Change logs for linux-aws-5.0 source package in Bionic

  • linux-aws-5.0 (5.0.0-1028.31) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1028.31 -proposed tracker (LP: #1867275)
    
      [ Ubuntu: 5.0.0-44.48 ]
    
      * disco/linux: 5.0.0-44.48 -proposed tracker (LP: #1867284)
      * Packaging resync (LP: #1786013)
        - [Packaging] resync getabis
        - [Packaging] update helper scripts
      * Disco update: upstream stable patchset 2020-03-10 (LP: #1866858)
        - Revert "drm/sun4i: dsi: Change the start delay calculation"
        - ovl: fix lseek overflow on 32bit
        - kernel/module: Fix memleak in module_add_modinfo_attrs()
        - media: iguanair: fix endpoint sanity check
        - ocfs2: fix oops when writing cloned file
        - x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
        - udf: Allow writing to 'Rewritable' partitions
        - printk: fix exclusive_console replaying
        - iwlwifi: mvm: fix NVM check for 3168 devices
        - sparc32: fix struct ipc64_perm type definition
        - cls_rsvp: fix rsvp_policy
        - gtp: use __GFP_NOWARN to avoid memalloc warning
        - l2tp: Allow duplicate session creation with UDP
        - net: hsr: fix possible NULL deref in hsr_handle_frame()
        - net_sched: fix an OOB access in cls_tcindex
        - net: stmmac: Delete txtimer in suspend()
        - bnxt_en: Fix TC queue mapping.
        - tcp: clear tp->total_retrans in tcp_disconnect()
        - tcp: clear tp->delivered in tcp_disconnect()
        - tcp: clear tp->data_segs{in|out} in tcp_disconnect()
        - tcp: clear tp->segs_{in|out} in tcp_disconnect()
        - rxrpc: Fix use-after-free in rxrpc_put_local()
        - rxrpc: Fix insufficient receive notification generation
        - rxrpc: Fix missing active use pinning of rxrpc_local object
        - rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
        - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
        - mfd: dln2: More sanity checking for endpoints
        - ipc/msg.c: consolidate all xxxctl_down() functions
        - tracing: Fix sched switch start/stop refcount racy updates
        - rcu: Avoid data-race in rcu_gp_fqs_check_wake()
        - brcmfmac: Fix memory leak in brcmf_usbdev_qinit
        - usb: typec: tcpci: mask event interrupts when remove driver
        - usb: gadget: legacy: set max_speed to super-speed
        - usb: gadget: f_ncm: Use atomic_t to track in-flight request
        - usb: gadget: f_ecm: Use atomic_t to track in-flight request
        - ALSA: usb-audio: Fix endianess in descriptor validation
        - ALSA: dummy: Fix PCM format loop in proc output
        - mm/memory_hotplug: fix remove_memory() lockdep splat
        - mm: move_pages: report the number of non-attempted pages
        - media/v4l2-core: set pages dirty upon releasing DMA buffers
        - media: v4l2-core: compat: ignore native command codes
        - media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
        - lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
        - irqdomain: Fix a memory leak in irq_domain_push_irq()
        - platform/x86: intel_scu_ipc: Fix interrupt support
        - ALSA: hda: Add Clevo W65_67SB the power_save blacklist
        - KVM: arm64: Correct PSTATE on exception entry
        - KVM: arm/arm64: Correct CPSR on exception entry
        - KVM: arm/arm64: Correct AArch32 SPSR on exception entry
        - KVM: arm64: Only sign-extend MMIO up to register width
        - MIPS: fix indentation of the 'RELOCS' message
        - MIPS: boot: fix typo in 'vmlinux.lzma.its' target
        - s390/mm: fix dynamic pagetable upgrade for hugetlbfs
        - powerpc/xmon: don't access ASDR in VMs
        - powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
        - smb3: fix signing verification of large reads
        - PCI: tegra: Fix return value check of pm_runtime_get_sync()
        - mmc: spi: Toggle SPI polarity, do not hardcode it
        - ACPI: video: Do not export a non working backlight interface on MSI MS-7721
          boards
        - ACPI / battery: Deal with design or full capacity being reported as -1
        - ACPI / battery: Use design-cap for capacity calculations if full-cap is not
          available
        - ACPI / battery: Deal better with neither design nor full capacity not being
          reported
        - alarmtimer: Unregister wakeup source when module get fails
        - ubifs: Reject unsupported ioctl flags explicitly
        - ubifs: don't trigger assertion on invalid no-key filename
        - ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
        - ubifs: Fix deadlock in concurrent bulk-read and writepage
        - PCI: keystone: Fix link training retries initiation
        - mmc: sdhci-of-at91: fix memleak on clk_get failure
        - hv_balloon: Balloon up according to request page number
        - mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
