[SRU][Xenial][PULL] Xenial update: 4.4.167 upstream stable release (LP: #1811077)
Juerg Haefliger
juerg.haefliger at canonical.com
Thu Jan 10 07:08:39 UTC 2019
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
4.4.167 upstream stable release
from git://git.kernel.org/
Linux 4.4.167
mac80211: ignore NullFunc frames in the duplicate detection
mac80211: fix reordering of buffered broadcast packets
mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
mac80211: Clear beacon_int in ieee80211_do_stop
mac80211_hwsim: Timer should be initialized before device registered
kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
tty: serial: 8250_mtk: always resume the device in probe.
cifs: Fix separator when building path from dentry
Staging: lustre: remove two build warnings
xhci: Prevent U1/U2 link pm states if exit latency is too long
SUNRPC: Fix leak of krb5p encode pages
virtio/s390: fix race in ccw_io_helper()
virtio/s390: avoid race on vcdev->config
ALSA: pcm: Fix interval evaluation with openmin/max
ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
ALSA: pcm: Fix starvation on down_write_nonblock()
ALSA: hda: Add support for AMD Stoney Ridge
ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c
USB: check usb_get_extra_descriptor for proper size
usb: appledisplay: Add 27" Apple Cinema Display
usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
net: amd: add missing of_node_put()
iommu/vt-d: Use memunmap to free memremap
net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts
net/mlx4: Fix UBSAN warning of signed integer overflow
net/mlx4_core: Fix uninitialized variable compilation warning
net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
qed: Fix reading wrong value in loop condition
qed: Fix PTT leak in qed_drain()
bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
batman-adv: Expand merged fragment buffer for full packet
can: rcar_can: Fix erroneous registration
iommu/ipmmu-vmsa: Fix crash on early domain free
iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
usb: gadget: dummy: fix nonsensical comparisons
mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT)
mm: cleancache: fix corruption on missed inode invalidation
arc: [devboards] Add support of NFSv3 ACL
ARC: change defconfig defaults to ARCv2
Btrfs: fix use-after-free when dumping free space
btrfs: Always try all copies when reading extent buffers
Input: elan_i2c - add support for ELAN0621 touchpad
Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
Input: elan_i2c - add ELAN0620 to the ACPI table
Input: matrix_keypad - check for errors from of_get_named_gpio()
Input: xpad - quirk all PDP Xbox One gamepads
leds: leds-gpio: Fix return value check in create_gpio_led()
leds: turn off the LED and wait for completion on unregistering LED class device
leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF
kgdboc: Fix warning with module build
kgdboc: Fix restrict error
scsi: csiostor: Avoid content leaks and casts
ALSA: trident: Suppress gcc string warning
scsi: scsi_devinfo: cleanly zero-pad devinfo strings
drm/ast: Fix incorrect free on ioregs
mips: fix mips_get_syscall_arg o32 check
MIPS: ralink: Fix mt7620 nd_sd pinmux
uprobes: Fix handle_swbp() vs. unregister() + register() race once more
iser: set sector for ambiguous mr status errors
kdb: use memmove instead of overlapping memcpy
staging: rts5208: fix gcc-8 logic error warning
scsi: bfa: convert to strlcpy/strlcat
drm: gma500: fix logic error
ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
kernfs: Replace strncpy with memcpy
unifdef: use memcpy instead of strncpy
kobject: Replace strncpy with memcpy
disable stringop truncation warnings for now
exec: avoid gcc-8 warning for get_task_comm
Kbuild: suppress packed-not-aligned warning for default setting only
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
USB: usb-storage: Add new IDs to ums-realtek
btrfs: release metadata before running delayed refs
dmaengine: at_hdmac: fix module unloading
dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
ext2: fix potential use after free
ALSA: sparc: Fix invalid snd_free_pages() at error path
ALSA: control: Fix race between adding and removing a user element
ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
ALSA: wss: Fix invalid snd_free_pages() at error path
Btrfs: ensure path name is null terminated at btrfs_control_ioctl
xtensa: fix coprocessor context offset definitions
xtensa: enable coprocessors that are being flushed
kvm: mmu: Fix race in emulated page table writes
usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
s390/qeth: fix length check in SNMP processing
rapidio/rionet: do not free skb before reading its length
Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"
media: em28xx: Fix use-after-free when disconnecting
Compile-tested all architectures.
