Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v4.18.7 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches from the v4.18.7 stable release shall be
applied:
rcu: Make expedited GPs handle CPU 0 being offline
net: 6lowpan: fix reserved space for single frames
net: mac802154: tx: expand tailroom if necessary
9p/net: Fix zero-copy path in the 9p virtio transport
spi: davinci: fix a NULL pointer dereference
spi: pxa2xx: Add support for Intel Ice Lake
spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
spi: cadence: Change usleep_range() to udelay(), for atomic context
mmc: block: Fix unsupported parallel dispatch of requests
mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
readahead: stricter check for bdi io_pages
block: fix infinite loop if the device loses discard capability
block: blk_init_allocated_queue() set q->fq as NULL in the fail case
block: really disable runtime-pm for blk-mq
blkcg: Introduce blkg_root_lookup()
block: Introduce blk_exit_queue()
block: Ensure that a request queue is dissociated from the cgroup controller
apparmor: fix bad debug check in apparmor_secid_to_secctx()
dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace
libertas: fix suspend and resume for SDIO connected cards
media: Revert "[media] tvp5150: fix pad format frame height"
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
Replace magic for trusting the secondary keyring with #define
Fix kexec forbidding kernels signed with keys in the secondary keyring to boot
powerpc/fadump: handle crash memory ranges array index overflow
powerpc/64s: Fix page table fragment refcount race vs speculative references
powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
powerpc/pkeys: Give all threads control of their key permissions
powerpc/pkeys: Deny read/write/execute by default
powerpc/pkeys: key allocation/deallocation must not change pkey registers
powerpc/pkeys: Save the pkey registers before fork
powerpc/pkeys: Fix calculation of total pkeys.
powerpc/pkeys: Preallocate execute-only key
powerpc/nohash: fix pte_access_permitted()
powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
powerpc/powernv/pci: Work around races in PCI bridge enabling
cxl: Fix wrong comparison in cxl_adapter_context_get()
IB/mlx5: Honor cnt_set_id_valid flag instead of set_id
IB/mlx5: Fix leaking stack memory to userspace
IB/srpt: Fix srpt_cm_req_recv() error path (1/2)
IB/srpt: Fix srpt_cm_req_recv() error path (2/2)
IB/srpt: Support HCAs with more than two ports
overflow.h: Add arithmetic shift helper
RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
ib_srpt: Fix a use-after-free in srpt_close_ch()
ib_srpt: Fix a use-after-free in __srpt_close_all_ch()
RDMA/rxe: Set wqe->status correctly if an unexpected response is received
9p: fix multiple NULL-pointer-dereferences
fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
9p/virtio: fix off-by-one error in sg list bounds check
net/9p/client.c: version pointer uninitialized
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
dm integrity: change 'suspending' variable from bool to int
dm thin: stop no_space_timeout worker when switching to write-mode
dm cache metadata: save in-core policy_hint_size to on-disk superblock
dm cache metadata: set dirty on all cache blocks after a crash
dm crypt: don't decrease device limits
dm writecache: fix a crash due to reading past end of dirty_bitmap
uart: fix race between uart_put_char() and uart_shutdown()
Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer()
Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
iio: sca3000: Fix missing return in switch
iio: ad9523: Fix displayed phase
iio: ad9523: Fix return value for ad952x_store()
extcon: Release locking when sending the notification of connector state
eventpoll.h: wrap casts in () properly
vmw_balloon: fix inflation of 64-bit GFNs
vmw_balloon: do not use 2MB without batching
vmw_balloon: VMCI_DOORBELL_SET does not check status
vmw_balloon: fix VMCI use when balloon built into kernel
rtc: omap: fix resource leak in registration error path
rtc: omap: fix potential crash on power off
tracing: Do not call start/stop() functions when tracing_on does not change
tracing/blktrace: Fix to allow setting same value
printk/tracing: Do not trace printk_nmi_enter()
