This bug was fixed in the package linux-kvm - 4.4.0-1020.25
---------------
linux-kvm (4.4.0-1020.25) xenial; urgency=medium
* linux-kvm: 4.4.0-1020.25 -proposed tracker (LP: #1755219)
* linux-kvm standard configs for Ubuntu Server workloads (LP: #1736561)
- kvm: [config] enable NO_HZ_IDLE, HIGH_RES_TIMERS
- kvm: [config] enable NUMA
- kvm: [config] enable all CGROUPs
- kvm: [config] enable all CONFIG_RD decompressors
- kvm: [config] enable COREDUMP
- kvm: [config] enable X86_X2APIC
- kvm: [config] enable PREEMPT_VOLUNTARY
- kvm: [config] enable HOTPLUG_CPU
- kvm: [config] enable BLK_DEV_SD
- kvm: [config] enable ATA, PATA, SATA
- kvm: [config] enable BONDING, MACVLAN, TUN, VETH
- kvm: [config] enable HW_RANDOM_{AMD,INTEL,TIMERIOMEM}
- kvm: [config] enable EFI_VARS
- kvm: [config] enable SQUASHFS
- kvm: [retpoline] add new retpoline call sites
* Xenial update to 4.4.114 stable release (LP: #1754592)
- kvm: [config] enable X86_VSYSCALL_EMULATION
* Xenial update to 4.4.110 stable release (LP: #1745071)
- [config] updateconfigs for master changes
* linux-kvm configs for Kata containers (LP: #1752147)
- kvm: [config] Enable PCI Hotplug
- kvm: [config] Add support for DPDK
- kvm: [config] Enable DAX
- kvm: [config] Enable 9P fs
[ Ubuntu: 4.4.0-117.141 ]
* linux: 4.4.0-117.141 -proposed tracker (LP: #1755208)
* Xenial update to 4.4.114 stable release (LP: #1754592)
- x86/asm/32: Make sync_core() handle missing CPUID on all 32-bit kernels
- usbip: prevent vhci_hcd driver from leaking a socket pointer address
- usbip: Fix implicit fallthrough warning
- usbip: Fix potential format overflow in userspace tools
- x86/microcode/intel: Fix BDW late-loading revision check
- x86/retpoline: Fill RSB on context switch for affected CPUs
- sched/deadline: Use the revised wakeup rule for suspending constrained dl
tasks
- can: af_can: can_rcv(): replace WARN_ONCE by pr_warn_once
- can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once
- PM / sleep: declare __tracedata symbols as char[] rather than char
- time: Avoid undefined behaviour in ktime_add_safe()
- timers: Plug locking race vs. timer migration
- Prevent timer value 0 for MWAITX
- drivers: base: cacheinfo: fix x86 with CONFIG_OF enabled
- drivers: base: cacheinfo: fix boot error message when acpi is enabled
- PCI: layerscape: Add "fsl,ls2085a-pcie" compatible ID
- PCI: layerscape: Fix MSG TLP drop setting
- mmc: sdhci-of-esdhc: add/remove some quirks according to vendor version
- fs/select: add vmalloc fallback for select(2)
- hwpoison, memcg: forcibly uncharge LRU pages
- cma: fix calculation of aligned offset
- mm, page_alloc: fix potential false positive in __zone_watermark_ok
- ipc: msg, make msgrcv work with LONG_MIN
- x86/ioapic: Fix incorrect pointers in ioapic_setup_resources()
- ACPI / processor: Avoid reserving IO regions too early
- ACPI / scan: Prefer devices without _HID/_CID for _ADR matching
- ACPICA: Namespace: fix operand cache leak
- netfilter: x_tables: speed up jump target validation
- netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed
in 64bit kernel
- netfilter: nf_dup_ipv6: set again FLOWI_FLAG_KNOWN_NH at flowi6_flags
- netfilter: nf_ct_expect: remove the redundant slash when policy name is
empty
- netfilter: nfnetlink_queue: reject verdict request from different portid
- netfilter: restart search if moved to other chain
- netfilter: nf_conntrack_sip: extend request line validation
- netfilter: use fwmark_reflect in nf_send_reset
- ext2: Don't clear SGID when inheriting ACLs
- reiserfs: fix race in prealloc discard
- reiserfs: don't preallocate blocks for extended attributes
- reiserfs: Don't clear SGID when inheriting ACLs
- fs/fcntl: f_setown, avoid undefined behaviour
- scsi: libiscsi: fix shifting of DID_REQUEUE host byte
- Input: trackpoint - force 3 buttons if 0 button is reported
- usb: usbip: Fix possible deadlocks reported by lockdep
- usbip: fix stub_rx: get_pipe() to validate endpoint number
- usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input
- usbip: prevent leaking socket pointer address in messages
- um: link vmlinux with -no-pie
- vsyscall: Fix permissions for emulate mode with KAISER/PTI
- eventpoll.h: add missing epoll event masks
- x86/microcode/intel: Extend BDW late-loading further with LLC size check
- hrtimer: Reset hrtimer cpu base proper on CPU hotplug
- dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state
- ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL
- ipv6: fix udpv6 sendmsg crash caused by too small MTU
- ipv6: ip6_make_skb() needs to clear cork.base.dst
- lan78xx: Fix failure in USB Full Speed
- net: igmp: fix source address check for IGMPv3 reports
- tcp: __tcp_hdrlen() helper
- net: qdisc_pkt_len_init() should be more robust
- pppoe: take ->needed_headroom of lower device into account on xmit
- r8169: fix memory corruption on retrieval of hardware statistics.
- sctp: do not allow the v4 socket to bind a v4mapped v6 address
- sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
- vmxnet3: repair memory leak
- net: Allow neigh contructor functions ability to modify the primary_key
- ipv4: Make neigh lookup keys for loopback/point-to-point devices be
INADDR_ANY
- flow_dissector: properly cap thoff field
- net: tcp: close sock if net namespace is exiting
- nfsd: auth: Fix gid sorting when rootsquash enabled
- Linux 4.4.114
* Xenial update to 4.4.113 stable release (LP: #1754375)
- gcov: disable for COMPILE_TEST
- scsi: sg: disable SET_FORCE_LOW_DMA
- futex: Prevent overflow by strengthen input validation
- ALSA: pcm: Remove yet superfluous WARN_ON()
- ALSA: hda - Apply headphone noise quirk for another Dell XPS 13 variant
- ALSA: hda - Apply the existing quirk to iMac 14,1
- af_key: fix buffer overread in verify_address_len()
- af_key: fix buffer overread in parse_exthdrs()
- scsi: hpsa: fix volume offline state
- sched/deadline: Zero out positive runtime after throttling constrained
tasks
- pipe: avoid round_pipe_size() nr_pages overflow on 32-bit
- x86/apic/vector: Fix off by one in error path
- Input: 88pm860x-ts - fix child-node lookup
- Input: twl6040-vibra - fix DT node memory management
- Input: twl6040-vibra - fix child-node lookup
- Input: twl4030-vibra - fix sibling-node lookup
- tracing: Fix converting enum's from the map in trace_event_eval_update()
- phy: work around 'phys' references to usb-nop-xceiv devices
- ARM: dts: kirkwood: fix pin-muxing of MPP7 on OpenBlocks A7
- can: peak: fix potential bug in packet fragmentation
- dm btree: fix serious bug in btree_split_beneath()
- dm thin metadata: THIN_MAX_CONCURRENT_LOCKS should be 6
- arm64: KVM: Fix SMCCC handling of unimplemented SMC/HVC calls
- kbuild: modversions for EXPORT_SYMBOL() for asm
- x86/pti: Document fix wrong index
- MIPS: AR7: ensure the port type's FCR value is used
- Linux 4.4.113
* Xenial update to 4.4.113 stable release (LP: #1754375) // CVE-2017-5753
(Spectre v1 Intel -> upstream)
- Revert "x86/cpu/AMD: Make the LFENCE instruction serialized"
- x86/cpu/AMD: Make LFENCE a serializing instruction
- x86/cpu/AMD: Use LFENCE_RDTSC in preference to MFENCE_RDTSC
* i2c-thunderx: erroneous error message "unhandled state: 0" (LP: #1754076)
- i2c: octeon: Prevent error message on bus error
* qeth: fix calculation of required buffer elements for skb (LP: #1750810)
- s390/qeth: fix underestimated count of buffer elements
* Support rfkill-any led trigger for Fujitsu u727 (LP: #1745130)
- rfkill: Add rfkill-any LED trigger
* Redpine: Sometimes Wi-Fi connection shows "unavailable" after resume from
WoWLAN S4. WLAN can be recover after reboot or reloading WIFI driver.
