This bug was fixed in the package linux-kvm - 4.4.0-1077.84
---------------
linux-kvm (4.4.0-1077.84) xenial; urgency=medium
* xenial/linux-kvm: 4.4.0-1077.84 -proposed tracker (LP: #1885506)
* LXD 4.2 broken on linux-kvm due to missing VLAN filtering (LP: #1882955)
- [Config] VLAN_8021Q=m && BRIDGE_VLAN_FILTERING=y
[ Ubuntu: 4.4.0-186.216 ]
* xenial/linux: 4.4.0-186.216 -proposed tracker (LP: #1885514)
* Xenial update: v4.4.228 upstream stable release (LP: #1884564)
- ipv6: fix IPV6_ADDRFORM operation logic
- vxlan: Avoid infinite loop when suppressing NS messages with invalid
options
- scsi: return correct blkprep status code in case scsi_init_io() fails.
- net: phy: marvell: Limit 88m1101 autoneg errata to 88E1145 as well.
- pwm: fsl-ftm: Use flat regmap cache
- ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
- sched/fair: Don't NUMA balance for kthreads
- ath9k_htc: Silence undersized packet warnings
- x86_64: Fix jiffies ODR violation
- x86/speculation: Prevent rogue cross-process SSBD shutdown
- x86/reboot/quirks: Add MacBook6,1 reboot quirk
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path
- ALSA: es1688: Add the missed snd_card_free()
- ALSA: usb-audio: Fix inconsistent card PM state after resume
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
- ACPI: PM: Avoid using power resources if there are none for D0
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
- spi: bcm2835aux: Fix controller unregister order
- ALSA: pcm: disallow linking stream to itself
- x86/speculation: Change misspelled STIPB to STIBP
- x86/speculation: Add support for STIBP always-on preferred mode
- x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced
IBRS.
- x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
- spi: dw: fix possible race condition
- spi: dw: Fix controller unregister order
- spi: No need to assign dummy value in spi_unregister_controller()
- spi: Fix controller unregister order
- spi: pxa2xx: Fix controller unregister order
- spi: bcm2835: Fix controller unregister order
- ovl: initialize error in ovl_copy_xattr
- proc: Use new_inode not new_inode_pseudo
- video: fbdev: w100fb: Fix a potential double free.
- KVM: nSVM: leave ASID aside in copy_vmcb_control_area
- KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
- KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
- Smack: slab-out-of-bounds in vsscanf
- mm/slub: fix a memory leak in sysfs_slab_add()
- fat: don't allow to mount if the FAT length == 0
- can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
- spi: dw: Zero DMA Tx and Rx configurations on stack
- Bluetooth: Add SCO fallback for invalid LMP parameters error
- kgdb: Prevent infinite recursive entries to the debugger
- spi: dw: Enable interrupts in accordance with DMA xfer mode
- clocksource: dw_apb_timer_of: Fix missing clockevent timers
- btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums
- ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in
vmxnet3_get_rss()
- staging: android: ion: use vmap instead of vm_map_ram
- e1000: Distribute switch variables for initialization
- media: dvb: return -EREMOTEIO on i2c transfer failure.
- MIPS: Make sparse_init() using top-down allocation
- netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
- lib/mpi: Fix 64-bit MIPS build with Clang
- net: lpc-enet: fix error return code in lpc_mii_init()
- net: allwinner: Fix use correct return type for ndo_start_xmit()
- powerpc/spufs: fix copy_to_user while atomic
- mips: cm: Fix an invalid error code of INTVN_*_ERR
- kgdb: Fix spurious true from in_dbg_master()
- md: don't flush workqueue unconditionally in md_open
- mwifiex: Fix memory corruption in dump_station
- mips: Add udelay lpj numbers adjustment
- x86/mm: Stop printing BRK addresses
- m68k: mac: Don't call via_flush_cache() on Mac IIfx
- macvlan: Skip loopback packets in RX handler
- PCI: Don't disable decoding when mmio_always_on is set
- MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
- ixgbe: fix signed-integer-overflow warning
- spi: dw: Return any value retrieved from the dma_transfer callback
- cpuidle: Fix three reference count leaks
- ima: Fix ima digest hash table key calculation
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
- Btrfs: fix unreplayable log after snapshot delete + parent dir fsync
- btrfs: send: emit file capabilities after chown
- btrfs: fix error handling when submitting direct I/O bio
- ima: Directly assign the ima_default_policy pointer to ima_rules
- PCI: Program MPS for RCiEP devices
- e1000e: Relax condition to trigger reset for ME workaround
- carl9170: remove P2P_GO support
- media: go7007: fix a miss of snd_card_free
- b43legacy: Fix case where channel status is corrupted
- b43: Fix connection problem with WPA3
- b43_legacy: Fix connection problem with WPA3
- igb: Report speed and duplex as unknown when device is runtime suspended
- power: vexpress: add suppress_bind_attrs to true
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs
- sparc32: fix register window handling in genregs32_[gs]et()
- kernel/cpu_pm: Fix uninitted local in cpu_pm
- ARM: tegra: Correct PL310 Auxiliary Control Register initialization
- drivers/macintosh: Fix memleak in windfarm_pm112 driver
- kbuild: force to build vmlinux if CONFIG_MODVERSION=y
- sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate
registrations.