livepatch: Validate module/old func name length
uprobes: Use synchronize_rcu() not synchronize_sched()
mfd: hi655x: Fix regmap area declared size for hi655x
ovl: fix wrong use of impure dir cache in ovl_iterate()
ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
ACPICA: Clear status of all events when entering sleep states
drivers/block/zram/zram_drv.c: fix bug storing backing_dev
sched: idle: Avoid retaining the tick when it has been stopped
cpuidle: menu: Handle stopped tick more aggressively
cpufreq: governor: Avoid accessing invalid governor_data
PM / sleep: wakeup: Fix build error caused by missing SRCU support
ALSA: ac97: fix device initialization in the compat layer
ALSA: ac97: fix check of pm_runtime_get_sync failure
ALSA: ac97: fix unbalanced pm_runtime_enable
i2c: designware: Re-init controllers with pm_disabled set on resume
KVM: VMX: fixes for vmentry_l1d_flush module parameter
KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
xtensa: limit offsets in __loop_cache_{all,page}
xtensa: increase ranges in ___invalidate_{i,d}cache_all
block, bfq: return nbytes and not zero from struct cftype .write() method
pnfs/blocklayout: off by one in bl_map_stripe()
nfsd: fix leaked file lock with nfs exported overlayfs
NFSv4 client live hangs after live data migration recovery
NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
ARM: dts: am57xx-idk: Enable dual role for USB2 port
pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform data
mm/tlb: Remove tlb_remove_table() non-concurrent condition
iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have IPMMU-VMSA
iommu/vt-d: Add definitions for PFSID
iommu/vt-d: Fix dev iotlb pfsid use
sys: don't hold uts_sem while accessing userspace memory
userns: move user access out of the mutex
ubifs: Fix memory leak in lprobs self-check
Revert "UBIFS: Fix potential integer overflow in allocation"
ubifs: Check data node size before truncate
ubifs: xattr: Don't operate on deleted inodes
ubifs: Fix directory size calculation for symlinks
ubifs: Fix synced_i_size calculation for xattr inodes
pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
pwm: tiehrpwm: Fix disabling of output of PWMs
fb: fix lost console when the user unplugs a USB adapter
udlfb: fix semaphore value leak
udlfb: fix display corruption of the last line
udlfb: don't switch if we are switching to the same videomode
udlfb: set optimal write delay
udlfb: make a local copy of fb_ops
udlfb: handle allocation failure
udlfb: set line_length in dlfb_ops_set_par
getxattr: use correct xattr length
libnvdimm: Use max contiguous area for namespace size
libnvdimm: fix ars_status output length calculation
bcache: release dc->writeback_lock properly in bch_writeback_thread()
kconfig: fix "Can't open ..." in parallel build
perf auxtrace: Fix queue resize
crypto: vmx - Fix sleep-in-atomic bugs
crypto: aesni - Use unaligned loads from gcm_context_data
crypto: arm64/sm4-ce - check for the right CPU feature bit
crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
crypto: caam/jr - fix descriptor DMA unmapping
crypto: caam/qi - fix error path in xts setkey
fs/quota: Fix spectre gadget in do_quotactl
udf: Fix mounting of Win7 created UDF filesystems
cpuidle: menu: Retain tick when shallow state is selected
arm64: mm: always enable CONFIG_HOLES_IN_ZONE
Linux 4.18.7
The following patches from the v4.18.7 stable release had already
been applied:
ocxl: Fix page fault handler in case of fault on dying process
cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
mm, dev_pagemap: Do not clear ->mapping on final put
** Affects: linux (Ubuntu)
Importance: Medium
Assignee: Seth Forshee (sforshee)
Status: Fix Committed
** Tags: kernel-stable-tracking-bug
** Tags added: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu)
Status: New => In Progress
** Changed in: linux (Ubuntu)
Assignee: (unassigned) => Seth Forshee (sforshee)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The v4.18.7 upstream stable
+ patch set is now available. It should be included in the Ubuntu
+ kernel as well.
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The v4.18.7 upstream stable
- patch set is now available. It should be included in the Ubuntu
- kernel as well.
+ git://git.kernel.org/
- git://git.kernel.org/
+ TEST CASE: TBD
- TEST CASE: TBD
+ The following patches from the v4.18.7 stable release shall be
+ applied:
- The following patches from the v4.18.7 stable release shall be
- applied:
+ rcu: Make expedited GPs handle CPU 0 being offline
+ net: 6lowpan: fix reserved space for single frames
+ net: mac802154: tx: expand tailroom if necessary
+ 9p/net: Fix zero-copy path in the 9p virtio transport
+ spi: davinci: fix a NULL pointer dereference
+ spi: pxa2xx: Add support for Intel Ice Lake
+ spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
+ spi: cadence: Change usleep_range() to udelay(), for atomic context
+ mmc: block: Fix unsupported parallel dispatch of requests
+ mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
+ mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
+ readahead: stricter check for bdi io_pages
+ block: fix infinite loop if the device loses discard capability
+ block: blk_init_allocated_queue() set q->fq as NULL in the fail case
+ block: really disable runtime-pm for blk-mq
+ blkcg: Introduce blkg_root_lookup()
+ block: Introduce blk_exit_queue()
+ block: Ensure that a request queue is dissociated from the cgroup controller
+ apparmor: fix bad debug check in apparmor_secid_to_secctx()
+ dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace
+ libertas: fix suspend and resume for SDIO connected cards
+ media: Revert "[media] tvp5150: fix pad format frame height"
+ mailbox: xgene-slimpro: Fix potential NULL pointer dereference
+ Replace magic for trusting the secondary keyring with #define
+ Fix kexec forbidding kernels signed with keys in the secondary keyring to boot
+ powerpc/fadump: handle crash memory ranges array index overflow
+ powerpc/64s: Fix page table fragment refcount race vs speculative references
+ powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
+ powerpc/pkeys: Give all threads control of their key permissions
+ powerpc/pkeys: Deny read/write/execute by default
+ powerpc/pkeys: key allocation/deallocation must not change pkey registers
+ powerpc/pkeys: Save the pkey registers before fork
+ powerpc/pkeys: Fix calculation of total pkeys.
+ powerpc/pkeys: Preallocate execute-only key
+ powerpc/nohash: fix pte_access_permitted()
+ powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
+ powerpc/powernv/pci: Work around races in PCI bridge enabling
+ cxl: Fix wrong comparison in cxl_adapter_context_get()
+ ocxl: Fix page fault handler in case of fault on dying process
+ IB/mlx5: Honor cnt_set_id_valid flag instead of set_id
+ IB/mlx5: Fix leaking stack memory to userspace
+ IB/srpt: Fix srpt_cm_req_recv() error path (1/2)
+ IB/srpt: Fix srpt_cm_req_recv() error path (2/2)
+ IB/srpt: Support HCAs with more than two ports
+ overflow.h: Add arithmetic shift helper
+ RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
+ ib_srpt: Fix a use-after-free in srpt_close_ch()
+ ib_srpt: Fix a use-after-free in __srpt_close_all_ch()
+ RDMA/rxe: Set wqe->status correctly if an unexpected response is received
+ 9p: fix multiple NULL-pointer-dereferences
+ fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
+ 9p/virtio: fix off-by-one error in sg list bounds check
+ net/9p/client.c: version pointer uninitialized
+ net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
+ dm integrity: change 'suspending' variable from bool to int
+ dm thin: stop no_space_timeout worker when switching to write-mode
+ dm cache metadata: save in-core policy_hint_size to on-disk superblock
+ dm cache metadata: set dirty on all cache blocks after a crash
+ dm crypt: don't decrease device limits
+ dm writecache: fix a crash due to reading past end of dirty_bitmap
+ uart: fix race between uart_put_char() and uart_shutdown()
+ Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer()
+ Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
+ iio: sca3000: Fix missing return in switch
+ iio: ad9523: Fix displayed phase
+ iio: ad9523: Fix return value for ad952x_store()
+ extcon: Release locking when sending the notification of connector state
+ eventpoll.h: wrap casts in () properly
+ vmw_balloon: fix inflation of 64-bit GFNs
