APPLIED: [Xenial SRU] Xenial update: 4.4.160 upstream stable release

Kleber Souza kleber.souza at canonical.com
Fri Oct 19 12:05:18 UTC 2018


On 10/19/18 13:38, Stefan Bader wrote:
> https://bugs.launchpad.net/ubuntu/xenial/+source/linux/+bug/1798770
> 
> Modified "floppy: Do not copy a kernel pointer to user memory in
> FDGETPRM ioctl" to only make the change for the "too long line" that
> got added by upstream. Otherwise we already carry the change for
> CVE-2018-7755.
> 
> Modified "arm64: cpufeature: Track 32bit EL0 support" to make up for
> us already having an additional feature defined.
> 
> Did replace the SAUCE patch we had for "media: uvcvideo: Support
> realtek's UVC 1.5 device" by this upstream stable version.
> 
> -Stefan
> 
> ---
> 
> The following changes since commit 4c45702457361c276979b7589b51f0ec926811af:
> 
>   Linux 4.4.159 (2018-10-18 17:58:25 +0200)
> 
> are available in the git repository at:
> 
>   https://git.launchpad.net/~smb/+git/linux-xenial stable-4.4
> 
> for you to fetch changes up to 17deef4a60946f73a6e8d4b748d37e9f9947cced:
> 
>   Linux 4.4.160 (2018-10-19 11:41:35 +0200)
> 
> ----------------------------------------------------------------
> Aaron Ma (1):
>       Input: elantech - enable middle button of touchpad on ThinkPad P72
> 
> Akinobu Mita (2):
>       media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
>       media: soc_camera: ov772x: correct setting of banding filter
> 
> Alan Stern (3):
>       USB: fix error handling in usb_driver_claim_interface()
>       USB: handle NULL config in usb_find_alt_setting()
>       USB: remove LPM management from usb_driver_claim_interface()
> 
> Alexey Dobriyan (1):
>       slub: make ->cpu_partial unsigned int
> 
> Alexey Kardashevskiy (1):
>       powerpc/powernv/ioda2: Reduce upper limit for DMA window size
> 
> Alexey Khoroshilov (1):
>       media: fsl-viu: fix error handling in viu_of_probe()
> 
> Alistair Strachan (1):
>       staging: android: ashmem: Fix mmap size validation
> 
> Andy Shevchenko (1):
>       x86/tsc: Add missing header to tsc_msr.c
> 
> Andy Whitcroft (1):
>       floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl
> 
> Anson Huang (1):
>       thermal: of-thermal: disable passive polling when thermal zone is disabled
> 
> Anton Vasilyev (2):
>       uwb: hwa-rc: fix memory leak at probe
>       usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]
> 
> Arunk Khandavalli (1):
>       cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
> 
> Ashish Samant (1):
>       ocfs2: fix locking for res->tracking and dlm->tracking_list
> 
> Aurelien Aptel (1):
>       smb2: fix missing files in root share directory listing
> 
> Bart Van Assche (3):
>       scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size
>       scsi: klist: Make it safe to use klists in atomic context
>       IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
> 
> Ben Greear (1):
>       ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
> 
> Ben Hutchings (1):
>       USB: yurex: Check for truncation in yurex_read()
> 
> Ben Skeggs (1):
>       drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
> 
> Bo Chen (2):
>       e1000: check on netif_running() before calling e1000_up()
>       e1000: ensure to free old tx/rx rings in set_ringparam()
> 
> Breno Leitao (1):
>       scsi: ibmvscsi: Improve strings handling
> 
> Christophe Leroy (1):
>       serial: cpm_uart: return immediately from console poll
> 
> Colin Ian King (1):
>       staging: rts5208: fix missing error check on call to rtsx_write_register
> 
> Dan Carpenter (5):
>       vmci: type promotion bug in qp_host_get_user_memory()
