Ubuntu
linux package

multipath -ll is not showing the disks which are actually multipath

Zesty (17.04)
Bug #1718397

Bug #1718397 reported by bugproxy on 2017-09-20

This bug affects 1 person

	Status	Importance	Assigned to
The Ubuntu-power-systems project	Fix Released	Critical	Canonical Kernel Team
linux (Ubuntu)	Fix Released	Critical	Ubuntu on IBM Power Systems Bug Triage
Xenial	Fix Released	Critical	Unassigned
Zesty	Fix Released	Critical	Canonical Kernel Team
Artful	Fix Released	Critical	Ubuntu on IBM Power Systems Bug Triage

Bug Description

[Impact]

* The number of available AIO contexts is severely limited
   on systems with a large number of possible CPUs
   (e.g., IBM POWER8 processors w/ 20ish cores * 8 threads/core,
   and other multithreaded server-class processors).

* This prevents application such as multipath/directio checker
to provide all of the available devices to the system.

* Other applications which depend on AIO can be affected/limited.

* The patch fixes how aio increments the number of active contexts
(seen in /proc/sys/fs/aio-nr) and checks that against the global
limit (seen in /proc/sys/fs/aio-max-nr).

[Test Case]

* A synthetic test-case is attached (io_setup_v2.c) and demonstrated
(original/patched kernels) in comment #4.

* Trying to perform multipath discovery in debug/verbose mode
   (i.e., "multipath -v3" command) with sufficient number of
   individual paths using the "directio" path checker should
   demonstrate the problem/solution as well (i.e., presence or
   not of "io_setup failed" messages).

[Regression Potential]

* Note the fix is trivial and has been tested by several users,
even caused the introduction of a new test-case in "libaio";
(but that can never be a strong enough reason for no more errors).

* Applications which use aio with small "nr_events" value as argument
   to "io_setup()" now have access to a much larger number of aio contexts;
   but hopefully those apps are already only requesting what they need,
   not trying to get more and more.

* Applications which relied in the _incorrect_ behavior of '/proc/sys/fs/aio-nr'
being possibly greater than '/proc/sys/fs/aio-max-nr' might have problems,
but those apps should be fixed.

Problem Description
=================================
I am facing this issue for Texan Flash storage 840 disks which are coming from coho and salfish adapter

coho adapter with 840 storage is 3G disks and salfish adapter with 840 is 12G disks

I am able to see those disks in lsblk o/p but not in multipath -ll comamnd

0004:01:00.0 Coho: Saturn-X U78C9.001.WZS0060-P1-C6 0x10000090fa2a51f8 host10 Online
0004:01:00.1 Coho: Saturn-X U78C9.001.WZS0060-P1-C6 0x10000090fa2a51f9 host11 Online

0005:09:00.0 Sailfish: QLogic 8GB U78C9.001.WZS0060-P1-C9 0x21000024ff787778 host2 Online
0005:09:00.1 Sailfish: QLogic 8GB U78C9.001.WZS0060-P1-C9 0x21000024ff787779 host4 Online

root@luckyv1:/dev/disk# multipath -ll | grep "size=3.0G" -B 1
root@luckyv1:/dev/disk# multipath -ll | grep "size=12G" -B 1
root@luckyv1:/dev/disk#

== Comment: #3 - Luciano Chavez <email address hidden> - 2016-09-20 20:22:20 ==
I edited /etc/multipath.conf and added
verbosity 6

to crank up the output and ran multipath -ll and saved it off to a text file (attached). All the using the directio checker failed and those using the tur checker seem to work.

Sep 20 20:07:36 | loading //lib/multipath/libcheckdirectio.so checker
Sep 20 20:07:36 | loading //lib/multipath/libprioconst.so prioritizer
Sep 20 20:07:36 | Discover device /sys/devices/pci0000:00/0000:00:00.0/0000:01:00.0/host3/rport-3:0-2/target3:0:0/3:0:0:0/block/sdai
Sep 20 20:07:36 | sdai: udev property ID_WWN whitelisted
Sep 20 20:07:36 | sdai: not found in pathvec
Sep 20 20:07:36 | sdai: mask = 0x25
Sep 20 20:07:36 | sdai: dev_t = 66:32
Sep 20 20:07:36 | open '/sys/devices/pci0000:00/0000:00:00.0/0000:01:00.0/host3/rport-3:0-2/target3:0:0/3:0:0:0/block/sdai/size'
Sep 20 20:07:36 | sdai: size = 20971520
Sep 20 20:07:36 | sdai: vendor = IBM
Sep 20 20:07:36 | sdai: product = FlashSystem-9840
Sep 20 20:07:36 | sdai: rev = 1442
Sep 20 20:07:36 | sdai: h:b:t:l = 3:0:0:0
Sep 20 20:07:36 | SCSI target 3:0:0 -> FC rport 3:0-2
Sep 20 20:07:36 | sdai: tgt_node_name = 0x500507605e839800
Sep 20 20:07:36 | open '/sys/devices/pci0000:00/0000:00:00.0/0000:01:00.0/host3/rport-3:0-2/target3:0:0/3:0:0:0/state'
Sep 20 20:07:36 | sdai: path state = running
Sep 20 20:07:36 | sdai: get_state
Sep 20 20:07:36 | sdai: path_checker = directio (internal default)
Sep 20 20:07:36 | sdai: checker timeout = 30 ms (internal default)
Sep 20 20:07:36 | io_setup failed
Sep 20 20:07:36 | sdai: checker init failed

== Comment: #7 - Mauricio Faria De Oliveira <email address hidden> - 2016-09-27 18:32:57 ==
The function is failing at the io_setup() system call.

@ checkers/directio.c

int libcheck_init (struct checker * c)
{
  unsigned long pgsize = getpagesize();
  struct directio_context * ct;
  long flags;

  ct = malloc(sizeof(struct directio_context));
  if (!ct)
          return 1;
  memset(ct, 0, sizeof(struct directio_context));

  if (io_setup(1, &ct->ioctx) != 0) {
          condlog(1, "io_setup failed");
          free(ct);
          return 1;
  }
<...>

The syscall is failing w/ EAGAIN

# grep ^io_setup multipath_-v2_-d.strace
io_setup(1, 0x100163c9130) = -1 EAGAIN (Resource temporarily unavailable)
io_setup(1, 0x10015bae2c0) = -1 EAGAIN (Resource temporarily unavailable)
io_setup(1, 0x100164d65a0) = -1 EAGAIN (Resource temporarily unavailable)
io_setup(1, 0x10016429f20) = -1 EAGAIN (Resource temporarily unavailable)
io_setup(1, 0x100163535c0) = -1 EAGAIN (Resource temporarily unavailable)
io_setup(1, 0x10016368510) = -1 EAGAIN (Resource temporarily unavailable)
<...>

According to the manpage (man 2 io_setup)

NAME
io_setup - create an asynchronous I/O context

DESCRIPTION
The io_setup() system call creates an asynchronous I/O context suitable for concurrently processing nr_events operations. <...>

ERRORS
EAGAIN The specified nr_events exceeds the user's limit of available events, as defined in /proc/sys/fs/aio-max-nr.