+ vmw_balloon: do not use 2MB without batching
+ vmw_balloon: VMCI_DOORBELL_SET does not check status
+ vmw_balloon: fix VMCI use when balloon built into kernel
+ rtc: omap: fix resource leak in registration error path
+ rtc: omap: fix potential crash on power off
+ tracing: Do not call start/stop() functions when tracing_on does not change
+ tracing/blktrace: Fix to allow setting same value
+ printk/tracing: Do not trace printk_nmi_enter()
+ livepatch: Validate module/old func name length
+ uprobes: Use synchronize_rcu() not synchronize_sched()
+ mfd: hi655x: Fix regmap area declared size for hi655x
+ ovl: fix wrong use of impure dir cache in ovl_iterate()
+ ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
+ ACPICA: Clear status of all events when entering sleep states
+ drivers/block/zram/zram_drv.c: fix bug storing backing_dev
+ sched: idle: Avoid retaining the tick when it has been stopped
+ cpuidle: menu: Handle stopped tick more aggressively
+ cpufreq: governor: Avoid accessing invalid governor_data
+ PM / sleep: wakeup: Fix build error caused by missing SRCU support
+ ALSA: ac97: fix device initialization in the compat layer
+ ALSA: ac97: fix check of pm_runtime_get_sync failure
+ ALSA: ac97: fix unbalanced pm_runtime_enable
+ i2c: designware: Re-init controllers with pm_disabled set on resume
+ KVM: VMX: fixes for vmentry_l1d_flush module parameter
+ KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
+ xtensa: limit offsets in __loop_cache_{all,page}
+ xtensa: increase ranges in ___invalidate_{i,d}cache_all
+ block, bfq: return nbytes and not zero from struct cftype .write() method
+ pnfs/blocklayout: off by one in bl_map_stripe()
+ nfsd: fix leaked file lock with nfs exported overlayfs
+ NFSv4 client live hangs after live data migration recovery
+ NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
+ NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
+ ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
+ ARM: dts: am57xx-idk: Enable dual role for USB2 port
+ pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform data
+ mm/tlb: Remove tlb_remove_table() non-concurrent condition
+ iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have
IPMMU-VMSA
+ iommu/vt-d: Add definitions for PFSID
+ iommu/vt-d: Fix dev iotlb pfsid use
+ sys: don't hold uts_sem while accessing userspace memory
+ userns: move user access out of the mutex
+ ubifs: Fix memory leak in lprobs self-check
+ Revert "UBIFS: Fix potential integer overflow in allocation"
+ ubifs: Check data node size before truncate
+ ubifs: xattr: Don't operate on deleted inodes
+ ubifs: Fix directory size calculation for symlinks
+ ubifs: Fix synced_i_size calculation for xattr inodes
+ pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
+ pwm: tiehrpwm: Fix disabling of output of PWMs
+ fb: fix lost console when the user unplugs a USB adapter
+ udlfb: fix semaphore value leak
+ udlfb: fix display corruption of the last line
+ udlfb: don't switch if we are switching to the same videomode
+ udlfb: set optimal write delay
+ udlfb: make a local copy of fb_ops
+ udlfb: handle allocation failure
+ udlfb: set line_length in dlfb_ops_set_par
+ getxattr: use correct xattr length
+ libnvdimm: Use max contiguous area for namespace size
+ libnvdimm: fix ars_status output length calculation
+ bcache: release dc->writeback_lock properly in bch_writeback_thread()
+ kconfig: fix "Can't open ..." in parallel build
+ cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
+ mm, dev_pagemap: Do not clear ->mapping on final put
+ perf auxtrace: Fix queue resize
+ crypto: vmx - Fix sleep-in-atomic bugs
+ crypto: aesni - Use unaligned loads from gcm_context_data
+ crypto: arm64/sm4-ce - check for the right CPU feature bit
+ crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
+ crypto: caam/jr - fix descriptor DMA unmapping
+ crypto: caam/qi - fix error path in xts setkey
+ fs/quota: Fix spectre gadget in do_quotactl
+ udf: Fix mounting of Win7 created UDF filesystems
+ cpuidle: menu: Retain tick when shallow state is selected
+ arm64: mm: always enable CONFIG_HOLES_IN_ZONE
+ Linux 4.18.7