        - crypto: api - Check spawn->alg under lock in crypto_drop_spawn
        - crypto: ccree - fix backlog memory leak
        - crypto: ccree - fix pm wrongful error reporting
        - crypto: ccree - fix PM race condition
        - scripts/find-unused-docs: Fix massive false positives
        - scsi: qla2xxx: Fix mtcp dump collection failure
        - power: supply: ltc2941-battery-gauge: fix use-after-free
        - ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
        - f2fs: choose hardlimit when softlimit is larger than hardlimit in
          f2fs_statfs_project()
        - f2fs: fix miscounted block limit in f2fs_statfs_project()
        - f2fs: code cleanup for f2fs_statfs_project()
        - PM: core: Fix handling of devices deleted during system-wide resume
        - [Config] updateconfigs for CONFIG_OF_DMA_DEFAULT_COHERENT
        - of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
        - dm zoned: support zone sizes smaller than 128MiB
        - dm space map common: fix to ensure new block isn't already in use
        - dm crypt: fix benbi IV constructor crash if used in authenticated mode
        - dm writecache: fix incorrect flush sequence when doing SSD mode commit
        - padata: Remove broken queue flushing
        - tracing: Annotate ftrace_graph_hash pointer with __rcu
        - tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
        - ftrace: Add comment to why rcu_dereference_sched() is open coded
        - ftrace: Protect ftrace_graph_hash with ftrace_sync
        - samples/bpf: Don't try to remove user's homedir on clean
        - crypto: ccp - set max RSA modulus size for v3 platform devices as well
        - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
        - crypto: atmel-aes - Fix counter overflow in CTR mode
        - crypto: api - Fix race condition in crypto_spawn_alg
        - crypto: picoxcell - adjust the position of tasklet_init and fix missed
          tasklet_kill
        - scsi: qla2xxx: Fix unbound NVME response length
        - NFS: Fix memory leaks and corruption in readdir
        - NFS: Directory page cache pages need to be locked when read
        - jbd2_seq_info_next should increase position index
        - Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
        - btrfs: set trans->drity in btrfs_commit_transaction
        - Btrfs: fix race between adding and putting tree mod seq elements and nodes
        - ARM: tegra: Enable PLLP bypass during Tegra124 LP1
        - iwlwifi: don't throw error when trying to remove IGTK
        - mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
        - sunrpc: expiry_time should be seconds not timeval
        - gfs2: move setting current->backing_dev_info
        - gfs2: fix O_SYNC write handling
        - drm/rect: Avoid division by zero
        - media: rc: ensure lirc is initialized before registering input device
        - tools/kvm_stat: Fix kvm_exit filter name
        - xen/balloon: Support xend-based toolstack take two
        - watchdog: fix UAF in reboot notifier handling in watchdog core code
        - bcache: add readahead cache policy options via sysfs interface
        - eventfd: track eventfd_signal() recursion depth
        - aio: prevent potential eventfd recursion on poll
        - KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
        - KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
        - KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
        - KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
        - KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
        - KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF
          attacks
        - KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
        - KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF
          attacks
        - KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
        - KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks
          in x86.c
        - KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
        - KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit()
          from Spectre-v1/L1TF attacks
        - KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
        - KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
        - KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
        - KVM: x86: Don't let userspace set host-reserved cr4 bits
        - KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
        - KVM: s390: do not clobber registers during guest reset/store status
        - clk: tegra: Mark fuse clock as critical
        - drm/amd/dm/mst: Ignore payload update failures
        - percpu: Separate decrypted varaibles anytime encryption can be enabled
        - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
        - scsi: csiostor: Adjust indentation in csio_device_reset
        - scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
