This bug was fixed in the package linux - 4.4.0-173.203
---------------
linux (4.4.0-173.203) xenial; urgency=medium
* xenial/linux: 4.4.0-173.203 -proposed tracker (LP: #1859718)
* CVE-2019-14615
- drm/i915/gen9: Clear residual context state on context switch
linux (4.4.0-172.202) xenial; urgency=medium
* xenial/linux: 4.4.0-172.202 -proposed tracker (LP: #1858594)
* tools/perf fails to build after Xenial update to 4.4.208 upstream stable
release (LP: #1858798)
- Revert "perf report: Add warning when libunwind not compiled in"
* CVE-2019-18885
- btrfs: refactor btrfs_find_device() take fs_devices as argument
- btrfs: merge btrfs_find_device and find_device
* Integrate Intel SGX driver into linux-azure (LP: #1844245)
- [Packaging] Add systemd service to load intel_sgx
* Xenial update: 4.4.208 upstream stable release (LP: #1858462)
- btrfs: do not leak reloc root if we fail to read the fs root
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate
- ALSA: hda/ca0132 - Keep power on during processing DSP response
- ALSA: hda/ca0132 - Avoid endless loop
- drm: mst: Fix query_payload ack reply struct
- iio: light: bh1750: Resolve compiler warning and make code more readable
- spi: Add call to spi_slave_abort() function when spidev driver is released
- staging: rtl8188eu: fix possible null dereference
- rtlwifi: prevent memory leak in rtl_usb_probe
- IB/iser: bound protection_sg size by data_sg size
- media: am437x-vpfe: Setting STD to current value is not an error
- media: i2c: ov2659: fix s_stream return value
- media: i2c: ov2659: Fix missing 720p register config
- media: ov6650: Fix stored frame format not in sync with hardware
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates
- usb: renesas_usbhs: add suspend event support in gadget mode
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
- regulator: max8907: Fix the usage of uninitialized variable in
max8907_regulator_probe()
- media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
- samples: pktgen: fix proc_cmd command result check logic
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel
format
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence
number
- media: ti-vpe: vpe: Make sure YUYV is set as default format
- extcon: sm5502: Reset registers during initialization
- x86/mm: Use the correct function type for native_set_fixmap()
- perf report: Add warning when libunwind not compiled in
- iio: adc: max1027: Reset the device at probe time
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
- drm/gma500: fix memory disclosures due to uninitialized bytes
- x86/ioapic: Prevent inconsistent state when moving an interrupt
- arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill()
- libata: Ensure ata_port probe has completed before detach
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B
- bnx2x: Fix PF-VF communication over multi-cos queues.
- spi: img-spfi: fix potential double release
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
- perf probe: Fix to find range-only function instance
- perf probe: Fix to list probe event with correct line number
- perf probe: Walk function lines in lexical blocks
- perf probe: Fix to probe an inline function which has no entry pc
- perf probe: Fix to show ranges of variables in functions without entry_pc
- perf probe: Fix to show inlined function callsite without entry_pc
- perf probe: Skip overlapped location on searching variables
- perf probe: Return a better scope DIE if there is no best scope
- perf probe: Fix to show calling lines of inlined functions
- perf probe: Skip end-of-sequence and non statement lines
- perf probe: Filter out instances except for inlined subroutine and
subprogram
- ath10k: fix get invalid tx rate for Mesh metric
- media: pvrusb2: Fix oops on tear-down when radio support is not present
- media: si470x-i2c: add missed operations in remove
- EDAC/ghes: Fix grain calculation
- spi: pxa2xx: Add missed security checks
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
- parport: load lowlevel driver if ports not found
- cpufreq: Register drivers only after CPU devices have been registered
- x86/crash: Add a forward declaration of struct kimage
- spi: tegra20-slink: add missed clk_unprepare
- btrfs: don't prematurely free work in end_workqueue_fn()
- iwlwifi: check kasprintf() return value
- fbtft: Make sure string is NULL terminated
- crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
- crypto: vmx - Avoid weird build failures
- libtraceevent: Fix memory leakage in copy_filter_type
- net: phy: initialise phydev speed and duplex sanely
- Revert "mmc: sdhci: Fix incorrect switch to HS mode"
- usb: xhci: Fix build warning seen with CONFIG_PM=n
- btrfs: do not call synchronize_srcu() in inode_tree_del
- btrfs: return error pointer from alloc_test_extent_buffer
- btrfs: abort transaction after failed inode updates in create_subvol
- Btrfs: fix removal logic of the tree mod log that leads to use-after-free
issues
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers
- af_packet: set defaule value for tmo
- fjes: fix missed check in fjes_acpi_add
- mod_devicetable: fix PHY module format
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in
nci_uart_tty_receive()
- net: qlogic: Fix error paths in ql_alloc_large_buffers()
- net: usb: lan78xx: Fix suspend/resume PHY register access error
- sctp: fully initialize v4 addr in some functions
- net: dst: Force 4-byte alignment of dst_metrics
- usbip: Fix error path of vhci_recv_ret_submit()
- USB: EHCI: Do not return -EPIPE when hub is disconnected
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
- ext4: check for directory entries too close to block end
- powerpc/irq: fix stack overflow verification
- mmc: sdhci-of-esdhc: fix P2020 errata handling
- perf probe: Fix to show function entry line as probe-able
- scsi: mpt3sas: Fix clear pending bit in ioctl status
- scsi: lpfc: Fix locking on mailbox command completion
- Input: atmel_mxt_ts - disable IRQ across suspend
- iommu/tegra-smmu: Fix page tables in > 4 GiB memory
- scsi: target: compare full CHAP_A Algorithm strings
- scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
- scsi: csiostor: Don't enable IRQs too early
- powerpc/pseries: Mark accumulate_stolen_time() as notrace
- dma-debug: add a schedule point in debug_dma_dump_mappings()
- clocksource/drivers/asm9260: Add a check for of_clk_get
- powerpc/security/book3s64: Report L1TF status in sysfs
- jbd2: Fix statistics for the number of logged blocks
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and
WRITE(6)
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
- clk: qcom: Allow constant ratio freq tables for rcg
- irqchip/irq-bcm7038-l1: Enable parent IRQ if necessary
- irqchip: ingenic: Error out if IRQ domain creation failed
- fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned
long
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences
- scsi: ufs: fix potential bug which ends in system hang
- powerpc/pseries/cmm: Implement release() function for sysfs device
- powerpc/security: Fix wrong message when RFI Flush is disable
- clk: pxa: fix one of the pxa RTC clocks
- bcache: at least try to shrink 1 node in bch_mca_scan()
- HID: Improve Windows Precision Touchpad detection.
- ext4: work around deleting a file with i_nlink == 0 safely
- scsi: pm80xx: Fix for SATA device discovery
- scsi: target: iscsi: Wait for all commands to finish before freeing a
session
- gpio: mpc8xxx: Don't overwrite default irq_set_type callback
- scripts/kallsyms: fix definitely-lost memory leak
- cdrom: respect device capabilities during opening action
- perf regs: Make perf_reg_name() return "unknown" instead of NULL
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
- s390/cpum_sf: Check for SDBT and SDB consistency
- ocfs2: fix passing zero to 'PTR_ERR' warning
- kernel: sysctl: make drop_caches write-only
- ALSA: hda - Downgrade error message for single-cmd fallback
- Make filldir[64]() verify the directory entry filename is valid
- filldir[64]: remove WARN_ON_ONCE() for bad directory entries
- net: davinci_cpdma: use dma_addr_t for DMA address
- netfilter: ebtables: compat: reject all padding in matches/watchers
- 6pack,mkiss: fix possible deadlock
- netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
- net: icmp: fix data-race in cmp_global_allow()
- hrtimer: Annotate lockless access to timer->state
- mmc: sdhci: Update the tuning failed messages to pr_debug level
- tcp: do not send empty skb from tcp_write_xmit()
- Linux 4.4.208
* Xenial update: 4.4.207 upstream stable release (LP: #1858489)
- x86/apic/32: Avoid bogus LDR warnings
- usb: gadget: u_serial: add missing port entry locking
- tty: serial: msm_serial: Fix flow control
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
