This bug was fixed in the package linux - 4.9.0-12.13

---------------
linux (4.9.0-12.13) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1655122

  * Zesty update to v4.9.2 stable release (LP: #1655114)
    - ssb: Fix error routine when fallback SPROM fails
    - ath10k: fix soft lockup during firmware crash/hw-restart
    - rtlwifi: Fix enter/exit power_save
    - perf/x86: Fix exclusion of BTS and LBR for Goldmont
    - perf annotate: Don't throw error for zero length symbols
    - perf/x86/intel/cstate: Prevent hotplug callback leak
    - rtl8xxxu: Work around issue with 8192eu and 8723bu devices not 
reconnecting
    - cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts
    - ath9k: fix ath9k_hw_gpio_get() to return 0 or 1 on success
    - ath9k: Really fix LED polarity for some Mini PCI AR9220 MB92 cards.
    - ath9k: do not return early to fix rcu unlocking
    - Revert "mmc: sdhci: Reset cmd and data circuits after tuning failure"
    - mmc: sdhci: Fix recovery from tuning timeout
    - regulator: stw481x-vmmc: fix ages old enable error
    - mmc: sd: Meet alignment requirements for raw_ssr DMA
    - timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion
    - gpio: stmpe: fix interrupt handling bug
    - gpio: chardev: Return error for seek operations
    - arm64: tegra: Add VDD_GPU regulator to Jetson TX1
    - clk: bcm2835: Avoid overwriting the div info when disabling a pll_div clk
    - thermal: hwmon: Properly report critical temperature in sysfs
    - docs: sphinx-extensions: make rstFlatTable work with docutils 0.13
    - hv: acquire vmbus_connection.channel_mutex in vmbus_free_channels()
    - staging/lustre/osc: Revert erroneous list_for_each_entry_safe use
    - staging: lustre: ldlm: pl_recalc time handling is wrong
    - staging: comedi: ni_mio_common: fix M Series ni_ai_insn_read() data mask
    - staging: comedi: ni_mio_common: fix E series ni_ai_insn_read() data
    - ACPI / video: Add force_native quirk for Dell XPS 17 L702X
    - ACPI / video: Add force_native quirk for HP Pavilion dv6
    - drm/amdgpu/si: load the proper firmware on 0x87 oland boards
    - drm/amdgpu: add additional pci revision to dpm workaround
    - drm/amdgpu: Store CRTC relative amdgpu_crtc->cursor_x/y values
    - drm/amdgpu: Also call cursor_move_locked when the cursor size changes
    - drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
    - drm/nouveau/gr: fallback to legacy paths during firmware lookup
    - drm/nouveau/kms: lvds panel strap moved again on maxwell
    - drm/nouveau/bios: require checksum to match for fast acpi shadow method
    - drm/nouveau/ltc: protect clearing of comptags with mutex
    - drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
    - drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
    - drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
    - drm/radeon: Also call cursor_move_locked when the cursor size changes
    - drm/radeon: Hide the HW cursor while it's out of bounds
    - drm/radeon: add additional pci revision to dpm workaround
    - drm/radeon/si: load the proper firmware on 0x87 oland boards
    - drm/gma500: Add compat ioctl
    - drm/amd/powerplay: bypass fan table setup if no fan connected
    - drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
    - drm/amdgpu: fix init save/restore list in gfx_v8.0
    - drivers/gpu/drm/ast: Fix infinite loop if read fails
    - mei: request async autosuspend at the end of enumeration
    - mei: me: add lewisburg device ids
    - block: protect iterate_bdevs() against concurrent close
    - vt: fix Scroll Lock LED trigger name
    - stm class: Fix device leak in open error path
    - scsi: megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for