        - scsi: ufs: Recheck bkops level if bkops is disabled
        - phy: qualcomm: Adjust indentation in read_poll_timeout
        - ext2: Adjust indentation in ext2_fill_super
        - powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
        - drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
        - NFC: pn544: Adjust indentation in pn544_hci_check_presence
        - ppp: Adjust indentation into ppp_async_input
        - net: smc911x: Adjust indentation in smc911x_phy_configure
        - net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
        - IB/mlx5: Fix outstanding_pi index for GSI qps
        - IB/core: Fix ODP get user pages flow
        - nfsd: fix delay timer on 32-bit architectures
        - nfsd: fix jiffies/time_t mixup in LRU list
        - nfsd: Return the correct number of bytes written to the file
        - ubi: fastmap: Fix inverted logic in seen selfcheck
        - ubi: Fix an error pointer dereference in error handling code
        - mfd: da9062: Fix watchdog compatible string
        - mfd: rn5t618: Mark ADC control register volatile
        - bonding/alb: properly access headers in bond_alb_xmit()
        - net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
        - net: mvneta: move rx_dropped and rx_errors in per-cpu stats
        - net_sched: fix a resource leak in tcindex_set_parms()
        - net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
        - net/mlx5: IPsec, Fix esp modify function attribute
        - net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
        - net: macb: Remove unnecessary alignment check for TSO
        - net: macb: Limit maximum GEM TX length in TSO
        - net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
        - ext4: fix deadlock allocating crypto bounce page from mempool
        - btrfs: use bool argument in free_root_pointers()
        - btrfs: free block groups after free'ing fs trees
        - drm: atmel-hlcdc: enable clock before configuring timing engine
        - drm/dp_mst: Remove VCPI while disabling topology mgr
        - btrfs: flush write bio if we loop in extent_write_cache_pages
        - KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
        - KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
        - KVM: nVMX: vmread should not set rflags to specify success in case of #PF
        - KVM: Use vcpu-specific gva->hva translation when querying host page size
        - KVM: Play nice with read-only memslots when querying host page size
        - mm/page_alloc.c: fix uninitialized memmaps on a partially populated last
          section
        - cifs: fail i/o on soft mounts if sessionsetup errors out
        - x86/apic/msi: Plug non-maskable MSI affinity race
        - clocksource: Prevent double add_timer_on() for watchdog_timer
        - perf/core: Fix mlock accounting in perf_mmap()
        - rxrpc: Fix service call disconnection
        - tracing/kprobes: Have uname use __get_str() in print_fmt
        - rcu: Use *_ONCE() to protect lockless ->expmask accesses
        - srcu: Apply *_ONCE() to ->srcu_last_gp_end
        - nvmet: Fix error print message at nvmet_install_queue function
        - nvmet: Fix controller use after free
        - usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer
        - ALSA: hda: Add JasperLake PCI ID and codec vid
        - arm64: acpi: fix DAIF manipulation with pNMI
        - MIPS: syscalls: fix indentation of the 'SYSNR' message
        - PCI: keystone: Fix outbound region mapping
        - ubifs: Fix wrong memory allocation
        - nvmem: core: fix memory abort in cleanup path
        - fs: allow deduplication of eof block into the end of the destination file
        - scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
        - power: supply: axp20x_ac_power: Fix reporting online status
        - ARM: dma-api: fix max_pfn off-by-one error in __dma_supported()
        - scsi: qla2xxx: Fix stuck login session using prli_pend_timer
        - btrfs: fix improper setting of scanned for range cyclic write cache pages
        - btrfs: Handle another split brain scenario with metadata uuid feature
        - tc-testing: fix eBPF tests failure on linux fresh clones
        - selftests: bpf: Use a temporary file in test_sockmap
        - crypto: api - fix unexpectedly getting generic implementation
        - crypto: hisilicon - Use the offset fields in sqe to avoid need to split
          scatterlists
        - btrfs: drop log root for dropped roots
        - drm: atmel-hlcdc: prefer a lower pixel-clock than requested
        - KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
        - virtio-balloon: initialize all vq callbacks
        - virtio-pci: check name when counting MSI-X vectors
        - virtio-balloon: Fix memory leak when unloading while hinting is in progress
        - virtio_balloon: Fix memory leaks on errors in virtballoon_probe()