On luckyv1:

root@luckyv1:~/mauricfo/bz146849/sep27# cat /proc/sys/fs/aio-max-nr
65536

root@luckyv1:~/mauricfo/bz146849/sep27# cat /proc/sys/fs/aio-nr
130560

According to linux's Documentation/sysctl/fs.txt [1]

aio-nr & aio-max-nr:

aio-nr is the running total of the number of events specified on the
io_setup system call for all currently active aio contexts. If aio-nr
reaches aio-max-nr then io_setup will fail with EAGAIN. Note that
raising aio-max-nr does not result in the pre-allocation or re-sizing
of any kernel data structures.

Interestingly, aio-nr is greater than aio-max-nr. Hm.

Increased aio-max-nr to 262144, and could get some more maps created.

== Comment: #8 - Mauricio Faria De Oliveira <email address hidden> - 2016-09-27 18:56:08 ==
This attached test-case demonstrates that for each io_setup() request of 1 nr_event, actually 1280 seem to be allocated.

root@luckyv1:~/mauricfo/bz146849/sep27# gcc -o io_setup io_setup.c -laio

root@luckyv1:~/mauricfo/bz146849/sep27# cat /proc/sys/fs/aio-nr
0

root@luckyv1:~/mauricfo/bz146849/sep27# ./io_setup &
[1] 12352
io_setup rc = 0
sleeping 10 seconds...

root@luckyv1:~/mauricfo/bz146849/sep27# cat /proc/sys/fs/aio-nr
1280

<...>
io_destroy rc = 0

[1]+ Done ./io_setup

root@luckyv1:~/mauricfo/bz146849/sep27# cat /proc/sys/fs/aio-nr
0

== Comment: #45 - Mauricio Faria De Oliveira <email address hidden> - 2017-09-19 18:32:10 ==
Verification of this commit with the linux-hwe-edge kernel in -proposed,
using the attached test-case "io_setup_v2.c"

    commit 2a8a98673c13cb2a61a6476153acf8344adfa992
    Author: Mauricio Faria de Oliveira <email address hidden>
    Date: Wed Jul 5 10:53:16 2017 -0300

fs: aio: fix the increment of aio-nr and counting against aio-max-nr

Test-case (attached)

$ sudo apt-get install gcc libaio-dev
$ gcc -o io_setup_v2 io_setup_v2.c -laio

Original kernel:

- Only 409 io_contexts could be allocated,
but that took 130880 [ div by 2, per bug] = 65440 slots out of 65535

$ uname -rv
4.11.0-14-generic #20~16.04.1-Ubuntu SMP Wed Aug 9 09:06:18 UTC 2017

    $ ./io_setup_v2 1 65536
    nr_events: 1, nr_requests: 65536
    rc = -11, i = 409
    ^Z
    [1]+ Stopped ./io_setup_v2 1 65536

$ cat /proc/sys/fs/aio-nr
130880

$ cat /proc/sys/fs/aio-max-nr
65536

$ kill %%

Patched kernel:

- Now 65515 io_contexts could be allocated out of 65535 (much better)
(and reporting correctly, without div by 2.)

$ uname -rv
4.11.0-140-generic #20~16.04.1+bz146489 SMP Tue Sep 19 17:46:15 CDT 2017

    $ ./io_setup_v2 1 65536
    nr_events: 1, nr_requests: 65536
    rc = -12, i = 65515
    ^Z
    [1]+ Stopped ./io_setup_v2 1 65536

$ cat /proc/sys/fs/aio-nr
65515

$ kill %%

See original description

Tags:

CVE References

Revision history for this message

bugproxy (bugproxy) wrote on 2017-09-20: output of multipath -ll with verbosity increased to 6

output of multipath -ll with verbosity increased to 6 Edit (1.6 MiB, text/plain)

Default Comment by Bridge

tags:

added: architecture-ppc64le bugnameltc-146489 severity-critical targetmilestone-inin16043

Revision history for this message

bugproxy (bugproxy) wrote on 2017-09-20: test-case: io_setup.c

test-case: io_setup.c Edit (381 bytes, text/plain)

Default Comment by Bridge

Revision history for this message

bugproxy (bugproxy) wrote on 2017-09-20: test-case: io_setup_v2.c

test-case: io_setup_v2.c Edit (1.1 KiB, text/plain)

Default Comment by Bridge

Changed in ubuntu:
assignee:	nobody → Ubuntu on IBM Power Systems Bug Triage (ubuntu-power-triage)
affects:	ubuntu → kernel-package (Ubuntu)

Andrew Cloke (andrew-cloke) on 2017-09-20

Changed in ubuntu-power-systems:
assignee:	nobody → Canonical Kernel Team (canonical-kernel-team)
importance:	Undecided → Critical

Revision history for this message

Mauricio Faria de Oliveira (mfo) wrote on 2017-09-20:

Verification of this commit with the linux-hwe-edge kernel in -proposed,
using the attached test-case "io_setup_v2.c"

    commit 2a8a98673c13cb2a61a6476153acf8344adfa992
    Author: Mauricio Faria de Oliveira <email address hidden>
    Date: Wed Jul 5 10:53:16 2017 -0300

fs: aio: fix the increment of aio-nr and counting against aio-max-nr

Test-case (attached)

$ sudo apt-get install gcc libaio-dev
$ gcc -o io_setup_v2 io_setup_v2.c -laio

Original kernel:

- Only 409 io_contexts could be allocated,
but that took 130880 [ div by 2, per bug] = 65440 slots out of 65535

$ uname -rv
4.11.0-14-generic #20~16.04.1-Ubuntu SMP Wed Aug 9 09:06:18 UTC 2017

    $ ./io_setup_v2 1 65536
    nr_events: 1, nr_requests: 65536
    rc = -11, i = 409
    ^Z
    [1]+ Stopped ./io_setup_v2 1 65536

$ cat /proc/sys/fs/aio-nr
130880

$ cat /proc/sys/fs/aio-max-nr
65536

$ kill %%

Patched kernel:

- Now 65515 io_contexts could be allocated out of 65535 (much better)
(and reporting correctly, without div by 2.)