(LP: #1753438) // Redpine: BLE scanning for nearby beacons per second is too
low and result high loss rate. (LP: #1753439)
- SAUCE: Redpine: resolve race while resuming from S4
- SAUCE: Redpine: Fix card write failure issue at S4 restore
- SAUCE: Redpine: Add deep sleep enable before connection
- SAUCE: Redpine: resolve power save issue after S4 resume
* qeth: check not more than 16 SBALEs on the completion queue (LP: #1750568)
- qeth: check not more than 16 SBALEs on the completion queue
* qeth: fix L3 next-hop im xmit qeth hdr (LP: #1750813)
- s390/qeth: fix L3 next-hop in xmit qeth hdr
* qemu-efi-aarch64 in >= artful can't boot xenial cloud images (LP: #1744754)
- irqchip/gic-v3: Refactor gic_of_init() for GICv3 driver
- irqchip/gic-v3: Add ACPI support for GICv3/4 initialization
- irqchip/gic-v3: ACPI: Add redistributor support via GICC structures
- irqchip/gic-v3: Remove gic_root_node variable from the ITS code
- irqchip/gic-v3-its: Mark its_init() and its children as __init
- ACPICA: Headers: Add new constants for the DBG2 ACPI table
- of/serial: move earlycon early_param handling to serial
- ACPI: parse SPCR and enable matching console
- [Config] CONFIG_ACPI_SPCR_TABLE=y
- ARM64: ACPI: enable ACPI_SPCR_TABLE
- serial: pl011: add console matching function
* OOM and High CPU utilization in update_blocked_averages because of too many
cfs_rqs in rq->leaf_cfs_rq_list (LP: #1747896)
- sched/fair: Fix O(nr_cgroups) in load balance path
* linux-tools: perf incorrectly linking libbfd (LP: #1748922)
- SAUCE: tools -- add ability to disable libbfd
- [Packaging] correct disablement of libbfd
* retpoline abi files are empty on i386 (LP: #1751021)
- [Packaging] retpoline-extract -- instantiate retpoline files for i386
- [Packaging] final-checks -- sanity checking ABI contents
- [Packaging] final-checks -- check for empty retpoline files
* bnx2x_attn_int_deasserted3:4323 MC assert! (LP: #1715519) //
CVE-2018-1000026
- net: create skb_gso_validate_mac_len()
- bnx2x: disable GSO where gso_size is too big for hardware
* CVE-2017-17448
- netfilter: nfnetlink_cthelper: Add missing permission checks
* TB16 dock ethernet corrupts data with hw checksum silently failing
(LP: #1729674)
- r8152: disable RX aggregation on Dell TB16 dock
* linux < 4.8: x-netns vti is broken (LP: #1744078)
- net: l3mdev: Add master device lookup by index
- xfrm: Only add l3mdev oif to dst lookups
* Xenial update to 4.4.112 stable release (LP: #1745266)
- dm bufio: fix shrinker scans when (nr_to_scan < retain_target)
- can: gs_usb: fix return value of the "set_bittiming" callback
- IB/srpt: Disable RDMA access by the initiator
- MIPS: Validate PR_SET_FP_MODE prctl(2) requests against the ABI of the
task
- MIPS: Factor out NT_PRFPREG regset access helpers
- MIPS: Guard against any partial write attempt with PTRACE_SETREGSET
- MIPS: Consistently handle buffer counter with PTRACE_SETREGSET
- MIPS: Fix an FCSR access API regression with NT_PRFPREG and MSA
- MIPS: Also verify sizeof `elf_fpreg_t' with PTRACE_SETREGSET
- MIPS: Disallow outsized PTRACE_SETREGSET NT_PRFPREG regset accesses
- net/mac80211/debugfs.c: prevent build failure with CONFIG_UBSAN=y
- x86/vsdo: Fix build on PARAVIRT_CLOCK=y, KVM_GUEST=n
- x86/acpi: Handle SCI interrupts above legacy space gracefully
- iommu/arm-smmu-v3: Don't free page table ops twice
- ALSA: pcm: Remove incorrect snd_BUG_ON() usages
- ALSA: pcm: Add missing error checks in OSS emulation plugin builder
- ALSA: pcm: Abort properly at pending signal in OSS read/write loops
- ALSA: pcm: Allow aborting mutex lock at OSS read/write loops
- ALSA: aloop: Release cable upon open error path
- ALSA: aloop: Fix inconsistent format due to incomplete rule
- ALSA: aloop: Fix racy hw constraints adjustment
- x86/acpi: Reduce code duplication in mp_override_legacy_irq()
- mm/compaction: fix invalid free_pfn and compact_cached_free_pfn
- mm/compaction: pass only pageblock aligned range to pageblock_pfn_to_page
- mm/page-writeback: fix dirty_ratelimit calculation
- mm/zswap: use workqueue to destroy pool
- zswap: don't param_set_charp while holding spinlock
- locks: don't check for race with close when setting OFD lock
- futex: Replace barrier() in unqueue_me() with READ_ONCE()
- locking/mutex: Allow next waiter lockless wakeup
- usbvision fix overflow of interfaces array
- usb: musb: ux500: Fix NULL pointer dereference at system PM
- r8152: fix the wake event
- r8152: use test_and_clear_bit
- r8152: adjust ALDPS function
- lan78xx: use skb_cow_head() to deal with cloned skbs
- sr9700: use skb_cow_head() to deal with cloned skbs
- smsc75xx: use skb_cow_head() to deal with cloned skbs
- cx82310_eth: use skb_cow_head() to deal with cloned skbs
- x86/mm/pat, /dev/mem: Remove superfluous error message
- hwrng: core - sleep interruptible in read
- sysrq: Fix warning in sysrq generated crash.