        - ubifs: Fix memory leak from c->sup_node
        - regulator: core: Add regulator_is_equal() helper
        - ASoC: sgtl5000: Fix VDDA and VDDIO comparison
        - dpaa_eth: support all modes with rate adapting PHYs
        - net: dsa: microchip: enable module autoprobe
        - taprio: Use taprio_reset_tc() to reset Traffic Classes configuration
        - x86/timer: Don't skip PIT setup when APIC is disabled or in legacy mode
        - regulator fix for "regulator: core: Add regulator_is_equal() helper"
      * 5.4.0-11 crash on cryptsetup open (LP: #1860231) // Disco update: upstream
        stable patchset 2020-03-10 (LP: #1866858)
        - dm: fix potential for q->make_request_fn NULL pointer
      * xfs fill_fs test in fallocate06 from ubuntu_ltp_syscalls failed
        (LP: #1865967)
        - xfs: Fix tail rounding in xfs_alloc_file_space()
      * ipc/sem.c : process loops infinitely in exit_sem() (LP: #1858834)
        - Revert "ipc, sem: remove uneeded sem_undo_list lock usage in exit_sem()"
      * ftrace test in ubuntu_kernel_selftests will timeout randomly (LP: #1864172)
        - tracing/selftests: Turn off timeout setting
      * quotactl07 from ubuntu_ltp_syscalls failed (LP: #1864092)
        - xfs: Sanity check flags of Q_XQUOTARM call
      * Disabling bpf() syscall on kernel lockdown break apps when secure boot is on
        (LP: #1863234)
        - bpf: Restrict bpf when kernel lockdown is in confidentiality mode
        - Revert "UBUNTU: SAUCE: (efi-lockdown) bpf: Restrict kernel image access
          functions when the kernel is locked down"
      * Disco update: upstream stable patchset 2020-03-05 (LP: #1866227)
        - orinoco_usb: fix interface sanity check
        - rsi_91x_usb: fix interface sanity check
        - usb: dwc3: pci: add ID for the Intel Comet Lake -V variant
        - USB: serial: ir-usb: add missing endpoint sanity check
        - USB: serial: ir-usb: fix link-speed handling
        - USB: serial: ir-usb: fix IrLAP framing
        - usb: dwc3: turn off VBUS when leaving host mode
        - staging: most: net: fix buffer overflow
        - staging: wlan-ng: ensure error return is actually returned
        - staging: vt6656: correct packet types for CTS protect, mode.
        - staging: vt6656: use NULLFUCTION stack on mac80211
        - staging: vt6656: Fix false Tx excessive retries reporting.
        - serial: 8250_bcm2835aux: Fix line mismatch on driver unbind
        - component: do not dereference opaque pointer in debugfs
        - mei: me: add comet point (lake) H device ids
        - iio: st_gyro: Correct data for LSM9DS0 gyro
        - crypto: chelsio - fix writing tfm flags to wrong place
        - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd()
        - ath9k: fix storage endpoint lookup
        - brcmfmac: fix interface sanity check
        - rtl8xxxu: fix interface sanity check
        - zd1211rw: fix storage endpoint lookup
        - net_sched: ematch: reject invalid TCF_EM_SIMPLE
        - net_sched: fix ops->bind_class() implementations
        - arc: eznps: fix allmodconfig kconfig warning
        - HID: Add quirk for Xin-Mo Dual Controller
        - HID: ite: Add USB id match for Acer SW5-012 keyboard dock
        - HID: Add quirk for incorrect input length on Lenovo Y720
        - drivers/hid/hid-multitouch.c: fix a possible null pointer access.
        - phy: qcom-qmp: Increase PHY ready timeout
        - phy: cpcap-usb: Prevent USB line glitches from waking up modem
        - watchdog: max77620_wdt: fix potential build errors
        - watchdog: rn5t618_wdt: fix module aliases
        - spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
        - drivers/net/b44: Change to non-atomic bit operations on pwol_mask
        - net: wan: sdla: Fix cast from pointer to integer of different size
        - gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
        - atm: eni: fix uninitialized variable warning
        - HID: steam: Fix input device disappearing
        - platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
        - PCI: Add DMA alias quirk for Intel VCA NTB
        - iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping
        - ARM: OMAP2+: SmartReflex: add omap_sr_pdata definition
        - usb-storage: Disable UAS on JMicron SATA enclosure
        - sched/fair: Add tmp_alone_branch assertion
        - sched/fair: Fix insertion in rq->leaf_cfs_rq_list
        - rsi: fix use-after-free on probe errors
        - rsi: fix memory leak on failed URB submission
        - rsi: fix non-atomic allocation in completion handler
        - crypto: af_alg - Use bh_lock_sock in sk_destruct
        - random: try to actively add entropy rather than passively wait for it
        - serial: imx: fix a race condition in receive path
        - debugfs: Return -EPERM when locked down
        - CIFS: Fix task struct use-after-free on reconnect
        - net_sched: walk through all child classes in tc_bind_tclass()