$ uname -rv
4.11.0-140-generic #20~16.04.1+bz146489 SMP Tue Sep 19 17:46:15 CDT 2017

    $ ./io_setup_v2 1 65536
    nr_events: 1, nr_requests: 65536
    rc = -12, i = 65515
    ^Z
    [1]+ Stopped ./io_setup_v2 1 65536

$ cat /proc/sys/fs/aio-nr
65515

$ kill %%

description:

updated

Revision history for this message

Mauricio Faria de Oliveira (mfo) wrote on 2017-09-20:

Added an SRU template to the bug description.

description:

updated

Revision history for this message

Mauricio Faria de Oliveira (mfo) wrote on 2017-09-20:

Patch posted to the kernel-team mailing list:

[A/Z/X][PATCH] fs: aio: fix the increment of aio-nr and counting against aio-max-nr
https://lists.ubuntu.com/archives/kernel-team/2017-September/087132.html

Joseph Salisbury (jsalisbury) on 2017-09-20

Changed in kernel-package (Ubuntu):
importance:	Undecided → Critical
tags:	added: kernel-da-key
affects:	kernel-package (Ubuntu) → linux (Ubuntu)
Changed in linux (Ubuntu):
status:	New → Triaged
Changed in linux (Ubuntu Zesty):
status:	New → Triaged
Changed in linux (Ubuntu Xenial):
status:	New → Triaged
Changed in linux (Ubuntu Zesty):
importance:	Undecided → Critical
Changed in linux (Ubuntu Xenial):
importance:	Undecided → Critical

Frank Heimes (fheimes) on 2017-09-21

Changed in ubuntu-power-systems:
status:	New → Triaged

Revision history for this message

bugproxy (bugproxy) wrote on 2017-09-21: output of multipath -ll with verbosity increased to 6

output of multipath -ll with verbosity increased to 6 Edit (1.6 MiB, text/plain)

Default Comment by Bridge

Revision history for this message

bugproxy (bugproxy) wrote on 2017-09-21: test-case: io_setup.c

test-case: io_setup.c Edit (381 bytes, text/plain)

Default Comment by Bridge

Revision history for this message

bugproxy (bugproxy) wrote on 2017-09-21: test-case: io_setup_v2.c

test-case: io_setup_v2.c Edit (1.1 KiB, text/plain)

Default Comment by Bridge

Seth Forshee (sforshee) on 2017-09-22

Changed in linux (Ubuntu Artful):
status:	Triaged → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2017-09-26:

#10

Download full text (7.8 KiB)

This bug was fixed in the package linux - 4.13.0-12.13

---------------
linux (4.13.0-12.13) artful; urgency=low

* linux: 4.13.0-12.13 -proposed tracker (LP: #1718980)

  * [Feature] SKX: Support crystall ridge / far / near memory indication in PEBS
    (LP: #1591813)
    - perf/x86: Move Nehalem PEBS code to flag
    - perf/x86: Fix data source decoding for Skylake

  * Upgrade to 4.13.0-11.12 in artful amd64 VM breaks display on wayland
    (LP: #1718679)
    - [Config] CONFIG_DRM_VBOXVIDEO=n

* ipmmu-vmsa driver breaks arm64 boots (LP: #1718734)
- [Config] Disable CONFIG_IPMMU_VMSA on arm64

* Vlun resize request could fail with cxlflash driver (LP: #1713575)
- scsi: cxlflash: Fix vlun resize failure in the shrink path

  * multipath -ll is not showing the disks which are actually multipath
    (LP: #1718397)
    - fs: aio: fix the increment of aio-nr and counting against aio-max-nr

  * [Feature] Crystal Ridge - BTT - Rework error clearing (LP: #1704350)
    - libnvdimm, btt: fix a missed NVDIMM_IO_ATOMIC case in the write path
    - libnvdimm, btt: refactor map entry operations with macros
    - libnvdimm, btt: ensure that flags were also unchanged during a map_read
    - libnvdimm, btt: cache sector_size in arena_info
    - libnvdimm: fix potential deadlock while clearing errors
    - libnvdimm, btt: rework error clearing

  * [Feature] Crystal Ridge - have 4k DAX faults use a common zero page
    (LP: #1704439)
    - mm: add vm_insert_mixed_mkwrite()
    - dax: relocate some dax functions
    - dax: use common 4k zero page for dax mmap reads
    - dax: remove DAX code from page_cache_tree_insert()
    - dax: move all DAX radix tree defs to fs/dax.c

  * [bug] 17.10: CDP test fail on platform of Purley-2S/4S/Neoncity,BDW-
    de/ep/ex, (LP: #1716843)
    - SAUCE: (no-up) x86/intel_rdt: Fix cdp info directory files issue

* [featue] GPIO support for Denverton (LP: #1591829)
- pinctrl: intel: Add Intel Denverton pin controller support

  * ETPS/2 Elantech Touchpad inconsistently detected (Gigabyte P57W laptop)
    (LP: #1594214)
    - Input: i8042 - add Gigabyte P57 to the keyboard reset table

* autopkgtest profile fails to build on armhf (LP: #1717920)
- [Packaging] autopkgtest -- disable d-i when dropping flavours

This bug was fixed in the package linux - 4.13.0-12.13

---------------
linux (4.13.0-12.13) artful; urgency=low

* linux: 4.13.0-12.13 -proposed tracker (LP: #1718980)

* [Feature] SKX: Support crystall ridge / far / near memory indication in PEBS
    (LP: #1591813)
    - perf/x86: Move Nehalem PEBS code to flag
    - perf/x86: Fix data source decoding for Skylake

* Upgrade to 4.13.0-11.12 in artful amd64 VM breaks display on wayland
    (LP: #1718679)
    - [Config] CONFIG_DRM_VBOXVIDEO=n

* ipmmu-vmsa driver breaks arm64 boots (LP: #1718734)
    - [Config] Disable CONFIG_IPMMU_VMSA on arm64

* Vlun resize request could fail with cxlflash driver (LP: #1713575)
    - scsi: cxlflash: Fix vlun resize failure in the shrink path

* multipath -ll is not showing the disks which are actually multipath
    (LP: #1718397)
    - fs: aio: fix the increment of aio-nr and counting against aio-max-nr

* [bug] 17.10: CDP test fail on platform of Purley-2S/4S/Neoncity,BDW-
    de/ep/ex, (LP: #1716843)
    - SAUCE: (no-up) x86/intel_rdt: Fix cdp info directory files issue

* [featue] GPIO support for Denverton (LP: #1591829)
    - pinctrl: intel: Add Intel Denverton pin controller support

* ETPS/2 Elantech Touchpad inconsistently detected (Gigabyte P57W laptop)
    (LP: #1594214)
    - Input: i8042 - add Gigabyte P57 to the keyboard reset table

* autopkgtest profile fails to build on armhf (LP: #1717920)
    - [Packaging] autopkgtest -- disable d-i when dropping flavours

