only for PIE
  arm: move ELF_ET_DYN_BASE to 4MB
  arm64: move ELF_ET_DYN_BASE to 4GB / 4MB
  powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB
  s390: reduce ELF_ET_DYN_BASE
  exec: Limit arg stack to at most 75% of _STK_LIM
  powerpc/kexec: Fix radix to hash kexec due to IAMR/AMOR
  ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers
  arm64: Preventing READ_IMPLIES_EXEC propagation
  vt: fix unchecked __put_user() in tioclinux ioctls
  rcu: Add memory barriers for NOCB leader wakeup
  nvmem: core: fix leaks on registration errors
  Drivers: hv: vmbus: Close timing hole that can corrupt per-cpu page
  mnt: In umount propagation reparent in a separate pass
  mnt: In propgate_umount handle visiting mounts in any order
  mnt: Make propagate_umount less slow for overlapping mount propagation trees
  selftests/capabilities: Fix the test_execve test
  mm: fix overflow check in expand_upwards()
  crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD
  crypto: atmel - only treat EBUSY as transient if backlog
  crypto: sha1-ssse3 - Disable avx2
  crypto: caam - properly set IV after {en,de}crypt
  crypto: caam - fix signals handling
  sched/fair, cpumask: Export for_each_cpu_wrap()
  sched/topology: Fix building of overlapping sched-groups
  sched/topology: Optimize build_group_mask()
  sched/topology: Fix overlapping sched_group_mask
  PM / wakeirq: Convert to SRCU
  ALSA: x86: Clear the pdata.notify_lpe_audio pointer before teardown
  PM / QoS: return -EINVAL for bogus strings
  kvm: vmx: Do not disable intercepts for BNDCFGS
  kvm: x86: Guest BNDCFGS requires guest MPX support
  kvm: vmx: Check value written to IA32_BNDCFGS
  kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS
  Linux 4.11.12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1706067/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to