Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.4.107 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the 4.4.107 stable release shall be applied:
* crypto: hmac - require that the underlying hash algorithm is unkeyed
* crypto: salsa20 - fix blkcipher_walk API usage
* autofs: fix careless error in recent commit
* tracing: Allocate mask_str buffer dynamically
* USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID
* USB: core: prevent malicious bNumInterfaces overflow
* usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer
* ceph: drop negative child dentries before try pruning inode's alias
* Bluetooth: btusb: driver to enable the usb-wakeup feature
* xhci: Don't add a virt_dev to the devs array before it's fully allocated
* sched/rt: Do not pull from current CPU if only one CPU to pull
* dmaengine: dmatest: move callback wait queue to thread context
* ext4: fix fdatasync(2) after fallocate(2) operation
* ext4: fix crash when a directory's i_size is too small
* KEYS: add missing permission check for request_key() destination
* mac80211: Fix addition of mesh configuration element
* usb: phy: isp1301: Add OF device ID table
* md-cluster: free md_cluster_info if node leave cluster
* userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE
* userfaultfd: selftest: vm: allow to build in vm/ directory
* net: initialize msg.msg_flags in recvfrom
* net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values
* net: bcmgenet: correct MIB access of UniMAC RUNT counters
* net: bcmgenet: reserved phy revisions must be checked first
* net: bcmgenet: power down internal phy if open or resume fails
* net: bcmgenet: Power up the internal PHY before probing the MII
* NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)
* NFSD: fix nfsd_reset_versions for NFSv4.
* Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list
* drm/omap: fix dmabuf mmap for dma_alloc'ed buffers
* netfilter: bridge: honor frag_max_size when refragmenting
* writeback: fix memory leak in wb_queue_work()
* net: wimax/i2400m: fix NULL-deref at probe
* dmaengine: Fix array index out of bounds warning in __get_unmap_pool()
* net: Resend IGMP memberships upon peer notification.
* mlxsw: reg: Fix SPVM max record count
* mlxsw: reg: Fix SPVMLR max record count
* intel_th: pci: Add Gemini Lake support
* openrisc: fix issue handling 8 byte get_user calls
* scsi: hpsa: update check for logical volume status
* scsi: hpsa: limit outstanding rescans
* fjes: Fix wrong netdevice feature flags
* drm/radeon/si: add dpm quirk for Oland
* sched/deadline: Make sure the replenishment timer fires in the next period
* sched/deadline: Throttle a constrained deadline task activated after the 
deadline
* sched/deadline: Use deadline instead of period when calculating overflow
* mmc: mediatek: Fixed bug where clock frequency could be set wrong
* drm/radeon: reinstate oland workaround for sclk
* afs: Fix missing put_page()
* afs: Populate group ID from vnode status
* afs: Adjust mode bits processing
* afs: Flush outstanding writes when an fd is closed
* afs: Migrate vlocation fields to 64-bit
* afs: Prevent callback expiry timer overflow
* afs: Fix the maths in afs_fs_store_data()
* afs: Populate and use client modification time
* afs: Fix page leak in afs_write_begin()
* afs: Fix afs_kill_pages()
* net/mlx4_core: Avoid delays during VF driver device shutdown
* perf symbols: Fix symbols__fixup_end heuristic for corner cases
* efi/esrt: Cleanup bad memory map log messages
* NFSv4.1 respect server's max size in CREATE_SESSION
* btrfs: add missing memset while reading compressed inline extents
* target: Use system workqueue for ALUA transitions
* target: fix ALUA transition timeout handling
* target: fix race during implicit transition work flushes
* sfc: don't warn on successful change of MAC
* fbdev: controlfb: Add missing modes to fix out of bounds access
* video: udlfb: Fix read EDID timeout
* video: fbdev: au1200fb: Release some resources if a memory allocation fails
* video: fbdev: au1200fb: Return an error code if a memory allocation fails
* rtc: pcf8563: fix output clock rate
* dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type
* PCI/PME: Handle invalid data when reading Root Status
* powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo
* netfilter: ipvs: Fix inappropriate output of procfs
* powerpc/opal: Fix EBUSY bug in acquiring tokens
* powerpc/ipic: Fix status get and status clear
* target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()
* iscsi-target: fix memory leak in lio_target_tiqn_addtpg()
* target:fix condition return in core_pr_dump_initiator_port()
* target/file: Do not return error for UNMAP if length is zero
* arm-ccn: perf: Prevent module unload while PMU is in use
* crypto: tcrypt - fix buffer lengths in test_aead_speed()
* mm: Handle 0 flags in _calc_vm_trans() macro
* clk: mediatek: add the option for determining PLL source clock
* clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o VPU
* clk: tegra: Fix cclk_lp divisor register
* ppp: Destroy the mutex when cleanup
* thermal/drivers/step_wise: Fix temperature regulation misbehavior
* GFS2: Take inode off order_write list when setting jdata flag
* bcache: explicitly destroy mutex while exiting
* bcache: fix wrong cache_misses statistics
* l2tp: cleanup l2tp_tunnel_delete calls
* xfs: fix log block underflow during recovery cycle verification
* xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real
* PCI: Detach driver before procfs & sysfs teardown on device remove
* scsi: hpsa: cleanup sas_phy structures in sysfs when unloading
* scsi: hpsa: destroy sas transport properties before scsi_host
* powerpc/perf/hv-24x7: Fix incorrect comparison in memord
* tty fix oops when rmmod 8250
* usb: musb: da8xx: fix babble condition handling
* pinctrl: adi2: Fix Kconfig build problem
* raid5: Set R5_Expanded on parity devices as well as data.
* scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry
* vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend
* scsi: sd: change manage_start_stop to bool in sysfs interface
* scsi: sd: change allow_restart to bool in sysfs interface
* scsi: bfa: integer overflow in debugfs
* udf: Avoid overflow when session starts at large offset
* macvlan: Only deliver one copy of the frame to the macvlan interface
* RDMA/cma: Avoid triggering undefined behavior
* IB/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop
* ath9k: fix tx99 potential info leak
* Linux 4.4.107