Signed-off-by: Juerg Haefliger <juergh at canonical.com>
---
The following changes since commit 52ea66521fa32dc9f11cd3b1dffa930acf2543a7:
Linux 4.4.166 (2019-01-09 11:15:50 +0100)
are available in the Git repository at:
git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.167
for you to fetch changes up to 42fe6a1871ecef2518b52b356f80f3f8e5c49309:
Linux 4.4.167 (2019-01-09 12:10:55 +0100)
----------------------------------------------------------------
Adam Wong (1):
Input: elan_i2c - add support for ELAN0621 touchpad
Alexander Theissen (1):
usb: appledisplay: Add 27" Apple Cinema Display
Alexey Brodkin (1):
arc: [devboards] Add support of NFSv3 ACL
Andrea Parri (1):
uprobes: Fix handle_swbp() vs. unregister() + register() race once more
Arnd Bergmann (6):
exec: avoid gcc-8 warning for get_task_comm
drm: gma500: fix logic error
scsi: bfa: convert to strlcpy/strlcat
staging: rts5208: fix gcc-8 logic error warning
kdb: use memmove instead of overlapping memcpy
usb: gadget: dummy: fix nonsensical comparisons
Aya Levin (1):
net/mlx4: Fix UBSAN warning of signed integer overflow
Ben Greear (1):
mac80211: Clear beacon_int in ieee80211_do_stop
Bernd Eckstein (1):
usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
Cameron Gutman (1):
Input: xpad - quirk all PDP Xbox One gamepads
Chanho Min (1):
ALSA: pcm: Fix starvation on down_write_nonblock()
Christian Hoff (1):
Input: matrix_keypad - check for errors from of_get_named_gpio()
Chuck Lever (1):
SUNRPC: Fix leak of krb5p encode pages
Denis Bolotin (2):
qed: Fix PTT leak in qed_drain()
qed: Fix reading wrong value in loop condition
Dmitry V. Levin (1):
mips: fix mips_get_syscall_arg o32 check
Emmanuel Grumbach (1):
mac80211: ignore NullFunc frames in the duplicate detection
Fabrizio Castro (1):
can: rcar_can: Fix erroneous registration
Felix Fietkau (2):
mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
mac80211: fix reordering of buffered broadcast packets
Filipe Manana (2):
Btrfs: ensure path name is null terminated at btrfs_control_ioctl
Btrfs: fix use-after-free when dumping free space
Geert Uytterhoeven (1):
iommu/ipmmu-vmsa: Fix crash on early domain free
Greg Kroah-Hartman (2):
Staging: lustre: remove two build warnings
Linux 4.4.167
Guenter Roeck (2):
kobject: Replace strncpy with memcpy
kernfs: Replace strncpy with memcpy
Halil Pasic (2):
virtio/s390: avoid race on vcdev->config
virtio/s390: fix race in ccw_io_helper()
Harry Pan (1):
usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
Hui Peng (1):
ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c
Jack Morgenstein (1):
net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
Josef Bacik (1):
btrfs: release metadata before running delayed refs
Julian Wiedmann (1):
s390/qeth: fix length check in SNMP processing
Junaid Shahid (1):
kvm: mmu: Fix race in emulated page table writes
Kai-Heng Feng (2):
USB: usb-storage: Add new IDs to ums-realtek
ALSA: hda: Add support for AMD Stoney Ridge
Kees Cook (1):
scsi: csiostor: Avoid content leaks and casts
Kevin Hilman (1):
ARC: change defconfig defaults to ARCv2
Laura Abbott (2):
kgdboc: Fix restrict error
kgdboc: Fix warning with module build
Linus Torvalds (1):
unifdef: use memcpy instead of strncpy
Lu Baolu (1):
iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
Macpaul Lin (1):
kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
Markus Hofstaetter (1):
leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF
Martin Wilck (1):
scsi: scsi_devinfo: cleanly zero-pad devinfo strings
Mathias Kresin (1):
MIPS: ralink: Fix mt7620 nd_sd pinmux
Mathias Nyman (1):
xhci: Prevent U1/U2 link pm states if exit latency is too long
Mathias Payer (1):
USB: check usb_get_extra_descriptor for proper size
Matthias Schwarzott (1):
media: em28xx: Fix use-after-free when disconnecting
Max Filippov (2):
xtensa: enable coprocessors that are being flushed
xtensa: fix coprocessor context offset definitions
Michael Niewöhner (1):
usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
Milo Kim (1):
leds: turn off the LED and wait for completion on unregistering LED class device
Nikolay Borisov (1):
btrfs: Always try all copies when reading extent buffers
Noah Westervelt (1):
Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
Pan Bian (3):
rapidio/rionet: do not free skb before reading its length
ext2: fix potential use after free
iommu/vt-d: Use memunmap to free memremap
Patrick Gaskin (1):
Input: elan_i2c - add ELAN0620 to the ACPI table
Paulo Alcantara (1):
cifs: Fix separator when building path from dentry
Pavel Tikhomirov (1):
mm: cleancache: fix corruption on missed inode invalidation
Peter Shih (1):
tty: serial: 8250_mtk: always resume the device in probe.