        - udp: segment looped gso packets correctly
        - HID: asus: Ignore Asus vendor-page usage-code 0xff events
        - HID: intel-ish-hid: ipc: add EHL device id
        - HID: intel-ish-hid: ipc: add CMP device id
        - HID: wacom: add new MobileStudio Pro support
        - HID: wacom: generic: add touchring adjustment for 2nd Gen Pro Small
        - HID: wacom: add new MobileStudio Pro 13 support
        - HID: wacom: Recognize new MobileStudio Pro PID
        - ASoC: topology: Prevent use-after-free in snd_soc_get_pcm_runtime()
        - HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID
        - usb: musb: jz4740: Silence error if code is -EPROBE_DEFER
        - ASoC: Intel: cht_bsw_rt5645: Add quirk for boards using pmc_plt_clk_0
        - spi: pxa2xx: Add support for Intel Comet Lake-H
        - ARM: config: aspeed-g5: Enable 8250_DW quirks
        - mmc: sdhci-pci: Add support for Intel JSL
        - rsi: fix use-after-free on failed probe and unbind
        - crypto: pcrypt - Fix user-after-free on module unload
        - vfs: fix do_last() regression
        - x86/resctrl: Fix use-after-free when deleting resource groups
        - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
        - x86/resctrl: Fix a deadlock due to inaccurate reference
        - rsi: add hci detach for hibernation and poweroff
        - perf c2c: Fix return type for histogram sorting comparision functions
        - PM / devfreq: Add new name attribute for sysfs
        - tools lib: Fix builds when glibc contains strlcpy()
        - arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
        - ext4: validate the debug_want_extra_isize mount option at parse time
        - mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
        - reiserfs: Fix memory leak of journal device string
        - media: digitv: don't continue if remote control state can't be read
        - media: af9005: uninitialized variable printked
        - media: vp7045: do not read uninitialized values if usb transfer fails
        - media: gspca: zero usb_buf
        - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
        - tomoyo: Use atomic_t for statistics counter
        - ttyprintk: fix a potential deadlock in interrupt context issue
        - Bluetooth: Fix race condition in hci_release_sock()
        - cgroup: Prevent double killing of css when enabling threaded cgroup
        - media: si470x-i2c: Move free() past last use of 'radio'
        - ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
        - ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
        - ARM: dts: beagle-x15-common: Model 5V0 regulator
        - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
        - tools lib traceevent: Fix memory leakage in filter_event
        - rseq: Unregister rseq for clone CLONE_VM
        - clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order
        - mac80211: mesh: restrict airtime metric to peered established plinks
        - clk: mmp2: Fix the order of timer mux parents
        - ASoC: rt5640: Fix NULL dereference on module unload
        - ixgbevf: Remove limit of 10 entries for unicast filter list
        - ixgbe: Fix calculation of queue with VFs and flow director on interface flap
        - igb: Fix SGMII SFP module discovery for 100FX/LX.
        - platform/x86: GPD pocket fan: Allow somewhat lower/higher temperature limits
        - ASoC: sti: fix possible sleep-in-atomic
        - qmi_wwan: Add support for Quectel RM500Q
        - parisc: Use proper printk format for resource_size_t
        - wireless: fix enabling channel 12 for custom regulatory domain
        - cfg80211: Fix radar event during another phy CAC
        - mac80211: Fix TKIP replay protection immediately after key setup
        - wireless: wext: avoid gcc -O3 warning
        - riscv: delete temporary files
        - iwlwifi: Don't ignore the cap field upon mcc update
        - ARM: dts: am335x-boneblack-common: fix memory size
        - vti[6]: fix packet tx through bpf_redirect()
        - xfrm interface: fix packet tx through bpf_redirect()
        - xfrm: interface: do not confirm neighbor when do pmtu update
        - scsi: fnic: do not queue commands during fwreset
        - ARM: 8955/1: virt: Relax arch timer version check during early boot
        - tee: optee: Fix compilation issue with nommu
        - r8152: get default setting of WOL before initializing
        - ARM: dts: am43x-epos-evm: set data pin directions for spi0 and spi1
        - qlcnic: Fix CPU soft lockup while collecting firmware dump
        - powerpc/fsl/dts: add fsl,erratum-a011043
        - net/fsl: treat fsl,erratum-a011043
        - net: fsl/fman: rename IF_MODE_XGMII to IF_MODE_10G
        - seq_tab_next() should increase position index
        - l2t_seq_next should increase position index
        - net: Fix skb->csum update in inet_proto_csum_replace16().