      30secs before reset
    - scsi: megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW 
which
      does not support JBOD sequence map
    - iscsi-target: Return error if unable to add network portal
    - scsi: zfcp: fix use-after-"free" in FC ingress path after TMF
    - scsi: zfcp: do not trace pure benign residual HBA responses at default 
level
    - scsi: zfcp: fix rport unblock race with LUN recovery
    - scsi: avoid a permanent stop of the scsi device's request queue
    - ARC: mm: arc700: Don't assume 2 colours for aliasing VIPT dcache
    - firmware: fix usermode helper fallback loading
    - s390/vmlogrdr: fix IUCV buffer allocation
    - s390/kexec: use node 0 when re-adding crash kernel memory
    - arm64: KVM: pmu: Reset PMSELR_EL0.SEL to a sane value before entering the
      guest
    - latent_entropy: fix ARM build error on earlier gcc
    - sc16is7xx: Drop bogus use of IRQF_ONESHOT
    - md/raid5: limit request size according to implementation limits
    - scsi: aacraid: remove wildcard for series 9 controllers
    - KVM: PPC: Book3S HV: Save/restore XER in checkpointed register state
    - KVM: PPC: Book3S HV: Don't lose hardware R/C bit updates in H_PROTECT
    - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)
    - fsnotify: Fix possible use-after-free in inode iteration on umount
    - vsock/virtio: fix src/dst cid format
    - platform/x86: asus-nb-wmi.c: Add X45U quirk
    - x86/smpboot: Make logical package management more robust
    - fgraph: Handle a case where a tracer ignores set_graph_notrace
    - IB/mad: Fix an array index check
    - IPoIB: Avoid reading an uninitialized member variable
    - IB/multicast: Check ib_find_pkey() return value
    - IB/rxe: Fix a memory leak in rxe_qp_cleanup()
    - IB/cma: Fix a race condition in iboe_addr_get_sgid()
    - mn88472: fix chip id check on probe
    - mn88473: fix chip id check on probe
    - s5p-mfc: fix failure path of s5p_mfc_alloc_memdev()
    - media: solo6x10: fix lockup by avoiding delayed register write
    - v4l: tvp5150: Add missing break in set control handler
    - Input: drv260x - fix input device's parent assignment
    - bad_inode: add missing i_op initializers
    - i40iw: Use correct src address in memcpy to rdma stats counters
    - PCI: Check for PME in targeted sleep state
    - libceph: verify authorize reply on connect
    - nfs_write_end(): fix handling of short copies
    - pNFS: On error, do not send LAYOUTGET until the LAYOUTRETURN has completed
    - pNFS: Don't clear the layout stateid if a layout return is outstanding
    - pNFS: Clear NFS_LAYOUT_RETURN_REQUESTED when invalidating the layout 
stateid
    - pNFS: Fix a deadlock between read resends and layoutreturn
    - SUNRPC: fix refcounting problems with auth_gss messages.
    - powerpc/64e: Convert cmpi to cmpwi in head_64.S
    - powerpc/ps3: Fix system hang with GCC 5 builds
    - powerpc/boot: Request no dynamic linker for boot wrapper
    - of, numa: Return NUMA_NO_NODE from disable of_node_to_nid() if nid not
      possible.
    - libnvdimm, pfn: fix align attribute
    - kconfig/nconf: Fix hang when editing symbol with a long prompt
    - sg_write()/bsg_write() is not fit to be called under KERNEL_DS
    - net: mvpp2: fix dma unmapping of TX buffers for fragments
    - drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
    - drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from
      vlv_init_display_clock_gating
    - drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
    - drm/i915: Initialize dev_priv->atomic_cdclk_freq at init time
    - drm/i915: skip the first 4k of stolen memory on everything >= gen8
    - drm/i915: Fix setting of boost freq tunable
    - Linux 4.9.2

  * Zesty update to v4.9.1 stable release (LP: #1655082)
    - Revert "UBUNTU: SAUCE: (noup) ptrace: being capable wrt a process requires
      mapped uids/gids"
    - hotplug: Make register and unregister notifier API symmetric
    - btrfs: limit async_work allocation and worker func duration
    - Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty
    - Btrfs: fix deadlock caused by fsync when logging directory entries
    - Btrfs: fix tree search logic when replaying directory entry deletes
    - Btrfs: fix relocation incorrectly dropping data references
    - btrfs: store and load values of stripes_min/stripes_max in balance status
      item
    - Btrfs: fix emptiness check for dirtied extent buffers at check_leaf()
    - Btrfs: fix qgroup rescan worker initialization
    - USB: serial: option: add support for Telit LE922A PIDs 0x1040, 0x1041
    - USB: serial: option: add dlink dwm-158
    - USB: serial: kl5kusb105: fix open error path
    - USB: cdc-acm: add device id for GW Instek AFG-125
    - usb: dwc3: gadget: set PCM1 field of isochronous-first TRBs
    - usb: hub: Fix auto-remount of safely removed or ejected USB-3 devices
    - usb: core: usbport: Use proper LED API to fix potential crash
    - usb: gadget: f_uac2: fix error handling at afunc_bind
    - usb: gadget: composite: correctly initialize ep->maxpacket
    - USB: UHCI: report non-PME wakeup signalling for Intel hardware
    - usbip: vudc: fix: Clear already_seen flag also for ep0
    - ALSA: usb-audio: Add QuickCam Communicate Deluxe/S7500 to
      volume_control_quirks
    - ALSA: hiface: Fix M2Tech hiFace driver sampling rate change
    - ALSA: hda/ca0132 - Add quirk for Alienware 15 R2 2016
    - ALSA: hda - ignore the assoc and seq when comparing pin configurations
    - ALSA: hda - fix headset-mic problem on a Dell laptop
    - ALSA: hda - Gate the mic jack on HP Z1 Gen3 AiO
    - ALSA: hda: when comparing pin configurations, ignore assoc in addition to
      seq
    - clk: ti: omap36xx: Work around sprz319 advisory 2.1
    - exec: Ensure mm->user_ns contains the execed files
    - fs: exec: apply CLOEXEC before changing dumpable task flags
    - splice: reinstate SIGPIPE/EPIPE handling
    - block_dev: don't test bdev->bd_contains when it is not stable
    - mm: Add a user_ns owner to mm_struct and fix ptrace permission checks
    - vfs,mm: fix return value of read() at s_maxbytes
    - ptrace: Capture the ptracer's creds not PT_PTRACE_CAP
    - ptrace: Don't allow accessing an undumpable mm
    - crypto: caam - fix AEAD givenc descriptors
    - ext4: don't lock buffer in ext4_commit_super if holding spinlock
    - ext4: fix mballoc breakage with 64k block size
    - ext4: fix stack memory corruption with 64k block size
    - ext4: use more strict checks for inodes_per_block on mount
    - ext4: fix in-superblock mount options processing
    - ext4: add sanity checking to count_overhead()
    - ext4: reject inodes with negative size
    - ext4: return -ENOMEM instead of success
    - ext4: do not perform data journaling when data is encrypted
    - Revert "f2fs: use percpu_counter for # of dirty pages in inode"
    - f2fs: set ->owner for debugfs status file's file_operations
    - f2fs: fix overflow due to condition check order
    - f2fs: fix to determine start_cp_addr by sbi->cur_cp_pack
    - loop: return proper error from loop_queue_rq()
    - nvmet: Fix possible infinite loop triggered on hot namespace removal
    - mm/vmscan.c: set correct defer count for shrinker
    - mm, page_alloc: keep pcp count and list contents in sync if struct page is
      corrupted
    - usb: gadget: composite: always set ep->mult to a sensible value
    - PM / OPP: Pass opp_table to dev_pm_opp_put_regulator()
    - PM / OPP: Don't use OPP structure outside of rcu protected section
    - blk-mq: Do not invoke .queue_rq() for a stopped queue
    - dm table: fix 'all_blk_mq' inconsistency when an empty table is loaded
    - dm table: an 'all_blk_mq' table must be loaded for a blk-mq DM device
    - dm flakey: return -EINVAL on interval bounds error in flakey_ctr()
    - dm crypt: mark key as invalid until properly loaded
    - dm rq: fix a race condition in rq_completed()
    - dm raid: fix discard support regression
    - dm space map metadata: fix 'struct sm_metadata' leak on failed create
    - ASoC: intel: Fix crash at suspend/resume without card registration
    - cifs: Fix smbencrypt() to stop pointing a scatterlist at the stack
    - CIFS: Fix a possible memory corruption during reconnect
    - CIFS: Fix missing nls unload in smb2_reconnect()
    - CIFS: Fix a possible double locking of mutex during reconnect
    - CIFS: Decrease verbosity of ioctl call
    - CIFS: Fix a possible memory corruption in push locks
    - kernel/watchdog: use nmi registers snapshot in hardlockup handler
    - watchdog: mei_wdt: request stop on reboot to prevent false positive event
    - watchdog: qcom: fix kernel panic due to external abort on non-linefetch
    - kernel/debug/debug_core.c: more properly delay for secondary CPUs
    - tpm xen: Remove bogus tpm_chip_unregister
    - xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing
    - arm/xen: Use alloc_percpu rather than __alloc_percpu
    - xfs: fix up xfs_swap_extent_forks inline extent handling
    - xfs: set AGI buffer type in xlog_recover_clear_agi_bucket
    - builddeb: fix cross-building to arm64 producing host-arch debs
    - x86/kbuild: enable modversions for symbols exported from asm
    - Linux 4.9.1