- xhci: Fix ring leak in failure path of xhci_alloc_virt_device()
- Revert "userfaultfd: selftest: vm: allow to build in vm/ directory"
- x86/pti/efi: broken conversion from efi to kernel page table
- 8021q: fix a memory leak for VLAN 0 device
- ip6_tunnel: disable dst caching if tunnel is dual-stack
- net: core: fix module type in sock_diag_bind
- RDS: Heap OOB write in rds_message_alloc_sgs()
- sh_eth: fix TSU resource handling
- sh_eth: fix SH7757 GEther initialization
- net: stmmac: enable EEE in MII, GMII or RGMII only
- ipv6: fix possible mem leaks in ipv6_make_skb()
- crypto: algapi - fix NULL dereference in crypto_remove_spawns()
- rbd: set max_segments to USHRT_MAX
- x86/microcode/intel: Extend BDW late-loading with a revision check
- KVM: x86: Add memory barrier on vmcs field lookup
- drm/vmwgfx: Potential off by one in vmw_view_add()
- kaiser: Set _PAGE_NX only if supported
- bpf: don't (ab)use instructions to store state
- bpf: move fixup_bpf_calls() function
- bpf: refactor fixup_bpf_calls()
- bpf: adjust insn_aux_data when patching insns
- bpf: prevent out-of-bounds speculation
- bpf, array: fix overflow in max_entries and undefined behavior in
index_mask
- iscsi-target: Make TASK_REASSIGN use proper se_cmd->cmd_kref
- target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK
- USB: serial: cp210x: add IDs for LifeScan OneTouch Verio IQ
- USB: serial: cp210x: add new device ID ELV ALC 8xxx
- usb: misc: usb3503: make sure reset is low for at least 100us
- USB: fix usbmon BUG trigger
- usbip: remove kernel addresses from usb device and urb debug msgs
- staging: android: ashmem: fix a race condition in ASHMEM_SET_SIZE ioctl
- Bluetooth: Prevent stack info leak from the EFS element.
- uas: ignore UAS for Norelsys NS1068(X) chips
- e1000e: Fix e1000_check_for_copper_link_ich8lan return value.
- x86/Documentation: Add PTI description
- sysfs/cpu: Fix typos in vulnerability documentation
- x86/alternatives: Fix optimize_nops() checking
- selftests/x86: Add test_vsyscall
- Linux 4.4.112
* Xenial update to 4.4.111 stable release (LP: #1745263)
- x86/kasan: Write protect kasan zero shadow
- kernel/acct.c: fix the acct->needcheck check in check_free_space()
- crypto: n2 - cure use after free
- crypto: chacha20poly1305 - validate the digest size
- crypto: pcrypt - fix freeing pcrypt instances
- sunxi-rsb: Include OF based modalias in device uevent
- fscache: Fix the default for fscache_maybe_release_page()
- kernel: make groups_sort calling a responsibility group_info allocators
- kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL
- kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from
!sig_kernel_only()
signals
- kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in
complete_signal()
- ARC: uaccess: dont use "l" gcc inline asm constraint modifier
- parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel
- genksyms: Handle string literals with spaces in reference files
- module: Issue warnings when tainting kernel
- proc: much faster /proc/vmstat
- Fix build error in vma.c
- Linux 4.4.111
* x86/net/bpf: return statement missing value (LP: #1745364)
- SAUCE: (no-up) arch/x86/bpf: Fix missed return statement
* Ubuntu 16.04 - s390/cpuinfo: show facilities as reported by stfle
(LP: #1744736)
- s390/bitops: add for_each_set_bit_inv helper
- s390/cpuinfo: show facilities as reported by stfle
* Xenial update to 4.4.110 stable release (LP: #1745071)
- KPTI: Rename to PAGE_TABLE_ISOLATION
- SAUCE: Replace CONFIG_KAISER with CONFIG_PAGE_TABLE_ISOLATION
- Linux 4.4.110
* Xenial update to 4.4.109 stable release (LP: #1745069)
- ACPI: APEI / ERST: Fix missing error handling in erst_reader()
- crypto: mcryptd - protect the per-CPU queue with a lock
- mfd: cros ec: spi: Don't send first message too soon
- mfd: twl4030-audio: Fix sibling-node lookup
- mfd: twl6040: Fix child-node lookup
- ALSA: rawmidi: Avoid racy info ioctl via ctl device
- ALSA: usb-audio: Fix the missing ctl name suffix at parsing SU
- PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()
- parisc: Hide Diva-built-in serial aux and graphics card
- spi: xilinx: Detect stall with Unknown commands
- KVM: X86: Fix load RFLAGS w/o the fixed bit
- powerpc/perf: Dereference BHRB entries safely
- net: mvneta: clear interface link status on port disable
- tracing: Remove extra zeroing out of the ring buffer page
- tracing: Fix possible double free on failure of allocating trace buffer
- tracing: Fix crash when it fails to alloc ring buffer
- ring-buffer: Mask out the info bits when returning buffer page length
- iw_cxgb4: Only validate the MSN for successful completions
- ASoC: fsl_ssi: AC'97 ops need regmap, clock and cleaning up on failure
- ASoC: twl4030: fix child-node lookup
- ALSA: hda: Drop useless WARN_ON()
- ALSA: hda - fix headset mic detection issue on a Dell machine
- x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly()
- x86/mm: Remove flush_tlb() and flush_tlb_current_task()
- x86/mm: Make flush_tlb_mm_range() more predictable
- x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range()
- x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP
code
- x86/mm: Add the 'nopcid' boot option to turn off PCID
- x86/mm/64: Fix reboot interaction with CR4.PCIDE
- kbuild: add '-fno-stack-check' to kernel build options
- ipv4: igmp: guard against silly MTU values
- ipv6: mcast: better catch silly mtu values
- net: igmp: Use correct source address on IGMPv3 reports
- netlink: Add netns check on taps
- net: qmi_wwan: add Sierra EM7565 1199:9091
- net: reevalulate autoflowlabel setting after sysctl setting
- tcp md5sig: Use skb's saddr when replying to an incoming segment
- tg3: Fix rx hang on MTU change with 5717/5719
- net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case
- sctp: Replace use of sockets_allocated with specified macro.
- ipv4: Fix use-after-free when flushing FIB tables
- net: bridge: fix early call to br_stp_change_bridge_id and plug newlink
leaks
- net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg
workaround
- sock: free skb in skb_complete_tx_timestamp on error
- usbip: fix usbip bind writing random string after command in match_busid
- usbip: stub: stop printing kernel pointer addresses in messages
- usbip: vhci: stop printing kernel pointer addresses in messages
- USB: serial: ftdi_sio: add id for Airbus DS P8GR
- USB: serial: qcserial: add Sierra Wireless EM7565
- USB: serial: option: add support for Telit ME910 PID 0x1101
- USB: serial: option: adding support for YUGA CLM920-NC5
- usb: Add device quirk for Logitech HD Pro Webcam C925e
- usb: add RESET_RESUME for ELSA MicroLink 56K
- USB: Fix off by one in type-specific length check of BOS SSP capability
- usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201
- nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()
- x86/smpboot: Remove stale TLB flush invocations
- n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
- mm/vmstat: Make NR_TLB_REMOTE_FLUSH_RECEIVED available even on UP
- Linux 4.4.109
* Xenial update to 4.4.108 stable release (LP: #1745054)
- arm64: Initialise high_memory global variable earlier
- cxl: Check if vphb exists before iterating over AFU devices
- x86/mm: Fix INVPCID asm constraint
- x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID
- mm/rmap: batched invalidations should use existing api
- mm/mmu_context, sched/core: Fix mmu_context.h assumption
- sched/core: Add switch_mm_irqs_off() and use it in the scheduler
- x86/mm, sched/core: Turn off IRQs in switch_mm()
- ARM: Hide finish_arch_post_lock_switch() from modules
- sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off()
- x86/irq: Do not substract irq_tlb_count from irq_call_count
- ALSA: hda - add support for docking station for HP 820 G2
- ALSA: hda - add support for docking station for HP 840 G3
- arm: kprobes: Fix the return address of multiple kretprobes
- arm: kprobes: Align stack to 8-bytes in test code
- cpuidle: Validate cpu_dev in cpuidle_add_sysfs()
- crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex
- sch_dsmark: fix invalid skb_cow() usage
- bna: integer overflow bug in debugfs
- net: qmi_wwan: Add USB IDs for MDM6600 modem on Motorola Droid 4
- usb: gadget: f_uvc: Sanity check wMaxPacketSize for SuperSpeed
- usb: gadget: udc: remove pointer dereference after free
- netfilter: nfnl_cthelper: fix runtime expectation policy updates
- netfilter: nfnl_cthelper: Fix memory leak
- inet: frag: release spinlock before calling icmp_send()
- pinctrl: st: add irq_request/release_resources callbacks
- scsi: lpfc: Fix PT2PT PRLI reject
- KVM: x86: correct async page present tracepoint
- KVM: VMX: Fix enable VPID conditions
- ARM: dts: ti: fix PCI bus dtc warnings
- hwmon: (asus_atk0110) fix uninitialized data access
- HID: xinmo: fix for out of range for THT 2P arcade controller.