- serial: serial_core: Perform NULL checks for break_ctl ops
- serial: ifx6x60: add missed pm_runtime_disable
- autofs: fix a leak in autofs_expire_indirect()
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
- Input: cyttsp4_core - fix use after free bug
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
- rsxx: add missed destroy_workqueue calls in remove
- net: ep93xx_eth: fix mismatch of request_mem_region in remove
- serial: core: Allow processing sysrq at port unlock time
- iwlwifi: mvm: Send non offchannel traffic via AP sta
- ARM: 8813/1: Make aligned 2-byte getuser()/putuser() atomic on ARMv6+
- extcon: max8997: Fix lack of path setting in USB device mode
- clk: rockchip: fix rk3188 sclk_smc gate data
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering
- dlm: fix missing idr_destroy for recover_idr
- MIPS: SiByte: Enable ZONE_DMA32 for LittleSur
- scsi: zfcp: drop default switch case which might paper over missing case
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues
- Staging: iio: adt7316: Fix i2c data reading, set the data field
- regulator: Fix return value of _set_load() stub
- MIPS: OCTEON: octeon-platform: fix typing
- math-emu/soft-fp.h: (_FP_ROUND_ZERO) cast 0 to void to fix warning
- rtc: max8997: Fix the returned value in case of error in
'max8997_rtc_read_alarm()'
- rtc: dt-binding: abx80x: fix resistance scale
- ARM: dts: exynos: Use Samsung SoC specific compatible for DWC2 module
- dmaengine: coh901318: Fix a double-lock bug
- dmaengine: coh901318: Remove unused variable
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion()
- dma-mapping: fix return type of dma_set_max_seg_size()
- altera-stapl: check for a null key before strcasecmp'ing it
- serial: imx: fix error handling in console_setup
- i2c: imx: don't print error message on probe defer
- dlm: NULL check before kmem_cache_destroy is not needed
- nfsd: fix a warning in __cld_pipe_upcall()
- ARM: OMAP1/2: fix SoC name printing
- net/x25: fix called/calling length calculation in x25_parse_address_block
- net/x25: fix null_x25_address handling
- ARM: dts: mmp2: fix the gpio interrupt cell number
- tcp: fix off-by-one bug on aborting window-probing socket
- modpost: skip ELF local symbols during section mismatch check
- kbuild: fix single target build for external module
- ARM: dts: pxa: clean up USB controller nodes
- dlm: fix invalid cluster name warning
- powerpc/math-emu: Update macros from GCC
- MIPS: OCTEON: cvmx_pko_mem_debug8: use oldest forward compatible
definition
- nfsd: Return EPERM, not EACCES, in some SETATTR cases
- mlx4: Use snprintf instead of complicated strcpy
- ARM: dts: sunxi: Fix PMU compatible strings
- sched/fair: Scale bandwidth quota and period without losing quota/period
ratio precision
- fuse: verify nlink
- fuse: verify attributes
- ALSA: pcm: oss: Avoid potential buffer overflows
- Input: goodix - add upside-down quirk for Teclast X89 tablet
- CIFS: Fix SMB2 oplock break processing
- tty: vt: keyboard: reject invalid keycodes
- can: slcan: Fix use-after-free Read in slcan_open
- jbd2: Fix possible overflow in jbd2_log_space_left()
- drm/i810: Prevent underflow in ioctl
- KVM: x86: do not modify masked bits of shared MSRs
- KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr
- spi: atmel: Fix CS high support
- RDMA/qib: Validate ->show()/store() callbacks before calling them
- thermal: Fix deadlock in thermal thermal_zone_device_check
- Revert "KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
(CVE-2019-19332)"
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
(CVE-2019-19332)
- appletalk: Fix potential NULL pointer dereference in
unregister_snap_client
- appletalk: Set error code if register_snap_client failed
- ALSA: hda - Fix pending unsol events at shutdown
- sched/core: Allow putting thread_info into task_struct
- sched/core: Add try_get_task_stack() and put_task_stack()
- sched/core, x86: Make struct thread_info arch specific again
- fs/proc: Stop reporting eip and esp in /proc/PID/stat
- fs/proc: Report eip/esp in /prod/PID/stat for coredumping
- proc: fix coredump vs read /proc/*/stat race
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads
- usb: gadget: configfs: Fix missing spin_lock_init()
- usb: Allow USB device to be warm reset in suspended state
- staging: rtl8188eu: fix interface sanity check
- staging: rtl8712: fix interface sanity check