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v4.18.7 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches from the v4.18.7 stable release shall be
applied:
rcu: Make expedited GPs handle CPU 0 being offline
net: 6lowpan: fix reserved space for single frames
net: mac802154: tx: expand tailroom if necessary
9p/net: Fix zero-copy path in the 9p virtio transport
spi: davinci: fix a NULL pointer dereference
spi: pxa2xx: Add support for Intel Ice Lake
spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
spi: cadence: Change usleep_range() to udelay(), for atomic context
mmc: block: Fix unsupported parallel dispatch of requests
mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
readahead: stricter check for bdi io_pages
block: fix infinite loop if the device loses discard capability
block: blk_init_allocated_queue() set q->fq as NULL in the fail case
block: really disable runtime-pm for blk-mq
blkcg: Introduce blkg_root_lookup()
block: Introduce blk_exit_queue()
block: Ensure that a request queue is dissociated from the cgroup controller
apparmor: fix bad debug check in apparmor_secid_to_secctx()
dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace
libertas: fix suspend and resume for SDIO connected cards
media: Revert "[media] tvp5150: fix pad format frame height"
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
Replace magic for trusting the secondary keyring with #define
Fix kexec forbidding kernels signed with keys in the secondary keyring to boot
powerpc/fadump: handle crash memory ranges array index overflow
powerpc/64s: Fix page table fragment refcount race vs speculative references
powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
powerpc/pkeys: Give all threads control of their key permissions
powerpc/pkeys: Deny read/write/execute by default
powerpc/pkeys: key allocation/deallocation must not change pkey registers
powerpc/pkeys: Save the pkey registers before fork
powerpc/pkeys: Fix calculation of total pkeys.
powerpc/pkeys: Preallocate execute-only key
powerpc/nohash: fix pte_access_permitted()
powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
powerpc/powernv/pci: Work around races in PCI bridge enabling
cxl: Fix wrong comparison in cxl_adapter_context_get()
- ocxl: Fix page fault handler in case of fault on dying process
IB/mlx5: Honor cnt_set_id_valid flag instead of set_id
IB/mlx5: Fix leaking stack memory to userspace
IB/srpt: Fix srpt_cm_req_recv() error path (1/2)
IB/srpt: Fix srpt_cm_req_recv() error path (2/2)
IB/srpt: Support HCAs with more than two ports
overflow.h: Add arithmetic shift helper
RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
ib_srpt: Fix a use-after-free in srpt_close_ch()
ib_srpt: Fix a use-after-free in __srpt_close_all_ch()
RDMA/rxe: Set wqe->status correctly if an unexpected response is received
9p: fix multiple NULL-pointer-dereferences
fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
9p/virtio: fix off-by-one error in sg list bounds check
net/9p/client.c: version pointer uninitialized
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
dm integrity: change 'suspending' variable from bool to int
dm thin: stop no_space_timeout worker when switching to write-mode
dm cache metadata: save in-core policy_hint_size to on-disk superblock
dm cache metadata: set dirty on all cache blocks after a crash
dm crypt: don't decrease device limits
dm writecache: fix a crash due to reading past end of dirty_bitmap
uart: fix race between uart_put_char() and uart_shutdown()
Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer()
Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
iio: sca3000: Fix missing return in switch
iio: ad9523: Fix displayed phase
iio: ad9523: Fix return value for ad952x_store()
extcon: Release locking when sending the notification of connector state
eventpoll.h: wrap casts in () properly
vmw_balloon: fix inflation of 64-bit GFNs
vmw_balloon: do not use 2MB without batching
vmw_balloon: VMCI_DOORBELL_SET does not check status
vmw_balloon: fix VMCI use when balloon built into kernel
rtc: omap: fix resource leak in registration error path
rtc: omap: fix potential crash on power off
tracing: Do not call start/stop() functions when tracing_on does not change
