Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.4.106 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the 4.4.106 stable release shall be applied:
* can: ti_hecc: Fix napi poll return value for repoll
* can: kvaser_usb: free buf in error paths
* can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
* can: kvaser_usb: ratelimit errors if incomplete messages are received
* can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
* can: ems_usb: cancel urb on -EPIPE and -EPROTO
* can: esd_usb2: cancel urb on -EPIPE and -EPROTO
* can: usb_8dev: cancel urb on -EPIPE and -EPROTO
* virtio: release virtio index when fail to device_register
* hv: kvp: Avoid reading past allocated blocks from KVP file
* isa: Prevent NULL dereference in isa_bus driver callbacks
* scsi: libsas: align sata_device's rps_resp on a cacheline
* efi: Move some sysfs files to be read-only by root
* ASN.1: fix out-of-bounds read when parsing indefinite length item
* ASN.1: check for error from ASN1_OP_END__ACT actions
* X.509: reject invalid BIT STRING for subjectPublicKey
* x86/PCI: Make broadcom_postcore_init() check acpi_disabled
* ALSA: pcm: prevent UAF in snd_pcm_info
* ALSA: seq: Remove spurious WARN_ON() at timer check
* ALSA: usb-audio: Fix out-of-bound error
* ALSA: usb-audio: Add check return value for usb_string()
* iommu/vt-d: Fix scatterlist offset handling
* s390: fix compat system call table
* kdb: Fix handling of kallsyms_symbol_next() return value
* drm: extra printk() wrapper macros
* drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU
* media: dvb: i2c transfers over usb cannot be done from stack
* arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
* KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
* arm64: fpsimd: Prevent registers leaking from dead tasks
* ARM: BUG if jumping to usermode address in kernel mode
* ARM: avoid faulting on qemu
* scsi: storvsc: Workaround for virtual DVD SCSI version
* thp: reduce indentation level in change_huge_pmd()
* thp: fix MADV_DONTNEED vs. numa balancing race
* mm: drop unused pmdp_huge_get_and_clear_notify()
* Revert "drm/armada: Fix compile fail"
* Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA"
* Revert "s390/kbuild: enable modversions for symbols exported from asm"
* vti6: Don't report path MTU below IPV6_MIN_MTU.
* ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
* x86/hpet: Prevent might sleep splat on resume
* selftest/powerpc: Fix false failures for skipped tests
* module: set __jump_table alignment to 8
* ARM: OMAP2+: Fix device node reference counts
* ARM: OMAP2+: Release device node after it is no longer needed.
* gpio: altera: Use handle_level_irq when configured as a level_high
* HID: chicony: Add support for another ASUS Zen AiO keyboard
* usb: gadget: configs: plug memory leak
* USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
* kvm: nVMX: VMCLEAR should not cause the vCPU to shut down
* libata: drop WARN from protocol error in ata_sff_qc_issue()
* workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
* scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
* irqchip/crossbar: Fix incorrect type of register size
* KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
* arm: KVM: Survive unknown traps from guests
* arm64: KVM: Survive unknown traps from guests
* spi_ks8995: fix "BUG: key accdaa28 not in .data!"
* bnx2x: prevent crash when accessing PTP with interface down
* bnx2x: fix possible overrun of VFPF multicast addresses array
* bnx2x: do not rollback VF MAC/VLAN filters we did not configure
* ipv6: reorder icmpv6_init() and ip6_mr_init()
* crypto: s5p-sss - Fix completing crypto request in IRQ handler
* i2c: riic: fix restart condition
* zram: set physical queue limits to avoid array out of bounds accesses
* netfilter: don't track fragmented packets
* axonram: Fix gendisk handling
* drm/amd/amdgpu: fix console deadlock if late init failed
* powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested
* EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
* EDAC, i5000, i5400: Fix definition of NRECMEMB register
* kbuild: pkg: use --transform option to prefix paths in tar
* mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
* route: also update fnhe_genid when updating a route cache
* route: update fnhe_expires for redirect when the fnhe exists
* lib/genalloc.c: make the avail variable an atomic_long_t
* dynamic-debug-howto: fix optional/omitted ending line number to be LARGE 
instead of 0
* NFS: Fix a typo in nfs_rename()
* sunrpc: Fix rpc_task_begin trace point
* block: wake up all tasks blocked in get_request()
* sparc64/mm: set fields in deferred pages
* sctp: do not free asoc when it is already dead in sctp_sendmsg
* sctp: use the right sk after waking up from wait_buf sleep
* atm: horizon: Fix irq release error
* jump_label: Invoke jump_label_test() via early_initcall()
* xfrm: Copy policy family in clone_policy
* IB/mlx4: Increase maximal message size under UD QP
* IB/mlx5: Assign send CQ and recv CQ of UMR QP
* afs: Connect up the CB.ProbeUuid
* ipvlan: fix ipv6 outbound device
* audit: ensure that 'audit=1' actually enables audit for PID 1
* ipmi: Stop timers before cleaning up the module
* s390: always save and restore all registers on context switch
* more bio_map_user_iov() leak fixes
* tipc: fix memory leak in tipc_accept_from_sock()
* rds: Fix NULL pointer dereference in __rds_rdma_map
* sit: update frag_off info
* packet: fix crash in fanout_demux_rollover()
* net/packet: fix a race in packet_bind() and packet_notifier()
* Revert "x86/efi: Build our own page table structures"
* Revert "x86/efi: Hoist page table switching code into efi_call_virt()"
* Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"
* arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
* usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
* Linux 4.4.106