- staging: gigaset: fix general protection fault on probe
- staging: gigaset: fix illegal free on probe errors
- staging: gigaset: add endpoint-type sanity check
- xhci: Increase STS_HALT timeout in xhci_suspend()
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting
- USB: atm: ueagle-atm: add missing endpoint check
- USB: idmouse: fix interface sanity checks
- USB: serial: io_edgeport: fix epic endpoint lookup
- USB: adutux: fix interface sanity check
- usb: core: urb: fix URB structure initialization function
- usb: mon: Fix a deadlock in usbmon between mmap and read
- mtd: spear_smi: Fix Write Burst mode
- virtio-balloon: fix managed page counts when migrating pages between zones
- btrfs: check page->mapping when loading free space cache
- btrfs: Remove btrfs_bio::flags member
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of
buffer
- rtlwifi: rtl8192de: Fix missing enable interrupt flag
- lib: raid6: fix awk build warnings
- workqueue: Fix spurious sanity check failures in destroy_workqueue()
- workqueue: Fix pwq ref leak in rescuer_thread()
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
- blk-mq: avoid sysfs buffer overflow with too many CPU cores
- cgroup: pids: use atomic64_t for pids->limit
- ar5523: check NULL before memcpy() in ar5523_cmd()
- media: bdisp: fix memleak on release
- media: radio: wl1273: fix interrupt masking on release
- cpuidle: Do not unset the driver if it is there already
- ACPI: OSL: only free map once in osl.c
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup
controller init
- pinctrl: samsung: Fix device node refcount leaks in init code
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB
- video/hdmi: Fix AVI bar unpack
- quota: Check that quota is not dirty before release
- quota: fix livelock in dquot_writeback_dquots
- scsi: zfcp: trace channel log even for FCP command responses
- usb: xhci: only set D3hot for pci device
- xhci: Fix memory leak in xhci_add_in_port()
- xhci: make sure interrupts are restored to correct state
- iio: adis16480: Add debugfs_reg_access entry
- Btrfs: fix negative subv_writers counter and data space leak after
buffered
write
- scsi: lpfc: Cap NPIV vports to 256
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait
- x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
- ARM: dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup
controller init
- scsi: qla2xxx: Fix DMA unmap leak
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd()
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value
- powerpc: Fix vDSO clock_getres()
- mm/shmem.c: cast the type of unmap_start to u64
- blk-mq: make sure that line break can be printed
- workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
- sunrpc: fix crash when cache_head become valid before update
- kernel/module.c: wakeup processes in module_wq on module unload
- net: bridge: deny dev_set_mac_address() when unregistering
- tcp: md5: fix potential overestimation of TCP option space
- tipc: fix ordering of tipc module init and exit routine
- inet: protect against too small mtu values.
- tcp: fix rejected syncookies due to stale timestamps
- tcp: tighten acceptance of ACKs not matching a child socket
- tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
- net: ethernet: ti: cpsw: fix extra rx interrupt
- PCI: Fix Intel ACS quirk UPDCR register address
- PCI/MSI: Fix incorrect MSI-X masking on resume
- xtensa: fix TLB sanity checker
- CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
- ARM: dts: s3c64xx: Fix init order of clock providers
- ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume()
- vfio/pci: call irq_bypass_unregister_producer() before freeing irq
- dm btree: increase rebalance threshold in __rebalance2()
- drm/radeon: fix r1xx/r2xx register checker for POT textures
- xhci: fix USB3 device initiated resume race with roothub autosuspend
- net: stmmac: use correct DMA buffer size in the RX descriptor
- net: stmmac: don't stop NAPI processing when dropping a packet
- Linux 4.4.207
* efivarfs test in ubuntu_kernel_selftest failed on the second run
(LP: #1809704)
- selftests: efivarfs: return Kselftest Skip code for skipped tests
- selftests/efivarfs: clean up test files from test_create*()
* cifs: kernel NULL pointer dereference, address: 0000000000000038
(LP: #1856949)
- CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
* CVE-2019-19332
