Ubuntu
linux package

Xenial update: 4.4.210 upstream stable release

Bug #1859865 reported by Connor Kuehl
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Xenial
Fix Released
Medium
Connor Kuehl

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

* chardev: Avoid potential use-after-free in 'chrdev_open()'
* usb: chipidea: host: Disable port power only if previously enabled
* ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
* kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
* tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
* HID: Fix slab-out-of-bounds read in hid_field_extract
* HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
* HID: hid-input: clear unmapped usages
* Input: add safety guards to input_set_keycode()
* drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
* can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
* can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode
* can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
* staging: vt6656: set usb_set_intfdata on driver fail.
* USB: serial: option: add ZLP support for 0x1bc7/0x9010
* usb: musb: Disable pullup at init
* usb: musb: dma: Correct parameter passed to IRQ handler
* staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
* tty: link tty and port before configuring it as console
* tty: always relink the port
* mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
* scsi: bfa: release allocated memory in case of error
* rtl8xxxu: prevent leaking urb
* USB: Fix: Don't skip endpoint descriptors with maxpacket=0
* netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
* netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
* drm/i915/gen9: Clear residual context state on context switch
* Linux 4.4.210
* UBUNTU: upstream stable to v4.4.210

       4.4.210 upstream stable release
       from git://git.kernel.org/

See original description

CVE References

Connor Kuehl (connork)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu):
status: Confirmed → Invalid
Changed in linux (Ubuntu Xenial):
status: New → In Progress
importance: Undecided → Medium
assignee: nobody → Connor Kuehl (connork)
Revision history for this message
Connor Kuehl (connork) wrote :

The following commits were skipped as they have already been applied:

* kobject: Export kobject_get_unless_zero()
* mwifiex: fix possible heap overflow in mwifiex_process_country_ie()

description: updated
Khaled El Mously (kmously)
Changed in linux (Ubuntu Xenial):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (10.7 KiB)

This bug was fixed in the package linux - 4.4.0-174.204

---------------
linux (4.4.0-174.204) xenial; urgency=medium

  * xenial/linux: 4.4.0-174.204 -proposed tracker (LP: #1861122)

  * Xenial update: 4.4.211 upstream stable release (LP: #1860681)
    - hidraw: Return EPOLLOUT from hidraw_poll
    - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
    - HID: hidraw, uhid: Always report EPOLLOUT
    - cfg80211/mac80211: make ieee80211_send_layer2_update a public function
    - mac80211: Do not send Layer 2 Update frame before authorization
    - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
    - p54usb: Fix race between disconnect and firmware loading
    - ALSA: line6: Fix write on zero-sized buffer
    - ALSA: line6: Fix memory leak at line6_init_pcm() error path
    - xen: let alloc_xenballooned_pages() fail if not enough memory free
    - wimax: i2400: fix memory leak
    - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
    - ext4: fix use-after-free race with debug_want_extra_isize
    - ext4: add more paranoia checking in ext4_expand_extra_isize handling
    - rtc: mt6397: fix alarm register overwrite
    - iommu: Remove device link to group on failure
    - gpio: Fix error message on out-of-range GPIO in lookup table
    - hsr: reset network header when supervision frame is created
    - cifs: Adjust indentation in smb2_open_file
    - RDMA/srpt: Report the SCSI residual to the initiator
    - scsi: enclosure: Fix stale device oops with hot replug
    - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
    - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
    - iio: imu: adis16480: assign bias value only if operation succeeded
    - mei: fix modalias documentation
    - clk: samsung: exynos5420: Preserve CPU clocks configuration during
      suspend/resume
    - compat_ioctl: handle SIOCOUTQNSD
    - tty: serial: imx: use the sg count from dma_map_sg
    - tty: serial: pch_uart: correct usage of dma_unmap_sg
    - media: exynos4-is: Fix recursive locking in isp_video_release()
    - spi: atmel: fix handling of cs_change set on non-last xfer
    - rtlwifi: Remove unnecessary NULL check in rtl_regd_init
    - rtc: msm6242: Fix reading of 10-hour digit
    - rseq/selftests: Turn off timeout setting
    - hexagon: work around compiler crash
    - ocfs2: call journal flush to mark journal as empty after journal recovery
      when mount
    - ALSA: seq: Fix racy access for queue timer in proc read
    - Fix built-in early-load Intel microcode alignment
    - block: fix an integer overflow in logical block size
    - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
    - USB: serial: opticon: fix control-message timeouts
    - USB: serial: suppress driver bind attributes
    - USB: serial: ch341: handle unbound port at reset_resume
    - USB: serial: io_edgeport: add missing active-port sanity check
    - USB: serial: quatech2: handle unbound ports
    - scsi: mptfusion: Fix double fetch bug in ioctl
    - usb: core: hub: Improved device recognition on remote wakeup
    - x86/efistub: Disable paging at mixed mode entry
    - mm/pag...

Changed in linux (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.