Message ID | 20190301201006.16143-1-juergh@canonical.com |
---|---|
State | New |
Headers | show |
Series | [SRU,Xenial,PULL] Xenial update: 4.4.171 upstream stable release (LP: #1818237) | expand |
On 2019-03-01 21:10:06 , Juerg Haefliger wrote: > SRU Justification > > Impact: > The upstream process for stable tree updates is quite similar > in scope to the Ubuntu SRU process, e.g., each patch has to > demonstrably fix a bug, and each patch is vetted by upstream > by originating either directly from a mainline/stable Linux tree or > a minimally backported form of that patch. The following upstream > stable patches should be included in the Ubuntu kernel: > > 4.4.171 upstream stable release > from git://git.kernel.org/ > > Linux 4.4.171 > sunrpc: use-after-free in svc_process_common() > ext4: fix a potential fiemap/page fault deadlock w/ inline_data > crypto: cts - fix crash on short inputs > i2c: dev: prevent adapter retries and timeout being set as minus value > ACPI: power: Skip duplicate power resource references in _PRx > PCI: altera: Move retrain from fixup to altera_pcie_host_init() > PCI: altera: Rework config accessors for use without a struct pci_bus > PCI: altera: Poll for link training status after retraining the link > PCI: altera: Poll for link up status after retraining the link > PCI: altera: Check link status before retrain link > PCI: altera: Reorder read/write functions > PCI: altera: Fix altera_pcie_link_is_up() > slab: alien caches must not be initialized if the allocation of the alien cache failed > USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB > USB: storage: add quirk for SMI SM3350 > USB: storage: don't insert sane sense for SPC3+ when bad sense specified > usb: cdc-acm: send ZLP for Telit 3G Intel based modems > cifs: Fix potential OOB access of lock element array > CIFS: Do not hide EINTR after sending network packets > btrfs: tree-checker: Fix misleading group system information > btrfs: tree-checker: Check level for leaves and nodes > btrfs: Verify that every chunk has corresponding block group at mount time > btrfs: Check that each block group has corresponding chunk at mount time > btrfs: validate type when reading a chunk > btrfs: tree-checker: Detect invalid and empty essential trees > btrfs: tree-checker: Verify block_group_item > btrfs: tree-check: reduce stack consumption in check_dir_item > btrfs: tree-checker: use %zu format string for size_t > btrfs: tree-checker: Add checker for dir item > btrfs: tree-checker: Fix false panic for sanity test > btrfs: tree-checker: Enhance btrfs_check_node output > btrfs: Move leaf and node validation checker to tree-checker.c > btrfs: Add checker for EXTENT_CSUM > btrfs: Add sanity check for EXTENT_DATA when reading out leaf > btrfs: Check if item pointer overlaps with the item itself > btrfs: Refactor check_leaf function for later expansion > btrfs: struct-funcs, constify readers > Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() > Btrfs: memset to avoid stale content in btree leaf > Btrfs: kill BUG_ON in run_delayed_tree_ref > Btrfs: improve check_node to avoid reading corrupted nodes > Btrfs: memset to avoid stale content in btree node block > Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty > Btrfs: check btree node's nritems > Btrfs: detect corruption when non-root leaf has zero item > Btrfs: fix em leak in find_first_block_group > Btrfs: check inconsistence between chunk and block group > Btrfs: add validadtion checks for chunk loading > btrfs: Enhance chunk validation check > btrfs: cleanup, stop casting for extent_map->lookup everywhere > ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 > > Fixed up two minor conflicts. Compile-tested all supported architectures. > > Signed-off-by: Juerg Haefliger <juergh@canonical.com> > --- > > The following changes since commit e80a4e32961d39fc2a656b26d3884a70267d3ddc: > > KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) (2019-02-28 18:09:19 -0500) > > are available in the Git repository at: > > git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.171 > > for you to fetch changes up to fe832fd849db7f97bfea1e72e2739d351464f204: > > Linux 4.4.171 (2019-03-01 15:19:13 +0100) > > ---------------------------------------------------------------- > Arnd Bergmann (1): > btrfs: tree-checker: use %zu format string for size_t > > Bjorn Helgaas (1): > PCI: altera: Reorder read/write functions > > Christoph Lameter (1): > slab: alien caches must not be initialized if the allocation of the alien cache failed > > Daniele Palmas (1): > usb: cdc-acm: send ZLP for Telit 3G Intel based modems > > David Sterba (1): > btrfs: tree-check: reduce stack consumption in check_dir_item > > Eric Biggers (1): > crypto: cts - fix crash on short inputs > > Filipe Manana (1): > Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() > > Greg Kroah-Hartman (1): > Linux 4.4.171 > > Gu Jinxiang (1): > btrfs: validate type when reading a chunk > > Hans de Goede (1): > ACPI: power: Skip duplicate power resource references in _PRx > > Icenowy Zheng (2): > USB: storage: don't insert sane sense for SPC3+ when bad sense specified > USB: storage: add quirk for SMI SM3350 > > Jack Stocker (1): > USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB > > Jeff Mahoney (2): > btrfs: cleanup, stop casting for extent_map->lookup everywhere > btrfs: struct-funcs, constify readers > > Josef Bacik (1): > Btrfs: fix em leak in find_first_block_group > > Kailang Yang (1): > ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 > > Ley Foon Tan (6): > PCI: altera: Fix altera_pcie_link_is_up() > PCI: altera: Check link status before retrain link > PCI: altera: Poll for link up status after retraining the link > PCI: altera: Poll for link training status after retraining the link > PCI: altera: Rework config accessors for use without a struct pci_bus > PCI: altera: Move retrain from fixup to altera_pcie_host_init() > > Liu Bo (9): > Btrfs: add validadtion checks for chunk loading > Btrfs: check inconsistence between chunk and block group > Btrfs: detect corruption when non-root leaf has zero item > Btrfs: check btree node's nritems > Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty > Btrfs: memset to avoid stale content in btree node block > Btrfs: improve check_node to avoid reading corrupted nodes > Btrfs: kill BUG_ON in run_delayed_tree_ref > Btrfs: memset to avoid stale content in btree leaf > > Pavel Shilovsky (1): > CIFS: Do not hide EINTR after sending network packets > > Qu Wenruo (14): > btrfs: Enhance chunk validation check > btrfs: Refactor check_leaf function for later expansion > btrfs: Check if item pointer overlaps with the item itself > btrfs: Add sanity check for EXTENT_DATA when reading out leaf > btrfs: Add checker for EXTENT_CSUM > btrfs: Move leaf and node validation checker to tree-checker.c > btrfs: tree-checker: Enhance btrfs_check_node output > btrfs: tree-checker: Fix false panic for sanity test > btrfs: tree-checker: Add checker for dir item > btrfs: tree-checker: Verify block_group_item > btrfs: tree-checker: Detect invalid and empty essential trees > btrfs: Check that each block group has corresponding chunk at mount time > btrfs: Verify that every chunk has corresponding block group at mount time > btrfs: tree-checker: Check level for leaves and nodes > > Ross Lagerwall (1): > cifs: Fix potential OOB access of lock element array > > Shaokun Zhang (1): > btrfs: tree-checker: Fix misleading group system information > > Theodore Ts'o (1): > ext4: fix a potential fiemap/page fault deadlock w/ inline_data > > Vasily Averin (1): > sunrpc: use-after-free in svc_process_common() > > Yi Zeng (1): > i2c: dev: prevent adapter retries and timeout being set as minus value > > Makefile | 2 +- > crypto/cts.c | 8 +- > drivers/acpi/power.c | 22 ++ > drivers/i2c/i2c-dev.c | 6 + > drivers/pci/host/pcie-altera.c | 201 +++++++++--- > drivers/usb/class/cdc-acm.c | 7 + > drivers/usb/core/quirks.c | 3 +- > drivers/usb/storage/scsiglue.c | 8 +- > drivers/usb/storage/unusual_devs.h | 12 + > fs/btrfs/Makefile | 2 +- > fs/btrfs/ctree.c | 14 - > fs/btrfs/ctree.h | 141 ++++---- > fs/btrfs/dev-replace.c | 2 +- > fs/btrfs/disk-io.c | 80 +---- > fs/btrfs/extent-tree.c | 112 ++++++- > fs/btrfs/extent_io.c | 43 ++- > fs/btrfs/extent_io.h | 19 +- > fs/btrfs/extent_map.c | 2 +- > fs/btrfs/extent_map.h | 10 +- > fs/btrfs/scrub.c | 2 +- > fs/btrfs/struct-funcs.c | 9 +- > fs/btrfs/tree-checker.c | 649 +++++++++++++++++++++++++++++++++++++ > fs/btrfs/tree-checker.h | 38 +++ > fs/btrfs/volumes.c | 139 +++++++- > fs/btrfs/volumes.h | 2 + > fs/cifs/file.c | 8 +- > fs/cifs/smb2file.c | 4 +- > fs/cifs/transport.c | 2 +- > fs/ext4/inline.c | 6 +- > include/linux/sunrpc/svc.h | 5 +- > mm/slab.c | 6 +- > net/sunrpc/svc.c | 10 +- > net/sunrpc/svc_xprt.c | 5 +- > net/sunrpc/svcsock.c | 2 +- > sound/pci/hda/patch_realtek.c | 30 +- > 35 files changed, 1330 insertions(+), 281 deletions(-) > create mode 100644 fs/btrfs/tree-checker.c > create mode 100644 fs/btrfs/tree-checker.h > > -- > kernel-team mailing list > kernel-team@lists.ubuntu.com > https://lists.ubuntu.com/mailman/listinfo/kernel-team
