Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
4.19.14 upstream stable release
from git://git.kernel.org/
Linux 4.19.14
MIPS: Only include mmzone.h when CONFIG_NEED_MULTIPLE_NODES=y
spi: bcm2835: Unbreak the build of esoteric configs
tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x
tpm: tpm_try_transmit() refactor error flow.
arm64: compat: Avoid sending SIGILL for unallocated syscall numbers
iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes
KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
KVM: arm/arm64: vgic-v2: Set active_source to 0 when restoring state
KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
KVM: arm/arm64: vgic: Do not cond_resched_lock() with IRQs disabled
rtc: m41t80: Correct alarm month range with RTC reads
ARM: dts: exynos: Specify I2S assigned clocks in proper node
arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3
PPIs/SGIs
arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
smb3: fix large reads on encrypted connections
CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem
MIPS: Fix a R10000_LLSC_WAR logic in atomic.h
MIPS: OCTEON: mark RGMII interface disabled on OCTEON III
MIPS: Expand MIPS32 ASIDs to 64 bits
MIPS: Align kernel load address to 64KB
MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3
MIPS: math-emu: Write-protect delay slot emulation pages
tools lib traceevent: Fix processing of dereferenced args in bprintk events
media: v4l2-tpg: array index could become negative
media: vb2: check memory model for VIDIOC_CREATE_BUFS
media: vivid: free bitmap_cap when updating std/timings/etc.
media: imx274: fix stack corruption in imx274_read_reg
media: rc: cec devices do not have a lirc chardev
media: cec-pin: fix broken tx_ignore_nack_until_eom error injection
media: cec: keep track of outstanding transmits
serial: uartps: Fix interrupt mask issue to handle the RX interrupts properly
f2fs: sanity check of xattr entry size
f2fs: fix validation of the block count in sanity_check_raw_super
f2fs: read page index before freeing
dax: Use non-exclusive wait in wait_entry_unlocked()
dax: Don't access a freed inode
powerpc/tm: Unset MSR[TS] if not recheckpointing
brcmfmac: Fix out of bounds memory access during fw load
brcmfmac: fix roamoff=1 modparam
Btrfs: send, fix race with transaction commits that create snapshots
btrfs: run delayed items before dropping the snapshot
Btrfs: fix fsync of files with multiple hard links in new directories
btrfs: skip file_extent generation check for free_space_inode in
run_delalloc_nocow
btrfs: dev-replace: go back to suspend state if another EXCL_OP is running
btrfs: dev-replace: go back to suspended state if target device is missing
cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.
cgroup: fix CSS_TASK_ITER_PROCS
crypto: cfb - fix decryption
crypto: testmgr - add AES-CFB tests
crypto: chcr - small packet Tx stalls the queue
crypto: cavium/nitrox - fix a DMA pool free failure
clk: sunxi-ng: Use u64 for calculation of NM rate
clk: rockchip: fix typo in rk3188 spdif_frac parent
spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode
spi: bcm2835: Fix book-keeping of DMA termination
spi: bcm2835: Fix race on DMA termination
ext4: check for shutdown and r/o file system in ext4_write_inode()
ext4: force inode writes when nfsd calls commit_metadata()
ext4: avoid declaring fs inconsistent due to invalid file handles
ext4: include terminating u32 in size of xattr entries when expanding inodes
ext4: fix EXT4_IOC_GROUP_ADD ioctl
ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
ext4: fix possible use after free in ext4_quota_enable
ext4: add ext4_sb_bread() to disambiguate ENOMEM cases
ocxl: Fix endiannes bug in read_afu_name()
ocxl: Fix endiannes bug in ocxl_link_update_pe()
perf env: Also consider env->arch == NULL as local operation
perf pmu: Suppress potential format-truncation warning
perf script: Use fallbacks for branch stacks
perf tools: Use fallback for sample_addr_correlates_sym() cases
perf thread: Add fallback functions for cases where cpumode is insufficient
perf machine: Record if a arch has a single user/kernel address space
clocksource/drivers/arc_timer: Utilize generic sched_clock
DRM: UDL: get rid of useless vblank initialization
drm/v3d: Skip debugfs dumping GCA on platforms without GCA.
platform-msi: Free descriptors in platform_msi_domain_free()
KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails
arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible
KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init()
x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off
Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G
Input: atmel_mxt_ts - don't try to free unallocated kernel memory
s390/pci: fix sleeping in atomic during hotplug
ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Gnawty
ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Clapper
staging: wilc1000: fix missing read_write setting when reading data
media: dvb-usb-v2: Fix incorrect use of transfer_flags URB_FREE_BUFFER
usb: roles: Add a description for the class to Kconfig
Revert "usb: dwc3: pci: Use devm functions to get the phy GPIOs"
usb: dwc2: disable power_down on Amlogic devices
usb: r8a66597: Fix a possible concurrency use-after-free bug in
r8a66597_endpoint_disable()
USB: serial: option: add Fibocom NL678 series
USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays
usb: dwc2: host: use hrtimer for NAK retries
ALSA: hda/tegra: clear pending irq handlers
ALSA: hda/realtek: Enable the headset mic auto detection for ASUS laptops
ALSA: firewire-lib: use the same print format for 'without_header' tracepoints
ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header'
tracepoint
ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet
ALSA: fireface: fix for state to fetch PCM frames
ALSA: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294
ALSA: hda: add mute LED support for HP EliteBook 840 G4
mtd: rawnand: omap2: Pass the parent of pdev to dma_request_chan()
mtd: rawnand: marvell: prevent timeouts on a loaded machine
mtd: atmel-quadspi: disallow building on ebsa110
powerpc/fsl: Fix spectre_v2 mitigations reporting
ALSA: emux: Fix potential Spectre v1 vulnerabilities
ALSA: pcm: Fix potential Spectre v1 vulnerability
ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
ALSA: rme9652: Fix potential Spectre v1 vulnerability
IB/hfi1: Incorrect sizing of sge for PIO will OOPs
r8169: fix WoL device wakeup enable
net: Use __kernel_clockid_t in uapi net_stamp.h
net: mvneta: fix operation for 64K PAGE_SIZE
net/mlx5e: RX, Fix wrong early return in receive queue poll
net/mlx5e: Remove unused UDP GSO remaining counter
mlxsw: core: Increase timeout during firmware flash process
qed: Fix command number mismatch between driver and the mfw
net: mvpp2: fix the phylink mode validation
net/mlx5e: RX, Verify MPWQE stride size is in range
net/mlx5e: Cancel DIM work on close SQ
mscc: Configured MAC entries should be locked.
ipv6: route: Fix return value of ip6_neigh_lookup() on neigh_create() error
nfp: flower: ensure TCP flags can be placed in IPv6 frame
net/ipv6: Fix a test against 'ipv6_find_idev()' return value
ipv6: frags: Fix bogus skb->sk in reassembled packets
net/mlx5e: Remove the false indication of software timestamping support
tipc: check group dests after tipc_wait_for_cond()
net/mlx5: Typo fix in del_sw_hw_rule
xen/netfront: tolerate frags with no data
VSOCK: Send reset control packet when socket is partially bound
vhost: make sure used idx is seen before log in vhost_add_used_n()
tipc: use lock_sock() in tipc_sk_reinit()
tipc: fix a double kfree_skb()
tipc: fix a double free in tipc_enable_bearer()
tipc: compare remote and local protocols in tipc_udp_enable()
tipc: check tsk->group in tipc_wait_for_cond()
tcp: fix a race in inet_diag_dump_icsk()
sock: Make sock->sk_stamp thread-safe
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
qmi_wwan: Add support for Fibocom NL678 series
qmi_wwan: Added support for Telit LN940 series
qmi_wwan: Added support for Fibocom NL668 series
ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
packet: validate address length if non-zero
packet: validate address length
net/wan: fix a double free in x25_asy_open_tty()
net/tls: allocate tls context using GFP_ATOMIC
net: stmmac: Fix an error code in probe()
net/smc: fix TCP fallback socket release
netrom: fix locking in nr_find_socket()
net: phy: Fix the issue that netif always links up after resuming
net: mvpp2: 10G modes aren't supported on all ports
net: macb: restart tx after tx used bit read
net: ipv4: do not handle duplicate fragments as overlapping
net/hamradio/6pack: use mod_timer() to rearm timers
net: clear skb->tstamp in forwarding paths
isdn: fix kernel-infoleak in capi_unlocked_ioctl
ip: validate header length on virtual device xmit
ipv6: tunnels: fix two use-after-free
ipv6: explicitly initialize udp6_addr in udp_sock_create6()
ipv4: Fix potential Spectre v1 vulnerability
ip6mr: Fix potential Spectre v1 vulnerability
ieee802154: lowpan_header_create check must check daddr
ibmveth: fix DMA unmap error in ibmveth_xmit_start error path
gro_cell: add napi_disable in gro_cells_destroy
ax25: fix a use-after-free in ax25_fillin_cb()
** Affects: linux (Ubuntu)
Importance: Medium
Assignee: Seth Forshee (sforshee)
Status: Fix Committed
** Affects: linux (Ubuntu Disco)
Importance: Medium
Assignee: Seth Forshee (sforshee)
Status: Fix Committed
** Tags: kernel-stable-tracking-bug
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Disco)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Disco)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Disco)
Status: New => In Progress
** Changed in: linux (Ubuntu Disco)
Assignee: (unassigned) => Seth Forshee (sforshee)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1811443
Title:
Disco update: 4.19.14 upstream stable release
Status in linux package in Ubuntu:
Fix Committed
Status in linux source package in Disco:
Fix Committed
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
4.19.14 upstream stable release
from git://git.kernel.org/
Linux 4.19.14
MIPS: Only include mmzone.h when CONFIG_NEED_MULTIPLE_NODES=y
spi: bcm2835: Unbreak the build of esoteric configs
tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x
tpm: tpm_try_transmit() refactor error flow.