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Tags added: kernel-stable-tracking-bug

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1745052

Title:
  Xenial update to 4.4.107 stable release

Status in linux package in Ubuntu:
  New

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The 4.4.107 upstream stable
         patch set is now available. It should be included in the Ubuntu
         kernel as well.

         git://git.kernel.org/

      TEST CASE: TBD

         The following patches from the 4.4.107 stable release shall be applied:
  * crypto: hmac - require that the underlying hash algorithm is unkeyed
  * crypto: salsa20 - fix blkcipher_walk API usage
  * autofs: fix careless error in recent commit
  * tracing: Allocate mask_str buffer dynamically
  * USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID
  * USB: core: prevent malicious bNumInterfaces overflow
  * usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer
  * ceph: drop negative child dentries before try pruning inode's alias
  * Bluetooth: btusb: driver to enable the usb-wakeup feature
  * xhci: Don't add a virt_dev to the devs array before it's fully allocated
  * sched/rt: Do not pull from current CPU if only one CPU to pull
  * dmaengine: dmatest: move callback wait queue to thread context
  * ext4: fix fdatasync(2) after fallocate(2) operation
  * ext4: fix crash when a directory's i_size is too small
  * KEYS: add missing permission check for request_key() destination
  * mac80211: Fix addition of mesh configuration element
  * usb: phy: isp1301: Add OF device ID table
  * md-cluster: free md_cluster_info if node leave cluster
  * userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE
  * userfaultfd: selftest: vm: allow to build in vm/ directory
  * net: initialize msg.msg_flags in recvfrom
  * net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values
  * net: bcmgenet: correct MIB access of UniMAC RUNT counters
  * net: bcmgenet: reserved phy revisions must be checked first
  * net: bcmgenet: power down internal phy if open or resume fails
  * net: bcmgenet: Power up the internal PHY before probing the MII
  * NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)
  * NFSD: fix nfsd_reset_versions for NFSv4.
  * Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list
  * drm/omap: fix dmabuf mmap for dma_alloc'ed buffers
  * netfilter: bridge: honor frag_max_size when refragmenting
  * writeback: fix memory leak in wb_queue_work()
  * net: wimax/i2400m: fix NULL-deref at probe
  * dmaengine: Fix array index out of bounds warning in __get_unmap_pool()
  * net: Resend IGMP memberships upon peer notification.
  * mlxsw: reg: Fix SPVM max record count
  * mlxsw: reg: Fix SPVMLR max record count
  * intel_th: pci: Add Gemini Lake support
  * openrisc: fix issue handling 8 byte get_user calls
  * scsi: hpsa: update check for logical volume status
  * scsi: hpsa: limit outstanding rescans
  * fjes: Fix wrong netdevice feature flags
  * drm/radeon/si: add dpm quirk for Oland
  * sched/deadline: Make sure the replenishment timer fires in the next period
  * sched/deadline: Throttle a constrained deadline task activated after the 
deadline
  * sched/deadline: Use deadline instead of period when calculating overflow
  * mmc: mediatek: Fixed bug where clock frequency could be set wrong
  * drm/radeon: reinstate oland workaround for sclk
  * afs: Fix missing put_page()
  * afs: Populate group ID from vnode status
  * afs: Adjust mode bits processing
  * afs: Flush outstanding writes when an fd is closed
  * afs: Migrate vlocation fields to 64-bit