Richard Genoud (2):
dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
dmaengine: at_hdmac: fix module unloading
Sagi Grimberg (1):
iser: set sector for ambiguous mr status errors
Sam Bobroff (1):
drm/ast: Fix incorrect free on ioregs
Sasha Levin (1):
Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"
Stephen Rothwell (1):
disable stringop truncation warnings for now
Sudarsana Reddy Kalluru (1):
bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
Sultan Alsawaf (1):
ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
Sven Eckelmann (1):
batman-adv: Expand merged fragment buffer for full packet
Takashi Iwai (7):
ALSA: wss: Fix invalid snd_free_pages() at error path
ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
ALSA: control: Fix race between adding and removing a user element
ALSA: sparc: Fix invalid snd_free_pages() at error path
ALSA: trident: Suppress gcc string warning
ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
ALSA: pcm: Fix interval evaluation with openmin/max
Tariq Toukan (1):
net/mlx4_core: Fix uninitialized variable compilation warning
Vasyl Vavrychuk (1):
mac80211_hwsim: Timer should be initialized before device registered
Vincent Chen (1):
net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts
Wei Yongjun (1):
leds: leds-gpio: Fix return value check in create_gpio_led()
Xiongfeng Wang (1):
Kbuild: suppress packed-not-aligned warning for default setting only
Yangtao Li (1):
net: amd: add missing of_node_put()
YueHaibing (1):
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
Makefile | 5 +-
arch/arc/Kconfig | 2 +-
arch/arc/Makefile | 2 +-
arch/arc/configs/axs101_defconfig | 2 +
arch/arc/configs/axs103_defconfig | 1 +
arch/arc/configs/axs103_smp_defconfig | 1 +
arch/arc/configs/nsim_700_defconfig | 1 +
arch/arc/configs/nsimosci_defconfig | 2 +
arch/arc/configs/nsimosci_hs_defconfig | 1 +
arch/arc/configs/nsimosci_hs_smp_defconfig | 1 +
arch/arc/configs/tb10x_defconfig | 1 +
arch/arc/configs/vdk_hs38_defconfig | 1 +
arch/arc/configs/vdk_hs38_smp_defconfig | 1 +
arch/mips/include/asm/syscall.h | 2 +-
arch/mips/ralink/mt7620.c | 2 +-
arch/x86/kvm/mmu.c | 27 +++------
arch/xtensa/kernel/asm-offsets.c | 16 +++---
arch/xtensa/kernel/process.c | 5 +-
drivers/dma/at_hdmac.c | 10 +++-
drivers/gpu/drm/ast/ast_main.c | 3 +-
drivers/gpu/drm/gma500/mdfld_intel_display.c | 2 +-
drivers/infiniband/ulp/iser/iser_verbs.c | 7 +--
drivers/input/joystick/xpad.c | 16 ++----
drivers/input/keyboard/matrix_keypad.c | 23 +++++---
drivers/input/mouse/elan_i2c_core.c | 3 +
drivers/iommu/intel-iommu.c | 2 +-
drivers/iommu/intel-svm.c | 2 +-
drivers/iommu/ipmmu-vmsa.c | 3 +
drivers/leds/led-class.c | 5 +-
drivers/leds/leds-gpio.c | 4 +-
drivers/leds/leds-pwm.c | 1 +
drivers/media/usb/em28xx/em28xx-dvb.c | 3 +-