>       rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
>       hwmon: (adt7475) Make adt7475_read_word() return errors
>       cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
>       cifs: read overflow in is_valid_oplock_break()
> 
> Dan Williams (1):
>       x86/numa_emulation: Fix emulated-to-physical node mapping
> 
> Danek Duvall (2):
>       mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
>       mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
> 
> Daniel Black (1):
>       mm: madvise(MADV_DODUMP): allow hugetlbfs pages
> 
> Dave Martin (1):
>       arm64: KVM: Tighten guest core register access from userspace
> 
> Emmanuel Grumbach (2):
>       mac80211: fix a race between restart and CSA flows
>       mac80211: shorten the IBSS debug messages
> 
> Ethan Tuttle (1):
>       ARM: mvebu: declare asm symbols as character arrays in pmsu.c
> 
> Gaku Inami (1):
>       spi: sh-msiof: Fix invalid SPI use during system suspend
> 
> Geert Uytterhoeven (2):
>       spi: rspi: Fix invalid SPI use during system suspend
>       spi: rspi: Fix interrupted DMA transfers
> 
> Greg Kroah-Hartman (1):
>       Linux 4.4.160
> 
> Guoqing Jiang (1):
>       md-cluster: clear another node's suspend_area after the copy is finished
> 
> Hari Bathini (1):
>       powerpc/kdump: Handle crashkernel memory reservation failure
> 
> Hiromitsu Yamasaki (1):
>       spi: sh-msiof: Fix handling of write value for SISTR register
> 
> Huazhong Tan (1):
>       net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
> 
> Ilan Peer (1):
>       mac80211: Fix station bandwidth setting after channel switch
> 
> J. Bruce Fields (1):
>       nfsd: fix corrupted reply to badly ordered compound
> 
> Jan Beulich (1):
>       x86/entry/64: Add two more instruction suffixes
> 
> Jann Horn (2):
>       RDMA/ucma: check fd type in ucma_migrate_id()
>       proc: restrict kernel stack dumps to root
> 
> Javier Martinez Canillas (1):
>       media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
> 
> Jessica Yu (1):
>       module: exclude SHN_UNDEF symbols from kallsyms api
> 
> Jia-Ju Bai (1):
>       net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
> 
> Jian-Hong Pan (1):
>       Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
> 
> Joe Thornber (1):
>       dm thin metadata: try to avoid ever aborting transactions
> 
> Johan Hovold (2):
>       USB: serial: kobil_sct: fix modem-status error handling
>       EDAC, i7core: Fix memleaks and use-after-free on probe and remove
> 
> Jon Kuhn (1):
>       fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
> 
> Josh Abraham (1):
>       xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
> 
> Julia Lawall (1):
>       usb: wusbcore: security: cast sizeof to int for comparison
> 
> Julian Wiedmann (1):
>       s390/qeth: don't dump past end of unknown HW header
> 
> Kai-Heng Feng (3):
>       ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge
>       r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
>       ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
> 
> Kevin Hilman (1):
>       ARM: dts: dra7: fix DCAN node addresses
> 
> Leonard Crestez (1):
>       crypto: mxs-dcp - Fix wait logic on chan threads
> 
> Liam Girdwood (1):
>       ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs
> 
> Lothar Felten (1):
>       hwmon: (ina2xx) fix sysfs shunt resistor read access
> 
> Marc Zyngier (1):
>       arm64: KVM: Sanitize PSTATE.M when being set from userspace
> 
> Marcel Ziswiler (1):
>       spi: tegra20-slink: explicitly enable/disable clock
> 
> Masahiro Yamada (2):