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: 4.4.171 upstream stable release from git://git.kernel.org/ Linux 4.4.171 sunrpc: use-after-free in svc_process_common() ext4: fix a potential fiemap/page fault deadlock w/ inline_data crypto: cts - fix crash on short inputs i2c: dev: prevent adapter retries and timeout being set as minus value ACPI: power: Skip duplicate power resource references in _PRx PCI: altera: Move retrain from fixup to altera_pcie_host_init() PCI: altera: Rework config accessors for use without a struct pci_bus PCI: altera: Poll for link training status after retraining the link PCI: altera: Poll for link up status after retraining the link PCI: altera: Check link status before retrain link PCI: altera: Reorder read/write functions PCI: altera: Fix altera_pcie_link_is_up() slab: alien caches must not be initialized if the allocation of the alien cache failed USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB USB: storage: add quirk for SMI SM3350 USB: storage: don't insert sane sense for SPC3+ when bad sense specified usb: cdc-acm: send ZLP for Telit 3G Intel based modems cifs: Fix potential OOB access of lock element array CIFS: Do not hide EINTR after sending network packets btrfs: tree-checker: Fix misleading group system information btrfs: tree-checker: Check level for leaves and nodes btrfs: Verify that every chunk has corresponding block group at mount time btrfs: Check that each block group has corresponding chunk at mount time btrfs: validate type when reading a chunk btrfs: tree-checker: Detect invalid and empty essential trees btrfs: tree-checker: Verify block_group_item btrfs: tree-check: reduce stack consumption in check_dir_item btrfs: tree-checker: use %zu format string for size_t btrfs: tree-checker: Add checker for dir item btrfs: tree-checker: Fix false panic for sanity test btrfs: tree-checker: Enhance btrfs_check_node output btrfs: Move leaf and node validation checker to tree-checker.c btrfs: Add checker for EXTENT_CSUM btrfs: Add sanity check for EXTENT_DATA when reading out leaf btrfs: Check if item pointer overlaps with the item itself btrfs: Refactor check_leaf function for later expansion btrfs: struct-funcs, constify readers Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() Btrfs: memset to avoid stale content in btree leaf Btrfs: kill BUG_ON in run_delayed_tree_ref Btrfs: improve check_node to avoid reading corrupted nodes Btrfs: memset to avoid stale content in btree node block Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty Btrfs: check btree node's nritems Btrfs: detect corruption when non-root leaf has zero item Btrfs: fix em leak in find_first_block_group Btrfs: check inconsistence between chunk and block group Btrfs: add validadtion checks for chunk loading btrfs: Enhance chunk validation check btrfs: cleanup, stop casting for extent_map->lookup everywhere ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 Fixed up two minor conflicts. Compile-tested all supported architectures. Signed-off-by: Juerg Haefliger <juergh@canonical.com> --- The following changes since commit e80a4e32961d39fc2a656b26d3884a70267d3ddc: KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) (2019-02-28 18:09:19 -0500) are available in the Git repository at: git://git.launchpad.net/~juergh/+git/xenial-linux update-4.4.171 for you to fetch changes up to fe832fd849db7f97bfea1e72e2739d351464f204: Linux 4.4.171 (2019-03-01 15:19:13 +0100) ---------------------------------------------------------------- Arnd Bergmann (1): btrfs: tree-checker: use %zu format string for size_t Bjorn Helgaas (1): PCI: altera: Reorder read/write functions Christoph Lameter (1): slab: alien caches must not be initialized if the