- sunrpc: clean up properly in gss_mech_unregister()
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg
- perf probe: Do not show the skipped events
- perf symbols: Fix debuginfo search for Ubuntu
- Linux 4.4.228
* Update lockdown patches (LP: #1884159)
- acpi: Disable ACPI table override if the kernel is locked down
- SAUCE: (efi-lockdown) x86/mmiotrace: Lock down the testmmiotrace module
- Revert "Restrict /dev/mem and /dev/kmem when module loading is restricted"
- Revert "x86: Lock down IO port access when module security is enabled"
- SAUCE: (efi-lockdown) Restrict /dev/{mem, kmem, port} when the kernel is
locked down
- Annotate module params that specify hardware parameters (eg. ioport)
- Annotate hardware config module parameters in arch/x86/mm/
- Annotate hardware config module parameters in drivers/char/ipmi/
- Annotate hardware config module parameters in drivers/char/mwave/
- Annotate hardware config module parameters in drivers/char/
- Annotate hardware config module parameters in drivers/clocksource/
- Annotate hardware config module parameters in drivers/cpufreq/
- Annotate hardware config module parameters in drivers/gpio/
- Annotate hardware config module parameters in drivers/i2c/
- Annotate hardware config module parameters in drivers/input/
- Annotate hardware config module parameters in drivers/isdn/
- Annotate hardware config module parameters in drivers/media/
- Annotate hardware config module parameters in drivers/misc/
- Annotate hardware config module parameters in drivers/mmc/host/
- Annotate hardware config module parameters in drivers/net/appletalk/
- Annotate hardware config module parameters in drivers/net/arcnet/
- Annotate hardware config module parameters in drivers/net/can/
- Annotate hardware config module parameters in drivers/net/ethernet/
- Annotate hardware config module parameters in drivers/net/hamradio/
- Annotate hardware config module parameters in drivers/net/irda/
- Annotate hardware config module parameters in drivers/net/wan/
- Annotate hardware config module parameters in drivers/net/wireless/
- Annotate hardware config module parameters in drivers/parport/
- Annotate hardware config module parameters in drivers/pci/hotplug/
- Annotate hardware config module parameters in drivers/pcmcia/
- Annotate hardware config module parameters in drivers/scsi/
- Annotate hardware config module parameters in drivers/staging/media/
- Annotate hardware config module parameters in drivers/staging/speakup/
- Annotate hardware config module parameters in drivers/staging/vme/
- Annotate hardware config module parameters in drivers/tty/
- Annotate hardware config module parameters in drivers/video/
- Annotate hardware config module parameters in drivers/watchdog/
- Annotate hardware config module parameters in fs/pstore/
- Annotate hardware config module parameters in sound/drivers/
- Annotate hardware config module parameters in sound/isa/
- Annotate hardware config module parameters in sound/oss/
- Annotate hardware config module parameters in sound/pci/
- SAUCE: (efi-lockdown) Lock down module params that specify hardware
parameters (eg. ioport)
- SAUCE: (efi-lockdown) Prohibit PCMCIA CIS storage when the kernel is
locked
down
- SAUCE: (efi-lockdown) kexec_file: Disable at runtime if the kernel is
locked
down
- SAUCE: (efi-lockdown) Lock down TIOCSSERIAL
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
- debugfs: prevent access to possibly dead file_operations at file open
- debugfs: prevent access to removed files' private data
- debugfs: add support for self-protecting attribute file fops
- debugfs: unproxify integer attribute files
- debugfs: unproxify files created through debugfs_create_bool()
- debugfs: unproxify files created through debugfs_create_blob()
- debugfs: unproxify files created through debugfs_create_u32_array()
- debugfs: full_proxy_open(): free proxy on ->open() failure
- debugfs: open_proxy_open(): avoid double fops release
- SAUCE: (efi-lockdown) debugfs: Disallow use of debugfs files when the
kernel
is locked down
* Xenial update: v4.4.227 upstream stable release (LP: #1883918)
- scsi: scsi_devinfo: fixup string compare
- usb: gadget: f_uac2: fix error handling in afunc_bind (again)
- platform/x86: acer-wmi: setup accelerometer when ACPI device was found
- esp6: fix memleak on error path in esp6_input
- IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()'
- ALSA: hda - No loopback on ALC299 codec
- spi: dw: use "smp_mb()" to avoid sending spi data error
- s390/ftrace: save traced function caller
- ARC: Fix ICCM & DCCM runtime size checks
- x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables
- net: bmac: Fix read of MAC address from ROM
- net/ethernet/freescale: rework quiesce/activate for ucc_geth
- net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x
- pppoe: only process PADT targeted at local interfaces
- mmc: fix compilation of user API
- slcan: Fix double-free on slcan_open() error path
- slip: not call free_netdev before rtnl_unlock in slip_open
- scsi: ufs: Release clock if DMA map fails
- devinet: fix memleak in inetdev_init()
- NFC: st21nfca: add missed kfree_skb() in an error path
- vsock: fix timeout in vsock_accept()
- l2tp: add sk_family checks to l2tp_validate_socket
- l2tp: do not use inet_hash()/inet_unhash()
- USB: serial: qcserial: add DW5816e QDL support
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors
- USB: serial: option: add Telit LE910C1-EUX compositions
- vt: keyboard: avoid signed integer overflow in k_ascii
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
- x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping
- x86/speculation: Add SRBDS vulnerability and mitigation documentation
- x86/speculation: Add Ivy Bridge to affected list
- iio: vcnl4000: Fix i2c swapped word reading.
- uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly
aligned
- Linux 4.4.227
* Xenial update: v4.4.226 upstream stable release (LP: #1883917)
- ax25: fix setsockopt(SO_BINDTODEVICE)
- net: revert "net: get rid of an signed integer overflow in
ip_idents_reserve()"
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and
socket is closed
- net/mlx5: Add command entry handling completion
- net: sun: fix missing release regions in cas_init_one().
- net/mlx4_core: fix a memory leak bug.
- uapi: fix linux/if_pppol2tp.h userspace compilation errors
- IB/cma: Fix reference count leak when no ipv4 addresses are set
- cachefiles: Fix race between read_waiter and read_copier involving
op->to_do
- usb: gadget: legacy: fix redundant initialization warnings
- cifs: Fix null pointer check in cifs_read
- Input: usbtouchscreen - add support for BonXeon TP
- Input: evdev - call input_flush_device() on release(), not flush()
- Input: xpad - add custom init packet for Xbox One S controllers
- Input: i8042 - add ThinkPad S230u to i8042 reset list
- IB/qib: Call kobject_put() when kobject_init_and_add() fails
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
- exec: Always set cap_ambient in cap_bprm_set_creds
- fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument
- iommu: Fix reference count leak in iommu_group_alloc.
- parisc: Fix kernel panic in mem_init()
- x86/dma: Fix max PFN arithmetic overflow on 32 bit systems
- xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
- xfrm: fix a warning in xfrm_policy_insert_list
- xfrm: fix a NULL-ptr deref in xfrm_local_error
- vti4: eliminated some duplicate code.
- ip_vti: receive ipip packet by calling ip_tunnel_rcv
- netfilter: nft_reject_bridge: enable reject with bridge vlan
- netfilter: ipset: Fix subcounter update skip
- netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test.
- bonding: Fix reference count leak in bond_sysfs_slave_add.
- netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
- genirq/generic_pending: Do not lose pending affinity update
- usb: renesas_usbhs: gadget: fix spin_lock_init() for &uep->lock
- mac80211: fix memory leak
- net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
- mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()
- asm-prototypes: Clear any CPP defines before declaring the functions
- sc16is7xx: move label 'err_spi' to correct section
- drm/msm: Fix possible null dereference on failure of get_pages()
- printk: help pr_debug and pr_devel to optimize out arguments
- scsi: zfcp: fix request object use-after-free in send path causing wrong
traces
- Linux 4.4.226
* Xenial update: v4.4.225 upstream stable release (LP: #1883916)
- igb: use igb_adapter->io_addr instead of e1000_hw->hw_addr
- padata: Remove unused but set variables
- padata: get_next is never NULL
- padata: ensure the reorder timer callback runs on the correct CPU
- padata: ensure padata_do_serial() runs on the correct CPU
- evm: Check also if *tfm is an error pointer in init_desc()
- fix multiplication overflow in copy_fdtable()
- HID: multitouch: add eGalaxTouch P80H84 support
- ceph: fix double unlock in handle_cap_export()
- USB: core: Fix misleading driver bug report
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
- ARM: futex: Address build warning
- media: Fix media_open() to clear filp->private_data in error leg
- drivers/media/media-devnode: clear private_data before put_device()
- media-devnode: add missing mutex lock in error handler
- media-devnode: fix namespace mess
- media-device: dynamically allocate struct media_devnode
- media: fix use-after-free in cdev_put() when app exits after driver unbind
- media: fix media devnode ioctl/syscall and unregister race
- i2c: dev: switch from register_chrdev to cdev API
- i2c: dev: don't start function name with 'return'
- i2c: dev: use after free in detach
- i2c-dev: don't get i2c adapter via i2c_dev
- i2c: dev: Fix the race between the release of i2c_dev and cdev
- padata: set cpu_index of unused CPUs to -1
- sched/fair, cpumask: Export for_each_cpu_wrap()
- padata: Replace delayed timer with immediate workqueue in padata_reorder
- padata: initialize pd->cpu with effective cpumask
- padata: purge get_cpu and reorder_via_wq from padata_do_serial
- ALSA: pcm: fix incorrect hw_base increase
- platform/x86: alienware-wmi: fix kfree on potentially uninitialized
pointer
- libnvdimm/btt: Remove unnecessary code in btt_freelist_init
- l2tp: lock socket before checking flags in connect()
- l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind()
- l2tp: hold session while sending creation notifications
- l2tp: take a reference on sessions used in genetlink handlers
- l2tp: don't use l2tp_tunnel_find() in l2tp_ip and l2tp_ip6
- net: l2tp: export debug flags to UAPI
- net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
- net: l2tp: ppp: change PPPOL2TP_MSG_* => L2TP_MSG_*
- New kernel function to get IP overhead on a socket.