* Artful update to v4.13.3 stable release (LP: #1718412)
    - Revert "net: use lib/percpu_counter API for fragmentation mem accounting"
    - Revert "net: fix percpu memory leaks"
    - gianfar: Fix Tx flow control deactivation
    - vhost_net: correctly check tx avail during rx busy polling
    - ip6_gre: update mtu properly in ip6gre_err
    - udp: drop head states only when all skb references are gone
    - ipv6: fix memory leak with multiple tables during netns destruction
    - ipv6: fix typo in fib6_net_exit()
    - sctp: fix missing wake ups in some situations
    - tcp: fix a request socket leak
    - ip_tunnel: fix setting ttl and tos value in collect_md mode
    - f2fs: let fill_super handle roll-forward errors
    - f2fs: check hot_data for roll-forward recovery
    - x86/fsgsbase/64: Fully initialize FS and GS state in start_thread_common
    - x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core dumps
    - x86/switch_to/64: Rewrite FS/GS switching yet again to fix AMD CPUs
    - x86/mm, mm/hwpoison: Clear PRESENT bit for kernel 1:1 mappings of poison
      pages
    - ovl: fix false positive ESTALE on lookup
    - fuse: allow server to run in different pid_ns
    - idr: remove WARN_ON_ONCE() when trying to replace negative ID
    - libnvdimm, btt: check memory allocation failure
    - libnvdimm: fix integer overflow static analysis warning
    - xfs: write unmount record for ro mounts
    - xfs: toggle readonly state around xfs_log_mount_finish
    - xfs: Add infrastructure needed for error propagation during buffer IO
      failure
    - xfs: Properly retry failed inode items in case of error during buffer
      writeback
    - xfs: fix recovery failure when log record header wraps log end
    - xfs: always verify the log tail during recovery
    - xfs: fix log recovery corruption error due to tail overwrite
    - xfs: handle -EFSCORRUPTED during head/tail verification
    - xfs: stop searching for free slots in an inode chunk when there are none
    - xfs: evict all inodes involved with log redo item
    - xfs: check for race with xfs_reclaim_inode() in xfs_ifree_cluster()
    - xfs: open-code xfs_buf_item_dirty()
    - xfs: remove unnecessary dirty bli format check for ordered bufs
    - xfs: ordered buffer log items are never formatted
    - xfs: refactor buffer logging into buffer dirtying helper
    - xfs: don't log dirty ranges for ordered buffers
    - xfs: skip bmbt block ino validation during owner change
    - xfs: move bmbt owner change to last step of extent swap
    - xfs: disallow marking previously dirty buffers as ordered
    - xfs: relog dirty buffers during swapext bmbt owner change
    - xfs: disable per-inode DAX flag
    - xfs: fix incorrect log_flushed on fsync
    - xfs: don't set v3 xflags for v2 inodes
    - xfs: open code end_buffer_async_write in xfs_finish_page_writeback
    - xfs: use kmem_free to free return value of kmem_zalloc
    - md/raid1/10: reset bio allocated from mempool
    - md/raid5: release/flush io in raid5_do_work()
    - xfs: fix compiler warnings
    - Linux 4.13.3

* Artful update to v4.13.2 stable release (LP: #1717549)
    - mtd: nand: make Samsung SLC NAND usable again
    - mtd: nand: hynix: add support for 20nm NAND chips
    - mtd: nand: mxc: Fix mxc_v1 ooblayout
    - mtd: nand: qcom: fix read failure without complete bootchain
    - mtd: nand: qcom: fix config error for BCH
    - nvme-fabrics: generate spec-compliant UUID NQNs
    - btrfs: resume qgroup rescan on rw remount
    - rtlwifi: btcoexist: Fix breakage of ant_sel for rtl8723be
    - rtlwifi: btcoexist: Fix antenna selection code
    - radix-tree: must check __radix_tree_preload() return value
    - brcmfmac: feature check for multi-scheduled scan fails on bcm4345 devices
    - kselftests: timers: leap-a-day: Change default arguments to help test runs
    - selftests: timers: Fix run_destructive_tests target to handle skipped tests
    - selftests/x86/fsgsbase: Test selectors 1, 2, and 3
    - mm: kvfree the swap cluster info if the swap file is unsatisfactory
    - mm/swapfile.c: fix swapon frontswap_map memory leak on error
    - mm/sparse.c: fix typo in online_mem_sections
    - mm/memory.c: fix mem_cgroup_oom_disable() call missing
    - KVM: SVM: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest
    - Revert "firmware: add sanity check on shutdown/suspend"
    - rt2800: fix TX_PIN_CFG setting for non MT7620 chips
    - ARM64: dts: marvell: armada-37xx: Fix GIC maintenance interrupt
    - ARM: 8692/1: mm: abort uaccess retries upon fatal signal
    - NFS: Fix 2 use after free issues in the I/O code
    - NFS: Sync the correct byte range during synchronous writes
    - NFSv4: Fix up mirror allocation
    - xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
    - Linux 4.13.2

* [Bug] Thunderbolt-patches: Related to the way the key for secure connection
    is handled (LP: #1717430)
    - thunderbolt: Remove superfluous check
    - thunderbolt: Make key root-only accessible
    - thunderbolt: Allow clearing the key

* [Bug] Thunderbolt-patches: Fixes the issue regarding the order of ACPI calls
    w.r.t. PCI enumeration (LP: #1717431)
    - ACPICA: Dispatch active GPEs at init time
    - ACPICA: Make it possible to enable runtime GPEs earlier
    - ACPI / scan: Enable GPEs before scanning the namespace

* Miscellaneous Ubuntu changes
    - ubuntu: vbox -- update to 5.1.28-dfsg-1
    - [Config] CONFIG_PINCTRL_DENVERTON=m
    - [Config] CONFIG_I2C_XLP9XX=m

* Miscellaneous upstream changes
    - Introduce v3 namespaced file capabilities

-- Seth Forshee <seth.forshee@canonical.com>  Fri, 22 Sep 2017 12:10:03 -0500

Changed in linux (Ubuntu Artful):
status:	Fix Committed → Fix Released

Frank Heimes (fheimes) on 2017-09-26

Changed in ubuntu-power-systems:
status:	Triaged → In Progress

Manoj Iyer (manjo) on 2017-10-02

Changed in linux (Ubuntu Zesty):
assignee:	nobody → Canonical Kernel Team (canonical-kernel-team)
tags:	added: triage-a

bugproxy (bugproxy) on 2017-10-09

tags:

removed: bugnameltc-146489 kernel-da-key severity-critical triage-a

Thadeu Lima de Souza Cascardo (cascardo) on 2017-10-09

Changed in linux (Ubuntu Zesty):
status:	Triaged → Fix Committed

Thadeu Lima de Souza Cascardo (cascardo) on 2017-10-09

Changed in linux (Ubuntu Xenial):
status:	Triaged → Fix Committed

Frank Heimes (fheimes) on 2017-10-10

Changed in ubuntu-power-systems:
status:	In Progress → Fix Committed

Revision history for this message

Kleber Sacilotto de Souza (kleber-souza) wrote on 2017-10-18:

#11

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-xenial' to 'verification-done-xenial'. If the problem still exists, change the tag 'verification-needed-xenial' to 'verification-failed-xenial'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:	added: verification-needed-xenial
tags:	added: verification-needed-zesty

Revision history for this message

Kleber Sacilotto de Souza (kleber-souza) wrote on 2017-10-18:

#12

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-zesty' to 'verification-done-zesty'. If the problem still exists, change the tag 'verification-needed-zesty' to 'verification-failed-zesty'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

Revision history for this message

Kleber Sacilotto de Souza (kleber-souza) wrote on 2017-10-27:

#13

Hello IBM,

Could you please verify the fix with the xenial and/or zesty kernels currently in -proposed?