allocation of the alien cache failed Daniele Palmas (1): usb: cdc-acm: send ZLP for Telit 3G Intel based modems David Sterba (1): btrfs: tree-check: reduce stack consumption in check_dir_item Eric Biggers (1): crypto: cts - fix crash on short inputs Filipe Manana (1): Btrfs: fix emptiness check for dirtied extent buffers at check_leaf() Greg Kroah-Hartman (1): Linux 4.4.171 Gu Jinxiang (1): btrfs: validate type when reading a chunk Hans de Goede (1): ACPI: power: Skip duplicate power resource references in _PRx Icenowy Zheng (2): USB: storage: don't insert sane sense for SPC3+ when bad sense specified USB: storage: add quirk for SMI SM3350 Jack Stocker (1): USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB Jeff Mahoney (2): btrfs: cleanup, stop casting for extent_map->lookup everywhere btrfs: struct-funcs, constify readers Josef Bacik (1): Btrfs: fix em leak in find_first_block_group Kailang Yang (1): ALSA: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 Ley Foon Tan (6): PCI: altera: Fix altera_pcie_link_is_up() PCI: altera: Check link status before retrain link PCI: altera: Poll for link up status after retraining the link PCI: altera: Poll for link training status after retraining the link PCI: altera: Rework config accessors for use without a struct pci_bus PCI: altera: Move retrain from fixup to altera_pcie_host_init() Liu Bo (9): Btrfs: add validadtion checks for chunk loading Btrfs: check inconsistence between chunk and block group Btrfs: detect corruption when non-root leaf has zero item Btrfs: check btree node's nritems Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty Btrfs: memset to avoid stale content in btree node block Btrfs: improve check_node to avoid reading corrupted nodes Btrfs: kill BUG_ON in run_delayed_tree_ref Btrfs: memset to avoid stale content in btree leaf Pavel Shilovsky (1): CIFS: Do not hide EINTR after sending network packets Qu Wenruo (14): btrfs: Enhance chunk validation check btrfs: Refactor check_leaf function for later expansion btrfs: Check if item pointer overlaps with the item itself btrfs: Add sanity check for EXTENT_DATA when reading out leaf btrfs: Add checker for EXTENT_CSUM btrfs: Move leaf and node validation checker to tree-checker.c btrfs: tree-checker: Enhance btrfs_check_node output btrfs: tree-checker: Fix false panic for sanity test btrfs: tree-checker: Add checker for dir item btrfs: tree-checker: Verify block_group_item btrfs: tree-checker: Detect invalid and empty essential trees btrfs: Check that each block group has corresponding chunk at mount time btrfs: Verify that every chunk has corresponding block group at mount time btrfs: tree-checker: Check level for leaves and nodes Ross Lagerwall (1): cifs: Fix potential OOB access of lock element array Shaokun Zhang (1): btrfs: tree-checker: Fix misleading group system information Theodore Ts'o (1): ext4: fix a potential fiemap/page fault deadlock w/ inline_data Vasily Averin (1): sunrpc: use-after-free in svc_process_common() Yi Zeng (1): i2c: dev: prevent adapter retries and timeout being set as minus value Makefile | 2 +- crypto/cts.c | 8 +- drivers/acpi/power.c | 22 ++ drivers/i2c/i2c-dev.c | 6 + drivers/pci/host/pcie-altera.c | 201 +++++++++--- drivers/usb/class/cdc-acm.c | 7 + drivers/usb/core/quirks.c | 3 +- drivers/usb/storage/scsiglue.c | 8 +- drivers/usb/storage/unusual_devs.h | 12 + fs/btrfs/Makefile | 2 +- fs/btrfs/ctree.c | 14 - fs/btrfs/ctree.h | 141 ++++---- fs/btrfs/dev-replace.c | 2 +- fs/btrfs/disk-io.c | 80 +---- fs/btrfs/extent-tree.c | 112 ++++++- fs/btrfs/extent_io.c | 43 ++- fs/btrfs/extent_io.h | 19 +- fs/btrfs/extent_map.c | 2 +- fs/btrfs/extent_map.h | 10 +- fs/btrfs/scrub.c | 2 +- fs/btrfs/struct-funcs.c | 9 +- fs/btrfs/tree-checker.c | 649 +++++++++++++++++++++++++++++++++++++ fs/btrfs/tree-checker.h | 38 +++ fs/btrfs/volumes.c | 139 +++++++- fs/btrfs/volumes.h | 2 + fs/cifs/file.c | 8 +- fs/cifs/smb2file.c | 4 +- fs/cifs/transport.c | 2 +- fs/ext4/inline.c | 6 +- include/linux/sunrpc/svc.h | 5 +- mm/slab.c | 6 +- net/sunrpc/svc.c | 10 +- net/sunrpc/svc_xprt.c | 5 +- net/sunrpc/svcsock.c | 2 +- sound/pci/hda/patch_realtek.c | 30 +- 35 files changed, 1330 insertions(+), 281 deletions(-) create mode 100644 fs/btrfs/tree-checker.c create mode 100644 fs/btrfs/tree-checker.h