[Xenial SRU] Xenial update: 4.4.160 upstream stable release

Stefan Bader stefan.bader at canonical.com
Fri Oct 19 11:38:29 UTC 2018


https://bugs.launchpad.net/ubuntu/xenial/+source/linux/+bug/1798770

Modified "floppy: Do not copy a kernel pointer to user memory in
FDGETPRM ioctl" to only make the change for the "too long line" that
got added by upstream. Otherwise we already carry the change for
CVE-2018-7755.

Modified "arm64: cpufeature: Track 32bit EL0 support" to make up for
us already having an additional feature defined.

Did replace the SAUCE patch we had for "media: uvcvideo: Support
realtek's UVC 1.5 device" by this upstream stable version.

-Stefan

---

The following changes since commit 4c45702457361c276979b7589b51f0ec926811af:

  Linux 4.4.159 (2018-10-18 17:58:25 +0200)

are available in the git repository at:

  https://git.launchpad.net/~smb/+git/linux-xenial stable-4.4

for you to fetch changes up to 17deef4a60946f73a6e8d4b748d37e9f9947cced:

  Linux 4.4.160 (2018-10-19 11:41:35 +0200)

----------------------------------------------------------------
Aaron Ma (1):
      Input: elantech - enable middle button of touchpad on ThinkPad P72

Akinobu Mita (2):
      media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
      media: soc_camera: ov772x: correct setting of banding filter

Alan Stern (3):
      USB: fix error handling in usb_driver_claim_interface()
      USB: handle NULL config in usb_find_alt_setting()
      USB: remove LPM management from usb_driver_claim_interface()

Alexey Dobriyan (1):
      slub: make ->cpu_partial unsigned int

Alexey Kardashevskiy (1):
      powerpc/powernv/ioda2: Reduce upper limit for DMA window size

Alexey Khoroshilov (1):
      media: fsl-viu: fix error handling in viu_of_probe()

Alistair Strachan (1):
      staging: android: ashmem: Fix mmap size validation

Andy Shevchenko (1):
      x86/tsc: Add missing header to tsc_msr.c

Andy Whitcroft (1):
      floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl

Anson Huang (1):
      thermal: of-thermal: disable passive polling when thermal zone is disabled

Anton Vasilyev (2):
      uwb: hwa-rc: fix memory leak at probe
      usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]

Arunk Khandavalli (1):
      cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE

Ashish Samant (1):
      ocfs2: fix locking for res->tracking and dlm->tracking_list

Aurelien Aptel (1):
      smb2: fix missing files in root share directory listing

Bart Van Assche (3):
      scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size
      scsi: klist: Make it safe to use klists in atomic context
      IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop

Ben Greear (1):
      ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock

Ben Hutchings (1):
      USB: yurex: Check for truncation in yurex_read()

Ben Skeggs (1):
      drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS

Bo Chen (2):
      e1000: check on netif_running() before calling e1000_up()
      e1000: ensure to free old tx/rx rings in set_ringparam()

Breno Leitao (1):
      scsi: ibmvscsi: Improve strings handling

Christophe Leroy (1):
      serial: cpm_uart: return immediately from console poll

Colin Ian King (1):
      staging: rts5208: fix missing error check on call to rtsx_write_register

Dan Carpenter (5):
      vmci: type promotion bug in qp_host_get_user_memory()
      rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
      hwmon: (adt7475) Make adt7475_read_word() return errors
      cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
      cifs: read overflow in is_valid_oplock_break()

Dan Williams (1):
      x86/numa_emulation: Fix emulated-to-physical node mapping

Danek Duvall (2):
      mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
      mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X

Daniel Black (1):
      mm: madvise(MADV_DODUMP): allow hugetlbfs pages

Dave Martin (1):
      arm64: KVM: Tighten guest core register access from userspace

Emmanuel Grumbach (2):
      mac80211: fix a race between restart and CSA flows
      mac80211: shorten the IBSS debug messages

Ethan Tuttle (1):
      ARM: mvebu: declare asm symbols as character arrays in pmsu.c

Gaku Inami (1):
      spi: sh-msiof: Fix invalid SPI use during system suspend

Geert Uytterhoeven (2):
      spi: rspi: Fix invalid SPI use during system suspend
      spi: rspi: Fix interrupted DMA transfers

Greg Kroah-Hartman (1):
      Linux 4.4.160

Guoqing Jiang (1):
      md-cluster: clear another node's suspend_area after the copy is finished