Thank you!

Revision history for this message

Launchpad Janitor (janitor) wrote on 2017-10-30:

#14

Download full text (4.4 KiB)

This bug was fixed in the package linux - 4.10.0-38.42

---------------
linux (4.10.0-38.42) zesty; urgency=low

* linux: 4.10.0-38.42 -proposed tracker (LP: #1722330)

  * Controller lockup detected on ProLiant DL380 Gen9 with P440 Controller
    (LP: #1720359)
    - scsi: hpsa: limit transfer length to 1MB

  * [Dell Docking IE][0bda:8153] Realtek USB Ethernet leads to system hang
    (LP: #1720977)
    - r8152: fix the list rx_done may be used without initialization

* Touchpad not detected in Lenovo X1 Yoga / Yoga 720-15IKB (LP: #1700657)
- mfd: intel-lpss: Add missing PCI ID for Intel Sunrise Point LPSS devices

* Add installer support for Broadcom BCM573xx network drivers. (LP: #1720466)
- d-i: Add bnxt_en to nic-modules.

* CVE-2017-1000252
- KVM: VMX: Do not BUG() on out-of-bounds guest IRQ

* CVE-2017-10663
- f2fs: sanity check checkpoint segno and blkoff

* xfstest sanity checks on seek operations fails (LP: #1696049)
- xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff()

  * [P9, Power NV][ WSP][Ubuntu 16.04.03] : perf hw breakpoint command results
    in call traces and system goes for reboot. (LP: #1706033)
    - powerpc/64s: Handle data breakpoints in Radix mode

  * 5U84 - ses driver isn't binding right - cannot blink lights on 1 of the 2
    5u84 (LP: #1693369)
    - scsi: ses: do not add a device to an enclosure if enclosure_add_links()
      fails.

* Vlun resize request could fail with cxlflash driver (LP: #1713575)
- scsi: cxlflash: Fix vlun resize failure in the shrink path

* More migrations with constant load (LP: #1713576)
- sched/fair: Prefer sibiling only if local group is under-utilized

* New PMU fixes for marked events. (LP: #1716491)
- powerpc/perf: POWER9 PMU stops after idle workaround

* CVE-2017-14340
- xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present

  * [Zesty][Yakkety] rtl8192e bug fixes (LP: #1698470)
    - staging: rtl8192e: rtl92e_fill_tx_desc fix write to mapped out memory.
    - staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
    - staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
    - staging: rtl8192e: GetTs Fix invalid TID 7 warning.

  * Stranded with ENODEV after mdadm --readonly (LP: #1706243)
    - md: MD_CLOSING needs to be cleared after called md_set_readonly or
      do_md_stop

  * multipath -ll is not showing the disks which are actually multipath
    (LP: #1718397)
    - fs: aio: fix the increment of aio-nr and counting against aio-max-nr

  * ETPS/2 Elantech Touchpad inconsistently detected (Gigabyte P57W laptop)
    (LP: #1594214)
    - Input: i8042 - add Gigabyte P57 to the keyboard reset table

* CVE-2017-10911
- xen-blkback: don't leak stack data via response ring

* CVE-2017-11176
- mqueue: fix a use-after-free in sys_mq_notify()

This bug was fixed in the package linux - 4.10.0-38.42

---------------
linux (4.10.0-38.42) zesty; urgency=low

* linux: 4.10.0-38.42 -proposed tracker (LP: #1722330)

* Controller lockup detected on ProLiant DL380 Gen9 with P440 Controller
    (LP: #1720359)
    - scsi: hpsa: limit transfer length to 1MB

* [Dell Docking IE][0bda:8153] Realtek USB Ethernet leads to system hang
    (LP: #1720977)
    - r8152: fix the list rx_done may be used without initialization

* Touchpad not detected in Lenovo X1 Yoga / Yoga 720-15IKB (LP: #1700657)
    - mfd: intel-lpss: Add missing PCI ID for Intel Sunrise Point LPSS devices

* Add installer support for Broadcom BCM573xx network drivers. (LP: #1720466)
    - d-i: Add bnxt_en to nic-modules.

* CVE-2017-1000252
    - KVM: VMX: Do not BUG() on out-of-bounds guest IRQ

* CVE-2017-10663
    - f2fs: sanity check checkpoint segno and blkoff

* xfstest sanity checks on seek operations fails (LP: #1696049)
    - xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff()

* [P9, Power NV][ WSP][Ubuntu 16.04.03] : perf hw breakpoint command results
    in call traces and system goes for reboot. (LP: #1706033)
    - powerpc/64s: Handle data breakpoints in Radix mode

* 5U84 - ses driver isn't binding right - cannot blink lights on 1 of the 2
    5u84 (LP: #1693369)
    - scsi: ses: do not add a device to an enclosure if enclosure_add_links()
      fails.

* Vlun resize request could fail with cxlflash driver (LP: #1713575)
    - scsi: cxlflash: Fix vlun resize failure in the shrink path

* More migrations with constant load (LP: #1713576)
    - sched/fair: Prefer sibiling only if local group is under-utilized

* New PMU fixes for marked events. (LP: #1716491)
    - powerpc/perf: POWER9 PMU stops after idle workaround

* CVE-2017-14340
    - xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present

* Stranded with ENODEV after mdadm --readonly (LP: #1706243)
    - md: MD_CLOSING needs to be cleared after called md_set_readonly or
      do_md_stop

* multipath -ll is not showing the disks which are actually multipath
    (LP: #1718397)
    - fs: aio: fix the increment of aio-nr and counting against aio-max-nr

* ETPS/2 Elantech Touchpad inconsistently detected (Gigabyte P57W laptop)
    (LP: #1594214)
    - Input: i8042 - add Gigabyte P57 to the keyboard reset table

* CVE-2017-10911
    - xen-blkback: don't leak stack data via response ring

* CVE-2017-11176
    - mqueue: fix a use-after-free in sys_mq_notify()