- r8152: prevent the driver from transmitting packets with carrier off
- s390/qeth: no ETH header for outbound AF_IUCV
- bna: avoid writing uninitialized data into hw registers
- net: Do not allow negative values for busy_read and busy_poll sysctl
interfaces
- i40e: Do not enable NAPI on q_vectors that have no rings
- RDMA/iser: Fix possible mr leak on device removal event
- irda: vlsi_ir: fix check for DMA mapping errors
- netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table
- netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register
- ARM: dts: am335x-evmsk: adjust mmc2 param to allow suspend
- KVM: pci-assign: do not map smm memory slot pages in vt-d page tables
- isdn: kcapi: avoid uninitialized data
- xhci: plat: Register shutdown for xhci_plat
- netfilter: nfnetlink_queue: fix secctx memory leak
- ARM: dma-mapping: disallow dma_get_sgtable() for non-kernel managed memory
- cpuidle: powernv: Pass correct drv->cpumask for registration
- bnxt_en: Fix NULL pointer dereference in reopen failure path
- backlight: pwm_bl: Fix overflow condition
- crypto: crypto4xx - increase context and scatter ring buffer elements
- rtc: pl031: make interrupt optional
- net: phy: at803x: Change error to EINVAL for invalid MAC
- PCI: Avoid bus reset if bridge itself is broken
- scsi: cxgb4i: fix Tx skb leak
- scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1
volume
created on two SATA drive
- PCI: Create SR-IOV virtfn/physfn links before attaching driver
- igb: check memory allocation failure
- ixgbe: fix use of uninitialized padding
- PCI/AER: Report non-fatal errors only to the affected endpoint
- scsi: lpfc: Fix secure firmware updates
- scsi: lpfc: PLOGI failures during NPIV testing
- fm10k: ensure we process SM mbx when processing VF mbx
- tcp: fix under-evaluated ssthresh in TCP Vegas
- rtc: set the alarm to the next expiring timer
- cpuidle: fix broadcast control when broadcast can not be entered
- thermal: hisilicon: Handle return value of clk_prepare_enable
- MIPS: math-emu: Fix final emulation phase for certain instructions
- Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
- ALSA: hda - Clear the leftover component assignment at
snd_hdac_i915_exit()
- ALSA: hda - Degrade i915 binding failure message
- ALSA: hda - Fix yet another i915 pointer leftover in error path
- alpha: fix build failures
- Linux 4.4.108
* Xenial update to 4.4.107 stable release (LP: #1745052)
- crypto: hmac - require that the underlying hash algorithm is unkeyed
- crypto: salsa20 - fix blkcipher_walk API usage
- autofs: fix careless error in recent commit
- tracing: Allocate mask_str buffer dynamically
- USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID
- USB: core: prevent malicious bNumInterfaces overflow
- usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer
- ceph: drop negative child dentries before try pruning inode's alias
- Bluetooth: btusb: driver to enable the usb-wakeup feature
- xhci: Don't add a virt_dev to the devs array before it's fully allocated
- sched/rt: Do not pull from current CPU if only one CPU to pull
- dmaengine: dmatest: move callback wait queue to thread context
- ext4: fix fdatasync(2) after fallocate(2) operation
- ext4: fix crash when a directory's i_size is too small
- KEYS: add missing permission check for request_key() destination
- mac80211: Fix addition of mesh configuration element
- usb: phy: isp1301: Add OF device ID table
- md-cluster: free md_cluster_info if node leave cluster
- userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE
- userfaultfd: selftest: vm: allow to build in vm/ directory
- net: initialize msg.msg_flags in recvfrom
- net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values
- net: bcmgenet: correct MIB access of UniMAC RUNT counters
- net: bcmgenet: reserved phy revisions must be checked first
- net: bcmgenet: power down internal phy if open or resume fails
- net: bcmgenet: Power up the internal PHY before probing the MII
- NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)
- NFSD: fix nfsd_reset_versions for NFSv4.
- Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list
- drm/omap: fix dmabuf mmap for dma_alloc'ed buffers
- netfilter: bridge: honor frag_max_size when refragmenting
- writeback: fix memory leak in wb_queue_work()
- net: wimax/i2400m: fix NULL-deref at probe
- dmaengine: Fix array index out of bounds warning in __get_unmap_pool()
- net: Resend IGMP memberships upon peer notification.
- mlxsw: reg: Fix SPVM max record count
- mlxsw: reg: Fix SPVMLR max record count
- intel_th: pci: Add Gemini Lake support
- openrisc: fix issue handling 8 byte get_user calls
- scsi: hpsa: update check for logical volume status
- scsi: hpsa: limit outstanding rescans
- fjes: Fix wrong netdevice feature flags
- drm/radeon/si: add dpm quirk for Oland
- sched/deadline: Make sure the replenishment timer fires in the next period
- sched/deadline: Throttle a constrained deadline task activated after the
deadline
- sched/deadline: Use deadline instead of period when calculating overflow
- mmc: mediatek: Fixed bug where clock frequency could be set wrong
- drm/radeon: reinstate oland workaround for sclk
- afs: Fix missing put_page()
- afs: Populate group ID from vnode status
- afs: Adjust mode bits processing
- afs: Flush outstanding writes when an fd is closed
- afs: Migrate vlocation fields to 64-bit
- afs: Prevent callback expiry timer overflow
- afs: Fix the maths in afs_fs_store_data()
- afs: Populate and use client modification time
- afs: Fix page leak in afs_write_begin()
- afs: Fix afs_kill_pages()
- perf symbols: Fix symbols__fixup_end heuristic for corner cases
- efi/esrt: Cleanup bad memory map log messages
- NFSv4.1 respect server's max size in CREATE_SESSION
- btrfs: add missing memset while reading compressed inline extents
- target: Use system workqueue for ALUA transitions
- target: fix ALUA transition timeout handling
- target: fix race during implicit transition work flushes
- sfc: don't warn on successful change of MAC
- fbdev: controlfb: Add missing modes to fix out of bounds access
- video: udlfb: Fix read EDID timeout
- video: fbdev: au1200fb: Release some resources if a memory allocation
fails
- video: fbdev: au1200fb: Return an error code if a memory allocation fails
- rtc: pcf8563: fix output clock rate
- dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type
- PCI/PME: Handle invalid data when reading Root Status
- powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo
- netfilter: ipvs: Fix inappropriate output of procfs
- powerpc/opal: Fix EBUSY bug in acquiring tokens
- powerpc/ipic: Fix status get and status clear
- target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()
- iscsi-target: fix memory leak in lio_target_tiqn_addtpg()
- target:fix condition return in core_pr_dump_initiator_port()
- target/file: Do not return error for UNMAP if length is zero
- arm-ccn: perf: Prevent module unload while PMU is in use
- crypto: tcrypt - fix buffer lengths in test_aead_speed()
- mm: Handle 0 flags in _calc_vm_trans() macro
- clk: mediatek: add the option for determining PLL source clock
- clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o
VPU
- clk: tegra: Fix cclk_lp divisor register
- ppp: Destroy the mutex when cleanup
- thermal/drivers/step_wise: Fix temperature regulation misbehavior
- GFS2: Take inode off order_write list when setting jdata flag
- bcache: explicitly destroy mutex while exiting
- bcache: fix wrong cache_misses statistics
- l2tp: cleanup l2tp_tunnel_delete calls
- xfs: fix log block underflow during recovery cycle verification
- xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real
- PCI: Detach driver before procfs & sysfs teardown on device remove
- scsi: hpsa: cleanup sas_phy structures in sysfs when unloading
- scsi: hpsa: destroy sas transport properties before scsi_host
- powerpc/perf/hv-24x7: Fix incorrect comparison in memord
- tty fix oops when rmmod 8250
- usb: musb: da8xx: fix babble condition handling
- pinctrl: adi2: Fix Kconfig build problem
- raid5: Set R5_Expanded on parity devices as well as data.
- scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry
- vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend
- scsi: sd: change manage_start_stop to bool in sysfs interface
- scsi: sd: change allow_restart to bool in sysfs interface
- scsi: bfa: integer overflow in debugfs
- udf: Avoid overflow when session starts at large offset
- macvlan: Only deliver one copy of the frame to the macvlan interface
- RDMA/cma: Avoid triggering undefined behavior
- IB/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop
- ath9k: fix tx99 potential info leak
- Linux 4.4.107
* Xenial update to 4.4.106 stable release (LP: #1745047)
- can: ti_hecc: Fix napi poll return value for repoll
- can: kvaser_usb: free buf in error paths
- can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
- can: kvaser_usb: ratelimit errors if incomplete messages are received
- can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
- can: ems_usb: cancel urb on -EPIPE and -EPROTO
- can: esd_usb2: cancel urb on -EPIPE and -EPROTO
- can: usb_8dev: cancel urb on -EPIPE and -EPROTO
- virtio: release virtio index when fail to device_register
- hv: kvp: Avoid reading past allocated blocks from KVP file
- isa: Prevent NULL dereference in isa_bus driver callbacks
- scsi: libsas: align sata_device's rps_resp on a cacheline
- efi: Move some sysfs files to be read-only by root
- ASN.1: fix out-of-bounds read when parsing indefinite length item
- ASN.1: check for error from ASN1_OP_END__ACT actions
- X.509: reject invalid BIT STRING for subjectPublicKey
- x86/PCI: Make broadcom_postcore_init() check acpi_disabled
- ALSA: pcm: prevent UAF in snd_pcm_info
- ALSA: seq: Remove spurious WARN_ON() at timer check
- ALSA: usb-audio: Fix out-of-bound error
- ALSA: usb-audio: Add check return value for usb_string()
- iommu/vt-d: Fix scatterlist offset handling
- s390: fix compat system call table
- kdb: Fix handling of kallsyms_symbol_next() return value
- drm: extra printk() wrapper macros
- drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU
- media: dvb: i2c transfers over usb cannot be done from stack
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
- KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
- arm64: fpsimd: Prevent registers leaking from dead tasks
- ARM: BUG if jumping to usermode address in kernel mode
- ARM: avoid faulting on qemu
- thp: reduce indentation level in change_huge_pmd()
- thp: fix MADV_DONTNEED vs. numa balancing race
- mm: drop unused pmdp_huge_get_and_clear_notify()
- Revert "drm/armada: Fix compile fail"
- Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA"
- Revert "s390/kbuild: enable modversions for symbols exported from asm"
- vti6: Don't report path MTU below IPV6_MIN_MTU.
- ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
- x86/hpet: Prevent might sleep splat on resume
- selftest/powerpc: Fix false failures for skipped tests
- module: set __jump_table alignment to 8
- ARM: OMAP2+: Fix device node reference counts
- ARM: OMAP2+: Release device node after it is no longer needed.
- gpio: altera: Use handle_level_irq when configured as a level_high
- HID: chicony: Add support for another ASUS Zen AiO keyboard
- usb: gadget: configs: plug memory leak
- USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
- kvm: nVMX: VMCLEAR should not cause the vCPU to shut down
- libata: drop WARN from protocol error in ata_sff_qc_issue()
- workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
- scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
- irqchip/crossbar: Fix incorrect type of register size
- KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
- arm: KVM: Survive unknown traps from guests
- arm64: KVM: Survive unknown traps from guests
- spi_ks8995: fix "BUG: key accdaa28 not in .data!"
- bnx2x: prevent crash when accessing PTP with interface down
- bnx2x: fix possible overrun of VFPF multicast addresses array
- bnx2x: do not rollback VF MAC/VLAN filters we did not configure
- ipv6: reorder icmpv6_init() and ip6_mr_init()
- crypto: s5p-sss - Fix completing crypto request in IRQ handler
- i2c: riic: fix restart condition
- zram: set physical queue limits to avoid array out of bounds accesses
- netfilter: don't track fragmented packets
- axonram: Fix gendisk handling
- drm/amd/amdgpu: fix console deadlock if late init failed
- powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested
- EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
- EDAC, i5000, i5400: Fix definition of NRECMEMB register
- kbuild: pkg: use --transform option to prefix paths in tar
- mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
- route: also update fnhe_genid when updating a route cache
- route: update fnhe_expires for redirect when the fnhe exists
- lib/genalloc.c: make the avail variable an atomic_long_t
- dynamic-debug-howto: fix optional/omitted ending line number to be LARGE
instead of 0
- NFS: Fix a typo in nfs_rename()
- sunrpc: Fix rpc_task_begin trace point
- block: wake up all tasks blocked in get_request()
- sparc64/mm: set fields in deferred pages
- sctp: do not free asoc when it is already dead in sctp_sendmsg
- sctp: use the right sk after waking up from wait_buf sleep
- atm: horizon: Fix irq release error
- jump_label: Invoke jump_label_test() via early_initcall()
- xfrm: Copy policy family in clone_policy
- IB/mlx4: Increase maximal message size under UD QP
- IB/mlx5: Assign send CQ and recv CQ of UMR QP
- afs: Connect up the CB.ProbeUuid
- ipvlan: fix ipv6 outbound device
- audit: ensure that 'audit=1' actually enables audit for PID 1
- ipmi: Stop timers before cleaning up the module
- s390: always save and restore all registers on context switch
- tipc: fix memory leak in tipc_accept_from_sock()
- rds: Fix NULL pointer dereference in __rds_rdma_map
- sit: update frag_off info
- packet: fix crash in fanout_demux_rollover()
- net/packet: fix a race in packet_bind() and packet_notifier()
- Revert "x86/efi: Build our own page table structures"
- Revert "x86/efi: Hoist page table switching code into efi_call_virt()"
- Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"
- arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
- usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
- Linux 4.4.106
* Xenial update to 4.4.105 stable release (LP: #1745046)
- bcache: only permit to recovery read error when cache device is clean
- bcache: recover data from backing when data is clean
- uas: Always apply US_FL_NO_ATA_1X quirk to Seagate devices
- usb: quirks: Add no-lpm quirk for KY-688 USB 3.1 Type-C Hub
- serial: 8250_pci: Add Amazon PCI serial device ID
- s390/runtime instrumentation: simplify task exit handling
- USB: serial: option: add Quectel BG96 id
- ima: fix hash algorithm initialization
- s390/pci: do not require AIS facility
- selftests/x86/ldt_get: Add a few additional tests for limits