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID
(CVE-2019-19332)
* CVE-2019-19062
- crypto: user - fix memory leak in crypto_report
* [Hyper-V] KVP daemon fails to start on first boot of disco VM (LP: #1820063)
- [Packaging] bind hv_kvp_daemon startup to hv_kvp device
* False positive test result in run_afpackettests from net in
ubuntu_kernel_selftest (LP: #1825778)
- selftests/net: correct the return value for run_afpackettests
* Xenial update: 4.4.206 upstream stable release (LP: #1855313)
- ASoC: compress: fix unsigned integer overflow check
- ASoC: kirkwood: fix external clock probe defer
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume
- reset: fix reset_control_ops kerneldoc comment
- can: peak_usb: report bus recovery as well
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open
- scripts/gdb: fix debugging modules compiled with hot/cold partitioning
- block: drbd: remove a stray unlock in __drbd_send_protocol()
- scsi: lpfc: Fix dif and first burst use in write commands
- ARM: debug-imx: only define DEBUG_IMX_UART_PORT if needed
- ARM: dts: imx53-voipac-dmm-668: Fix memory node duplication
- parisc: Fix serio address output
- parisc: Fix HP SDC hpa address output
- arm64: smp: Handle errors reported by the firmware
- PM / AVS: SmartReflex: NULL check before some freeing functions is not
needed
- ARM: ks8695: fix section mismatch warning
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value
- crypto: user - support incremental algorithm dumps
- mwifiex: fix potential NULL dereference and use after free
- mwifiex: debugfs: correct histogram spacing, formatting
- rtl818x: fix potential use after free
- xfs: require both realtime inodes to mount
- ubi: Put MTD device after it is not used
- ubi: Do not drop UBI device reference before using
- microblaze: adjust the help to the real behavior
- microblaze: move "... is ready" messages to arch/microblaze/Makefile
- gpiolib: Fix return value of gpio_to_desc() stub if !GPIOLIB
- VSOCK: bind to random port for VMADDR_PORT_ANY
- btrfs: only track ref_heads in delayed_ref_updates
- xen/pciback: Check dev_data before using it
- KVM: s390: unregister debug feature on failing arch init
- pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration
- pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10
- HID: doc: fix wrong data structure reference for UHID_OUTPUT
- gfs2: take jdata unstuff into account in do_grow
- xfs: Align compat attrlist_by_handle with native implementation.
- IB/qib: Fix an error code in qib_sdma_verbs_send()
- powerpc/book3s/32: fix number of bats in p/v_block_mapped()
- powerpc/xmon: fix dump_segments()
- drivers/regulator: fix a missing check of return value
- serial: max310x: Fix tx_empty() callback
- openrisc: Fix broken paths to arch/or32
- RDMA/srp: Propagate ib_post_send() failures to the SCSI mid-layer
- scsi: qla2xxx: deadlock by configfs_depend_item
- scsi: csiostor: fix incorrect dma device in case of vport
- ath6kl: Only use match sets when firmware supports it
- ath6kl: Fix off by one error in scan completion
- powerpc/prom: fix early DEBUG messages
- powerpc/mm: Make NULL pointer deferences explicit on bad page faults.
- powerpc/44x/bamboo: Fix PCI range
- drbd: reject attach of unsuitable uuids even if connected
- drbd: fix print_st_err()'s prototype to match the definition
- regulator: tps65910: fix a missing check of return value
- net/net_namespace: Check the return value of register_pernet_subsys()
- um: Make GCOV depend on !KCOV
- net: stmicro: fix a missing check of clk_prepare
- atl1e: checking the status of atl1e_write_phy_reg
- tipc: fix a missing check of genlmsg_put
- ocfs2: clear journal dirty flag after shutdown journal
- lib/genalloc.c: use vzalloc_node() to allocate the bitmap
- lib/genalloc.c: include vmalloc.h
- mtd: Check add_mtd_device() ret code
- tipc: fix memory leak in tipc_nl_compat_publ_dump
- net/core/neighbour: tell kmemleak about hash tables
- net/core/neighbour: fix kmemleak minimal reference count for hash tables
- sfc: suppress duplicate nvmem partition types in efx_ef10_mtd_probe
- decnet: fix DN_IFREQ_SIZE
- tipc: fix skb may be leaky in tipc_link_input
- sfc: initialise found bitmap in efx_ef10_mtd_probe
- net: fix possible overflow in __sk_mem_raise_allocated()
- net: dev: Use unsigned integer as an argument to left-shift
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during