* implement 'complain mode' in seccomp for developer mode with snaps
    (LP: #1567597)
    - Revert "UBUNTU: SAUCE: seccomp: log actions even when audit is disabled"
    - seccomp: Provide matching filter for introspection
    - seccomp: Sysctl to display available actions
    - seccomp: Operation for checking if an action is available
    - seccomp: Sysctl to configure actions that are allowed to be logged
    - seccomp: Selftest for detection of filter flag support
    - seccomp: Action to log before allowing

* implement errno action logging in seccomp for strict mode with snaps
    (LP: #1721676)
    - Revert "UBUNTU: SAUCE: seccomp: log actions even when audit is disabled"
    - seccomp: Provide matching filter for introspection
    - seccomp: Sysctl to display available actions
    - seccomp: Operation for checking if an action is available
    - seccomp: Sysctl to configure actions that are allowed to be logged
    - seccomp: Selftest for detection of filter flag support
    - seccomp: Filter flag to log all actions except SECCOMP_RET_ALLOW

* Backport recent bbr bugfixes to 4.10 kernel (LP: #1708604)
    - tcp_bbr: cut pacing rate only if filled pipe
    - tcp_bbr: introduce bbr_bw_to_pacing_rate() helper
    - tcp_bbr: introduce bbr_init_pacing_rate_from_rtt() helper
    - tcp_bbr: remove sk_pacing_rate=0 transient during init
    - tcp_bbr: init pacing rate on first RTT sample

* [SRU][Zesty] Fix lscpu segfault on ARM64 with SMBIOS v2.0 (LP: #1716483)
    - arm64: kernel: restrict /dev/mem read() calls to linear region

-- Kleber Sacilotto de Souza <kleber.souza@canonical.com>  Tue, 10 Oct 2017 13:49:34 +0200

Changed in linux (Ubuntu Zesty):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2017-10-30:

#15

Download full text (11.5 KiB)

This bug was fixed in the package linux - 4.4.0-98.121

---------------
linux (4.4.0-98.121) xenial; urgency=low

* linux: 4.4.0-98.121 -proposed tracker (LP: #1722299)

  * Controller lockup detected on ProLiant DL380 Gen9 with P440 Controller
    (LP: #1720359)
    - scsi: hpsa: limit transfer length to 1MB

  * [Dell Docking IE][0bda:8153] Realtek USB Ethernet leads to system hang
    (LP: #1720977)
    - r8152: fix the list rx_done may be used without initialization

* Add installer support for Broadcom BCM573xx network drivers. (LP: #1720466)
- d-i: Add bnxt_en to nic-modules.

* snapcraft.yaml: add dpkg-dev to the build deps (LP: #1718886)
- snapcraft.yaml: add dpkg-dev to the build deps

* Support setting I2C_TIMEOUT via ioctl for i2c-designware (LP: #1718578)
- i2c: designware: Use transfer timeout from ioctl I2C_TIMEOUT

  * 5U84 - ses driver isn't binding right - cannot blink lights on 1 of the 2
    5u84 (LP: #1693369)
    - scsi_transport_sas: add function to get SAS endpoint address
    - ses: fix discovery of SATA devices in SAS enclosures
    - scsi: sas: provide stub implementation for scsi_is_sas_rphy
    - scsi: ses: Fix SAS device detection in enclosure

  * multipath -ll is not showing the disks which are actually multipath
    (LP: #1718397)
    - fs: aio: fix the increment of aio-nr and counting against aio-max-nr

* Support Dell Wireless DW5819/5818 WWAN devices (LP: #1721455)
- SAUCE: USB: serial: qcserial: add Dell DW5818, DW5819

* CVE-2017-10911
- xen-blkback: don't leak stack data via response ring

  * implement 'complain mode' in seccomp for developer mode with snaps
    (LP: #1567597)
    - seccomp: Provide matching filter for introspection
    - seccomp: Sysctl to display available actions
    - seccomp: Operation for checking if an action is available
    - seccomp: Sysctl to configure actions that are allowed to be logged
    - seccomp: Selftest for detection of filter flag support
    - seccomp: Action to log before allowing

  * implement errno action logging in seccomp for strict mode with snaps
    (LP: #1721676)
    - seccomp: Provide matching filter for introspection
    - seccomp: Sysctl to display available actions
    - seccomp: Operation for checking if an action is available
    - seccomp: Sysctl to configure actions that are allowed to be logged
    - seccomp: Selftest for detection of filter flag support
    - seccomp: Filter flag to log all actions except SECCOMP_RET_ALLOW

* [Xenial] update OpenNSL kernel modules to 6.5.10 (LP: #1721511)
- SAUCE: update OpenNSL kernel modules to 6.5.10

This bug was fixed in the package linux - 4.4.0-98.121

---------------
linux (4.4.0-98.121) xenial; urgency=low

* linux: 4.4.0-98.121 -proposed tracker (LP: #1722299)

* Controller lockup detected on ProLiant DL380 Gen9 with P440 Controller
    (LP: #1720359)
    - scsi: hpsa: limit transfer length to 1MB

* [Dell Docking IE][0bda:8153] Realtek USB Ethernet leads to system hang
    (LP: #1720977)
    - r8152: fix the list rx_done may be used without initialization

* Add installer support for Broadcom BCM573xx network drivers. (LP: #1720466)
    - d-i: Add bnxt_en to nic-modules.

* snapcraft.yaml: add dpkg-dev to the build deps (LP: #1718886)
    - snapcraft.yaml: add dpkg-dev to the build deps

* Support setting I2C_TIMEOUT via ioctl for i2c-designware (LP: #1718578)
    - i2c: designware: Use transfer timeout from ioctl I2C_TIMEOUT

* multipath -ll is not showing the disks which are actually multipath
    (LP: #1718397)
    - fs: aio: fix the increment of aio-nr and counting against aio-max-nr

* Support Dell Wireless DW5819/5818 WWAN devices (LP: #1721455)
    - SAUCE: USB: serial: qcserial: add Dell DW5818, DW5819

* CVE-2017-10911
    - xen-blkback: don't leak stack data via response ring

* [Xenial] update OpenNSL kernel modules to 6.5.10 (LP: #1721511)
    - SAUCE: update OpenNSL kernel modules to 6.5.10

