Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2020-08-11 Ported from the following upstream stable releases: v4.14.191, v4.19.136, v4.14.192, v4.19.137, v4.14.193, v4.19.138 from git://git.kernel.org/ AX.25: Fix out-of-bounds read in ax25_connect() AX.25: Prevent out-of-bounds read in ax25_sendmsg() dev: Defer free of skbs in flush_backlog drivers/net/wan/x25_asy: Fix to make it work net-sysfs: add a newline when printing 'tx_timeout' by sysfs net: udp: Fix wrong clean up for IS_UDPLITE macro rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA AX.25: Prevent integer overflows in connect and sendmsg ip6_gre: fix null-ptr-deref in ip6gre_init_net() rtnetlink: Fix memory(net_device) leak when ->newlink fails tcp: allow at most one TLP probe per flight regmap: debugfs: check count when read regmap file qrtr: orphan socket in qrtr_release() sctp: shrink stream outq only when new outcnt < old outcnt sctp: shrink stream outq when fails to do addstream reconf UBUNTU: upstream stable to v4.14.191, v4.19.136 crypto: ccp - Release all allocated memory if sha type is invalid media: rc: prevent memory leak in cx23888_ir_probe iio: imu: adis16400: fix memory leak ath9k_htc: release allocated buffer if timed out ath9k: release allocated buffer if timed out PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge wireless: Use offsetof instead of custom macro. ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() drm: hold gem reference until object is no longer accessed f2fs: check memory boundary by insane namelen f2fs: check if file namelen exceeds max value 9p/trans_fd: abort p9_read_work if req status changed 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work x86/build/lto: Fix truncated .bss with -fdata-sections rds: Prevent kernel-infoleak in rds_notify_queue_get() xfs: fix missed wakeup on l_flush_wait net/x25: Fix x25_neigh refcnt leak when x25 disconnect net/x25: Fix null-ptr-deref in x25_disconnect selftests/net: rxtimestamp: fix clang issues for target arch PowerPC sh: Fix validation of system call number net: lan78xx: add missing endpoint sanity check net: lan78xx: fix transfer-buffer memory leak mlx4: disable device on shutdown mlxsw: core: Increase scope of RCU read-side critical section mlxsw: core: Free EMAD transactions using kfree_rcu() ibmvnic: Fix IRQ mapping disposal in error path bpf: Fix map leak in HASH_OF_MAPS map mac80211: mesh: Free ie data when leaving mesh mac80211: mesh: Free pending skb when destroying a mpath arm64/alternatives: move length validation inside the subsection arm64: csum: Fix handling of bad packets usb: hso: Fix debug compile warning on sparc32 qed: Disable "MFW indication via attention" SPAM every 5 minutes nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame parisc: add support for cmpxchg on u8 pointers net: ethernet: ravb: exit if re-initialization fails in tx timeout Revert "i2c: cadence: Fix the hold bit setting" x86/unwind/orc: Fix ORC for newly forked tasks cxgb4: add missing release on skb in uld_send() xen-netfront: fix potential deadlock in xennet_remove() KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled x86/i8259: Use printk_deferred() to prevent deadlock drm/amdgpu: fix multiple memory leaks in acp_hw_init selftests/net: psock_fanout: fix clang issues for target arch PowerPC net/mlx5: Verify Hardware supports requested ptp function on a given pin UBUNTU: upstream stable to v4.14.192, v4.19.137 random32: update the net random state on interrupt and activity ARM: percpu.h: fix build error random: fix circular include dependency on arm64 after addition of percpu.h random32: remove net_rand_state from the latent entropy gcc plugin random32: move the pseudo-random 32-bit definitions to prandom.h ext4: fix direct I/O read error UBUNTU: upstream stable to v4.14.193, v4.19.138 ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Bionic) Importance: Undecided Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Bionic) Status: New => In Progress ** Changed in: linux (Ubuntu Bionic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2020-08-11 - upstream stable patchset 2020-08-11 - from git://git.kernel.org/ + Ported from the following