- serial: 8250_fintek: Fix rs485 disablement on invalid ioctl()
- spi: sh-msiof: Fix DMA transfer size check
- usb: phy: tahvo: fix error handling in tahvo_usb_probe()
- serial: 8250: Preserve DLD[7:4] for PORT_XR17V35X
- x86/entry: Use SYSCALL_DEFINE() macros for sys_modify_ldt()
- EDAC, sb_edac: Fix missing break in switch
- sysrq : fix Show Regs call trace on ARM
- perf test attr: Fix ignored test case result
- kprobes/x86: Disable preemption in ftrace-based jprobes
- net: systemport: Utilize skb_put_padto()
- net: systemport: Pad packet before inserting TSB
- ARM: OMAP1: DMA: Correct the number of logical channels
- vti6: fix device register to report IFLA_INFO_KIND
- net/appletalk: Fix kernel memory disclosure
- ravb: Remove Rx overflow log messages
- nfs: Don't take a reference on fl->fl_file for LOCK operation
- KVM: arm/arm64: Fix occasional warning from the timer work function
- NFSv4: Fix client recovery when server reboots multiple times
- drm/exynos/decon5433: set STANDALONE_UPDATE_F on output enablement
- net: sctp: fix array overrun read on sctp_timer_tbl
- tipc: fix cleanup at module unload
- dmaengine: pl330: fix double lock
- tcp: correct memory barrier usage in tcp_check_space()
- mm: avoid returning VM_FAULT_RETRY from ->page_mkwrite handlers
- xen-netfront: Improve error handling during initialization
- net: fec: fix multicast filtering hardware setup
- Revert "ocfs2: should wait dio before inode lock in ocfs2_setattr()"
- usb: hub: Cycle HUB power when initialization fails
- usb: xhci: fix panic in xhci_free_virt_devices_depth_first
- usb: ch9: Add size macro for SSP dev cap descriptor
- USB: core: Add type-specific length check of BOS descriptors
- USB: Increase usbfs transfer limit
- USB: devio: Prevent integer overflow in proc_do_submiturb()
- USB: usbfs: Filter flags passed in from user space
- usb: host: fix incorrect updating of offset
- xen-netfront: avoid crashing on resume after a failure in
talk_to_netback()
- Linux 4.4.105
* Xenial update to 4.4.104 stable release (LP: #1745043)
- x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
- x86/efi: Hoist page table switching code into efi_call_virt()
- x86/efi: Build our own page table structures
- ARM: dts: omap3: logicpd-torpedo-37xx-devkit: Fix MMC1 cd-gpio
- x86/efi-bgrt: Fix kernel panic when mapping BGRT data
- x86/efi-bgrt: Replace early_memremap() with memremap()
- mm/madvise.c: fix madvise() infinite loop under special circumstances
- btrfs: clear space cache inode generation always
- KVM: x86: pvclock: Handle first-time write to pvclock-page contains random
junk
- KVM: x86: Exit to user-mode on #UD intercept when emulator requires
- KVM: x86: inject exceptions produced by x86_decode_insn
- mmc: core: Do not leave the block driver in a suspended state
- eeprom: at24: check at24_read/write arguments
- bcache: Fix building error on MIPS
- Revert "drm/radeon: dont switch vt on suspend"
- drm/radeon: fix atombios on big endian
- drm/panel: simple: Add missing panel_simple_unprepare() calls
- mtd: nand: Fix writing mtdoops to nand flash.
- NFS: revalidate "." etc correctly on "open".
- drm/i915: Don't try indexed reads to alternate slave addresses
- drm/i915: Prevent zero length "index" write
- nfsd: Make init_open_stateid() a bit more whole
- nfsd: Fix stateid races between OPEN and CLOSE
- nfsd: Fix another OPEN stateid race
- Linux 4.4.104
* Xenial update to 4.4.103 stable release (LP: #1744873)
- s390: fix transactional execution control register handling
- s390/runtime instrumention: fix possible memory corruption
- s390/disassembler: add missing end marker for e7 table
- s390/disassembler: increase show_code buffer size
- AF_VSOCK: Shrink the area influenced by prepare_to_wait
- vsock: use new wait API for vsock_stream_sendmsg()
- sched: Make resched_cpu() unconditional
- lib/mpi: call cond_resched() from mpi_powm() loop
- x86/decoder: Add new TEST instruction pattern
- ARM: 8722/1: mm: make STRICT_KERNEL_RWX effective for LPAE
- ARM: 8721/1: mm: dump: check hardware RO bit for LPAE
- MIPS: ralink: Fix MT7628 pinmux
- MIPS: ralink: Fix typo in mt7628 pinmux function
- ALSA: hda: Add Raven PCI ID
- dm bufio: fix integer overflow when limiting maximum cache size
- dm: fix race between dm_get_from_kobject() and __dm_destroy()
- MIPS: Fix an n32 core file generation regset support regression
- MIPS: BCM47XX: Fix LED inversion for WRT54GSv1
- autofs: don't fail mount for transient error
- nilfs2: fix race condition that causes file system corruption
- eCryptfs: use after free in ecryptfs_release_messaging()
- bcache: check ca->alloc_thread initialized before wake up it
- isofs: fix timestamps beyond 2027
- NFS: Fix typo in nomigration mount option
- nfs: Fix ugly referral attributes
- nfsd: deal with revoked delegations appropriately
- rtlwifi: rtl8192ee: Fix memory leak when loading firmware
- rtlwifi: fix uninitialized rtlhal->last_suspend_sec time
- ata: fixes kernel crash while tracing ata_eh_link_autopsy event
- ext4: fix interaction between i_size, fallocate, and delalloc after a
crash
- ALSA: pcm: update tstamp only if audio_tstamp changed
- ALSA: usb-audio: Add sanity checks to FE parser
- ALSA: usb-audio: Fix potential out-of-bound access at parsing SU
- ALSA: usb-audio: Add sanity checks in v2 clock parsers
- ALSA: timer: Remove kernel warning at compat ioctl error paths
- ALSA: hda/realtek - Fix ALC700 family no sound issue
- fix a page leak in vhost_scsi_iov_to_sgl() error recovery
- fs/9p: Compare qid.path in v9fs_test_inode
- iscsi-target: Fix non-immediate TMR reference leak
- target: Fix QUEUE_FULL + SCSI task attribute handling
- KVM: nVMX: set IDTR and GDTR limits when loading L1 host state
- KVM: SVM: obey guest PAT
- SUNRPC: Fix tracepoint storage issues with svc_recv and svc_rqst_status
- clk: ti: dra7-atl-clock: Fix of_node reference counting
- clk: ti: dra7-atl-clock: fix child-node lookups
- libnvdimm, namespace: fix label initialization to use valid seq numbers
- libnvdimm, namespace: make 'resource' attribute only readable by root
- IB/srpt: Do not accept invalid initiator port names
- IB/srp: Avoid that a cable pull can trigger a kernel crash
- NFC: fix device-allocation error return
- i40e: Use smp_rmb rather than read_barrier_depends
- igb: Use smp_rmb rather than read_barrier_depends
- igbvf: Use smp_rmb rather than read_barrier_depends
- ixgbevf: Use smp_rmb rather than read_barrier_depends
- i40evf: Use smp_rmb rather than read_barrier_depends
- fm10k: Use smp_rmb rather than read_barrier_depends
- ixgbe: Fix skb list corruption on Power systems
- parisc: Fix validity check of pointer size argument in new CAS
implementation
- powerpc/signal: Properly handle return value from uprobe_deny_signal()
- media: Don't do DMA on stack for firmware upload in the AS102 driver
- media: rc: check for integer overflow