Hari Bathini (1):
      powerpc/kdump: Handle crashkernel memory reservation failure

Hiromitsu Yamasaki (1):
      spi: sh-msiof: Fix handling of write value for SISTR register

Huazhong Tan (1):
      net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES

Ilan Peer (1):
      mac80211: Fix station bandwidth setting after channel switch

J. Bruce Fields (1):
      nfsd: fix corrupted reply to badly ordered compound

Jan Beulich (1):
      x86/entry/64: Add two more instruction suffixes

Jann Horn (2):
      RDMA/ucma: check fd type in ucma_migrate_id()
      proc: restrict kernel stack dumps to root

Javier Martinez Canillas (1):
      media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data

Jessica Yu (1):
      module: exclude SHN_UNDEF symbols from kallsyms api

Jia-Ju Bai (1):
      net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()

Jian-Hong Pan (1):
      Bluetooth: Add a new Realtek 8723DE ID 0bda:b009

Joe Thornber (1):
      dm thin metadata: try to avoid ever aborting transactions

Johan Hovold (2):
      USB: serial: kobil_sct: fix modem-status error handling
      EDAC, i7core: Fix memleaks and use-after-free on probe and remove

Jon Kuhn (1):
      fs/cifs: don't translate SFM_SLASH (U+F026) to backslash

Josh Abraham (1):
      xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage

Julia Lawall (1):
      usb: wusbcore: security: cast sizeof to int for comparison

Julian Wiedmann (1):
      s390/qeth: don't dump past end of unknown HW header

Kai-Heng Feng (3):
      ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
      r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
      ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760

Kevin Hilman (1):
      ARM: dts: dra7: fix DCAN node addresses

Leonard Crestez (1):
      crypto: mxs-dcp - Fix wait logic on chan threads

Liam Girdwood (1):
      ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs

Lothar Felten (1):
      hwmon: (ina2xx) fix sysfs shunt resistor read access

Marc Zyngier (1):
      arm64: KVM: Sanitize PSTATE.M when being set from userspace

Marcel Ziswiler (1):
      spi: tegra20-slink: explicitly enable/disable clock

Masahiro Yamada (2):
      i2c: uniphier: issue STOP only for last message or I2C_M_STOP
      i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP

Matt Ranostay (1):
      tsl2550: fix lux1_input error in low light

Michael Hennerich (1):
      gpio: adp5588: Fix sleep-in-atomic-context bug

Michael Scott (1):
      6lowpan: iphc: reset mac_header after decompress to fix panic

Miguel Ojeda (1):
      arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"

Mika Westerberg (1):
      i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus

Mike Snitzer (1):
      dm thin metadata: fix __udivdi3 undefined on 32-bit

Naoya Horiguchi (2):
      tools/vm/slabinfo.c: fix sign-compare warning
      tools/vm/page-types.c: fix "defined but not used" warning

Nicholas Mc Guire (1):
      ALSA: snd-aoa: add of_node_put() in error path

Olaf Hering (1):
      xen: avoid crash in disable_hotplug_cpu

Oliver Neukum (2):
      USB: usbdevfs: sanitize flags more
      USB: usbdevfs: restore warning for nonsensical flags

Paul Mackerras (1):
      KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function

Randy Dunlap (2):
      arch/hexagon: fix kernel/dma.c build warning
      hexagon: modify ffs() and fls() to return int

Sakari Ailus (1):
      media: v4l: event: Prevent freeing event subscriptions while accessed

Sandipan Das (1):
      perf probe powerpc: Ignore SyS symbols irrespective of endianness

Sebastian Andrzej Siewior (1):
      Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()"

Stafford Horne (1):
      crypto: skcipher - Fix -Wstringop-truncation warnings

Stefan Bader (1):
      Revert "UBUNTU: SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device"

Stephen Rothwell (1):
      fs/cifs: suppress a string overflow warning

Sudeep Holla (1):
      power: vexpress: fix corruption in notifier registration

Suzuki K Poulose (1):
      arm64: cpufeature: Track 32bit EL0 support

Sylwester Nawrocki (1):
      media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()

Theodore Ts'o (1):
      ext4: never move the system.data xattr out of the inode body

Thomas Gleixner (1):
      alarmtimer: Prevent overflow for relative nanosleep

Tony Lindgren (1):
      wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()

Uwe Kleine-K├Ânig (1):
      serial: imx: restore handshaking irq for imx1

Vasily Gorbik (1):
      s390/extmem: fix gcc 8 stringop-overflow warning

Vincent Pelletier (1):
      scsi: target: iscsi: Use bin2hex instead of a re-implementation