arm64: compat: Avoid sending SIGILL for unallocated syscall numbers
iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes
KVM: arm/arm64: vgic: Fix off-by-one bug in vgic_get_irq()
KVM: arm/arm64: vgic-v2: Set active_source to 0 when restoring state
KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
KVM: arm/arm64: vgic: Do not cond_resched_lock() with IRQs disabled
rtc: m41t80: Correct alarm month range with RTC reads
ARM: dts: exynos: Specify I2S assigned clocks in proper node
arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3
PPIs/SGIs
arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
smb3: fix large reads on encrypted connections
CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem
MIPS: Fix a R10000_LLSC_WAR logic in atomic.h
MIPS: OCTEON: mark RGMII interface disabled on OCTEON III
MIPS: Expand MIPS32 ASIDs to 64 bits
MIPS: Align kernel load address to 64KB
MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3
MIPS: math-emu: Write-protect delay slot emulation pages
tools lib traceevent: Fix processing of dereferenced args in bprintk events
media: v4l2-tpg: array index could become negative
media: vb2: check memory model for VIDIOC_CREATE_BUFS
media: vivid: free bitmap_cap when updating std/timings/etc.
media: imx274: fix stack corruption in imx274_read_reg
media: rc: cec devices do not have a lirc chardev
media: cec-pin: fix broken tx_ignore_nack_until_eom error injection
media: cec: keep track of outstanding transmits
serial: uartps: Fix interrupt mask issue to handle the RX interrupts properly
f2fs: sanity check of xattr entry size
f2fs: fix validation of the block count in sanity_check_raw_super
f2fs: read page index before freeing
dax: Use non-exclusive wait in wait_entry_unlocked()
dax: Don't access a freed inode
powerpc/tm: Unset MSR[TS] if not recheckpointing
brcmfmac: Fix out of bounds memory access during fw load
brcmfmac: fix roamoff=1 modparam
Btrfs: send, fix race with transaction commits that create snapshots
btrfs: run delayed items before dropping the snapshot
Btrfs: fix fsync of files with multiple hard links in new directories
btrfs: skip file_extent generation check for free_space_inode in
run_delalloc_nocow
btrfs: dev-replace: go back to suspend state if another EXCL_OP is running
btrfs: dev-replace: go back to suspended state if target device is missing
cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.
cgroup: fix CSS_TASK_ITER_PROCS
crypto: cfb - fix decryption
crypto: testmgr - add AES-CFB tests
crypto: chcr - small packet Tx stalls the queue
crypto: cavium/nitrox - fix a DMA pool free failure
clk: sunxi-ng: Use u64 for calculation of NM rate
clk: rockchip: fix typo in rk3188 spdif_frac parent
spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode
spi: bcm2835: Fix book-keeping of DMA termination
spi: bcm2835: Fix race on DMA termination
ext4: check for shutdown and r/o file system in ext4_write_inode()
ext4: force inode writes when nfsd calls commit_metadata()
ext4: avoid declaring fs inconsistent due to invalid file handles
ext4: include terminating u32 in size of xattr entries when expanding inodes
ext4: fix EXT4_IOC_GROUP_ADD ioctl
ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
ext4: fix possible use after free in ext4_quota_enable
ext4: add ext4_sb_bread() to disambiguate ENOMEM cases
ocxl: Fix endiannes bug in read_afu_name()
ocxl: Fix endiannes bug in ocxl_link_update_pe()
perf env: Also consider env->arch == NULL as local operation
perf pmu: Suppress potential format-truncation warning
perf script: Use fallbacks for branch stacks
perf tools: Use fallback for sample_addr_correlates_sym() cases
perf thread: Add fallback functions for cases where cpumode is insufficient
perf machine: Record if a arch has a single user/kernel address space
clocksource/drivers/arc_timer: Utilize generic sched_clock
DRM: UDL: get rid of useless vblank initialization
drm/v3d: Skip debugfs dumping GCA on platforms without GCA.