- cx231xx-cards: fix NULL-deref on missing association descriptor
- media: v4l2-ctrl: Fix flags field on Control events
- sched/rt: Simplify the IPI based RT balancing logic
- fscrypt: lock mutex before checking for bounce page pool
- net/9p: Switch to wait_event_killable()
- PM / OPP: Add missing of_node_put(np)
- e1000e: Fix error path in link detection
- e1000e: Fix return value test
- RDS: RDMA: return appropriate error on rdma map failures
- PCI: Apply _HPX settings only to relevant devices
- dmaengine: zx: set DMA_CYCLIC cap_mask bit
- net: Allow IP_MULTICAST_IF to set index to L3 slave
- net: 3com: typhoon: typhoon_init_one: make return values more specific
- net: 3com: typhoon: typhoon_init_one: fix incorrect return values
- drm/armada: Fix compile fail
- ath10k: fix incorrect txpower set by P2P_DEVICE interface
- ath10k: ignore configuring the incorrect board_id
- ath10k: fix potential memory leak in ath10k_wmi_tlv_op_pull_fw_stats()
- ath10k: set CTS protection VDEV param only if VDEV is up
- ALSA: hda - Apply ALC269_FIXUP_NO_SHUTUP on HDA_FIXUP_ACT_PROBE
- drm: Apply range restriction after color adjustment when allocation
- mac80211: Remove invalid flag operations in mesh TSF synchronization
- mac80211: Suppress NEW_PEER_CANDIDATE event if no room
- iio: light: fix improper return value
- staging: iio: cdc: fix improper return value
- spi: SPI_FSL_DSPI should depend on HAS_DMA
- netfilter: nft_queue: use raw_smp_processor_id()
- netfilter: nf_tables: fix oob access
- ASoC: rsnd: don't double free kctrl
- btrfs: return the actual error value from from btrfs_uuid_tree_iterate
- ASoC: wm_adsp: Don't overrun firmware file buffer when reading region data
- s390/kbuild: enable modversions for symbols exported from asm
- xen: xenbus driver must not accept invalid transaction ids
- Revert "sctp: do not peel off an assoc from one netns to another one"
- Linux 4.4.103
* ppc64el: Do not call ibm,os-term on panic (LP: #1736954)
- powerpc: Do not call ppc_md.panic in fadump panic notifier
* Xenial update to 4.4.102 stable release (LP: #1744870)
- mm, hwpoison: fixup "mm: check the return value of lookup_page_ext for all
call sites"
- Linux 4.4.102
* Xenial update to 4.4.101 stable release (LP: #1744794)
- tcp: do not mangle skb->cb[] in tcp_make_synack()
- netfilter/ipvs: clear ipvs_property flag when SKB net namespace changed
- bonding: discard lowest hash bit for 802.3ad layer3+4
- vlan: fix a use-after-free in vlan_device_event()
- af_netlink: ensure that NLMSG_DONE never fails in dumps
- sctp: do not peel off an assoc from one netns to another one
- fealnx: Fix building error on MIPS
- net/sctp: Always set scope_id in sctp_inet6_skb_msgname
- ima: do not update security.ima if appraisal status is not INTEGRITY_PASS
- serial: omap: Fix EFR write on RTS deassertion
- arm64: fix dump_instr when PAN and UAO are in use
- ocfs2: should wait dio before inode lock in ocfs2_setattr()
- ipmi: fix unsigned long underflow
- mm/page_alloc.c: broken deferred calculation
- coda: fix 'kernel memory exposure attempt' in fsync
- mm: check the return value of lookup_page_ext for all call sites
- mm/page_ext.c: check if page_ext is not prepared
- mm/pagewalk.c: report holes in hugetlb ranges
- Linux 4.4.101
* Xenial update to 4.4.100 stable release (LP: #1744639)
- media: imon: Fix null-ptr-deref in imon_probe
- media: dib0700: fix invalid dvb_detach argument
- KVM: x86: fix singlestepping over syscall
- net: cdc_ether: fix divide by 0 on bad descriptors
- net: qmi_wwan: fix divide by 0 on bad descriptors
- arm: crypto: reduce priority of bit-sliced AES cipher
- Bluetooth: btusb: fix QCA Rome suspend/resume
- dmaengine: dmatest: warn user when dma test times out
- extcon: palmas: Check the parent instance to prevent the NULL
- fm10k: request reset when mbx->state changes
- ARM: dts: Fix compatible for ti81xx uarts for 8250
- ARM: dts: Fix am335x and dm814x scm syscon to probe children
- ARM: OMAP2+: Fix init for multiple quirks for the same SoC
- ARM: dts: Fix omap3 off mode pull defines
- ata: ATA_BMDMA should depend on HAS_DMA
- ata: SATA_HIGHBANK should depend on HAS_DMA
- ata: SATA_MV should depend on HAS_DMA
- drm/sti: sti_vtg: Handle return NULL error from devm_ioremap_nocache
- igb: reset the PHY before reading the PHY ID
- igb: close/suspend race in netif_device_detach
- igb: Fix hw_dbg logging in igb_update_flash_i210
- scsi: ufs-qcom: Fix module autoload
- scsi: ufs: add capability to keep auto bkops always enabled
- staging: rtl8188eu: fix incorrect ERROR tags from logs
- scsi: lpfc: FCoE VPort enable-disable does not bring up the VPort
- scsi: lpfc: Correct host name in symbolic_name field
- scsi: lpfc: Correct issue leading to oops during link reset
- scsi: lpfc: Clear the VendorVersion in the PLOGI/PLOGI ACC payload
- ALSA: vx: Don't try to update capture stream before running
- ALSA: vx: Fix possible transfer overflow
- backlight: lcd: Fix race condition during register
- backlight: adp5520: Fix error handling in adp5520_bl_probe()
- gpu: drm: mgag200: mgag200_main:- Handle error from pci_iomap
- ALSA: hda/realtek - Add new codec ID ALC299
- arm64: dts: NS2: reserve memory for Nitro firmware
- ixgbe: fix AER error handling
- ixgbe: handle close/suspend race with netif_device_detach/present
- ixgbe: Reduce I2C retry count on X550 devices
- ixgbe: add mask for 64 RSS queues
- ixgbe: do not disable FEC from the driver
- staging: rtl8712: fixed little endian problem
- MIPS: End asm function prologue macros with .insn
- mm: add PHYS_PFN, use it in __phys_to_pfn()
- MIPS: init: Ensure bootmem does not corrupt reserved memory
- MIPS: init: Ensure reserved memory regions are not added to bootmem
- MIPS: Netlogic: Exclude netlogic,xlp-pic code from XLR builds
- Revert "crypto: xts - Add ECB dependency"
- Revert "uapi: fix linux/rds.h userspace compilation errors"
- uapi: fix linux/rds.h userspace compilation error
- uapi: fix linux/rds.h userspace compilation errors
- USB: usbfs: compute urb->actual_length for isochronous
- USB: Add delay-init quirk for Corsair K70 LUX keyboards
- USB: serial: qcserial: add pid/vid for Sierra Wireless EM7355 fw update
- USB: serial: garmin_gps: fix I/O after failed probe and remove
- USB: serial: garmin_gps: fix memory leak on probe errors
- Linux 4.4.100
* Xenial update to 4.4.99 stable release (LP: #1744636)
- mac80211: accept key reinstall without changing anything
- mac80211: use constant time comparison with keys
- mac80211: don't compare TKIP TX MIC key in reinstall prevention
- usb: usbtest: fix NULL pointer dereference
- Input: ims-psu - check if CDC union descriptor is sane
- ALSA: seq: Cancel pending autoload work at unbinding device
- tun/tap: sanitize TUNSETSNDBUF input
- tcp: fix tcp_mtu_probe() vs highest_sack
- l2tp: check ps->sock before running pppol2tp_session_ioctl()
- tun: call dev_get_valid_name() before register_netdevice()
- sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect
- packet: avoid panic in packet_getsockopt()
- ipv6: flowlabel: do not leave opt->tot_len with garbage
- net/unix: don't show information about sockets from other namespaces
- ip6_gre: only increase err_count for some certain type icmpv6 in
ip6gre_err
- tun: allow positive return values on dev_get_valid_name() call
- sctp: reset owner sk for data chunks on out queues when migrating a sock
- ppp: fix race in ppp device destruction
- ipip: only increase err_count for some certain type icmp in ipip_err
- tcp/dccp: fix ireq->opt races
- tcp/dccp: fix lockdep splat in inet_csk_route_req()
- tcp/dccp: fix other lockdep splats accessing ireq_opt
- security/keys: add CONFIG_KEYS_COMPAT to Kconfig
- tipc: fix link attribute propagation bug
- brcmfmac: remove setting IBSS mode when stopping AP
- target/iscsi: Fix iSCSI task reassignment handling
- target: Fix node_acl demo-mode + uncached dynamic shutdown regression
- misc: panel: properly restore atomic counter on error path
- Linux 4.4.99
* elantech touchpad of Lenovo L480/580 failed to detect hw_version
(LP: #1733605)
- Input: elantech - add new icbody type 15
* Disabling zfs does not always disable module checks for the zfs modules
(LP: #1737176)
- [Packaging] disable zfs module checks when zfs is disabled
* Using asymmetric key for IMA appraisal crashes the system in Ubuntu 16.04
(LP: #1735977)
- integrity: convert digsig to akcipher api
* CVE-2017-17450
- netfilter: xt_osf: Add missing permission checks
* CVE-2017-15129
- net: Fix double free and memory corruption in get_net_ns_by_id()
* CVE-2018-5344
- loop: fix concurrent lo_open/lo_release
* [KVM] Lower the default for halt_poll_ns to 200000 ns (LP: #1724614)
- KVM: x86: lower default for halt_poll_ns
* $(LOCAL_ENV_CC) and $(LOCAL_ENV_DISTCC_HOSTS) should be properly quoted
(LP: #1744077)
- [Debian] pass LOCAL_ENV_CC and LOCAL_ENV_DISTCC_HOSTS properly
* Redpine: Wifi/BT not functioning after s3 resume (LP: #1742090) //
[16.04][classic] Redpine: wowlan feature doesn't work (LP: #1742094)
- SAUCE: Redpine: fix for wowlan wakeup failure
- SAUCE: Redpine: fix data issue with non-uapsd APs
- SAUCE: Redpine: fix reset card issue
- SAUCE: Redpine: fix wowlan issue
* Using an NVMe drive causes huge power drain (LP: #1664602) // Samsung SSD
960 EVO 500GB refused to change power state (LP: #1705748)
- nvme-pci: disable APST on Samsung SSD 960 EVO + ASUS PRIME B350M-A
* Using an NVMe drive causes huge power drain (LP: #1664602)
- nvme/scsi: Remove power management support
- nvme: return the whole CQE through the request passthrough interface
- nvme: factor out a add nvme_is_write helper
- nvme: Modify and export sync command submission for fabrics
- nvme: Fix nvme_get/set_features() with a NULL result pointer
- nvme: Pass pointers, not dma addresses, to nvme_get/set_features()
- nvme: Add a quirk mechanism that uses identify_ctrl
- nvme: Enable autonomous power state transitions
- nvme: Adjust the Samsung APST quirk
- nvme: Quirk APST off on "THNSF5256GPUK TOSHIBA"
- nvme: only consider exit latency when choosing useful non-op power states
- nvme: relax APST default max latency to 100ms
- nvme: Quirk APST on Intel 600P/P3100 devices
* CVE-2017-17862
- bpf: fix branch pruning logic
* CVE-2017-16995
- bpf: fix incorrect sign extension in check_alu_op()
* CVE-2017-17741
- KVM: Fix stack-out-of-bounds read in write_mmio
* CVE-2018-5333
- RDS: null pointer dereference in rds_atomic_free_op
* the kernel is blackholing IPv6 packets to linkdown nexthops (LP: #1738219)
- ipv6: Do not consider linkdown nexthops during multipath
* /dev/bcache/by-uuid links not created after reboot (LP: #1729145)
- SAUCE: (no-up) bcache: decouple emitting a cached_dev CHANGE uevent
* e1000e in 4.4.0-97-generic breaks 82574L under heavy load. (LP: #1730550)
- e1000e: Avoid receiver overrun interrupt bursts
- e1000e: Separate signaling for link check/link up
* ath10k: enhance rf signal strength (LP: #1736317)
- ath10k: add max_tx_power for QCA6174 WLAN.RM.2.0 firmware
* User reports excessive ALUA retry messages (LP: #1720228)
- scsi_dh_alua: uninitialized variable in alua_rtpg()
* Add installer support for new Broadcom network drivers. (LP: #1734757)
- d-i: Add bnxt_en_bpo to nic-modules.
* Transparent hugepages should default to enabled=madvise (LP: #1703742)
- SAUCE: use CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y as default
-- Kleber Sacilotto de Souza <kleber.so...@canonical.com> Mon, 19 Mar
2018 10:54:09 +0000
** Changed in: linux-kvm (Ubuntu Xenial)
Status: Confirmed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-15129
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-16995
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-17448
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-17450
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-17741
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-17862
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5753
** CVE added: https://cve.mitre.org/cgi-
bin/cvename.cgi?name=2018-1000026
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-5333
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-5344
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1755219
Title:
linux-kvm: 4.4.0-1020.25 -proposed tracker
Status in Kernel SRU Workflow:
In Progress
Status in Kernel SRU Workflow automated-testing series:
Fix Released
Status in Kernel SRU Workflow certification-testing series:
Invalid
Status in Kernel SRU Workflow prepare-package series:
Fix Released
Status in Kernel SRU Workflow prepare-package-meta series:
Fix Released
Status in Kernel SRU Workflow promote-to-proposed series:
Fix Released
Status in Kernel SRU Workflow promote-to-security series:
Fix Committed
Status in Kernel SRU Workflow promote-to-updates series:
Fix Committed
Status in Kernel SRU Workflow regression-testing series:
Fix Released
Status in Kernel SRU Workflow security-signoff series:
Fix Released
Status in Kernel SRU Workflow upload-to-ppa series:
New
Status in Kernel SRU Workflow verification-testing series:
Fix Released
Status in linux-kvm package in Ubuntu:
Invalid
Status in linux-kvm source package in Xenial:
Fix Released
Bug description:
This bug is for tracking the <version to be filled> upload package.
This bug will contain status and testing results related to that
upload.
For an explanation of the tasks and the associated workflow see:
https://wiki.ubuntu.com/Kernel/kernel-sru-workflow
-- swm properties --
boot-testing-requested: true
kernel-stable-master-bug: 1760327
phase: Promoted to proposed
proposed-announcement-sent: true
proposed-testing-requested: true
To manage notifications about this bug go to:
https://bugs.launchpad.net/kernel-sru-workflow/+bug/1755219/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
