Message ID | 1539949109-22071-1-git-send-email-stefan.bader@canonical.com |
---|---|
State | New |
Headers | show |
Series | [Xenial,SRU] Xenial update: 4.4.160 upstream stable release | expand |
On 10/19/18 13:38, Stefan Bader wrote: > https://bugs.launchpad.net/ubuntu/xenial/+source/linux/+bug/1798770 > > Modified "floppy: Do not copy a kernel pointer to user memory in > FDGETPRM ioctl" to only make the change for the "too long line" that > got added by upstream. Otherwise we already carry the change for > CVE-2018-7755. > > Modified "arm64: cpufeature: Track 32bit EL0 support" to make up for > us already having an additional feature defined. > > Did replace the SAUCE patch we had for "media: uvcvideo: Support > realtek's UVC 1.5 device" by this upstream stable version. > > -Stefan > > --- > > The following changes since commit 4c45702457361c276979b7589b51f0ec926811af: > > Linux 4.4.159 (2018-10-18 17:58:25 +0200) > > are available in the git repository at: > > https://git.launchpad.net/~smb/+git/linux-xenial stable-4.4 > > for you to fetch changes up to 17deef4a60946f73a6e8d4b748d37e9f9947cced: > > Linux 4.4.160 (2018-10-19 11:41:35 +0200) > > ---------------------------------------------------------------- > Aaron Ma (1): > Input: elantech - enable middle button of touchpad on ThinkPad P72 > > Akinobu Mita (2): > media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power > media: soc_camera: ov772x: correct setting of banding filter > > Alan Stern (3): > USB: fix error handling in usb_driver_claim_interface() > USB: handle NULL config in usb_find_alt_setting() > USB: remove LPM management from usb_driver_claim_interface() > > Alexey Dobriyan (1): > slub: make ->cpu_partial unsigned int > > Alexey Kardashevskiy (1): > powerpc/powernv/ioda2: Reduce upper limit for DMA window size > > Alexey Khoroshilov (1): > media: fsl-viu: fix error handling in viu_of_probe() > > Alistair Strachan (1): > staging: android: ashmem: Fix mmap size validation > > Andy Shevchenko (1): > x86/tsc: Add missing header to tsc_msr.c > > Andy Whitcroft (1): > floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl > > Anson Huang (1): > thermal: of-thermal: disable passive polling when thermal zone is disabled > > Anton Vasilyev (2): > uwb: hwa-rc: fix memory leak at probe > usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i] > > Arunk Khandavalli (1): > cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE > > Ashish Samant (1): > ocfs2: fix locking for res->tracking and dlm->tracking_list > > Aurelien Aptel (1): > smb2: fix missing files in root share directory listing > > Bart Van Assche (3): > scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size > scsi: klist: Make it safe to use klists in atomic context > IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop > > Ben Greear (1): > ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock > > Ben Hutchings (1): > USB: yurex: Check for truncation in yurex_read() > > Ben Skeggs (1): > drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS > > Bo Chen (2): > e1000: check on netif_running() before calling e1000_up() > e1000: ensure to free old tx/rx rings in set_ringparam() > > Breno Leitao (1): > scsi: ibmvscsi: Improve strings handling > > Christophe Leroy (1): > serial: cpm_uart: return immediately from console poll > > Colin Ian King (1): > staging: rts5208: fix missing error check on call to rtsx_write_register > > Dan Carpenter (5): > vmci: type promotion bug in qp_host_get_user_memory() > rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication() > hwmon: (adt7475) Make adt7475_read_word() return errors > cfg80211: fix a type issue in