* Xenial update to 4.4.90 stable release (LP: #1721550)
    - cifs: release auth_key.response for reconnect.
    - mac80211: flush hw_roc_start work before cancelling the ROC
    - KVM: PPC: Book3S: Fix race and leak in kvm_vm_ioctl_create_spapr_tce()
    - tracing: Fix trace_pipe behavior for instance traces
    - tracing: Erase irqsoff trace with empty write
    - md/raid5: fix a race condition in stripe batch
    - md/raid5: preserve STRIPE_ON_UNPLUG_LIST in break_stripe_batch_list
    - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse
      nlmsg properly
    - crypto: talitos - Don't provide setkey for non hmac hashing algs.
    - crypto: talitos - fix sha224
    - KEYS: fix writing past end of user-supplied buffer in keyring_read()
    - KEYS: prevent creating a different user's keyrings
    - KEYS: prevent KEYCTL_READ on negative key
    - powerpc/pseries: Fix parent_dn reference leak in add_dt_node()
    - Fix SMB3.1.1 guest authentication to Samba
    - SMB: Validate negotiate (to protect against downgrade) even if signing off
    - SMB3: Don't ignore O_SYNC/O_DSYNC and O_DIRECT flags
    - vfs: Return -ENXIO for negative SEEK_HOLE / SEEK_DATA offsets
    - nl80211: check for the required netlink attributes presence
    - bsg-lib: don't free job in bsg_prepare_job
    - seccomp: fix the usage of get/put_seccomp_filter() in seccomp_get_filter()
    - arm64: Make sure SPsel is always set
    - arm64: fault: Route pte translation faults via do_translation_fault
    - KVM: VMX: Do not BUG() on out-of-bounds guest IRQ
    - kvm: nVMX: Don't allow L2 to access the hardware CR8
    - PCI: Fix race condition with driver_override
    - btrfs: fix NULL pointer dereference from free_reloc_roots()
    - btrfs: propagate error to btrfs_cmp_data_prepare caller
    - btrfs: prevent to set invalid default subvolid
    - x86/fpu: Don't let userspace set bogus xcomp_bv
    - gfs2: Fix debugfs glocks dump
    - timer/sysclt: Restrict timer migration sysctl values to 0 and 1
    - KVM: VMX: do not change SN bit in vmx_update_pi_irte()
    - KVM: VMX: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt
    - cxl: Fix driver use count
    - dmaengine: mmp-pdma: add number of requestors
    - ARM: pxa: add the number of DMA requestor lines
    - ARM: pxa: fix the number of DMA requestor lines
    - KVM: VMX: use cmpxchg64
    - video: fbdev: aty: do not leak uninitialized padding in clk to userspace
    - swiotlb-xen: implement xen_swiotlb_dma_mmap callback
    - fix xen_swiotlb_dma_mmap prototype
    - Linux 4.4.90

* Xenial update to 4.4.89 stable release (LP: #1721477)
    - ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()
    - ipv6: add rcu grace period before freeing fib6_node
    - ipv6: fix sparse warning on rt6i_node
    - qlge: avoid memcpy buffer overflow
    - Revert "net: phy: Correctly process PHY_HALTED in phy_stop_machine()"
    - Revert "net: use lib/percpu_counter API for fragmentation mem accounting"
    - Revert "net: fix percpu memory leaks"
    - gianfar: Fix Tx flow control deactivation
    - ipv6: fix memory leak with multiple tables during netns destruction
    - ipv6: fix typo in fib6_net_exit()
    - f2fs: check hot_data for roll-forward recovery
    - x86/fsgsbase/64: Report FSBASE and GSBASE correctly in core dumps
    - md/raid5: release/flush io in raid5_do_work()
    - nfsd: Fix general protection fault in release_lock_stateid()
    - mm: prevent double decrease of nr_reserved_highatomic
    - tty: improve tty_insert_flip_char() fast path
    - tty: improve tty_insert_flip_char() slow path
    - tty: fix __tty_insert_flip_char regression
    - Input: i8042 - add Gigabyte P57 to the keyboard reset table
    - MIPS: math-emu: <MAX|MAXA|MIN|MINA>.<D|S>: Fix quiet NaN propagation
    - MIPS: math-emu: <MAX|MAXA|MIN|MINA>.<D|S>: Fix cases of both inputs zero
    - MIPS: math-emu: <MAX|MIN>.<D|S>: Fix cases of both inputs negative
    - MIPS: math-emu: <MAXA|MINA>.<D|S>: Fix cases of input values with opposite
      signs
    - MIPS: math-emu: <MAXA|MINA>.<D|S>: Fix cases of both infinite inputs
    - MIPS: math-emu: MINA.<D|S>: Fix some cases of infinity and zero inputs
    - crypto: AF_ALG - remove SGL terminator indicator when chaining
    - ext4: fix incorrect quotaoff if the quota feature is enabled
    - ext4: fix quota inconsistency during orphan cleanup for read-only mounts
    - powerpc: Fix DAR reporting when alignment handler faults
    - block: Relax a check in blk_start_queue()
    - md/bitmap: disable bitmap_resize for file-backed bitmaps.
    - skd: Avoid that module unloading triggers a use-after-free
    - skd: Submit requests to firmware before triggering the doorbell
    - scsi: zfcp: fix queuecommand for scsi_eh commands when DIX enabled
    - scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path
    - scsi: zfcp: fix capping of unsuccessful GPN_FT SAN response trace records
    - scsi: zfcp: fix passing fsf_req to SCSI trace on TMF to correlate with HBA
    - scsi: zfcp: fix missing trace records for early returns in TMF eh handlers
    - scsi: zfcp: fix payload with full FCP_RSP IU in SCSI trace records
    - scsi: zfcp: trace HBA FSF response by default on dismiss or timedout late
      response
    - scsi: zfcp: trace high part of "new" 64 bit SCSI LUN
    - scsi: megaraid_sas: Check valid aen class range to avoid kernel panic
    - scsi: megaraid_sas: Return pended IOCTLs with cmd_status
      MFI_STAT_WRONG_STATE in case adapter is dead
    - scsi: storvsc: fix memory leak on ring buffer busy
    - scsi: sg: remove 'save_scat_len'
    - scsi: sg: use standard lists for sg_requests
    - scsi: sg: off by one in sg_ioctl()
    - scsi: sg: factor out sg_fill_request_table()
    - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE
    - scsi: qla2xxx: Fix an integer overflow in sysfs code
    - ftrace: Fix selftest goto location on error
    - tracing: Apply trace_clock changes to instance max buffer
    - ARC: Re-enable MMU upon Machine Check exception
    - PCI: shpchp: Enable bridge bus mastering if MSI is enabled
    - media: v4l2-compat-ioctl32: Fix timespec conversion
    - media: uvcvideo: Prevent heap overflow when accessing mapped controls
    - bcache: initialize dirty stripes in flash_dev_run()
    - bcache: Fix leak of bdev reference
    - bcache: do not subtract sectors_to_gc for bypassed IO
    - bcache: correct cache_dirty_target in __update_writeback_rate()
    - bcache: Correct return value for sysfs attach errors
    - bcache: fix for gc and write-back race
    - bcache: fix bch_hprint crash and improve output
    - ftrace: Fix memleak when unregistering dynamic ops when tracing disabled
    - Linux 4.4.89

* ETPS/2 Elantech Touchpad inconsistently detected (Gigabyte P57W laptop)
    (LP: #1594214)
    - Input: i8042 - add Gigabyte P57 to the keyboard reset table

