Zesty update to 4.10.14 stable release

Bug #1688499 reported by Stefan Bader
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Unassigned
Zesty
Fix Released
Medium
Stefan Bader

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.10.14 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

 The following patches from the 4.10.14 stable release shall be applied:
* ping: implement proper locking
* sparc64: kern_addr_valid regression
* sparc64: Fix kernel panic due to erroneous #ifdef surrounding pmd_write()
* net: neigh: guard against NULL solicit() method
* net: phy: handle state correctly in phy_stop_machine
* kcm: return immediately after copy_from_user() failure
* secure_seq: downgrade to per-host timestamp offsets
* bpf: improve verifier packet range checks
* Revert "UBUNTU: SAUCE: (no-up) net/mlx5: Avoid dereferencing uninitialized
  pointer"
* net/mlx5: Avoid dereferencing uninitialized pointer
* l2tp: hold tunnel socket when handling control frames in l2tp_ip and
  l2tp_ip6
* l2tp: purge socket queues in the .destruct() callback
* openvswitch: Fix ovs_flow_key_update()
* l2tp: take reference on sessions being dumped
* l2tp: fix PPP pseudo-wire auto-loading
* net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given
* sctp: listen on the sock only when it's state is listening or closed
* tcp: clear saved_syn in tcp_disconnect()
* ipv6: Fix idev->addr_list corruption
* net-timestamp: avoid use-after-free in ip_recv_error
* net: vrf: Fix setting NLM_F_EXCL flag when adding l3mdev rule
* sh_eth: unmap DMA buffers when freeing rings
* ipv6: sr: fix out-of-bounds access in SRH validation
* dp83640: don't recieve time stamps twice
* ipv6: sr: fix double free of skb after handling invalid SRH
* ipv6: fix source routing
* gso: Validate assumption of frag_list segementation
* net: ipv6: RTF_PCPU should not be settable from userspace
* netpoll: Check for skb->queue_mapping
* ip6mr: fix notification device destruction
* net/mlx5: Fix driver load bad flow when having fw initializing timeout
* net/mlx5: E-Switch, Correctly deal with inline mode on ConnectX-5
* net/mlx5e: Fix small packet threshold
* net/mlx5e: Fix ETHTOOL_GRXCLSRLALL handling
* tcp: fix SCM_TIMESTAMPING_OPT_STATS for normal skbs
* tcp: mark skbs with SCM_TIMESTAMPING_OPT_STATS
* macvlan: Fix device ref leak when purging bc_queue
* net: ipv6: regenerate host route if moved to gc list
* net: phy: fix auto-negotiation stall due to unavailable interrupt
* ipv6: check skb->protocol before lookup for nexthop
* tcp: memset ca_priv data to 0 properly
* ipv6: check raw payload size correctly in ioctl
* ALSA: oxfw: fix regression to handle Stanton SCS.1m/1d
* ALSA: firewire-lib: fix inappropriate assignment between signed/unsigned
  type
* ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
* scsi: return correct blkprep status code in case scsi_init_io() fails.
* ARC: [plat-eznps] Fix build error
* MIPS: KGDB: Use kernel context for sleeping threads
* MIPS: cevt-r4k: Fix out-of-bounds array access
* MIPS: Avoid BUG warning in arch_check_elf
* p9_client_readdir() fix
* ASoC: intel: Fix PM and non-atomic crash in bytcr drivers
* Input: i8042 - add Clevo P650RS to the i8042 reset list
* nfsd: check for oversized NFSv2/v3 arguments
* nfsd4: minor NFSv2/v3 write decoding cleanup
* nfsd: stricter decoding of write-like NFSv2/v3 ops
* ceph: fix recursion between ceph_set_acl() and __ceph_setattr()
* macsec: avoid heap overflow in skb_to_sgvec
* net: can: usb: gs_usb: Fix buffer on stack
* cpu/hotplug: Serialize callback invocations proper
* ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram
* Linux 4.10.14

CVE References

Stefan Bader (smb)
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Zesty):
assignee: nobody → Stefan Bader (smb)
importance: Undecided → Medium
status: New → In Progress
Stefan Bader (smb)
description: updated
Revision history for this message
Stefan Bader (smb) wrote :

The following patches were skipped because they were already applied:

* bug #1678009 / CVE-2017-7308
  - net/packet: fix overflow in check for tp_frame_nr
  - net/packet: fix overflow in check for tp_reserve

The following patch was reverted and replaced by its upstream counterpart to pick up the upstream commit SHA1:

* bug #1676786 [Zesty] mlx5_core Kernel oops with bonding mode
  1 and 6
  - UBUNTU: SAUCE: (no-up) net/mlx5: Avoid dereferencing uninitialized
    pointer
  + net/mlx5: Avoid dereferencing uninitialized pointer

The following commit required manual context handling due to changes introduced by
bug #1676388 [zesty] mlx5e OVS fixes.