- L2TP:Adjust intf MTU, add underlay L3, L2 hdrs.
- l2tp: remove useless duplicate session detection in l2tp_netlink
- l2tp: remove l2tp_session_find()
- l2tp: define parameters of l2tp_session_get*() as "const"
- l2tp: define parameters of l2tp_tunnel_find*() as "const"
- l2tp: initialise session's refcount before making it reachable
- l2tp: hold tunnel while looking up sessions in l2tp_netlink
- l2tp: hold tunnel while processing genl delete command
- l2tp: hold tunnel while handling genl tunnel updates
- l2tp: hold tunnel while handling genl TUNNEL_GET commands
- l2tp: hold tunnel used while creating sessions with netlink
- l2tp: prevent creation of sessions on terminated tunnels
- l2tp: fix l2tp_eth module loading
- l2tp: don't register sessions in l2tp_session_create()
- l2tp: initialise l2tp_eth sessions before registering them
- l2tp: protect sock pointer of struct pppol2tp_session with RCU
- l2tp: initialise PPP sessions before registering them
- Revert "gfs2: Don't demote a glock until its revokes are written"
- staging: iio: ad2s1210: Fix SPI reading
- mei: release me_cl object reference
- iio: sca3000: Remove an erroneous 'get_device()'
- l2tp: device MTU setup, tunnel socket needs a lock
- cpumask: Make for_each_cpu_wrap() available on UP as well
- Linux 4.4.225
* smpboot: don't call topology_sane() when Sub-NUMA-Clustering is enabled
(LP: #1882478)
- x86, sched: Allow topologies where NUMA nodes share an LLC
* CVE-2020-11935
- SAUCE: aufs: do not call i_readcount_inc()
- SAUCE: aufs: bugfix, IMA i_readcount
* CVE-2019-12380
- efi/x86/Add missing error handling to old_memmap 1:1 mapping code
-- Kelsey Skunberg <kelsey.skunb...@canonical.com> Wed, 01 Jul 2020
16:48:22 -0600
** Changed in: linux-kvm (Ubuntu Xenial)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-12380
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1882955
Title:
LXD 4.2 broken on linux-kvm due to missing VLAN filtering
Status in linux-kvm package in Ubuntu:
Invalid
Status in linux-kvm source package in Xenial:
Fix Released
Status in linux-kvm source package in Bionic:
Fix Released
Status in linux-kvm source package in Eoan:
Fix Committed
Status in linux-kvm source package in Focal:
Fix Released
Bug description:
[Description]
Some VLAN options (BRIDGE_VLAN_FILTERING, and its dependencies
VLAN_8021Q*) were in a different state in Focal/kvm compared to
Focal/generic: LXD now depends on BRIDGE_VLAN_FILTERING and due to
this discrepancy it fails to work on the Focal/kvm kernel: fix it by
aligning the config with Focal/generic
[Fix]
Apply the attached config patch
[Regression potential]
Low, just some config changes already present in generic.
---
This is another case of linux-kvm having unexplained differences compared to
linux-generic in areas that aren't related to hardware drivers (see other bug
we filed for missing nft).
This time, CPC is reporting that LXD no longer works on linux-kvm as
we now set vlan filtering on our bridges to prevent containers from
escaping firewalling through custom vlan tags.
This relies on CONFIG_BRIDGE_VLAN_FILTERING which is a built-in on the
generic kernel but is apparently missing on linux-kvm (I don't have
any system running that kernel to confirm its config, but the behavior
certainly matches that).
We need this fixed in focal and groovy.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-kvm/+bug/1882955/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