upstream stable releases: + v4.14.191, v4.19.136, + v4.14.192, v4.19.137, + v4.14.193, v4.19.138 + + from git://git.kernel.org/ + + AX.25: Fix out-of-bounds read in ax25_connect() + AX.25: Prevent out-of-bounds read in ax25_sendmsg() + dev: Defer free of skbs in flush_backlog + drivers/net/wan/x25_asy: Fix to make it work + net-sysfs: add a newline when printing 'tx_timeout' by sysfs + net: udp: Fix wrong clean up for IS_UDPLITE macro + rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA + AX.25: Prevent integer overflows in connect and sendmsg + ip6_gre: fix null-ptr-deref in ip6gre_init_net() + rtnetlink: Fix memory(net_device) leak when ->newlink fails + tcp: allow at most one TLP probe per flight + regmap: debugfs: check count when read regmap file + qrtr: orphan socket in qrtr_release() + sctp: shrink stream outq only when new outcnt < old outcnt + sctp: shrink stream outq when fails to do addstream reconf + UBUNTU: upstream stable to v4.14.191, v4.19.136 + crypto: ccp - Release all allocated memory if sha type is invalid + media: rc: prevent memory leak in cx23888_ir_probe + iio: imu: adis16400: fix memory leak + ath9k_htc: release allocated buffer if timed out + ath9k: release allocated buffer if timed out + PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge + wireless: Use offsetof instead of custom macro. + ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints + drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() + drm: hold gem reference until object is no longer accessed + f2fs: check memory boundary by insane namelen + f2fs: check if file namelen exceeds max value + 9p/trans_fd: abort p9_read_work if req status changed + 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work + x86/build/lto: Fix truncated .bss with -fdata-sections + rds: Prevent kernel-infoleak in rds_notify_queue_get() + xfs: fix missed wakeup on l_flush_wait + net/x25: Fix x25_neigh refcnt leak when x25 disconnect + net/x25: Fix null-ptr-deref in x25_disconnect + selftests/net: rxtimestamp: fix clang issues for target arch PowerPC + sh: Fix validation of system call number + net: lan78xx: add missing endpoint sanity check + net: lan78xx: fix transfer-buffer memory leak + mlx4: disable device on shutdown + mlxsw: core: Increase scope of RCU read-side critical section + mlxsw: core: Free EMAD transactions using kfree_rcu() + ibmvnic: Fix IRQ mapping disposal in error path + bpf: Fix map leak in HASH_OF_MAPS map + mac80211: mesh: Free ie data when leaving mesh + mac80211: mesh: Free pending skb when destroying a mpath + arm64/alternatives: move length validation inside the subsection + arm64: csum: Fix handling of bad packets + usb: hso: Fix debug compile warning on sparc32 + qed: Disable "MFW indication via attention" SPAM every 5 minutes + nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame + parisc: add support for cmpxchg on u8 pointers + net: ethernet: ravb: exit if re-initialization fails in tx timeout + Revert "i2c: cadence: Fix the hold bit setting" + x86/unwind/orc: Fix ORC for newly forked tasks + cxgb4: add missing release on skb in uld_send() + xen-netfront: fix potential deadlock in xennet_remove() + KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled + x86/i8259: Use printk_deferred() to prevent deadlock + drm/amdgpu: fix multiple memory leaks in acp_hw_init + selftests/net: psock_fanout: fix clang issues for target arch PowerPC + net/mlx5: Verify Hardware supports requested ptp function on a given pin + UBUNTU: upstream stable to v4.14.192, v4.19.137 + random32: update the net random state on interrupt and activity + ARM: percpu.h: fix build error + random: fix circular include dependency on arm64 after addition of percpu.h + random32: remove net_rand_state from the latent entropy gcc plugin + random32: move the pseudo-random 32-bit definitions to prandom.h + ext4: fix direct I/O read error + UBUNTU: upstream stable to v4.14.193, v4.19.138 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1891228 Title: Bionic update: upstream stable patchset 2020-08-11 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1891228/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs