This bug was fixed in the package linux - 4.15.0-23.25
---------------
linux (4.15.0-23.25) bionic; urgency=medium
* linux: 4.15.0-23.25 -proposed tracker (LP: #1772927)
* arm64 SDEI support needs trampoline code for KPTI (LP: #1768630)
- arm64: mmu: add the entry trampolines start/end section markers into
sections.h
- arm64: sdei: Add trampoline code for remapping the kernel
* Some PCIe errors not surfaced through rasdaemon (LP: #1769730)
- ACPI: APEI: handle PCIe AER errors in separate function
- ACPI: APEI: call into AER handling regardless of severity
* qla2xxx: Fix page fault at kmem_cache_alloc_node() (LP: #1770003)
- scsi: qla2xxx: Fix session cleanup for N2N
- scsi: qla2xxx: Remove unused argument from
qlt_schedule_sess_for_deletion()
- scsi: qla2xxx: Serialize session deletion by using work_lock
- scsi: qla2xxx: Serialize session free in qlt_free_session_done
- scsi: qla2xxx: Don't call dma_free_coherent with IRQ disabled.
- scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout()
- scsi: qla2xxx: Prevent relogin trigger from sending too many commands
- scsi: qla2xxx: Fix double free bug after firmware timeout
- scsi: qla2xxx: Fixup locking for session deletion
* Several hisi_sas bug fixes (LP: #1768974)
- scsi: hisi_sas: dt-bindings: add an property of signal attenuation
- scsi: hisi_sas: support the property of signal attenuation for v2 hw
- scsi: hisi_sas: fix the issue of link rate inconsistency
- scsi: hisi_sas: fix the issue of setting linkrate register
- scsi: hisi_sas: increase timer expire of internal abort task
- scsi: hisi_sas: remove unused variable hisi_sas_devices.running_req
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
- scsi: hisi_sas: Code cleanup and minor bug fixes
* [bionic] machine stuck and bonding not working well when nvmet_rdma module
is loaded (LP: #1764982)
- nvmet-rdma: Don't flush system_wq by default during remove_one
- nvme-rdma: Don't flush delete_wq by default during remove_one
* Warnings/hang during error handling of SATA disks on SAS controller
(LP: #1768971)
- scsi: libsas: defer ata device eh commands to libata
* Hotplugging a SATA disk into a SAS controller may cause crash (LP: #1768948)
- ata: do not schedule hot plug if it is a sas host
* ISST-LTE:pKVM:Ubuntu1804: rcu_sched self-detected stall on CPU follow by CPU
ATTEMPT TO RE-ENTER FIRMWARE! (LP: #1767927)
- powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()
- powerpc/64s: return more carefully from sreset NMI
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers
* fsnotify: Fix fsnotify_mark_connector race (LP: #1765564)
- fsnotify: Fix fsnotify_mark_connector race
* Hang on network interface removal in Xen virtual machine (LP: #1771620)
- xen-netfront: Fix hang on device removal
* HiSilicon HNS NIC names are truncated in /proc/interrupts (LP: #1765977)
- net: hns: Avoid action name truncation
* Ubuntu 18.04 kernel crashed while in degraded mode (LP: #1770849)
- SAUCE: powerpc/perf: Fix memory allocation for core-imc based on
num_possible_cpus()
* Switch Build-Depends: transfig to fig2dev (LP: #1770770)
- [Config] update Build-Depends: transfig to fig2dev
* smp_call_function_single/many core hangs with stop4 alone (LP: #1768898)
- cpufreq: powernv: Fix hardlockup due to synchronous smp_call in timer
interrupt
* Add d-i support for Huawei NICs (LP: #1767490)
- d-i: add hinic to nic-modules udeb
* unregister_netdevice: waiting for eth0 to become free. Usage count = 5
(LP: #1746474)
- xfrm: reuse uncached_list to track xdsts
* Include nfp driver in linux-modules (LP: #1768526)
- [Config] Add nfp.ko to generic inclusion list
* Kernel panic on boot (m1.small in cn-north-1) (LP: #1771679)
- x86/xen: Reset VCPU0 info pointer after shared_info remap
* CVE-2018-3639 (x86)
- x86/bugs: Fix the parameters alignment and missing void
- KVM: SVM: Move spec control call after restore of GS
- x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
- x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS
- x86/cpufeatures: Disentangle SSBD enumeration
- x86/cpufeatures: Add FEATURE_ZEN
- x86/speculation: Handle HT correctly on AMD
- x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
- x86/speculation: Add virtualized speculative store bypass disable support
- x86/speculation: Rework speculative_store_bypass_update()
- x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host}
- x86/bugs: Expose x86_spec_ctrl_base directly
- x86/bugs: Remove x86_spec_ctrl_set()
- x86/bugs: Rework spec_ctrl base and mask logic
- x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG
- KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
- x86/bugs: Rename SSBD_NO to SSB_NO
- bpf: Prevent memory disambiguation attack
- KVM: VMX: Expose SSBD properly to guests.
* Suspend to idle: Open lid didn't resume (LP: #1771542)
- ACPI / PM: Do not reconfigure GPEs for suspend-to-idle
* Fix initialization failure detection in SDEI for device-tree based systems
(LP: #1768663)
- firmware: arm_sdei: Fix return value check in sdei_present_dt()
* No driver for Huawei network adapters on arm64 (LP: #1769899)
- net-next/hinic: add arm64 support
* CVE-2018-1092
- ext4: fail ext4_iget for root directory if unallocated
* kernel 4.15 breaks nouveau on Lenovo P50 (LP: #1763189)
- drm/nouveau: Fix deadlock in nv50_mstm_register_connector()
* update-initramfs not adding i915 GuC firmware for Kaby Lake, firmware fails
to load (LP: #1728238)
- Revert "UBUNTU: SAUCE: (no-up) i915: Remove MODULE_FIRMWARE statements for
unreleased firmware"
* Battery drains when laptop is off (shutdown) (LP: #1745646)
- PCI / PM: Check device_may_wakeup() in pci_enable_wake()
* Dell Latitude 5490/5590 BIOS update 1.1.9 causes black screen at boot
(LP: #1764194)
- drm/i915/bios: filter out invalid DDC pins from VBT child devices
* Intel 9462 A370:42A4 doesn't work (LP: #1748853)
- iwlwifi: add shared clock PHY config flag for some devices
- iwlwifi: add a bunch of new 9000 PCI IDs
* Fix an issue that some PCI devices get incorrectly suspended (LP: #1764684)
- PCI / PM: Always check PME wakeup capability for runtime wakeup support
* [SRU][Bionic/Artful] fix false positives in W+X checking (LP: #1769696)
- init: fix false positives in W+X checking
* Bionic update to v4.15.18 stable release (LP: #1769723)
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to
ip_set_net_exit()
- cdc_ether: flag the Cinterion AHS8 modem by gemalto as WWAN
- rds: MP-RDS may use an invalid c_path
- slip: Check if rstate is initialized before uncompressing
- vhost: fix vhost_vq_access_ok() log check
- l2tp: fix races in tunnel creation
- l2tp: fix race in duplicate tunnel detection
- ip_gre: clear feature flags when incompatible o_flags are set
- vhost: Fix vhost_copy_to_user()
- lan78xx: Correctly indicate invalid OTP
- media: v4l2-compat-ioctl32: don't oops on overlay
- media: v4l: vsp1: Fix header display list status check in continuous mode
- ipmi: Fix some error cleanup issues
- parisc: Fix out of array access in match_pci_device()
- parisc: Fix HPMC handler by increasing size to multiple of 16 bytes
- Drivers: hv: vmbus: do not mark HV_PCIE as perf_device
- PCI: hv: Serialize the present and eject work items
- PCI: hv: Fix 2 hang issues in hv_compose_msi_msg()
- KVM: PPC: Book3S HV: trace_tlbie must not be called in realmode
- perf/core: Fix use-after-free in uprobe_perf_close()
- x86/mce/AMD: Get address from already initialized block
- hwmon: (ina2xx) Fix access to uninitialized mutex
- ath9k: Protect queue draining by rcu_read_lock()
- x86/apic: Fix signedness bug in APIC ID validity checks
- f2fs: fix heap mode to reset it back
- block: Change a rcu_read_{lock,unlock}_sched() pair into
rcu_read_{lock,unlock}()
- nvme: Skip checking heads without namespaces
- lib: fix stall in __bitmap_parselist()
- blk-mq: order getting budget and driver tag
- blk-mq: don't keep offline CPUs mapped to hctx 0
- ovl: fix lookup with middle layer opaque dir and absolute path redirects
- xen: xenbus_dev_frontend: Fix XS_TRANSACTION_END handling
- hugetlbfs: fix bug in pgoff overflow checking
- nfsd: fix incorrect umasks
- scsi: qla2xxx: Fix small memory leak in qla2x00_probe_one on probe failure
- block/loop: fix deadlock after loop_set_status
- nfit: fix region registration vs block-data-window ranges
- s390/qdio: don't retry EQBS after CCQ 96
- s390/qdio: don't merge ERROR output buffers
- s390/ipl: ensure loadparm valid flag is set
- get_user_pages_fast(): return -EFAULT on access_ok failure
- mm/gup_benchmark: handle gup failures