* net/mlx5: E-Switch, Correctly deal with inline mode on ConnectX-5

Changed in linux (Ubuntu Zesty):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (16.0 KiB)

This bug was fixed in the package linux - 4.10.0-22.24

---------------
linux (4.10.0-22.24) zesty; urgency=low

  * linux: 4.10.0-22.24 -proposed tracker (LP: #1691146)

  * Fix NVLINK2 TCE route (LP: #1690155)
    - powerpc/powernv: Fix TCE kill on NVLink2

  * CVE-2017-0605
    - tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()

  * perf: qcom: Add L3 cache PMU driver (LP: #1689856)
    - [Config] CONFIG_QCOM_L3_PMU=y
    - perf: qcom: Add L3 cache PMU driver

  * No PMU support for ACPI-based arm64 systems (LP: #1689661)
    - drivers/perf: arm_pmu: rework per-cpu allocation
    - drivers/perf: arm_pmu: manage interrupts per-cpu
    - drivers/perf: arm_pmu: split irq request from enable
    - drivers/perf: arm_pmu: remove pointless PMU disabling
    - drivers/perf: arm_pmu: define armpmu_init_fn
    - drivers/perf: arm_pmu: fold init into alloc
    - drivers/perf: arm_pmu: factor out pmu registration
    - drivers/perf: arm_pmu: simplify cpu_pmu_request_irqs()
    - drivers/perf: arm_pmu: handle no platform_device
    - drivers/perf: arm_pmu: rename irq request/free functions
    - drivers/perf: arm_pmu: split cpu-local irq request/free
    - drivers/perf: arm_pmu: move irq request/free into probe
    - drivers/perf: arm_pmu: split out platform device probe logic
    - arm64: add function to get a cpu's MADT GICC table
    - [Config] CONFIG_ARM_PMU_ACPI=y
    - drivers/perf: arm_pmu: add ACPI framework
    - arm64: pmuv3: handle !PMUv3 when probing
    - arm64: pmuv3: use arm_pmu ACPI framework

  * [SRU][Zesty]QDF2400 kernel oops on ipmitool fru write 0 fru.bin
    (LP: #1689886)
    - ipmi: Fix kernel panic at ipmi_ssif_thread()

  * tty: pl011: fix earlycon work-around for QDF2400 erratum 44 (LP: #1689818)
    - tty: pl011: fix earlycon work-around for QDF2400 erratum 44
    - tty: pl011: use "qdf2400_e44" as the earlycon name for QDF2400 E44

  * kernel-wedge fails in artful due to leftover squashfs-modules d-i files
    (LP: #1688259)
    - Remove squashfs-modules files from d-i
    - [Config] as squashfs-modules is builtin kernel-image must Provides: it

  * arm64/ACPI support for SBSA watchdog (LP: #1688114)
    - clocksource: arm_arch_timer: clean up printk usage
    - clocksource: arm_arch_timer: rename type macros
    - clocksource: arm_arch_timer: rename the PPI enum
    - clocksource: arm_arch_timer: move enums and defines to header file
    - clocksource: arm_arch_timer: add a new enum for spi type
    - clocksource: arm_arch_timer: rework PPI selection
    - clocksource: arm_arch_timer: split dt-only rate handling
    - clocksource: arm_arch_timer: refactor arch_timer_needs_probing
    - clocksource: arm_arch_timer: move arch_timer_needs_of_probing into DT init
      call
    - clocksource: arm_arch_timer: add structs to describe MMIO timer
    - clocksource: arm_arch_timer: split MMIO timer probing.
    - [Config] CONFIG_ACPI_GTDT=y
    - acpi/arm64: Add GTDT table parse driver
    - clocksource: arm_arch_timer: simplify ACPI support code.
    - acpi/arm64: Add memory-mapped timer support in GTDT driver
    - clocksource: arm_arch_timer: add GTDT support for memory-mapped timer
    - acpi/arm64: Add SBS...

Changed in linux (Ubuntu):
status: New → Fix Released
Changed in linux (Ubuntu Zesty):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.