  * afs: Prevent callback expiry timer overflow
  * afs: Fix the maths in afs_fs_store_data()
  * afs: Populate and use client modification time
  * afs: Fix page leak in afs_write_begin()
  * afs: Fix afs_kill_pages()
  * net/mlx4_core: Avoid delays during VF driver device shutdown
  * perf symbols: Fix symbols__fixup_end heuristic for corner cases
  * efi/esrt: Cleanup bad memory map log messages
  * NFSv4.1 respect server's max size in CREATE_SESSION
  * btrfs: add missing memset while reading compressed inline extents
  * target: Use system workqueue for ALUA transitions
  * target: fix ALUA transition timeout handling
  * target: fix race during implicit transition work flushes
  * sfc: don't warn on successful change of MAC
  * fbdev: controlfb: Add missing modes to fix out of bounds access
  * video: udlfb: Fix read EDID timeout
  * video: fbdev: au1200fb: Release some resources if a memory allocation fails
  * video: fbdev: au1200fb: Return an error code if a memory allocation fails
  * rtc: pcf8563: fix output clock rate
  * dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type
  * PCI/PME: Handle invalid data when reading Root Status
  * powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo
  * netfilter: ipvs: Fix inappropriate output of procfs
  * powerpc/opal: Fix EBUSY bug in acquiring tokens
  * powerpc/ipic: Fix status get and status clear
  * target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()
  * iscsi-target: fix memory leak in lio_target_tiqn_addtpg()
  * target:fix condition return in core_pr_dump_initiator_port()
  * target/file: Do not return error for UNMAP if length is zero
  * arm-ccn: perf: Prevent module unload while PMU is in use
  * crypto: tcrypt - fix buffer lengths in test_aead_speed()
  * mm: Handle 0 flags in _calc_vm_trans() macro
  * clk: mediatek: add the option for determining PLL source clock
  * clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o VPU
  * clk: tegra: Fix cclk_lp divisor register
  * ppp: Destroy the mutex when cleanup
  * thermal/drivers/step_wise: Fix temperature regulation misbehavior
  * GFS2: Take inode off order_write list when setting jdata flag
  * bcache: explicitly destroy mutex while exiting
  * bcache: fix wrong cache_misses statistics
  * l2tp: cleanup l2tp_tunnel_delete calls
  * xfs: fix log block underflow during recovery cycle verification
  * xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real
  * PCI: Detach driver before procfs & sysfs teardown on device remove
  * scsi: hpsa: cleanup sas_phy structures in sysfs when unloading
  * scsi: hpsa: destroy sas transport properties before scsi_host
  * powerpc/perf/hv-24x7: Fix incorrect comparison in memord
  * tty fix oops when rmmod 8250
  * usb: musb: da8xx: fix babble condition handling
  * pinctrl: adi2: Fix Kconfig build problem
  * raid5: Set R5_Expanded on parity devices as well as data.
  * scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry
  * vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend
  * scsi: sd: change manage_start_stop to bool in sysfs interface
  * scsi: sd: change allow_restart to bool in sysfs interface
  * scsi: bfa: integer overflow in debugfs
  * udf: Avoid overflow when session starts at large offset
  * macvlan: Only deliver one copy of the frame to the macvlan interface
  * RDMA/cma: Avoid triggering undefined behavior
  * IB/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop
  * ath9k: fix tx99 potential info leak
  * Linux 4.4.107

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1745052/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to