ieee80211_chandef_to_operating_class() > cifs: read overflow in is_valid_oplock_break() > > Dan Williams (1): > x86/numa_emulation: Fix emulated-to-physical node mapping > > Danek Duvall (2): > mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X > mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X > > Daniel Black (1): > mm: madvise(MADV_DODUMP): allow hugetlbfs pages > > Dave Martin (1): > arm64: KVM: Tighten guest core register access from userspace > > Emmanuel Grumbach (2): > mac80211: fix a race between restart and CSA flows > mac80211: shorten the IBSS debug messages > > Ethan Tuttle (1): > ARM: mvebu: declare asm symbols as character arrays in pmsu.c > > Gaku Inami (1): > spi: sh-msiof: Fix invalid SPI use during system suspend > > Geert Uytterhoeven (2): > spi: rspi: Fix invalid SPI use during system suspend > spi: rspi: Fix interrupted DMA transfers > > Greg Kroah-Hartman (1): > Linux 4.4.160 > > Guoqing Jiang (1): > md-cluster: clear another node's suspend_area after the copy is finished > > Hari Bathini (1): > powerpc/kdump: Handle crashkernel memory reservation failure > > Hiromitsu Yamasaki (1): > spi: sh-msiof: Fix handling of write value for SISTR register > > Huazhong Tan (1): > net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES > > Ilan Peer (1): > mac80211: Fix station bandwidth setting after channel switch > > J. Bruce Fields (1): > nfsd: fix corrupted reply to badly ordered compound > > Jan Beulich (1): > x86/entry/64: Add two more instruction suffixes > > Jann Horn (2): > RDMA/ucma: check fd type in ucma_migrate_id() > proc: restrict kernel stack dumps to root > > Javier Martinez Canillas (1): > media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data > > Jessica Yu (1): > module: exclude SHN_UNDEF symbols from kallsyms api > > Jia-Ju Bai (1): > net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx() > > Jian-Hong Pan (1): > Bluetooth: Add a new Realtek 8723DE ID 0bda:b009 > > Joe Thornber (1): > dm thin metadata: try to avoid ever aborting transactions > > Johan Hovold (2): > USB: serial: kobil_sct: fix modem-status error handling > EDAC, i7core: Fix memleaks and use-after-free on probe and remove > > Jon Kuhn (1): > fs/cifs: don't translate SFM_SLASH (U+F026) to backslash > > Josh Abraham (1): > xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage > > Julia Lawall (1): > usb: wusbcore: security: cast sizeof to int for comparison > > Julian Wiedmann (1): > s390/qeth: don't dump past end of unknown HW header > > Kai-Heng Feng (3): > ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge > r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED > ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760 > > Kevin Hilman (1): > ARM: dts: dra7: fix DCAN node addresses > > Leonard Crestez (1): > crypto: mxs-dcp - Fix wait logic on chan threads > > Liam Girdwood (1): > ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs > > Lothar Felten (1): > hwmon: (ina2xx) fix sysfs shunt resistor read access > > Marc Zyngier (1): > arm64: KVM: Sanitize PSTATE.M when being set from userspace > > Marcel Ziswiler (1): > spi: tegra20-slink: explicitly enable/disable clock > > Masahiro Yamada (2): > i2c: uniphier: issue STOP only for last message or I2C_M_STOP > i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP > > Matt Ranostay (1): > tsl2550: fix lux1_input error in low light > > Michael Hennerich (1): > gpio: adp5588: Fix sleep-in-atomic-context bug > > Michael Scott (1): > 6lowpan: iphc: reset mac_header after decompress to fix panic > > Miguel Ojeda (1): > arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto" > > Mika Westerberg (1): > i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus > > Mike Snitzer (1): > dm thin metadata: fix __udivdi3 undefined on 32-bit > > Naoya Horiguchi (2): > tools/vm/slabinfo.c: fix sign-compare warning > tools/vm/page-types.c: fix "defined but not used" warning > > Nicholas Mc Guire (1): > ALSA: snd-aoa: add of_node_put() in error path > > Olaf Hering (1): > xen: avoid crash in disable_hotplug_cpu > > Oliver Neukum (2): > USB: usbdevfs: sanitize flags more > USB: usbdevfs: restore warning for nonsensical flags > > Paul Mackerras (1): > KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function > > Randy Dunlap (2): > arch/hexagon: fix kernel/dma.c build warning > hexagon: modify ffs() and fls() to return int > > Sakari Ailus (1): > media: v4l: event: Prevent freeing event subscriptions while accessed > > Sandipan Das (1): > perf probe powerpc: Ignore SyS symbols irrespective of endianness > > Sebastian Andrzej Siewior (1): > Revert "usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()" > > Stafford Horne (1): > crypto: skcipher - Fix -Wstringop-truncation warnings > > Stefan Bader (1): > Revert "UBUNTU: SAUCE: media: uvcvideo: Support realtek's UVC 1.5 device" > > Stephen Rothwell (1): > fs/cifs: suppress a string overflow warning > > Sudeep Holla (1): > power: vexpress: fix corruption in notifier registration > > Suzuki K Poulose (1): > arm64: cpufeature: Track 32bit EL0 support > > Sylwester Nawrocki (1): > media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt() > > Theodore Ts'o (1): > ext4: never move the system.data xattr out of the inode body > > Thomas Gleixner (1): > alarmtimer: Prevent overflow for relative nanosleep > > Tony Lindgren (1): > wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout() > > Uwe Kleine-König (1): > serial: imx: restore handshaking irq for imx1 > > Vasily Gorbik (1): > s390/extmem: fix gcc 8 stringop-overflow warning > > Vincent Pelletier (1): > scsi: target: iscsi: Use bin2hex instead of a re-implementation > > Vitaly Kuznetsov (1): > xen/manage: don't complain about an empty value in control/sysrq node > > Xiao Ni (1): > RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0 > > Yuan-Chi Pang (1): > mac80211: mesh: fix HWMP sequence numbering to follow standard > > Zhouyang Jia (4): > drivers/tty: add error handling for pcmcia_loop_config > media: tm6000: add error handling for dvb_register_adapter > HID: hid-ntrig: add error handling for sysfs_create_group > scsi: bnx2i: add error handling for ioremap_nocache > > ming_qian (1): > media: uvcvideo: Support realtek's UVC 1.5 device > > Documentation/hwmon/ina2xx | 2 +- > Makefile | 2 +- > arch/arm/boot/dts/dra7.dtsi | 4 +- > arch/arm/mach-mvebu/pmsu.c | 6 +- > arch/arm64/include/asm/cpufeature.h | 8 ++- > arch/arm64/include/asm/jump_label.h | 4 +- > arch/arm64/include/asm/kvm_emulate.h | 5 ++ > arch/arm64/include/asm/sysreg.h | 1 + > arch/arm64/kernel/cpufeature.c | 8 +++ > arch/arm64/kvm/guest.c | 55 +++++++++++++++- > arch/hexagon/include/asm/bitops.h | 4 +- > arch/hexagon/kernel/dma.c | 2 +- > arch/powerpc/kernel/machine_kexec.c | 7 ++- > arch/powerpc/kvm/book3s_64_mmu_hv.c | 2 +- > arch/powerpc/platforms/powernv/pci-ioda.c | 2 +- > arch/s390/mm/extmem.c | 4 +- > arch/x86/entry/entry_64.S | 4 +- > arch/x86/kernel/tsc_msr.c | 1 + > arch/x86/mm/numa_emulation.c | 2 +- > crypto/ablkcipher.c | 2 + > crypto/blkcipher.c | 1 + > drivers/block/floppy.c | 3 +- > drivers/bluetooth/btusb.c | 1 + > drivers/crypto/mxs-dcp.c | 53 +++++++++------- > drivers/edac/i7core_edac.c | 22 ++++--- > drivers/gpio/gpio-adp5588.c | 24 +++++-- > .../gpu/drm/nouveau/nvkm/subdev/devinit/gm204.c | 3 +- > drivers/hid/hid-ntrig.c | 2 + > drivers/hwmon/adt7475.c | 14 +++-- > drivers/hwmon/ina2xx.c | 13 +++- > drivers/i2c/busses/i2c-i801.c | 9 ++- > drivers/i2c/busses/i2c-uniphier-f.c | 7 +-- > drivers/i2c/busses/i2c-uniphier.c | 7 +-- > drivers/infiniband/core/ucma.c | 6 ++ > drivers/infiniband/ulp/srp/ib_srp.c | 6 +- > drivers/input/mouse/elantech.c | 2 + > drivers/md/dm-thin-metadata.c | 34 +++++++++- > drivers/md/dm-thin.c | 73 +++++++++++++++++++--- > drivers/md/md-cluster.c | 19 +++--- > drivers/md/raid10.c | 5 +- > drivers/media/i2c/soc_camera/ov772x.c | 2 +- > drivers/media/platform/exynos4-is/fimc-isp-video.c | 11 +++- > drivers/media/platform/fsl-viu.c | 38 ++++++----- > drivers/media/platform/omap3isp/isp.c | 2 +- > drivers/media/platform/s3c-camif/camif-capture.c | 2 + > drivers/media/usb/tm6000/tm6000-dvb.c | 5 ++ > drivers/media/usb/uvc/uvc_video.c | 28 ++++++--- > drivers/media/v4l2-core/v4l2-event.c | 37 +++++------ > drivers/media/v4l2-core/v4l2-fh.c | 2 + > drivers/misc/tsl2550.c | 2 +- > drivers/misc/vmw_vmci/vmci_queue_pair.c | 4 +- > drivers/net/ethernet/cadence/macb.c | 2 +- > drivers/net/ethernet/hisilicon/hns/hnae.h | 6 +- > drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 7 ++- > drivers/net/ethernet/realtek/r8169.c | 9 ++- > drivers/net/wireless/ath/ath10k/htt_rx.c | 5 +- > drivers/net/wireless/mac80211_hwsim.c | 3 - > drivers/net/wireless/rndis_wlan.c | 2 + > drivers/net/wireless/ti/wlcore/cmd.c | 6 ++ > drivers/power/reset/vexpress-poweroff.c | 12 ++-- > drivers/s390/net/qeth_l2_main.c | 2 +- > drivers/s390/net/qeth_l3_main.c | 2 +- > drivers/scsi/bnx2i/bnx2i_hwi.c | 2 + > drivers/scsi/ibmvscsi/ibmvscsi.c | 4 +- > drivers/spi/spi-rspi.c | 34 ++++++++-- > drivers/spi/spi-sh-msiof.c | 28 ++++++++- > drivers/spi/spi-tegra20-slink.c | 31 ++++++--- > drivers/staging/android/ashmem.c | 6 ++ > drivers/staging/rts5208/sd.c | 2 +- > drivers/target/iscsi/iscsi_target_auth.c | 15 +---- > drivers/target/iscsi/iscsi_target_tpg.c | 3 +- > drivers/thermal/of-thermal.c | 7 ++- > drivers/tty/serial/8250/serial_cs.c | 6 +- > drivers/tty/serial/cpm_uart/cpm_uart_core.c | 10 ++- > drivers/tty/serial/imx.c | 8 +++ > drivers/usb/class/cdc-wdm.c | 2 +- > drivers/usb/core/devio.c | 24 ++++++- > drivers/usb/core/driver.c | 28 ++++----- > drivers/usb/core/usb.c | 2 + > drivers/usb/gadget/udc/fotg210-udc.c | 15 +++-- > drivers/usb/misc/yurex.c | 3 + > drivers/usb/serial/kobil_sct.c | 12 +++- > drivers/usb/wusbcore/security.c | 2 +- > drivers/uwb/hwa-rc.c | 1 + > drivers/xen/cpu_hotplug.c | 15 ++--- > drivers/xen/events/events_base.c | 2 +- > drivers/xen/manage.c | 6 +- > fs/cifs/cifs_unicode.c | 3 - > fs/cifs/cifssmb.c | 11 +++- > fs/cifs/misc.c | 8 +++ > fs/cifs/smb2ops.c | 2 +- > fs/ext4/xattr.c | 5 ++ > fs/nfsd/nfs4proc.c | 1 + > fs/ocfs2/dlm/dlmmaster.c | 4 +- > fs/proc/base.c | 14 +++++ > include/linux/platform_data/ina2xx.h | 2 +- > include/linux/slub_def.h | 3 +- > include/media/v4l2-fh.h | 1 + > kernel/module.c | 6 +- > kernel/time/alarmtimer.c | 3 +- > lib/klist.c | 10 +-- > mm/madvise.c | 2 +- > mm/slub.c | 6 +- > net/6lowpan/iphc.c | 1 + > net/mac80211/ibss.c | 22 +++---- > net/mac80211/main.c | 26 ++++++-- > net/mac80211/mesh_hwmp.c | 4 ++ > net/mac80211/mlme.c | 53 ++++++++++++++++ > net/wireless/nl80211.c | 1 + > net/wireless/util.c | 2 +- > sound/aoa/core/gpio-feature.c | 4 +- > sound/pci/hda/hda_intel.c | 3 +- > sound/pci/hda/patch_realtek.c | 1 + > sound/soc/soc-dapm.c | 7 +++ > tools/perf/arch/powerpc/util/sym-handling.c | 4 +- > tools/vm/page-types.c | 6 -- > tools/vm/slabinfo.c | 4 +- > 117 files changed, 814 insertions(+), 291 deletions(-) > Applied to xenial/master-next branch. Thanks, Kleber