[SRU][Xenial][PULL] Xenial update: 4.4.168 upstream stable release (LP: #1811080)
Juerg Haefliger
juerg.haefliger at canonical.com
Tue Jan 15 07:16:11 UTC 2019
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
4.4.168 upstream stable release
from git://git.kernel.org/
Linux 4.4.168
selftests: Move networking/timestamping from Documentation
rocker: fix rocker_tlv_put_* functions for KASAN
staging: speakup: Replace strncpy with memcpy
matroxfb: fix size of memcpy
media: dvb-frontends: fix i2c access helpers for KASAN
proc: do not access cmdline nor environ from file-backed areas
proc: don't use FOLL_FORCE for reading cmdline and environment
mm: replace access_remote_vm() write parameter with gup_flags
mm: replace __access_remote_vm() write parameter with gup_flags
mm: replace get_user_pages() write/force parameters with gup_flags
mm: replace get_vaddr_frames() write/force parameters with gup_flags
mm: replace get_user_pages_locked() write/force parameters with gup_flags
mm: replace get_user_pages_unlocked() write/force parameters with gup_flags
mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages()
mm: remove write/force parameters from __get_user_pages_unlocked()
mm: remove write/force parameters from __get_user_pages_locked()
sr: pass down correctly sized SCSI sense buffer
swiotlb: clean up reporting
hugetlbfs: fix bug in pgoff overflow checking
hugetlbfs: check for pgoff value overflow
hugetlbfs: fix offset overflow in hugetlbfs mmap
mm/hugetlb.c: don't call region_abort if region_chg fails
posix-timers: Sanitize overrun handling
wil6210: missing length check in wmi_set_ie
bpf: Prevent memory disambiguation attack
bpf/verifier: Pass instruction index to check_mem_access() and check_xadd()
bpf/verifier: Add spi variable to check_stack_write()
bpf: support 8-byte metafield access
KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
KVM: SVM: Move spec control call after restore of GS
x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
x86/bugs, KVM: Support the combination of guest and host IBRS
x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec
x86/usercopy: Replace open coded stac/clac with __uaccess_{begin, end}
x86: Introduce __uaccess_begin_nospec() and uaccess_try_nospec
x86: fix SMAP in 32-bit environments
x86: reorganize SMAP handling in user space accesses
KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL
KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
KVM/x86: Add IBPB support
KVM: VMX: make MSR bitmaps per-VCPU
KVM: VMX: introduce alloc_loaded_vmcs
KVM: nVMX: Eliminate vmcs02 pool
KVM: nVMX: mark vmcs12 pages dirty on L2 exit
KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC
ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command
pstore: Convert console write to use ->write_buf
ocfs2: fix potential use after free
debugobjects: avoid recursive calls with kmemleak
hfsplus: do not free node before using
hfs: do not free node before using
ocfs2: fix deadlock caused by ocfs2_defrag_extent()
fscache, cachefiles: remove redundant variable 'cache'
fscache: fix race between enablement and dropping of object
xen: xlate_mmu: add missing header to fix 'W=1' warning
drm/ast: fixed reading monitor EDID not stable issue
net: hisilicon: remove unexpected free_netdev
ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
net: thunderx: fix NULL pointer dereference in nic_remove
KVM: x86: fix empty-body warnings
USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
USB: omap_udc: fix omap_udc_start() on 15xx machines
USB: omap_udc: fix crashes on probe error and module removal
USB: omap_udc: use devm_request_irq()
bpf: fix check of allowed specifiers in bpf_trace_printk
exportfs: do not read dentry after free
ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
Btrfs: send, fix infinite loop due to directory rename dependencies
hwmon: (w83795) temp4_type has writable permission
ASoC: dapm: Recalculate audio map forcely when card instantiated
hwmon: (ina2xx) Fix current value calculation
s390/cpum_cf: Reject request for sampling in event initialization
sysv: return 'err' instead of 0 in __sysv_write_inode
ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
neighbour: Avoid writing before skb->head in neigh_hh_output()
tun: forbid iface creation with rtnl ops
tcp: fix NULL ref in tail loss probe
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
net: Prevent invalid access to skb->prev in __qdisc_drop_all
net: phy: don't allow __set_phy_supported to add unsupported modes
net: 8139cp: fix a BUG triggered by changing mtu with network traffic
ipv6: Check available headroom in ip6_xmit() even without options
Compile-tested all architectures. Ran release regressions tests (locally).
Signed-off-by: Juerg Haefliger <juergh at canonical.com>
---
The following changes since commit 10d1abb1745d28aad00f0b549e50b88ec07fb936:
netfilter: nf_conncount: don't skip eviction when age is negative (2019-01-10 17:23:37 +0100)
are available in the Git repository at:
git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.168
for you to fetch changes up to 6bbb2652eae9925a577a741f25bfdb70e0573b35:
Linux 4.4.168 (2019-01-11 10:12:20 +0100)
----------------------------------------------------------------
Aaro Koskinen (4):
USB: omap_udc: use devm_request_irq()
USB: omap_udc: fix crashes on probe error and module removal
USB: omap_udc: fix omap_udc_start() on 15xx machines
USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
Alexei Starovoitov (2):
bpf: support 8-byte metafield access
bpf: Prevent memory disambiguation attack
Arnd Bergmann (2):
media: dvb-frontends: fix i2c access helpers for KASAN
rocker: fix rocker_tlv_put_* functions for KASAN
Ashok Raj (1):
KVM/x86: Add IBPB support
Ben Hutchings (3):
bpf/verifier: Add spi variable to check_stack_write()
bpf/verifier: Pass instruction index to check_mem_access() and check_xadd()
mm/nommu.c: Switch __get_user_pages_unlocked() to use __get_user_pages()
Christoph Paasch (1):
net: Prevent invalid access to skb->prev in __qdisc_drop_all
Colin Ian King (1):
fscache, cachefiles: remove redundant variable 'cache'
Dan Williams (1):
[Fix] x86/uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec
David Matlack (1):
KVM: nVMX: mark vmcs12 pages dirty on L2 exit
Eric Dumazet (1):
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
Greg Kroah-Hartman (1):
Linux 4.4.168
Guenter Roeck (1):
staging: speakup: Replace strncpy with memcpy
Heiner Kallweit (1):
net: phy: don't allow __set_phy_supported to add unsupported modes
Huacai Chen (1):
hwmon: (w83795) temp4_type has writable permission
Janusz Krzysztofik (1):
ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
Jens Axboe (1):
sr: pass down correctly sized SCSI sense buffer
Jim Mattson (1):
KVM: nVMX: Eliminate vmcs02 pool
Josh Elsasser (1):
ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
KarimAllah Ahmed (2):
KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL
KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL
Kees Cook (1):
swiotlb: clean up reporting
Larry Chen (1):
ocfs2: fix deadlock caused by ocfs2_defrag_extent()
Linus Torvalds (1):
proc: don't use FOLL_FORCE for reading cmdline and environment
Lior David (1):
wil6210: missing length check in wmi_set_ie
Lorenzo Bianconi (1):
net: thunderx: fix NULL pointer dereference in nic_remove
Lorenzo Stoakes (8):
mm: remove write/force parameters from __get_user_pages_locked()
mm: remove write/force parameters from __get_user_pages_unlocked()
mm: replace get_user_pages_unlocked() write/force parameters with gup_flags
mm: replace get_user_pages_locked() write/force parameters with gup_flags
mm: replace get_vaddr_frames() write/force parameters with gup_flags
mm: replace get_user_pages() write/force parameters with gup_flags
mm: replace __access_remote_vm() write parameter with gup_flags
mm: replace access_remote_vm() write parameter with gup_flags
Martynas Pumputis (1):
bpf: fix check of allowed specifiers in bpf_trace_printk
Mike Kravetz (4):
mm/hugetlb.c: don't call region_abort if region_chg fails
hugetlbfs: fix offset overflow in hugetlbfs mmap
hugetlbfs: check for pgoff value overflow
hugetlbfs: fix bug in pgoff overflow checking
Namhyung Kim (1):
pstore: Convert console write to use ->write_buf
Nathan Chancellor (1):
ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
NeilBrown (1):
fscache: fix race between enablement and dropping of object
Nicolas Dichtel (1):
tun: forbid iface creation with rtnl ops
Nicolin Chen (1):
hwmon: (ina2xx) Fix current value calculation
Pan Bian (5):
exportfs: do not read dentry after free
net: hisilicon: remove unexpected free_netdev
hfs: do not free node before using
hfsplus: do not free node before using
ocfs2: fix potential use after free
Paolo Bonzini (3):
KVM: VMX: introduce alloc_loaded_vmcs
KVM: VMX: make MSR bitmaps per-VCPU
KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
Peter Ujfalusi (2):
ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
Qian Cai (1):
debugobjects: avoid recursive calls with kmemleak
Radim Krčmář (1):
KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC
Robbie Ko (1):
Btrfs: send, fix infinite loop due to directory rename dependencies
Shuah Khan (1):
selftests: Move networking/timestamping from Documentation
Srikanth Boddepalli (1):
xen: xlate_mmu: add missing header to fix 'W=1' warning
Stefano Brivio (2):
ipv6: Check available headroom in ip6_xmit() even without options
neighbour: Avoid writing before skb->head in neigh_hh_output()
Su Yanjun (1):
net: 8139cp: fix a BUG triggered by changing mtu with network traffic
Sudip Mukherjee (1):
matroxfb: fix size of memcpy
Takashi Sakamoto (1):
ALSA: pcm: remove SNDRV_PCM_IOCTL1_INFO internal command
Thomas Richter (1):
s390/cpum_cf: Reject request for sampling in event initialization
Tom Lendacky (1):
[Fix] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
Tzung-Bi Shih (1):
ASoC: dapm: Recalculate audio map forcely when card instantiated
Willy Tarreau (1):
proc: do not access cmdline nor environ from file-backed areas
Y.C. Chen (1):
drm/ast: fixed reading monitor EDID not stable issue
Yi Wang (1):
KVM: x86: fix empty-body warnings
Yuchung Cheng (1):
tcp: fix NULL ref in tail loss probe
YueHaibing (1):
sysv: return 'err' instead of 0 in __sysv_write_inode
Documentation/Makefile | 3 +-
Documentation/networking/Makefile | 1 -
Documentation/networking/timestamping/Makefile | 14 -
Makefile | 2 +-
arch/arm/mach-omap1/board-ams-delta.c | 3 +
arch/arm/mach-omap2/prm44xx.c | 2 +-
arch/cris/arch-v32/drivers/cryptocop.c | 4 +-
arch/ia64/kernel/err_inject.c | 2 +-
arch/mips/mm/gup.c | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 2 +
arch/s390/mm/gup.c | 2 +-
arch/sh/mm/gup.c | 3 +-
arch/sparc/mm/gup.c | 3 +-
arch/x86/include/asm/kvm_host.h | 2 -
arch/x86/include/asm/uaccess_32.h | 8 +-
arch/x86/kvm/cpuid.c | 20 +-
arch/x86/kvm/cpuid.h | 32 +
arch/x86/kvm/lapic.c | 2 +-
arch/x86/kvm/svm.c | 134 +++-
arch/x86/kvm/vmx.c | 706 +++++++++++----------
arch/x86/lib/usercopy_32.c | 2 +-
arch/x86/mm/gup.c | 2 +-
arch/x86/mm/mpx.c | 3 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 6 +-
drivers/gpu/drm/ast/ast_mode.c | 36 +-
drivers/gpu/drm/exynos/exynos_drm_g2d.c | 3 +-
drivers/gpu/drm/i915/i915_gem_userptr.c | 6 +-
drivers/gpu/drm/radeon/radeon_ttm.c | 2 +-
drivers/gpu/drm/via/via_dmablit.c | 4 +-
drivers/hwmon/ina2xx.c | 2 +-
drivers/hwmon/w83795.c | 2 +-
drivers/infiniband/core/umem.c | 6 +-
drivers/infiniband/core/umem_odp.c | 7 +-
drivers/infiniband/hw/mthca/mthca_memfree.c | 4 +-
drivers/infiniband/hw/qib/qib_user_pages.c | 3 +-
drivers/infiniband/hw/usnic/usnic_uiom.c | 5 +-
drivers/media/dvb-frontends/ascot2e.c | 4 +-
drivers/media/dvb-frontends/cxd2841er.c | 4 +-
drivers/media/dvb-frontends/horus3a.c | 4 +-
drivers/media/dvb-frontends/itd1000.c | 5 +-