tracing/blktrace: Fix to allow setting same value
printk/tracing: Do not trace printk_nmi_enter()
livepatch: Validate module/old func name length
uprobes: Use synchronize_rcu() not synchronize_sched()
mfd: hi655x: Fix regmap area declared size for hi655x
ovl: fix wrong use of impure dir cache in ovl_iterate()
ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
ACPICA: Clear status of all events when entering sleep states
drivers/block/zram/zram_drv.c: fix bug storing backing_dev
sched: idle: Avoid retaining the tick when it has been stopped
cpuidle: menu: Handle stopped tick more aggressively
cpufreq: governor: Avoid accessing invalid governor_data
PM / sleep: wakeup: Fix build error caused by missing SRCU support
ALSA: ac97: fix device initialization in the compat layer
ALSA: ac97: fix check of pm_runtime_get_sync failure
ALSA: ac97: fix unbalanced pm_runtime_enable
i2c: designware: Re-init controllers with pm_disabled set on resume
KVM: VMX: fixes for vmentry_l1d_flush module parameter
KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
xtensa: limit offsets in __loop_cache_{all,page}
xtensa: increase ranges in ___invalidate_{i,d}cache_all
block, bfq: return nbytes and not zero from struct cftype .write() method
pnfs/blocklayout: off by one in bl_map_stripe()
nfsd: fix leaked file lock with nfs exported overlayfs
NFSv4 client live hangs after live data migration recovery
NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
ARM: dts: am57xx-idk: Enable dual role for USB2 port
pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform data
mm/tlb: Remove tlb_remove_table() non-concurrent condition
iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have
IPMMU-VMSA
iommu/vt-d: Add definitions for PFSID
iommu/vt-d: Fix dev iotlb pfsid use
sys: don't hold uts_sem while accessing userspace memory
userns: move user access out of the mutex
ubifs: Fix memory leak in lprobs self-check
Revert "UBIFS: Fix potential integer overflow in allocation"
ubifs: Check data node size before truncate
ubifs: xattr: Don't operate on deleted inodes
ubifs: Fix directory size calculation for symlinks
ubifs: Fix synced_i_size calculation for xattr inodes
pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
pwm: tiehrpwm: Fix disabling of output of PWMs
fb: fix lost console when the user unplugs a USB adapter
udlfb: fix semaphore value leak
udlfb: fix display corruption of the last line
udlfb: don't switch if we are switching to the same videomode
udlfb: set optimal write delay
udlfb: make a local copy of fb_ops
udlfb: handle allocation failure
udlfb: set line_length in dlfb_ops_set_par
getxattr: use correct xattr length
libnvdimm: Use max contiguous area for namespace size
libnvdimm: fix ars_status output length calculation
bcache: release dc->writeback_lock properly in bch_writeback_thread()
kconfig: fix "Can't open ..." in parallel build
- cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
- mm, dev_pagemap: Do not clear ->mapping on final put
perf auxtrace: Fix queue resize
crypto: vmx - Fix sleep-in-atomic bugs
crypto: aesni - Use unaligned loads from gcm_context_data
crypto: arm64/sm4-ce - check for the right CPU feature bit
crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
crypto: caam/jr - fix descriptor DMA unmapping
crypto: caam/qi - fix error path in xts setkey
fs/quota: Fix spectre gadget in do_quotactl
udf: Fix mounting of Win7 created UDF filesystems
cpuidle: menu: Retain tick when shallow state is selected
arm64: mm: always enable CONFIG_HOLES_IN_ZONE
Linux 4.18.7
+
+ The following patches from the v4.18.7 stable release had already
+ been applied:
+
+ ocxl: Fix page fault handler in case of fault on dying process
+ cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
+ mm, dev_pagemap: Do not clear ->mapping on final put
** Changed in: linux (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1791660
Title:
Cosmic update to v4.18.7 stable release
Status in linux package in Ubuntu:
Fix Committed
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The v4.18.7 upstream stable
patch set is now available. It should be included in the Ubuntu
kernel as well.