* Xenial update to 4.4.88 stable release (LP: #1718195)
    - usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard
    - USB: serial: option: add support for D-Link DWM-157 C1
    - usb: Add device quirk for Logitech HD Pro Webcam C920-C
    - usb:xhci:Fix regression when ATI chipsets detected
    - USB: core: Avoid race of async_completed() w/ usbdev_release()
    - staging/rts5208: fix incorrect shift to extract upper nybble
    - driver core: bus: Fix a potential double free
    - intel_th: pci: Add Cannon Lake PCH-H support
    - intel_th: pci: Add Cannon Lake PCH-LP support
    - ath10k: fix memory leak in rx ring buffer allocation
    - rtlwifi: rtl_pci_probe: Fix fail path of _rtl_pci_find_adapter
    - Bluetooth: Add support of 13d3:3494 RTL8723BE device
    - dlm: avoid double-free on error path in dlm_device_{register,unregister}
    - mwifiex: correct channel stat buffer overflows
    - drm/nouveau/pci/msi: disable MSI on big-endian platforms by default
    - workqueue: Fix flag collision
    - cs5536: add support for IDE controller variant
    - scsi: sg: protect against races between mmap() and SG_SET_RESERVED_SIZE
    - scsi: sg: recheck MMAP_IO request length with lock held
    - drm: adv7511: really enable interrupts for EDID detection
    - drm/bridge: adv7511: Fix mutex deadlock when interrupts are disabled
    - drm/bridge: adv7511: Use work_struct to defer hotplug handing to out of irq
      context
    - drm/bridge: adv7511: Switch to using drm_kms_helper_hotplug_event()
    - drm/bridge: adv7511: Re-write the i2c address before EDID probing
    - btrfs: resume qgroup rescan on rw remount
    - locktorture: Fix potential memory leak with rw lock test
    - ALSA: msnd: Optimize / harden DSP and MIDI loops
    - ARM: 8692/1: mm: abort uaccess retries upon fatal signal
    - NFS: Fix 2 use after free issues in the I/O code
    - xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
    - Linux 4.4.88

* Kernel has troule recognizing Corsair Strafe RGB keyboard (LP: #1678477)
    - usb: quirks: add delay init quirk for Corsair Strafe RGB keyboard

-- Thadeu Lima de Souza Cascardo <cascardo@canonical.com>  Tue, 10 Oct 2017 08:52:24 -0300

Changed in linux (Ubuntu Xenial):
status:	Fix Committed → Fix Released

Frank Heimes (fheimes) on 2017-10-30

Changed in ubuntu-power-systems:
status:	Fix Committed → Fix Released

Revision history for this message

Mauricio Faria de Oliveira (mfo) wrote on 2017-10-30:

#16

Verification done on Xenial v4.4-based kernel.

$ lsb_release -d
Description: Ubuntu 16.04.3 LTS

$ wget 'https://launchpadlibrarian.net/337656213/file_146489.txt' -O io_setup_v2.c
$ sudo apt-get install gcc libaio-dev
$ gcc -o io_setup_v2 io_setup_v2.c -laio

Previous kernel:
---------------

$ sudo apt-get --yes install linux-image-generic=4.4.0.97.102
$ sudo kexec --append="$(cat /proc/cmdline)" --initrd=/boot/initrd.img-4.4.0-97-generic /boot/vmlinux-4.4.0-97-generic
...
$ uname -rv
4.4.0-97-generic #120-Ubuntu SMP Tue Sep 19 17:26:02 UTC 2017

$ ./io_setup_v2 1 65536
nr_events: 1, nr_requests: 65536
rc = -11, i = 409
^Z
[1]+ Stopped ./io_setup_v2 1 65536
$ cat /proc/sys/fs/aio-nr
130880
$ cat /proc/sys/fs/aio-max-nr
65536
$ kill %%

Current kernel:
--------------

$ sudo apt-get --yes install linux-image-generic=4.4.0.98.103
$ sudo kexec --append="$(cat /proc/cmdline)" --initrd=/boot/initrd.img-4.4.0-98-generic /boot/vmlinux-4.4.0-98-generic
...
$ uname -rv
4.4.0-98-generic #121-Ubuntu SMP Tue Oct 10 14:23:01 UTC 2017

$ ./io_setup_v2 1 65536
nr_events: 1, nr_requests: 65536
rc = -12, i = 65515
^Z
[1]+ Stopped ./io_setup_v2 1 65536

$ cat /proc/sys/fs/aio-nr
65515

$ cat /proc/sys/fs/aio-max-nr
65536

tags:

added: verification-done-xenial
removed: verification-needed-xenial

Revision history for this message

Mauricio Faria de Oliveira (mfo) wrote on 2017-10-30:

#17

Verification done on Zesty.

$ lsb_release -d
Description: Ubuntu 17.04

$ wget 'https://launchpadlibrarian.net/337656213/file_146489.txt' -O io_setup_v2.c
$ sudo apt-get --yes install gcc libaio-dev
$ gcc -o io_setup_v2 io_setup_v2.c -laio

Previous kernel:
---------------

$ sudo apt-get --yes install linux-image-generic=4.10.0.37.37
$ sudo kexec --append="$(cat /proc/cmdline)" --initrd=/boot/initrd.img-4.10.0-37-generic /boot/vmlinux-4.10.0-37-generic
...
$ uname -rv
4.10.0-37-generic #41-Ubuntu SMP Fri Oct 6 20:22:54 UTC 2017

$ ./io_setup_v2 1 65536
nr_events: 1, nr_requests: 65536
rc = -11, i = 204
^Z
[1]+ Stopped ./io_setup_v2 1 65536

$ cat /proc/sys/fs/aio-nr
130560
$ cat /proc/sys/fs/aio-max-nr
65536
$ kill %%

Current kernel:
--------------

$ sudo apt-get --yes install linux-image-generic=4.10.0.38.38
$ sudo kexec --append="$(cat /proc/cmdline)" --initrd=/boot/initrd.img-4.10.0-38-generic /boot/vmlinux-4.10.0-38-generic
...
$ uname -rv
4.10.0-38-generic #42-Ubuntu SMP Tue Oct 10 13:22:54 UTC 2017
$ ./io_setup_v2 1 65536
nr_events: 1, nr_requests: 65536
rc = -12, i = 65514
^Z
[1]+ Stopped ./io_setup_v2 1 65536
$ cat /proc/sys/fs/aio-nr
65514
$ cat /proc/sys/fs/aio-max-nr
65536
$ kill %%

tags:

added: verification-done-zesty
removed: verification-needed-zesty

bugproxy (bugproxy) on 2017-11-27

tags:

added: bugnameltc-146489 severity-critical
removed: verification-done-xenial verification-done-zesty

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux package

multipath -ll is not showing the disks which are actually multipath

Bug Description

CVE References

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
linux package