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Tags added: kernel-stable-tracking-bug

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The 4.4.106 upstream stable
+        patch set is now available. It should be included in the Ubuntu
+        kernel as well.
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The 4.4.106 upstream stable
-        patch set is now available. It should be included in the Ubuntu
-        kernel as well.
+        git://git.kernel.org/
  
-        git://git.kernel.org/
+     TEST CASE: TBD
  
-     TEST CASE: TBD
- 
-        The following patches from the 4.4.106 stable release shall be
- applied:
+        The following patches from the 4.4.106 stable release shall be applied:
+ * can: ti_hecc: Fix napi poll return value for repoll
+ * can: kvaser_usb: free buf in error paths
+ * can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
+ * can: kvaser_usb: ratelimit errors if incomplete messages are received
+ * can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
+ * can: ems_usb: cancel urb on -EPIPE and -EPROTO
+ * can: esd_usb2: cancel urb on -EPIPE and -EPROTO
+ * can: usb_8dev: cancel urb on -EPIPE and -EPROTO
+ * virtio: release virtio index when fail to device_register
+ * hv: kvp: Avoid reading past allocated blocks from KVP file
+ * isa: Prevent NULL dereference in isa_bus driver callbacks
+ * scsi: libsas: align sata_device's rps_resp on a cacheline
+ * efi: Move some sysfs files to be read-only by root
+ * ASN.1: fix out-of-bounds read when parsing indefinite length item
+ * ASN.1: check for error from ASN1_OP_END__ACT actions
+ * X.509: reject invalid BIT STRING for subjectPublicKey
+ * x86/PCI: Make broadcom_postcore_init() check acpi_disabled
+ * ALSA: pcm: prevent UAF in snd_pcm_info
+ * ALSA: seq: Remove spurious WARN_ON() at timer check
+ * ALSA: usb-audio: Fix out-of-bound error
+ * ALSA: usb-audio: Add check return value for usb_string()
+ * iommu/vt-d: Fix scatterlist offset handling
+ * s390: fix compat system call table
+ * kdb: Fix handling of kallsyms_symbol_next() return value
+ * drm: extra printk() wrapper macros
+ * drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU
+ * media: dvb: i2c transfers over usb cannot be done from stack
+ * arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
+ * KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
+ * arm64: fpsimd: Prevent registers leaking from dead tasks
+ * ARM: BUG if jumping to usermode address in kernel mode
+ * ARM: avoid faulting on qemu
+ * scsi: storvsc: Workaround for virtual DVD SCSI version
+ * thp: reduce indentation level in change_huge_pmd()
+ * thp: fix MADV_DONTNEED vs. numa balancing race
+ * mm: drop unused pmdp_huge_get_and_clear_notify()
+ * Revert "drm/armada: Fix compile fail"
+ * Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA"
+ * Revert "s390/kbuild: enable modversions for symbols exported from asm"
+ * vti6: Don't report path MTU below IPV6_MIN_MTU.
+ * ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
+ * x86/hpet: Prevent might sleep splat on resume
+ * selftest/powerpc: Fix false failures for skipped tests
+ * module: set __jump_table alignment to 8
+ * ARM: OMAP2+: Fix device node reference counts
+ * ARM: OMAP2+: Release device node after it is no longer needed.