platform-msi: Free descriptors in platform_msi_domain_free()
KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails
arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible
KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init()
x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off
Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G
Input: atmel_mxt_ts - don't try to free unallocated kernel memory
s390/pci: fix sleeping in atomic during hotplug
ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Gnawty
ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Clapper
staging: wilc1000: fix missing read_write setting when reading data
media: dvb-usb-v2: Fix incorrect use of transfer_flags URB_FREE_BUFFER
usb: roles: Add a description for the class to Kconfig
Revert "usb: dwc3: pci: Use devm functions to get the phy GPIOs"
usb: dwc2: disable power_down on Amlogic devices
usb: r8a66597: Fix a possible concurrency use-after-free bug in
r8a66597_endpoint_disable()
USB: serial: option: add Fibocom NL678 series
USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays
usb: dwc2: host: use hrtimer for NAK retries
ALSA: hda/tegra: clear pending irq handlers
ALSA: hda/realtek: Enable the headset mic auto detection for ASUS laptops
ALSA: firewire-lib: use the same print format for 'without_header' tracepoints
ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header'
tracepoint
ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet
ALSA: fireface: fix for state to fetch PCM frames
ALSA: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294
ALSA: hda: add mute LED support for HP EliteBook 840 G4
mtd: rawnand: omap2: Pass the parent of pdev to dma_request_chan()
mtd: rawnand: marvell: prevent timeouts on a loaded machine
mtd: atmel-quadspi: disallow building on ebsa110
powerpc/fsl: Fix spectre_v2 mitigations reporting
ALSA: emux: Fix potential Spectre v1 vulnerabilities
ALSA: pcm: Fix potential Spectre v1 vulnerability
ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
ALSA: rme9652: Fix potential Spectre v1 vulnerability
IB/hfi1: Incorrect sizing of sge for PIO will OOPs
r8169: fix WoL device wakeup enable
net: Use __kernel_clockid_t in uapi net_stamp.h
net: mvneta: fix operation for 64K PAGE_SIZE
net/mlx5e: RX, Fix wrong early return in receive queue poll
net/mlx5e: Remove unused UDP GSO remaining counter
mlxsw: core: Increase timeout during firmware flash process
qed: Fix command number mismatch between driver and the mfw
net: mvpp2: fix the phylink mode validation
net/mlx5e: RX, Verify MPWQE stride size is in range
net/mlx5e: Cancel DIM work on close SQ
mscc: Configured MAC entries should be locked.
ipv6: route: Fix return value of ip6_neigh_lookup() on neigh_create() error
nfp: flower: ensure TCP flags can be placed in IPv6 frame
net/ipv6: Fix a test against 'ipv6_find_idev()' return value
ipv6: frags: Fix bogus skb->sk in reassembled packets
net/mlx5e: Remove the false indication of software timestamping support
tipc: check group dests after tipc_wait_for_cond()
net/mlx5: Typo fix in del_sw_hw_rule
xen/netfront: tolerate frags with no data
VSOCK: Send reset control packet when socket is partially bound
vhost: make sure used idx is seen before log in vhost_add_used_n()
tipc: use lock_sock() in tipc_sk_reinit()
tipc: fix a double kfree_skb()
tipc: fix a double free in tipc_enable_bearer()
tipc: compare remote and local protocols in tipc_udp_enable()
tipc: check tsk->group in tipc_wait_for_cond()
tcp: fix a race in inet_diag_dump_icsk()
sock: Make sock->sk_stamp thread-safe
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
qmi_wwan: Add support for Fibocom NL678 series
qmi_wwan: Added support for Telit LN940 series
qmi_wwan: Added support for Fibocom NL668 series
ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
packet: validate address length if non-zero
packet: validate address length
net/wan: fix a double free in x25_asy_open_tty()
net/tls: allocate tls context using GFP_ATOMIC
net: stmmac: Fix an error code in probe()
net/smc: fix TCP fallback socket release
netrom: fix locking in nr_find_socket()
net: phy: Fix the issue that netif always links up after resuming
net: mvpp2: 10G modes aren't supported on all ports
net: macb: restart tx after tx used bit read
net: ipv4: do not handle duplicate fragments as overlapping
net/hamradio/6pack: use mod_timer() to rearm timers
net: clear skb->tstamp in forwarding paths
isdn: fix kernel-infoleak in capi_unlocked_ioctl
ip: validate header length on virtual device xmit
ipv6: tunnels: fix two use-after-free
ipv6: explicitly initialize udp6_addr in udp_sock_create6()
ipv4: Fix potential Spectre v1 vulnerability
ip6mr: Fix potential Spectre v1 vulnerability
ieee802154: lowpan_header_create check must check daddr
ibmveth: fix DMA unmap error in ibmveth_xmit_start error path
gro_cell: add napi_disable in gro_cells_destroy
ax25: fix a use-after-free in ax25_fillin_cb()
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1811443/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