  * i386 ftrace tests hang on ADT testing (LP: #1655040)
    - ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short 
jumps
      to it

  * Ubuntu 16.10 KVM: Running out of memory if trying to bringup guest with more
    than 64VFs. (LP: #1654067)
    - powerpc/iommu: Pass mm_struct to init/cleanup helpers
    - powerpc/iommu: Stop using @current in mm_iommu_xxx
    - vfio/spapr: Postpone allocation of userspace version of TCE table
    - vfio/spapr: Add a helper to create default DMA window
    - vfio/spapr: Postpone default window creation
    - vfio/spapr: Reference mm in tce_container
    - powerpc/mm/iommu, vfio/spapr: Put pages on VFIO container shutdown

  *  IP-over-DDP packets dropped (LP: #1559772)
    - [Config] CONFIG_IPDDP=n

  * crypto : tolerate new crypto hardware for z Systems (LP: #1644557)
    - s390/zcrypt: Introduce CEX6 toleration

  * Miscellaneous Ubuntu changes
    - [Config] Update annotations with recent config changes
    - [Debian] consider renames in gen-auto-reconstruct

  * Note that CONFIG_MODVERSIONS=n since v4.9-rc4. It was causing i386
    modprobe issues because the CRC for some assembler variables were not
    being correctly computed. Linus disabled it altogether for 2 rc's,
    then restored it at the end in combination with some patches that
    set CRC to 0 for assembler variables. I chose to leave it disabled
    in light of the Ubuntu policy to revise the package ABI on every upload.

 -- Tim Gardner <tim.gard...@canonical.com>  Mon, 12 Dec 2016 13:08:33
-0700

** Changed in: linux (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1559772

Title:
   IP-over-DDP packets dropped

Status in linux package in Ubuntu:
  Fix Released

Bug description:
  Ubuntu's kernel is compiled with CONFIG_IPDDP=m, which, because of an
  upstream bug, means that IP-over-DDP packets (DDP type 22) are
  silently dropped.  This is true even if the generated "ipddp" module
  is not loaded; so if this module is compiled, there is no way to
  listen for these packets.

  One solution would be to fix the module.  Another (what CentOS appears
  to do?) would be to not compile the "ipddp" module at all -- remove
  CONFIG_IPDDP from the kernel's config.

  Copying from the upstream bug for specific details:

  https://bugzilla.kernel.org/show_bug.cgi?id=115031

  """
  When a kernel is compiled with "ipddp" as a module, but the module is not 
loaded, DDP packets of type 22 (IP-over-DDP) are silently dropped.

  Steps to reproduce:
  1. Compile a kernel with 'ipddp' as a module.  Do not load the module; make 
sure it is not loaded, just compiled.
  2. Open up a DDP listening socket for packets of type 22, on any supported 
network interface.  (Tested with Ethernet.)
  3. Attempt to connect to and send data to this socket

  Expected behavior:
  - If module is loaded, packets will be unwrapped by the kernel and emitted as 
IP packets (so will not be received by the listening DDP socket)
  - If module is not present, packets will be passed through to the listening 
DDP socket

  Actual behavior:
  - If module is not present but was compiled during the kernel build process, 
packets are silently discarded by the kernel
  - If module is not present and was not compiled during the kernel build 
process, packets are passed through as expected
  """

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1559772/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to