git://git.kernel.org/
TEST CASE: TBD
The following patches from the v4.18.7 stable release shall be
applied:
rcu: Make expedited GPs handle CPU 0 being offline
net: 6lowpan: fix reserved space for single frames
net: mac802154: tx: expand tailroom if necessary
9p/net: Fix zero-copy path in the 9p virtio transport
spi: davinci: fix a NULL pointer dereference
spi: pxa2xx: Add support for Intel Ice Lake
spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
spi: cadence: Change usleep_range() to udelay(), for atomic context
mmc: block: Fix unsupported parallel dispatch of requests
mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
readahead: stricter check for bdi io_pages
block: fix infinite loop if the device loses discard capability
block: blk_init_allocated_queue() set q->fq as NULL in the fail case
block: really disable runtime-pm for blk-mq
blkcg: Introduce blkg_root_lookup()
block: Introduce blk_exit_queue()
block: Ensure that a request queue is dissociated from the cgroup controller
apparmor: fix bad debug check in apparmor_secid_to_secctx()
dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace
libertas: fix suspend and resume for SDIO connected cards
media: Revert "[media] tvp5150: fix pad format frame height"
mailbox: xgene-slimpro: Fix potential NULL pointer dereference
Replace magic for trusting the secondary keyring with #define
Fix kexec forbidding kernels signed with keys in the secondary keyring to boot
powerpc/fadump: handle crash memory ranges array index overflow
powerpc/64s: Fix page table fragment refcount race vs speculative references
powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
powerpc/pkeys: Give all threads control of their key permissions
powerpc/pkeys: Deny read/write/execute by default
powerpc/pkeys: key allocation/deallocation must not change pkey registers
powerpc/pkeys: Save the pkey registers before fork
powerpc/pkeys: Fix calculation of total pkeys.
powerpc/pkeys: Preallocate execute-only key
powerpc/nohash: fix pte_access_permitted()
powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
powerpc/powernv/pci: Work around races in PCI bridge enabling
cxl: Fix wrong comparison in cxl_adapter_context_get()
IB/mlx5: Honor cnt_set_id_valid flag instead of set_id
IB/mlx5: Fix leaking stack memory to userspace
IB/srpt: Fix srpt_cm_req_recv() error path (1/2)
IB/srpt: Fix srpt_cm_req_recv() error path (2/2)
IB/srpt: Support HCAs with more than two ports
overflow.h: Add arithmetic shift helper
RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq
ib_srpt: Fix a use-after-free in srpt_close_ch()
ib_srpt: Fix a use-after-free in __srpt_close_all_ch()
RDMA/rxe: Set wqe->status correctly if an unexpected response is received
9p: fix multiple NULL-pointer-dereferences
fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
9p/virtio: fix off-by-one error in sg list bounds check
net/9p/client.c: version pointer uninitialized
net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()
dm integrity: change 'suspending' variable from bool to int
dm thin: stop no_space_timeout worker when switching to write-mode
dm cache metadata: save in-core policy_hint_size to on-disk superblock
dm cache metadata: set dirty on all cache blocks after a crash
dm crypt: don't decrease device limits
dm writecache: fix a crash due to reading past end of dirty_bitmap
uart: fix race between uart_put_char() and uart_shutdown()
Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer()
Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
iio: sca3000: Fix missing return in switch
iio: ad9523: Fix displayed phase
iio: ad9523: Fix return value for ad952x_store()
extcon: Release locking when sending the notification of connector state
eventpoll.h: wrap casts in () properly
vmw_balloon: fix inflation of 64-bit GFNs
vmw_balloon: do not use 2MB without batching
vmw_balloon: VMCI_DOORBELL_SET does not check status
vmw_balloon: fix VMCI use when balloon built into kernel