>       i2c: uniphier: issue STOP only for last message or I2C_M_STOP
>       i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP
> 
> Matt Ranostay (1):
>       tsl2550: fix lux1_input error in low light
> 
> Michael Hennerich (1):
>       gpio: adp5588: Fix sleep-in-atomic-context bug
> 
> Michael Scott (1):
>       6lowpan: iphc: reset mac_header after decompress to fix panic
> 
> Miguel Ojeda (1):
>       arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"
> 
> Mika Westerberg (1):
>       i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
> 
> Mike Snitzer (1):
>       dm thin metadata: fix __udivdi3 undefined on 32-bit
> 
> Naoya Horiguchi (2):
>       tools/vm/slabinfo.c: fix sign-compare warning
>       tools/vm/page-types.c: fix "defined but not used" warning
> 
> Nicholas Mc Guire (1):
>       ALSA: snd-aoa: add of_node_put() in error path
> 
> Olaf Hering (1):
>       xen: avoid crash in disable_hotplug_cpu
> 
> Oliver Neukum (2):
>       USB: usbdevfs: sanitize flags more
>       USB: usbdevfs: restore warning for nonsensical flags
> 
> Paul Mackerras (1):
>       KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function
> 
> Randy Dunlap (2):
>       arch/hexagon: fix kernel/dma.c build warning
>       hexagon: modify ffs() and fls() to return int
> 
> Sakari Ailus (1):
>       media: v4l: event: Prevent freeing event subscriptions while accessed
> 
> Sandipan Das (1):
>       perf probe powerpc: Ignore SyS symbols irrespective of endianness
> 
> Sebastian Andrzej Siewior (1):
>       Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()"
> 
> Stafford Horne (1):
>       crypto: skcipher - Fix -Wstringop-truncation warnings
> 
> Stefan Bader (1):
>       Revert "UBUNTU: SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device"
> 
> Stephen Rothwell (1):
>       fs/cifs: suppress a string overflow warning
> 
> Sudeep Holla (1):
>       power: vexpress: fix corruption in notifier registration
> 
> Suzuki K Poulose (1):
>       arm64: cpufeature: Track 32bit EL0 support
> 
> Sylwester Nawrocki (1):
>       media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
> 
> Theodore Ts'o (1):
>       ext4: never move the system.data xattr out of the inode body
> 
> Thomas Gleixner (1):
>       alarmtimer: Prevent overflow for relative nanosleep
> 
> Tony Lindgren (1):
>       wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()
> 
> Uwe Kleine-K├Ânig (1):
>       serial: imx: restore handshaking irq for imx1
> 
> Vasily Gorbik (1):
>       s390/extmem: fix gcc 8 stringop-overflow warning
> 
> Vincent Pelletier (1):
>       scsi: target: iscsi: Use bin2hex instead of a re-implementation
> 
> Vitaly Kuznetsov (1):
>       xen/manage: don't complain about an empty value in control/sysrq node
> 
> Xiao Ni (1):
>       RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
> 
> Yuan-Chi Pang (1):
>       mac80211: mesh: fix HWMP sequence numbering to follow standard
> 
> Zhouyang Jia (4):
>       drivers/tty: add error handling for pcmcia_loop_config
>       media: tm6000: add error handling for dvb_register_adapter
>       HID: hid-ntrig: add error handling for sysfs_create_group
>       scsi: bnx2i: add error handling for ioremap_nocache
> 
> ming_qian (1):
>       media: uvcvideo: Support realtek's UVC 1.5 device
> 
>  Documentation/hwmon/ina2xx                         |  2 +-
>  Makefile                                           |  2 +-
>  arch/arm/boot/dts/dra7.dtsi                        |  4 +-
>  arch/arm/mach-mvebu/pmsu.c                         |  6 +-
>  arch/arm64/include/asm/cpufeature.h                |  8 ++-