+ * gpio: altera: Use handle_level_irq when configured as a level_high
+ * HID: chicony: Add support for another ASUS Zen AiO keyboard
+ * usb: gadget: configs: plug memory leak
+ * USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
+ * kvm: nVMX: VMCLEAR should not cause the vCPU to shut down
+ * libata: drop WARN from protocol error in ata_sff_qc_issue()
+ * workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
+ * scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
+ * irqchip/crossbar: Fix incorrect type of register size
+ * KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
+ * arm: KVM: Survive unknown traps from guests
+ * arm64: KVM: Survive unknown traps from guests
+ * spi_ks8995: fix "BUG: key accdaa28 not in .data!"
+ * bnx2x: prevent crash when accessing PTP with interface down
+ * bnx2x: fix possible overrun of VFPF multicast addresses array
+ * bnx2x: do not rollback VF MAC/VLAN filters we did not configure
+ * ipv6: reorder icmpv6_init() and ip6_mr_init()
+ * crypto: s5p-sss - Fix completing crypto request in IRQ handler
+ * i2c: riic: fix restart condition
+ * zram: set physical queue limits to avoid array out of bounds accesses
+ * netfilter: don't track fragmented packets
+ * axonram: Fix gendisk handling
+ * drm/amd/amdgpu: fix console deadlock if late init failed
+ * powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested
+ * EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
+ * EDAC, i5000, i5400: Fix definition of NRECMEMB register
+ * kbuild: pkg: use --transform option to prefix paths in tar
+ * mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
+ * route: also update fnhe_genid when updating a route cache
+ * route: update fnhe_expires for redirect when the fnhe exists
+ * lib/genalloc.c: make the avail variable an atomic_long_t
+ * dynamic-debug-howto: fix optional/omitted ending line number to be LARGE 
instead of 0
+ * NFS: Fix a typo in nfs_rename()
+ * sunrpc: Fix rpc_task_begin trace point
+ * block: wake up all tasks blocked in get_request()
+ * sparc64/mm: set fields in deferred pages
+ * sctp: do not free asoc when it is already dead in sctp_sendmsg
+ * sctp: use the right sk after waking up from wait_buf sleep
+ * atm: horizon: Fix irq release error
+ * jump_label: Invoke jump_label_test() via early_initcall()
+ * xfrm: Copy policy family in clone_policy
+ * IB/mlx4: Increase maximal message size under UD QP
+ * IB/mlx5: Assign send CQ and recv CQ of UMR QP
+ * afs: Connect up the CB.ProbeUuid
+ * ipvlan: fix ipv6 outbound device
+ * audit: ensure that 'audit=1' actually enables audit for PID 1
+ * ipmi: Stop timers before cleaning up the module
+ * s390: always save and restore all registers on context switch
+ * more bio_map_user_iov() leak fixes
+ * tipc: fix memory leak in tipc_accept_from_sock()
+ * rds: Fix NULL pointer dereference in __rds_rdma_map
+ * sit: update frag_off info
+ * packet: fix crash in fanout_demux_rollover()
+ * net/packet: fix a race in packet_bind() and packet_notifier()
+ * Revert "x86/efi: Build our own page table structures"
+ * Revert "x86/efi: Hoist page table switching code into efi_call_virt()"
+ * Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"
+ * arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
+ * usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
+ * Linux 4.4.106

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1745047

Title:
  Xenial update to 4.4.106 stable release

Status in linux package in Ubuntu:
  New

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The 4.4.106 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches from the 4.4.106 stable release shall be applied:
  * can: ti_hecc: Fix napi poll return value for repoll
  * can: kvaser_usb: free buf in error paths
  * can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
  * can: kvaser_usb: ratelimit errors if incomplete messages are received
  * can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
  * can: ems_usb: cancel urb on -EPIPE and -EPROTO
  * can: esd_usb2: cancel urb on -EPIPE and -EPROTO
  * can: usb_8dev: cancel urb on -EPIPE and -EPROTO
  * virtio: release virtio index when fail to device_register
  * hv: kvp: Avoid reading past allocated blocks from KVP file
  * isa: Prevent NULL dereference in isa_bus driver callbacks
  * scsi: libsas: align sata_device's rps_resp on a cacheline
  * efi: Move some sysfs files to be read-only by root
  * ASN.1: fix out-of-bounds read when parsing indefinite length item
  * ASN.1: check for error from ASN1_OP_END__ACT actions
  * X.509: reject invalid BIT STRING for subjectPublicKey
  * x86/PCI: Make broadcom_postcore_init() check acpi_disabled
  * ALSA: pcm: prevent UAF in snd_pcm_info
  * ALSA: seq: Remove spurious WARN_ON() at timer check
  * ALSA: usb-audio: Fix out-of-bound error
  * ALSA: usb-audio: Add check return value for usb_string()
  * iommu/vt-d: Fix scatterlist offset handling
  * s390: fix compat system call table
  * kdb: Fix handling of kallsyms_symbol_next() return value
  * drm: extra printk() wrapper macros
  * drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU
  * media: dvb: i2c transfers over usb cannot be done from stack
  * arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  * KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
  * arm64: fpsimd: Prevent registers leaking from dead tasks
  * ARM: BUG if jumping to usermode address in kernel mode
  * ARM: avoid faulting on qemu
  * scsi: storvsc: Workaround for virtual DVD SCSI version
  * thp: reduce indentation level in change_huge_pmd()
  * thp: fix MADV_DONTNEED vs. numa balancing race
  * mm: drop unused pmdp_huge_get_and_clear_notify()
  * Revert "drm/armada: Fix compile fail"
  * Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA"
  * Revert "s390/kbuild: enable modversions for symbols exported from asm"
  * vti6: Don't report path MTU below IPV6_MIN_MTU.
  * ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
  * x86/hpet: Prevent might sleep splat on resume
  * selftest/powerpc: Fix false failures for skipped tests
  * module: set __jump_table alignment to 8
  * ARM: OMAP2+: Fix device node reference counts
  * ARM: OMAP2+: Release device node after it is no longer needed.
  * gpio: altera: Use handle_level_irq when configured as a level_high
  * HID: chicony: Add support for another ASUS Zen AiO keyboard
  * usb: gadget: configs: plug memory leak
  * USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
  * kvm: nVMX: VMCLEAR should not cause the vCPU to shut down
  * libata: drop WARN from protocol error in ata_sff_qc_issue()
  * workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
  * scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
  * irqchip/crossbar: Fix incorrect type of register size
  * KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
  * arm: KVM: Survive unknown traps from guests
  * arm64: KVM: Survive unknown traps from guests
  * spi_ks8995: fix "BUG: key accdaa28 not in .data!"
  * bnx2x: prevent crash when accessing PTP with interface down
  * bnx2x: fix possible overrun of VFPF multicast addresses array
  * bnx2x: do not rollback VF MAC/VLAN filters we did not configure
  * ipv6: reorder icmpv6_init() and ip6_mr_init()
  * crypto: s5p-sss - Fix completing crypto request in IRQ handler
  * i2c: riic: fix restart condition
  * zram: set physical queue limits to avoid array out of bounds accesses
  * netfilter: don't track fragmented packets
  * axonram: Fix gendisk handling
  * drm/amd/amdgpu: fix console deadlock if late init failed
  * powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested
  * EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
  * EDAC, i5000, i5400: Fix definition of NRECMEMB register
  * kbuild: pkg: use --transform option to prefix paths in tar
  * mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
  * route: also update fnhe_genid when updating a route cache
  * route: update fnhe_expires for redirect when the fnhe exists
  * lib/genalloc.c: make the avail variable an atomic_long_t
  * dynamic-debug-howto: fix optional/omitted ending line number to be LARGE 
instead of 0
  * NFS: Fix a typo in nfs_rename()
  * sunrpc: Fix rpc_task_begin trace point
  * block: wake up all tasks blocked in get_request()
  * sparc64/mm: set fields in deferred pages
  * sctp: do not free asoc when it is already dead in sctp_sendmsg
  * sctp: use the right sk after waking up from wait_buf sleep
  * atm: horizon: Fix irq release error
  * jump_label: Invoke jump_label_test() via early_initcall()
  * xfrm: Copy policy family in clone_policy
  * IB/mlx4: Increase maximal message size under UD QP
  * IB/mlx5: Assign send CQ and recv CQ of UMR QP
  * afs: Connect up the CB.ProbeUuid
  * ipvlan: fix ipv6 outbound device
  * audit: ensure that 'audit=1' actually enables audit for PID 1
  * ipmi: Stop timers before cleaning up the module
  * s390: always save and restore all registers on context switch
  * more bio_map_user_iov() leak fixes
  * tipc: fix memory leak in tipc_accept_from_sock()
  * rds: Fix NULL pointer dereference in __rds_rdma_map
  * sit: update frag_off info
  * packet: fix crash in fanout_demux_rollover()
  * net/packet: fix a race in packet_bind() and packet_notifier()
  * Revert "x86/efi: Build our own page table structures"
  * Revert "x86/efi: Hoist page table switching code into efi_call_virt()"
  * Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"
  * arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
  * usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
  * Linux 4.4.106

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1745047/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to