Vitaly Kuznetsov (1):
      xen/manage: don't complain about an empty value in control/sysrq node

Xiao Ni (1):
      RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0

Yuan-Chi Pang (1):
      mac80211: mesh: fix HWMP sequence numbering to follow standard

Zhouyang Jia (4):
      drivers/tty: add error handling for pcmcia_loop_config
      media: tm6000: add error handling for dvb_register_adapter
      HID: hid-ntrig: add error handling for sysfs_create_group
      scsi: bnx2i: add error handling for ioremap_nocache

ming_qian (1):
      media: uvcvideo: Support realtek's UVC 1.5 device

 Documentation/hwmon/ina2xx                         |  2 +-
 Makefile                                           |  2 +-
 arch/arm/boot/dts/dra7.dtsi                        |  4 +-
 arch/arm/mach-mvebu/pmsu.c                         |  6 +-
 arch/arm64/include/asm/cpufeature.h                |  8 ++-
 arch/arm64/include/asm/jump_label.h                |  4 +-
 arch/arm64/include/asm/kvm_emulate.h               |  5 ++
 arch/arm64/include/asm/sysreg.h                    |  1 +
 arch/arm64/kernel/cpufeature.c                     |  8 +++
 arch/arm64/kvm/guest.c                             | 55 +++++++++++++++-
 arch/hexagon/include/asm/bitops.h                  |  4 +-
 arch/hexagon/kernel/dma.c                          |  2 +-
 arch/powerpc/kernel/machine_kexec.c                |  7 ++-
 arch/powerpc/kvm/book3s_64_mmu_hv.c                |  2 +-
 arch/powerpc/platforms/powernv/pci-ioda.c          |  2 +-
 arch/s390/mm/extmem.c                              |  4 +-
 arch/x86/entry/entry_64.S                          |  4 +-
 arch/x86/kernel/tsc_msr.c                          |  1 +
 arch/x86/mm/numa_emulation.c                       |  2 +-
 crypto/ablkcipher.c                                |  2 +
 crypto/blkcipher.c                                 |  1 +
 drivers/block/floppy.c                             |  3 +-
 drivers/bluetooth/btusb.c                          |  1 +
 drivers/crypto/mxs-dcp.c                           | 53 +++++++++-------
 drivers/edac/i7core_edac.c                         | 22 ++++---
 drivers/gpio/gpio-adp5588.c                        | 24 +++++--
 .../gpu/drm/nouveau/nvkm/subdev/devinit/gm204.c    |  3 +-
 drivers/hid/hid-ntrig.c                            |  2 +
 drivers/hwmon/adt7475.c                            | 14 +++--
 drivers/hwmon/ina2xx.c                             | 13 +++-
 drivers/i2c/busses/i2c-i801.c                      |  9 ++-
 drivers/i2c/busses/i2c-uniphier-f.c                |  7 +--
 drivers/i2c/busses/i2c-uniphier.c                  |  7 +--
 drivers/infiniband/core/ucma.c                     |  6 ++
 drivers/infiniband/ulp/srp/ib_srp.c                |  6 +-
 drivers/input/mouse/elantech.c                     |  2 +
 drivers/md/dm-thin-metadata.c                      | 34 +++++++++-
 drivers/md/dm-thin.c                               | 73 +++++++++++++++++++---
 drivers/md/md-cluster.c                            | 19 +++---
 drivers/md/raid10.c                                |  5 +-
 drivers/media/i2c/soc_camera/ov772x.c              |  2 +-
 drivers/media/platform/exynos4-is/fimc-isp-video.c | 11 +++-
 drivers/media/platform/fsl-viu.c                   | 38 ++++++-----
 drivers/media/platform/omap3isp/isp.c              |  2 +-
 drivers/media/platform/s3c-camif/camif-capture.c   |  2 +
 drivers/media/usb/tm6000/tm6000-dvb.c              |  5 ++
 drivers/media/usb/uvc/uvc_video.c                  | 28 ++++++---
 drivers/media/v4l2-core/v4l2-event.c               | 37 +++++------
 drivers/media/v4l2-core/v4l2-fh.c                  |  2 +
 drivers/misc/tsl2550.c                             |  2 +-
 drivers/misc/vmw_vmci/vmci_queue_pair.c            |  4 +-
 drivers/net/ethernet/cadence/macb.c                |  2 +-
 drivers/net/ethernet/hisilicon/hns/hnae.h          |  6 +-
 drivers/net/ethernet/intel/e1000/e1000_ethtool.c   |  7 ++-