drivers/misc/mic/scif/scif_rma.c | 2 +-
drivers/net/can/rcar_can.c | 5 +-
drivers/net/ethernet/amd/sunlance.c | 4 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x.h | 7 +++
drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 1 +
drivers/net/ethernet/faraday/ftmac100.c | 7 +--
drivers/net/ethernet/mellanox/mlx4/alloc.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/mlx4.h | 4 +-
drivers/net/ethernet/mellanox/mlx4/mr.c | 1 +
drivers/net/ethernet/qlogic/qed/qed_int.c | 2 +
drivers/net/ethernet/qlogic/qed/qed_main.c | 2 +-
drivers/net/rionet.c | 2 +-
drivers/net/usb/ipheth.c | 10 ++--
drivers/net/wireless/mac80211_hwsim.c | 8 +--
drivers/net/wireless/ti/wlcore/cmd.c | 6 --
drivers/s390/net/qeth_core_main.c | 27 ++++-----
drivers/s390/virtio/virtio_ccw.c | 17 +++++-
drivers/scsi/bfa/bfa_fcbuild.c | 8 +--
drivers/scsi/bfa/bfa_fcs.c | 78 ++++++++++++-------------
drivers/scsi/bfa/bfa_fcs_lport.c | 62 ++++++++------------
drivers/scsi/bfa/bfa_ioc.c | 2 +-
drivers/scsi/bfa/bfa_svc.c | 4 +-
drivers/scsi/bfa/bfad.c | 20 +++----
drivers/scsi/bfa/bfad_attr.c | 2 +-
drivers/scsi/bfa/bfad_bsg.c | 6 +-
drivers/scsi/csiostor/csio_lnode.c | 43 ++++++++------
drivers/scsi/scsi_devinfo.c | 22 +++----
drivers/staging/lustre/lustre/lmv/lmv_obd.c | 2 +-
drivers/staging/rts5208/sd.c | 6 --
drivers/tty/serial/8250/8250_mtk.c | 16 +++---
drivers/tty/serial/kgdboc.c | 47 ++++++++-------
drivers/usb/core/hub.c | 2 +-
drivers/usb/core/quirks.c | 7 +++
drivers/usb/core/usb.c | 6 +-
drivers/usb/gadget/udc/dummy_hcd.c | 9 ++-
drivers/usb/host/hwa-hc.c | 2 +-
drivers/usb/host/xhci.c | 16 ++++++
drivers/usb/misc/appledisplay.c | 1 +
drivers/usb/storage/unusual_realtek.h | 10 ++++
fs/btrfs/disk-io.c | 10 +---
fs/btrfs/free-space-cache.c | 2 +
fs/btrfs/super.c | 1 +
fs/btrfs/transaction.c | 6 +-
fs/cifs/dir.c | 2 +-
fs/exec.c | 7 +--
fs/ext2/xattr.c | 2 +-
fs/kernfs/symlink.c | 2 +-
include/linux/sched.h | 7 ++-
include/linux/usb.h | 4 +-
include/sound/pcm_params.h | 4 +-
kernel/debug/kdb/kdb_support.c | 4 +-
kernel/events/uprobes.c | 12 +++-
lib/kobject.c | 2 +-
mm/truncate.c | 8 ++-
net/batman-adv/fragmentation.c | 2 +-
net/ipv4/ip_tunnel.c | 4 +-
net/mac80211/iface.c | 2 +
net/mac80211/rx.c | 1 +
net/mac80211/status.c | 2 +
net/mac80211/tx.c | 4 +-
net/sunrpc/auth_gss/auth_gss.c | 4 ++
scripts/Makefile.extrawarn | 3 +
scripts/unifdef.c | 4 +-
sound/core/control.c | 80 +++++++++++++++-----------
sound/core/pcm_native.c | 14 +++--
sound/isa/wss/wss_lib.c | 2 -
sound/pci/ac97/ac97_codec.c | 2 +-
sound/pci/hda/hda_intel.c | 4 ++
sound/pci/trident/trident.c | 2 +-
sound/sparc/cs4231.c | 8 +--
sound/usb/card.c | 5 +-
103 files changed, 471 insertions(+), 380 deletions(-)
More information about the kernel-team
mailing list