>  arch/arm64/include/asm/jump_label.h                |  4 +-
>  arch/arm64/include/asm/kvm_emulate.h               |  5 ++
>  arch/arm64/include/asm/sysreg.h                    |  1 +
>  arch/arm64/kernel/cpufeature.c                     |  8 +++
>  arch/arm64/kvm/guest.c                             | 55 +++++++++++++++-
>  arch/hexagon/include/asm/bitops.h                  |  4 +-
>  arch/hexagon/kernel/dma.c                          |  2 +-
>  arch/powerpc/kernel/machine_kexec.c                |  7 ++-
>  arch/powerpc/kvm/book3s_64_mmu_hv.c                |  2 +-
>  arch/powerpc/platforms/powernv/pci-ioda.c          |  2 +-
>  arch/s390/mm/extmem.c                              |  4 +-
>  arch/x86/entry/entry_64.S                          |  4 +-
>  arch/x86/kernel/tsc_msr.c                          |  1 +
>  arch/x86/mm/numa_emulation.c                       |  2 +-
>  crypto/ablkcipher.c                                |  2 +
>  crypto/blkcipher.c                                 |  1 +
>  drivers/block/floppy.c                             |  3 +-
>  drivers/bluetooth/btusb.c                          |  1 +
>  drivers/crypto/mxs-dcp.c                           | 53 +++++++++-------
>  drivers/edac/i7core_edac.c                         | 22 ++++---
>  drivers/gpio/gpio-adp5588.c                        | 24 +++++--
>  .../gpu/drm/nouveau/nvkm/subdev/devinit/gm204.c    |  3 +-
>  drivers/hid/hid-ntrig.c                            |  2 +
>  drivers/hwmon/adt7475.c                            | 14 +++--
>  drivers/hwmon/ina2xx.c                             | 13 +++-
>  drivers/i2c/busses/i2c-i801.c                      |  9 ++-
>  drivers/i2c/busses/i2c-uniphier-f.c                |  7 +--
>  drivers/i2c/busses/i2c-uniphier.c                  |  7 +--
>  drivers/infiniband/core/ucma.c                     |  6 ++
>  drivers/infiniband/ulp/srp/ib_srp.c                |  6 +-
>  drivers/input/mouse/elantech.c                     |  2 +
>  drivers/md/dm-thin-metadata.c                      | 34 +++++++++-
>  drivers/md/dm-thin.c                               | 73 +++++++++++++++++++---
>  drivers/md/md-cluster.c                            | 19 +++---
>  drivers/md/raid10.c                                |  5 +-
>  drivers/media/i2c/soc_camera/ov772x.c              |  2 +-
>  drivers/media/platform/exynos4-is/fimc-isp-video.c | 11 +++-
>  drivers/media/platform/fsl-viu.c                   | 38 ++++++-----
>  drivers/media/platform/omap3isp/isp.c              |  2 +-
>  drivers/media/platform/s3c-camif/camif-capture.c   |  2 +
>  drivers/media/usb/tm6000/tm6000-dvb.c              |  5 ++
>  drivers/media/usb/uvc/uvc_video.c                  | 28 ++++++---
>  drivers/media/v4l2-core/v4l2-event.c               | 37 +++++------
>  drivers/media/v4l2-core/v4l2-fh.c                  |  2 +
>  drivers/misc/tsl2550.c                             |  2 +-
>  drivers/misc/vmw_vmci/vmci_queue_pair.c            |  4 +-
>  drivers/net/ethernet/cadence/macb.c                |  2 +-
>  drivers/net/ethernet/hisilicon/hns/hnae.h          |  6 +-
>  drivers/net/ethernet/intel/e1000/e1000_ethtool.c   |  7 ++-
>  drivers/net/ethernet/realtek/r8169.c               |  9 ++-
>  drivers/net/wireless/ath/ath10k/htt_rx.c           |  5 +-
>  drivers/net/wireless/mac80211_hwsim.c              |  3 -
>  drivers/net/wireless/rndis_wlan.c                  |  2 +
>  drivers/net/wireless/ti/wlcore/cmd.c               |  6 ++
>  drivers/power/reset/vexpress-poweroff.c            | 12 ++--
>  drivers/s390/net/qeth_l2_main.c                    |  2 +-
>  drivers/s390/net/qeth_l3_main.c                    |  2 +-