 drivers/net/ethernet/realtek/r8169.c               |  9 ++-
 drivers/net/wireless/ath/ath10k/htt_rx.c           |  5 +-
 drivers/net/wireless/mac80211_hwsim.c              |  3 -
 drivers/net/wireless/rndis_wlan.c                  |  2 +
 drivers/net/wireless/ti/wlcore/cmd.c               |  6 ++
 drivers/power/reset/vexpress-poweroff.c            | 12 ++--
 drivers/s390/net/qeth_l2_main.c                    |  2 +-
 drivers/s390/net/qeth_l3_main.c                    |  2 +-
 drivers/scsi/bnx2i/bnx2i_hwi.c                     |  2 +
 drivers/scsi/ibmvscsi/ibmvscsi.c                   |  4 +-
 drivers/spi/spi-rspi.c                             | 34 ++++++++--
 drivers/spi/spi-sh-msiof.c                         | 28 ++++++++-
 drivers/spi/spi-tegra20-slink.c                    | 31 ++++++---
 drivers/staging/android/ashmem.c                   |  6 ++
 drivers/staging/rts5208/sd.c                       |  2 +-
 drivers/target/iscsi/iscsi_target_auth.c           | 15 +----
 drivers/target/iscsi/iscsi_target_tpg.c            |  3 +-
 drivers/thermal/of-thermal.c                       |  7 ++-
 drivers/tty/serial/8250/serial_cs.c                |  6 +-
 drivers/tty/serial/cpm_uart/cpm_uart_core.c        | 10 ++-
 drivers/tty/serial/imx.c                           |  8 +++
 drivers/usb/class/cdc-wdm.c                        |  2 +-
 drivers/usb/core/devio.c                           | 24 ++++++-
 drivers/usb/core/driver.c                          | 28 ++++-----
 drivers/usb/core/usb.c                             |  2 +
 drivers/usb/gadget/udc/fotg210-udc.c               | 15 +++--
 drivers/usb/misc/yurex.c                           |  3 +
 drivers/usb/serial/kobil_sct.c                     | 12 +++-
 drivers/usb/wusbcore/security.c                    |  2 +-
 drivers/uwb/hwa-rc.c                               |  1 +
 drivers/xen/cpu_hotplug.c                          | 15 ++---
 drivers/xen/events/events_base.c                   |  2 +-
 drivers/xen/manage.c                               |  6 +-
 fs/cifs/cifs_unicode.c                             |  3 -
 fs/cifs/cifssmb.c                                  | 11 +++-
 fs/cifs/misc.c                                     |  8 +++
 fs/cifs/smb2ops.c                                  |  2 +-
 fs/ext4/xattr.c                                    |  5 ++
 fs/nfsd/nfs4proc.c                                 |  1 +
 fs/ocfs2/dlm/dlmmaster.c                           |  4 +-
 fs/proc/base.c                                     | 14 +++++
 include/linux/platform_data/ina2xx.h               |  2 +-
 include/linux/slub_def.h                           |  3 +-
 include/media/v4l2-fh.h                            |  1 +
 kernel/module.c                                    |  6 +-
 kernel/time/alarmtimer.c                           |  3 +-
 lib/klist.c                                        | 10 +--
 mm/madvise.c                                       |  2 +-
 mm/slub.c                                          |  6 +-
 net/6lowpan/iphc.c                                 |  1 +
 net/mac80211/ibss.c                                | 22 +++----
 net/mac80211/main.c                                | 26 ++++++--
 net/mac80211/mesh_hwmp.c                           |  4 ++
 net/mac80211/mlme.c                                | 53 ++++++++++++++++
 net/wireless/nl80211.c                             |  1 +
 net/wireless/util.c                                |  2 +-
 sound/aoa/core/gpio-feature.c                      |  4 +-
 sound/pci/hda/hda_intel.c                          |  3 +-
 sound/pci/hda/patch_realtek.c                      |  1 +
 sound/soc/soc-dapm.c                               |  7 +++
 tools/perf/arch/powerpc/util/sym-handling.c        |  4 +-
 tools/vm/page-types.c                              |  6 --
 tools/vm/slabinfo.c                                |  4 +-
 117 files changed, 814 insertions(+), 291 deletions(-)




More information about the kernel-team mailing list