rtc: omap: fix resource leak in registration error path
rtc: omap: fix potential crash on power off
tracing: Do not call start/stop() functions when tracing_on does not change
tracing/blktrace: Fix to allow setting same value
printk/tracing: Do not trace printk_nmi_enter()
livepatch: Validate module/old func name length
uprobes: Use synchronize_rcu() not synchronize_sched()
mfd: hi655x: Fix regmap area declared size for hi655x
ovl: fix wrong use of impure dir cache in ovl_iterate()
ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
ACPICA: Clear status of all events when entering sleep states
drivers/block/zram/zram_drv.c: fix bug storing backing_dev
sched: idle: Avoid retaining the tick when it has been stopped
cpuidle: menu: Handle stopped tick more aggressively
cpufreq: governor: Avoid accessing invalid governor_data
PM / sleep: wakeup: Fix build error caused by missing SRCU support
ALSA: ac97: fix device initialization in the compat layer
ALSA: ac97: fix check of pm_runtime_get_sync failure
ALSA: ac97: fix unbalanced pm_runtime_enable
i2c: designware: Re-init controllers with pm_disabled set on resume
KVM: VMX: fixes for vmentry_l1d_flush module parameter
KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
xtensa: limit offsets in __loop_cache_{all,page}
xtensa: increase ranges in ___invalidate_{i,d}cache_all
block, bfq: return nbytes and not zero from struct cftype .write() method
pnfs/blocklayout: off by one in bl_map_stripe()
nfsd: fix leaked file lock with nfs exported overlayfs
NFSv4 client live hangs after live data migration recovery
NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
ARM: dts: am57xx-idk: Enable dual role for USB2 port
pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform data
mm/tlb: Remove tlb_remove_table() non-concurrent condition
iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have
IPMMU-VMSA
iommu/vt-d: Add definitions for PFSID
iommu/vt-d: Fix dev iotlb pfsid use
sys: don't hold uts_sem while accessing userspace memory
userns: move user access out of the mutex
ubifs: Fix memory leak in lprobs self-check
Revert "UBIFS: Fix potential integer overflow in allocation"
ubifs: Check data node size before truncate
ubifs: xattr: Don't operate on deleted inodes
ubifs: Fix directory size calculation for symlinks
ubifs: Fix synced_i_size calculation for xattr inodes
pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
pwm: tiehrpwm: Fix disabling of output of PWMs
fb: fix lost console when the user unplugs a USB adapter
udlfb: fix semaphore value leak
udlfb: fix display corruption of the last line
udlfb: don't switch if we are switching to the same videomode
udlfb: set optimal write delay
udlfb: make a local copy of fb_ops
udlfb: handle allocation failure
udlfb: set line_length in dlfb_ops_set_par
getxattr: use correct xattr length
libnvdimm: Use max contiguous area for namespace size
libnvdimm: fix ars_status output length calculation
bcache: release dc->writeback_lock properly in bch_writeback_thread()
kconfig: fix "Can't open ..." in parallel build
perf auxtrace: Fix queue resize
crypto: vmx - Fix sleep-in-atomic bugs
crypto: aesni - Use unaligned loads from gcm_context_data
crypto: arm64/sm4-ce - check for the right CPU feature bit
crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
crypto: caam/jr - fix descriptor DMA unmapping
crypto: caam/qi - fix error path in xts setkey
fs/quota: Fix spectre gadget in do_quotactl
udf: Fix mounting of Win7 created UDF filesystems
cpuidle: menu: Retain tick when shallow state is selected
arm64: mm: always enable CONFIG_HOLES_IN_ZONE
Linux 4.18.7
The following patches from the v4.18.7 stable release had
already been applied:
ocxl: Fix page fault handler in case of fault on dying process
cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
mm, dev_pagemap: Do not clear ->mapping on final put
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1791660/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