>  drivers/scsi/bnx2i/bnx2i_hwi.c                     |  2 +
>  drivers/scsi/ibmvscsi/ibmvscsi.c                   |  4 +-
>  drivers/spi/spi-rspi.c                             | 34 ++++++++--
>  drivers/spi/spi-sh-msiof.c                         | 28 ++++++++-
>  drivers/spi/spi-tegra20-slink.c                    | 31 ++++++---
>  drivers/staging/android/ashmem.c                   |  6 ++
>  drivers/staging/rts5208/sd.c                       |  2 +-
>  drivers/target/iscsi/iscsi_target_auth.c           | 15 +----
>  drivers/target/iscsi/iscsi_target_tpg.c            |  3 +-
>  drivers/thermal/of-thermal.c                       |  7 ++-
>  drivers/tty/serial/8250/serial_cs.c                |  6 +-
>  drivers/tty/serial/cpm_uart/cpm_uart_core.c        | 10 ++-
>  drivers/tty/serial/imx.c                           |  8 +++
>  drivers/usb/class/cdc-wdm.c                        |  2 +-
>  drivers/usb/core/devio.c                           | 24 ++++++-
>  drivers/usb/core/driver.c                          | 28 ++++-----
>  drivers/usb/core/usb.c                             |  2 +
>  drivers/usb/gadget/udc/fotg210-udc.c               | 15 +++--
>  drivers/usb/misc/yurex.c                           |  3 +
>  drivers/usb/serial/kobil_sct.c                     | 12 +++-
>  drivers/usb/wusbcore/security.c                    |  2 +-
>  drivers/uwb/hwa-rc.c                               |  1 +
>  drivers/xen/cpu_hotplug.c                          | 15 ++---
>  drivers/xen/events/events_base.c                   |  2 +-
>  drivers/xen/manage.c                               |  6 +-
>  fs/cifs/cifs_unicode.c                             |  3 -
>  fs/cifs/cifssmb.c                                  | 11 +++-
>  fs/cifs/misc.c                                     |  8 +++
>  fs/cifs/smb2ops.c                                  |  2 +-
>  fs/ext4/xattr.c                                    |  5 ++
>  fs/nfsd/nfs4proc.c                                 |  1 +
>  fs/ocfs2/dlm/dlmmaster.c                           |  4 +-
>  fs/proc/base.c                                     | 14 +++++
>  include/linux/platform_data/ina2xx.h               |  2 +-
>  include/linux/slub_def.h                           |  3 +-
>  include/media/v4l2-fh.h                            |  1 +
>  kernel/module.c                                    |  6 +-
>  kernel/time/alarmtimer.c                           |  3 +-
>  lib/klist.c                                        | 10 +--
>  mm/madvise.c                                       |  2 +-
>  mm/slub.c                                          |  6 +-
>  net/6lowpan/iphc.c                                 |  1 +
>  net/mac80211/ibss.c                                | 22 +++----
>  net/mac80211/main.c                                | 26 ++++++--
>  net/mac80211/mesh_hwmp.c                           |  4 ++
>  net/mac80211/mlme.c                                | 53 ++++++++++++++++
>  net/wireless/nl80211.c                             |  1 +
>  net/wireless/util.c                                |  2 +-
>  sound/aoa/core/gpio-feature.c                      |  4 +-
>  sound/pci/hda/hda_intel.c                          |  3 +-
>  sound/pci/hda/patch_realtek.c                      |  1 +
>  sound/soc/soc-dapm.c                               |  7 +++
>  tools/perf/arch/powerpc/util/sym-handling.c        |  4 +-
>  tools/vm/page-types.c                              |  6 --
>  tools/vm/slabinfo.c                                |  4 +-
>  117 files changed, 814 insertions(+), 291 deletions(-)
> 

Applied to xenial/master-next branch.

Thanks,
Kleber




More information about the kernel-team mailing list