- getname_kernel() needs to make sure that ->name != ->iname in long case
- Bluetooth: Fix connection if directed advertising and privacy is used
- Bluetooth: hci_bcm: Treat Interrupt ACPI resources as always being active-
low
- rtl8187: Fix NULL pointer dereference in priv->conf_mutex
- ovl: set lower layer st_dev only if setting lower st_ino
- Linux 4.15.18
* Kernel bug when unplugging Thunderbolt 3 cable, leaves xHCI host controller
dead (LP: #1768852)
- xhci: Fix Kernel oops in xhci dbgtty
* Incorrect blacklist of bcm2835_wdt (LP: #1766052)
- [Packaging] Fix missing watchdog for Raspberry Pi
* CVE-2018-8087
- mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl()
* Integrated Webcam Realtek Integrated_Webcam_HD (0bda:58f4) not working in
DELL XPS 13 9370 with firmware 1.50 (LP: #1763748)
- SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device
* [ALSA] [PATCH] Clevo P950ER ALC1220 Fixup (LP: #1769721)
- SAUCE: ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup
* Bionic: Intermittently sent to Emergency Mode on boot with unhandled kernel
NULL pointer dereference at 0000000000000980 (LP: #1768292)
- thunderbolt: Prevent crash when ICM firmware is not running
* linux-snapdragon: reduce EPROBEDEFER noise during boot (LP: #1768761)
- [Config] snapdragon: DRM_I2C_ADV7511=y
* regression Aquantia Corp. AQC107 4.15.0-13-generic -> 4.15.0-20-generic ?
(LP: #1767088)
- net: aquantia: Regression on reset with 1.x firmware
- net: aquantia: oops when shutdown on already stopped device
* e1000e msix interrupts broken in linux-image-4.15.0-15-generic
(LP: #1764892)
- e1000e: Remove Other from EIAC
* Acer Swift sf314-52 power button not managed (LP: #1766054)
- SAUCE: platform/x86: acer-wmi: add another KEY_POWER keycode
* set PINCFG_HEADSET_MIC to parse_flags for Dell precision 3630 (LP: #1766398)
- ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags
* Change the location for one of two front mics on a lenovo thinkcentre
machine (LP: #1766477)
- ALSA: hda/realtek - adjust the location of one mic
* SRU: bionic: apply 50 ZFS upstream bugfixes (LP: #1764690)
- SAUCE: (noup) Update zfs to 0.7.5-1ubuntu15 (LP: #1764690)
* [8086:3e92] display becomes blank after S3 (LP: #1763271)
- drm/i915/edp: Do not do link training fallback or prune modes on EDP
-- Stefan Bader <stefan.ba...@canonical.com> Wed, 23 May 2018 18:54:55
+0200
** Changed in: linux (Ubuntu)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1769696
Title:
[SRU][Bionic/Artful] fix false positives in W+X checking
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Xenial:
Fix Released
Status in linux source package in Artful:
Fix Released
Status in linux source package in Bionic:
Fix Released
Bug description:
[Impact]
on ARM64 servers we observe call trace "arm64/mm: Found insecure W+X mapping
at address 0000000000a99000/0xa99000" while booting. These messages are a false
positive and triggered at random.
[Test]
There is no reliable way to reproduce these warnings, they are triggered at
random. But these messages can appear on any ARM64 server Cavium, Qualcomm etc.
A test kernel is available in
ppa:manjo/lp1769696 and the kernel was boot tested on a QDF2400 system and
Cavium Thunderx.
ubuntu@awrep2:~$ uname -a
Linux awrep2 4.15.0-21-generic #22~lp1769696+build.1-Ubuntu SMP Mon May 7
16:04:39 UTC 2018 aarch64 aarch64 aarch64 GNU/Linux
ubuntu@boomer:~$ uname -a
Linux boomer 4.15.0-21-generic #22~lp1769696+build.1-Ubuntu SMP Mon May 7
16:04:39 UTC 2018 aarch64 aarch64 aarch64 GNU/Linux
ubuntu@boomer:~$
[Fix]
Upstream fix is available in linux-next
65d313ee1a7d init: fix false positives in W+X checking
[Regression Potential]
potential for any regression is low.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1769696/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