drivers/media/dvb-frontends/mt312.c | 5 +-
drivers/media/dvb-frontends/stb0899_drv.c | 3 +-
drivers/media/dvb-frontends/stb6100.c | 6 +-
drivers/media/dvb-frontends/stv0367.c | 4 +-
drivers/media/dvb-frontends/stv090x.c | 4 +-
drivers/media/dvb-frontends/stv6110x.c | 4 +-
drivers/media/dvb-frontends/zl10039.c | 4 +-
drivers/media/pci/ivtv/ivtv-udma.c | 3 +-
drivers/media/pci/ivtv/ivtv-yuv.c | 8 +-
drivers/media/platform/omap/omap_vout.c | 2 +-
drivers/media/v4l2-core/videobuf-dma-sg.c | 7 +-
drivers/media/v4l2-core/videobuf2-memops.c | 6 +-
drivers/misc/mic/scif/scif_rma.c | 3 +-
drivers/misc/sgi-gru/grufault.c | 2 +-
drivers/net/ethernet/cavium/thunder/nic_main.c | 3 +
drivers/net/ethernet/hisilicon/hip04_eth.c | 4 +-
drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 4 +-
drivers/net/ethernet/realtek/8139cp.c | 5 +
drivers/net/ethernet/rocker/rocker.c | 24 +-
drivers/net/phy/phy_device.c | 19 +-
drivers/net/tun.c | 6 +-
drivers/net/wireless/ath/wil6210/wmi.c | 8 +-
drivers/scsi/sr_ioctl.c | 21 +-
drivers/scsi/st.c | 5 +-
drivers/staging/rdma/hfi1/user_pages.c | 2 +-
drivers/staging/rdma/ipath/ipath_user_pages.c | 2 +-
drivers/staging/speakup/kobjects.c | 4 +-
drivers/usb/gadget/udc/omap_udc.c | 87 +--
drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 2 +-
drivers/video/fbdev/pvr2fb.c | 2 +-
drivers/virt/fsl_hypervisor.c | 4 +-
drivers/xen/xlate_mmu.c | 1 +
fs/btrfs/send.c | 11 +-
fs/cachefiles/rdwr.c | 3 -
fs/exec.c | 9 +-
fs/exportfs/expfs.c | 2 +-
fs/fscache/object.c | 3 +
fs/hfs/btree.c | 3 +-
fs/hfsplus/btree.c | 3 +-
fs/hugetlbfs/inode.c | 30 +-
fs/ocfs2/export.c | 2 +-
fs/ocfs2/move_extents.c | 47 +-
fs/proc/base.c | 19 +-
fs/pstore/platform.c | 4 +-
fs/sysv/inode.c | 2 +-
include/linux/mm.h | 15 +-
include/net/neighbour.h | 28 +-
include/sound/pcm.h | 2 +-
kernel/bpf/verifier.c | 98 ++-
kernel/events/uprobes.c | 4 +-
kernel/trace/bpf_trace.c | 8 +-
lib/debugobjects.c | 3 +-
lib/swiotlb.c | 20 +-
mm/frame_vector.c | 9 +-
mm/gup.c | 42 +-
mm/hugetlb.c | 12 +-
mm/memory.c | 18 +-
mm/mempolicy.c | 2 +-
mm/nommu.c | 42 +-
mm/process_vm_access.c | 6 +-
mm/util.c | 2 +-
net/ceph/pagevec.c | 2 +-
net/core/rtnetlink.c | 3 +
net/ipv4/tcp_output.c | 12 +-
net/ipv6/ip6_output.c | 42 +-
net/sched/sch_netem.c | 3 +
security/tomoyo/domain.c | 3 +-
sound/core/pcm_lib.c | 2 -
sound/core/pcm_native.c | 6 +-
sound/soc/omap/omap-dmic.c | 9 +
sound/soc/omap/omap-mcpdm.c | 43 +-
sound/soc/soc-core.c | 1 +
.../selftests}/networking/timestamping/.gitignore | 0
.../selftests/networking/timestamping/Makefile | 8 +
.../networking/timestamping/hwtstamp_config.c | 0
.../networking/timestamping/timestamping.c | 0
.../networking/timestamping/txtimestamp.c | 0
ubuntu/i915/i915_gem_userptr.c | 6 +-
ubuntu/vbox/r0drv/linux/memobj-r0drv-linux.c | 5 +-
virt/kvm/async_pf.c | 2 +-
virt/kvm/kvm_main.c | 11 +-
121 files changed, 1179 insertions(+), 749 deletions(-)
delete mode 100644 Documentation/networking/Makefile
delete mode 100644 Documentation/networking/timestamping/Makefile
rename {Documentation => tools/testing/selftests}/networking/timestamping/.gitignore (100%)
create mode 100644 tools/testing/selftests/networking/timestamping/Makefile
rename {Documentation => tools/testing/selftests}/networking/timestamping/hwtstamp_config.c (100%)
rename {Documentation => tools/testing/selftests}/networking/timestamping/timestamping.c (100%)
rename {Documentation => tools/testing/selftests}/networking/timestamping/txtimestamp.c (100%)
More information about the kernel-team
mailing list