Xenial update: 4.4.211 upstream stable release

Bug #1860681 reported by Connor Kuehl
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Xenial
Fix Released
Medium
Connor Kuehl

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

* hidraw: Return EPOLLOUT from hidraw_poll
* HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
* HID: hidraw, uhid: Always report EPOLLOUT
* cfg80211/mac80211: make ieee80211_send_layer2_update a public function
* mac80211: Do not send Layer 2 Update frame before authorization
* media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
* p54usb: Fix race between disconnect and firmware loading
* ALSA: line6: Fix write on zero-sized buffer
* ALSA: line6: Fix memory leak at line6_init_pcm() error path
* xen: let alloc_xenballooned_pages() fail if not enough memory free
* wimax: i2400: fix memory leak
* wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
* ext4: fix use-after-free race with debug_want_extra_isize
* ext4: add more paranoia checking in ext4_expand_extra_isize handling
* dccp: Fix memleak in __feat_register_sp
* rtc: mt6397: fix alarm register overwrite
* iommu: Remove device link to group on failure
* gpio: Fix error message on out-of-range GPIO in lookup table
* hsr: reset network header when supervision frame is created
* cifs: Adjust indentation in smb2_open_file
* RDMA/srpt: Report the SCSI residual to the initiator
* scsi: enclosure: Fix stale device oops with hot replug
* scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
* platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
* iio: imu: adis16480: assign bias value only if operation succeeded
* mei: fix modalias documentation
* clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume
* compat_ioctl: handle SIOCOUTQNSD
* tty: serial: imx: use the sg count from dma_map_sg
* tty: serial: pch_uart: correct usage of dma_unmap_sg
* media: exynos4-is: Fix recursive locking in isp_video_release()
* spi: atmel: fix handling of cs_change set on non-last xfer
* rtlwifi: Remove unnecessary NULL check in rtl_regd_init
* rtc: msm6242: Fix reading of 10-hour digit
* rseq/selftests: Turn off timeout setting
* hexagon: work around compiler crash
* ocfs2: call journal flush to mark journal as empty after journal recovery when mount
* ALSA: seq: Fix racy access for queue timer in proc read
* Fix built-in early-load Intel microcode alignment
* block: fix an integer overflow in logical block size
* USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
* USB: serial: opticon: fix control-message timeouts
* USB: serial: suppress driver bind attributes
* USB: serial: ch341: handle unbound port at reset_resume
* USB: serial: io_edgeport: add missing active-port sanity check
* USB: serial: quatech2: handle unbound ports
* scsi: mptfusion: Fix double fetch bug in ioctl
* usb: core: hub: Improved device recognition on remote wakeup
* x86/efistub: Disable paging at mixed mode entry
* mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
* net: stmmac: 16KB buffer must be 16 byte aligned
* net: stmmac: Enable 16KB buffer size
* USB: serial: io_edgeport: use irqsave() in USB's complete callback
* USB: serial: io_edgeport: handle unbound ports on URB completion
* USB: serial: keyspan: handle unbound ports
* scsi: fnic: use kernel's '%pM' format option to print MAC
* scsi: fnic: fix invalid stack access
* arm64: dts: agilex/stratix10: fix pmu interrupt numbers
* netfilter: fix a use-after-free in mtype_destroy()
* batman-adv: Fix DAT candidate selection on little endian systems
* macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
* r8152: add missing endpoint sanity check
* tcp: fix marked lost packets not being retransmitted
* net: usb: lan78xx: limit size of local TSO packets
* xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
* cw1200: Fix a signedness bug in cw1200_load_firmware()
* cfg80211: check for set_wiphy_params
* scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
* scsi: qla4xxx: fix double free bug
* scsi: bnx2i: fix potential use after free
* scsi: target: core: Fix a pr_debug() argument
* scsi: core: scsi_trace: Use get_unaligned_be*()
* perf probe: Fix wrong address verification
* regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
* Linux 4.4.211
* UBUNTU: upstream stable to v4.4.211

       4.4.211 upstream stable release
       from git://git.kernel.org/

CVE References

Connor Kuehl (connork)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: Confirmed → Invalid
Changed in linux (Ubuntu Xenial):
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Connor Kuehl (connork)
Revision history for this message
Connor Kuehl (connork) wrote :

The following commits were skipped as they have already been applied:

* rsi: add fix for crash during assertions
* mm/page_alloc.c: calculate 'available' memory in a separate function

description: updated
Revision history for this message
Khaled El Mously (kmously) wrote :

Also this commit was skipped because the repo already had it:

 * dccp: Fix memleak in __feat_register_sp

Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (10.7 KiB)

This bug was fixed in the package linux - 4.4.0-174.204

---------------
linux (4.4.0-174.204) xenial; urgency=medium

  * xenial/linux: 4.4.0-174.204 -proposed tracker (LP: #1861122)

  * Xenial update: 4.4.211 upstream stable release (LP: #1860681)
    - hidraw: Return EPOLLOUT from hidraw_poll
    - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
    - HID: hidraw, uhid: Always report EPOLLOUT
    - cfg80211/mac80211: make ieee80211_send_layer2_update a public function
    - mac80211: Do not send Layer 2 Update frame before authorization
    - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
    - p54usb: Fix race between disconnect and firmware loading
    - ALSA: line6: Fix write on zero-sized buffer
    - ALSA: line6: Fix memory leak at line6_init_pcm() error path
    - xen: let alloc_xenballooned_pages() fail if not enough memory free
    - wimax: i2400: fix memory leak
    - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
    - ext4: fix use-after-free race with debug_want_extra_isize
    - ext4: add more paranoia checking in ext4_expand_extra_isize handling
    - rtc: mt6397: fix alarm register overwrite
    - iommu: Remove device link to group on failure
    - gpio: Fix error message on out-of-range GPIO in lookup table
    - hsr: reset network header when supervision frame is created
    - cifs: Adjust indentation in smb2_open_file
    - RDMA/srpt: Report the SCSI residual to the initiator
    - scsi: enclosure: Fix stale device oops with hot replug
    - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
    - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
    - iio: imu: adis16480: assign bias value only if operation succeeded
    - mei: fix modalias documentation
    - clk: samsung: exynos5420: Preserve CPU clocks configuration during
      suspend/resume
    - compat_ioctl: handle SIOCOUTQNSD
    - tty: serial: imx: use the sg count from dma_map_sg
    - tty: serial: pch_uart: correct usage of dma_unmap_sg
    - media: exynos4-is: Fix recursive locking in isp_video_release()
    - spi: atmel: fix handling of cs_change set on non-last xfer
    - rtlwifi: Remove unnecessary NULL check in rtl_regd_init
    - rtc: msm6242: Fix reading of 10-hour digit
    - rseq/selftests: Turn off timeout setting
    - hexagon: work around compiler crash
    - ocfs2: call journal flush to mark journal as empty after journal recovery
      when mount
    - ALSA: seq: Fix racy access for queue timer in proc read
    - Fix built-in early-load Intel microcode alignment
    - block: fix an integer overflow in logical block size
    - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
    - USB: serial: opticon: fix control-message timeouts
    - USB: serial: suppress driver bind attributes
    - USB: serial: ch341: handle unbound port at reset_resume
    - USB: serial: io_edgeport: add missing active-port sanity check
    - USB: serial: quatech2: handle unbound ports
    - scsi: mptfusion: Fix double fetch bug in ioctl
    - usb: core: hub: Improved device recognition on remote wakeup
    - x86/efistub: Disable paging at mixed mode entry
    - mm/pag...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.