discovery
- ACPI / APEI: Switch estatus pool to use vmalloc memory
- scsi: libsas: Check SMP PHY control function result
- mtd: Remove a debug trace in mtdpart.c
- staging: rtl8192e: fix potential use after free
- USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
- mei: bus: prefix device names on bus with the bus name
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
- net: macb: fix error format in dev_err()
- pwm: Clear chip_data in pwm_put()
- macvlan: schedule bc_work even if error
- openvswitch: fix flow command message size
- slip: Fix use-after-free Read in slip_open
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
- openvswitch: remove another BUG_ON()
- tipc: fix link name length check
- net: sched: fix `tc -s class show` no bstats on class with nolock
subqueues
- HID: core: check whether Usage Page item is after Usage ID items
- hwrng: stm32 - fix unbalanced pm_runtime_enable
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
- Linux 4.4.206
- [Config] updateconfigs for 4.4.206
* Xenial update: 4.4.205 upstream stable release (LP: #1854857)
- Revert "sock: Reset dst when changing sk_mark via setsockopt"
- Linux 4.4.205
* Xenial update: 4.4.204 upstream stable release (LP: #1854855)
- net/mlx4_en: fix mlx4 ethtool -N insertion
- sfc: Only cancel the PPS workqueue if it exists
- net/sched: act_pedit: fix WARN() in the traffic path
- net: rtnetlink: prevent underflows in do_setvfinfo()
- Revert "fs: ocfs2: fix possible null-pointer dereferences in
ocfs2_xa_prepare_entry()"
- mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
- asus-wmi: Create quirk for airplane_mode LED
- asus-wmi: Add quirk_no_rfkill_wapf4 for the Asus X456UF
- asus-wmi: Add quirk_no_rfkill for the Asus N552VW
- asus-wmi: Add quirk_no_rfkill for the Asus U303LB
- asus-wmi: Add quirk_no_rfkill for the Asus Z550MA
- platform/x86: asus-wmi: Filter buggy scan codes on ASUS Q500A
- platform/x86: asus-wmi: fix asus ux303ub brightness issue
- platform/x86: asus-wmi: Set specified XUSB2PR value for X550LB
- asus-wmi: provide access to ALS control
- platform/x86: asus-wmi: try to set als by default
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
- platform/x86: asus-wmi: add SERIO_I8042 dependency
- mwifiex: Fix NL80211_TX_POWER_LIMITED
- ALSA: isight: fix leak of reference to firewire unit in error path of
.probe
callback
- printk: fix integer overflow in setup_log_buf()
- gfs2: Fix marking bitmaps non-full
- synclink_gt(): fix compat_ioctl()
- powerpc: Fix signedness bug in update_flash_db()
- powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
- brcmsmac: AP mode: update beacon when TIM changes
- spi: sh-msiof: fix deferred probing
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
- btrfs: handle error of get_old_root
- gsmi: Fix bug in append_to_eventlog sysfs handler
- misc: mic: fix a DMA pool free failure
- amiflop: clean up on errors during setup
- scsi: ips: fix missing break in switch
- KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
- scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
- scsi: isci: Change sci_controller_start_task's return type to sci_status
- scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
- clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
- scsi: dc395x: fix dma API usage in srb_done
- scsi: dc395x: fix DMA API usage in sg_update_list
- net: fix warning in af_unix
- kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad
stack
- ALSA: i2c/cs8427: Fix int to char conversion
- macintosh/windfarm_smu_sat: Fix debug output
- USB: misc: appledisplay: fix backlight update_status return code
- SUNRPC: Fix a compile warning for cmpxchg64()
- atm: zatm: Fix empty body Clang warnings
- s390/perf: Return error when debug_register fails
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length
- sparc: Fix parport build warnings.
- ceph: fix dentry leak in ceph_readdir_prepopulate
- rtc: s35390a: Change buf's type to u8 in s35390a_init
- mISDN: Fix type of switch control variable in ctrl_teimanager
- qlcnic: fix a return in qlcnic_dcb_get_capability()
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
- mfd: max8997: Enale irq-wakeup unconditionally
- selftests/ftrace: Fix to test kprobe $comm arg only if available
- thermal: rcar_thermal: Prevent hardware access during system suspend
- sparc64: Rework xchg() definition to avoid warnings.
- fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in
dlm_print_one_mle()
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
- um: Make line/tty semantics use true write IRQ
- linux/bitmap.h: handle constant zero-size bitmaps correctly
- linux/bitmap.h: fix type of nbits in bitmap_shift_right()
- hfsplus: fix BUG on bnode parent update
- hfs: fix BUG on bnode parent update
- hfsplus: prevent btree data loss on ENOSPC
- hfs: prevent btree data loss on ENOSPC
- hfsplus: fix return value of hfsplus_get_block()
- hfs: fix return value of hfs_get_block()
- fs/hfs/extent.c: fix array out of bounds read of array extent
- igb: shorten maximum PHC timecounter update interval
- ntb_netdev: fix sleep time mismatch
- ntb: intel: fix return value for ndev_vec_mask()
- ocfs2: don't put and assigning null to bh allocated outside
- ocfs2: fix clusters leak in ocfs2_defrag_extent()
- net: do not abort bulk send on BQL status
- sched/fair: Don't increase sd->balance_interval on newidle balance
- audit: print empty EXECVE args
- wlcore: Fix the return value in case of error in
'wlcore_vendor_cmd_smart_config_start()'
- rtl8xxxu: Fix missing break in switch
- brcmsmac: never log "tid x is not agg'able" by default
- wireless: airo: potential buffer overflow in sprintf()
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
- scsi: mpt3sas: Fix Sync cache command failure during driver unload
- scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing
page11
- scsi: megaraid_sas: Fix msleep granularity
- scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
- dlm: fix invalid free
- dlm: don't leak kernel pointer to userspace
- net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
- sock: Reset dst when changing sk_mark via setsockopt
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
- PCI: keystone: Use quirk to limit MRRS for K2G
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system
- Bluetooth: Fix invalid-free in bcsp_close()
- ath9k_hw: fix uninitialized variable data
- dm: use blk_set_queue_dying() in __dm_destroy()
- arm64: fix for bad_mode() handler to always result in panic
- cpufreq: Skip cpufreq resume if it's not suspended
- ocfs2: remove ocfs2_is_o2cb_active()
- mmc: block: Fix tag condition with packed writes
- ARC: perf: Accommodate big-endian CPU
- x86/insn: Fix awk regexp warnings
- x86/speculation: Fix incorrect MDS/TAA mitigation status
- x86/speculation: Fix redundant MDS mitigation message
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true
- media: vivid: Fix wrong locking that causes race conditions on streaming
stop
- cpufreq: Add NULL checks to show() and store() methods of cpufreq
- media: b2c2-flexcop-usb: add sanity checking
- media: cxusb: detect cxusb_ctrl_msg error in query
- media: imon: invalid dereference in imon_touch_event
- virtio_console: reset on out of memory
- virtio_console: don't tie bufs to a vq
- virtio_console: allocate inbufs in add_port() only if it is needed
- virtio_console: fix uninitialized variable use
- virtio_console: drop custom control queue cleanup
- virtio_console: move removal code
- usb-serial: cp201x: support Mark-10 digital force gauge
- appledisplay: fix error handling in the scheduled work
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210
- USB: serial: mos7720: fix remote wakeup
- USB: serial: mos7840: fix remote wakeup
- USB: serial: option: add support for DW5821e with eSIM support
- USB: serial: option: add support for Foxconn T77W968 LTE modules
- staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
- Linux 4.4.204
-- Marcelo Henrique Cerri <marcelo.ce...@canonical.com> Tue, 14 Jan
2020 22:02:26 -0300
** Changed in: linux (Ubuntu Xenial)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-14615
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-18885
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-19062
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-19332
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1809704
Title:
efivarfs test in ubuntu_kernel_selftest failed on the second run
Status in ubuntu-kernel-tests:
Fix Released
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
Fix Released
Status in linux source package in Bionic:
Fix Committed
Status in linux source package in Cosmic:
Won't Fix
Status in linux source package in Disco:
Fix Committed
Bug description:
== SRU Justification ==
If you run the test selftest/efivarfs test suite twice, it will fail on
the second run.
This is because the test file created in the first run will obtain the
immutable property, and it will make the second attempt failed with
premission denied error.
== Fix ==
* 1f0ea958 (selftests: efivarfs: return Kselftest Skip code for skipped tests)
* dff6d2ae (selftests/efivarfs: clean up test files from test_create*())
This issue exists in X/B/D, fixed in newer releases.
For Xenial it lacks the crucial commit which allows the selftest
framework to handle KSFT_SKIP return code (3f4435b5), so the first
commit has to be backported to keep using 0 as its return value. The
second commit is a backport with fuzzy adjustments.
For Bionic, the first commit is a clean cherry-pick, the second is a
backport with fuzzy adjustments.
For Disco, it just needs the second commit, which is also a backport
with fuzzy adjustments as well.
== Test ==
Patch tested against the affected kernels, and it works as expected.
== Regression Potential ==
Low, changes limited to testing tools.
== Original Bug Report ==
This seems to be an issue to the test case, if you run the test suite twice,
it will fail on the second run.
The first run will create the test file:
$ ll
/sys/firmware/efi/efivars/test_create_read-210be57c-9849-4fc7-a635-e6382d1aec27
-rw------- 1 root root 0 Dec 24 07:16
/sys/firmware/efi/efivars/test_create_read-210be57c-9849-4fc7-a635-e6382d1aec27
This is cause the open(O_WRONLY) test in test_create_read failed with
premission denied on the second run.
This issue can be reproduced with upstream kernel tree on Xenial as well.
$ sudo make -C linux/tools/testing/selftests TARGETS=efivarfs run_tests
make: Entering directory
'/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests'
for TARGET in efivarfs; do \
make -C $TARGET; \
done;
make[1]: Entering directory
'/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests/efivarfs'
make[1]: Nothing to be done for 'all'.
make[1]: Leaving directory
'/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests/efivarfs'
for TARGET in efivarfs; do \
make -C $TARGET run_tests; \
done;
make[1]: Entering directory
'/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests/efivarfs'
--------------------
running test_create
--------------------
./efivarfs.sh: line 48:
/sys/firmware/efi/efivars/test_create-210be57c-9849-4fc7-a635-e6382d1aec27:
Permission denied
[PASS]
--------------------
running test_create_empty
--------------------
./efivarfs.sh: line 65:
/sys/firmware/efi/efivars/test_create_empty-210be57c-9849-4fc7-a635-e6382d1aec27:
Permission denied
[PASS]
--------------------
running test_create_read
--------------------
open(O_WRONLY): Permission denied
[FAIL]
--------------------
running test_delete
--------------------
[PASS]
--------------------
running test_zero_size_delete
--------------------
[PASS]
--------------------
running test_open_unlink
--------------------
[PASS]
--------------------
running test_valid_filenames
--------------------
[PASS]
--------------------
running test_invalid_filenames
--------------------
[PASS]
selftests: efivarfs.sh [FAIL]
make[1]: Leaving directory
'/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests/efivarfs'
make: Leaving directory
'/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests'
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: linux-image-4.4.0-141-generic 4.4.0-141.167
ProcVersionSignature: User Name 4.4.0-141.167-generic 4.4.162
Uname: Linux 4.4.0-141-generic x86_64
AlsaDevices:
total 0
crw-rw---- 1 root audio 116, 1 Dec 24 05:10 seq
crw-rw---- 1 root audio 116, 33 Dec 24 05:10 timer
AplayDevices: Error: [Errno 2] No such file or directory: 'aplay'
ApportVersion: 2.20.1-0ubuntu2.18
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord'
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq',
'/dev/snd/timer'] failed with exit code 1:
CurrentDmesg:
[92859.670497] smpboot: CPU 111 is now offline
[92859.723040] kvm: disabled by bios
[92859.750562] smpboot: Booting Node 1 Processor 111 APIC 0x7d
[92859.821706] kvm: disabled by bios
Date: Tue Dec 25 06:30:01 2018
IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig'
Lsusb:
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 003: ID 0b1f:03e9 Insyde Software Corp.
Bus 001 Device 002: ID 0000:0001
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
MachineType: Intel Corporation S2600WFT
PciMultimedia:
ProcFB: 0 astdrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.4.0-141-generic.efi.signed
root=UUID=e93f24ed-4e90-4ccb-ba6d-f3b97fe0436f ro console=ttyS0,115200n8
RelatedPackageVersions:
linux-restricted-modules-4.4.0-141-generic N/A
linux-backports-modules-4.4.0-141-generic N/A
linux-firmware 1.157.21
RfKill: Error: [Errno 2] No such file or directory: 'rfkill'
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 11/29/2016
dmi.bios.vendor: Intel Corporation
dmi.bios.version: SE5C620.86B.01.00.0336.112920161700
dmi.board.asset.tag: Base Board Asset Tag
dmi.board.name: S2600WFT
dmi.board.vendor: Intel Corporation
dmi.board.version: H48104-410
dmi.chassis.asset.tag: ....................
dmi.chassis.type: 23
dmi.chassis.vendor: ...............................
dmi.chassis.version: ..................
dmi.modalias:
dmi:bvnIntelCorporation:bvrSE5C620.86B.01.00.0336.112920161700:bd11/29/2016:svnIntelCorporation:pnS2600WFT:pvr....................:rvnIntelCorporation:rnS2600WFT:rvrH48104-410:cvn...............................:ct23:cvr..................:
dmi.product.name: S2600WFT
dmi.product.version: ....................
dmi.sys.vendor: Intel Corporation
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/1809704/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