        - btrfs: do not zero f_bavail if we have available space
        - perf report: Fix no libunwind compiled warning break s390 issue
        - mm/migrate.c: also overwrite error when it is bigger than zero
        - cifs: fix soft mounts hanging in the reconnect code
        - e1000e: Drop unnecessary __E1000_DOWN bit twiddling
        - i40e: Fix virtchnl_queue_select bitmap validation
        - iavf: remove current MAC address filter on VF reset
        - ASoC: hdac_hda: Fix error in driver removal after failed probe
        - perf/x86/intel/uncore: Add PCI ID of IMC for Xeon E3 V5 Family
        - XArray: Fix xas_pause at ULONG_MAX
        - Input: evdev - convert kzalloc()/vzalloc() to kvzalloc()
        - r8152: disable U2P3 for RTL8153B
        - r8152: Disable PLA MCU clock speed down
        - r8152: disable test IO for RTL8153B
        - r8152: avoid the MCU to clear the lanwake
        - r8152: disable DelayPhyPwrChg
        - netfilter: conntrack: sctp: use distinct states for new SCTP connections
        - flow_dissector: Fix to use new variables for port ranges in bpf hook
      * Disco update: upstream stable patchset 2020-02-24 (LP: #1864552)
        - firestream: fix memory leaks
        - gtp: make sure only SOCK_DGRAM UDP sockets are accepted
        - ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
        - net: bcmgenet: Use netif_tx_napi_add() for TX NAPI
        - net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
        - net: ip6_gre: fix moving ip6gre between namespaces
        - net, ip6_tunnel: fix namespaces move
        - net, ip_tunnel: fix namespaces move
        - net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
        - net_sched: fix datalen for ematch
        - net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject
        - net-sysfs: fix netdev_queue_add_kobject() breakage
        - net-sysfs: Call dev_hold always in netdev_queue_add_kobject
        - net-sysfs: Call dev_hold always in rx_queue_add_kobject
        - net-sysfs: Fix reference count leak
        - net: usb: lan78xx: Add .ndo_features_check
        - Revert "udp: do rmem bulk free even if the rx sk queue is empty"
        - tcp_bbr: improve arithmetic division in bbr_update_bw()
        - tcp: do not leave dangling pointers in tp->highest_sack
        - tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
        - afs: Fix characters allowed into cell names
        - hwmon: (adt7475) Make volt2reg return same reg as reg2volt input
        - hwmon: (core) Do not use device managed functions for memory allocations
        - PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken
        - tracing: trigger: Replace unneeded RCU-list traversals
        - Input: keyspan-remote - fix control-message timeouts
        - Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers"
        - ARM: 8950/1: ftrace/recordmcount: filter relocation types
        - mmc: tegra: fix SDR50 tuning override
        - mmc: sdhci: fix minimum clock rate for v3 controller
        - Documentation: Document arm64 kpti control
        - Input: pm8xxx-vib - fix handling of separate enable register
        - Input: sur40 - fix interface sanity checks
        - Input: gtco - fix endpoint sanity check
        - Input: aiptek - fix endpoint sanity check
        - Input: pegasus_notetaker - fix endpoint sanity check
        - Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register
        - netfilter: nft_osf: add missing check for DREG attribute
        - hwmon: (nct7802) Fix voltage limits to wrong registers
        - scsi: RDMA/isert: Fix a recently introduced regression related to logout
        - tracing: xen: Ordered comparison of function pointers
        - do_last(): fetch directory ->i_mode and ->i_uid before it's too late
        - net/sonic: Add mutual exclusion for accessing shared state
        - net/sonic: Clear interrupt flags immediately
        - net/sonic: Use MMIO accessors
        - net/sonic: Fix interface error stats collection
        - net/sonic: Fix receive buffer handling
        - net/sonic: Avoid needless receive descriptor EOL flag updates
        - net/sonic: Improve receive descriptor status flag check
        - net/sonic: Fix receive buffer replenishment
        - net/sonic: Quiesce SONIC before re-initializing descriptor memory
        - net/sonic: Fix command register usage
        - net/sonic: Fix CAM initialization
        - net/sonic: Prevent tx watchdog timeout
        - tracing: Fix histogram code when expression has same var as value
        - coresight: etb10: Do not call smp_processor_id from preemptible
        - coresight: tmc-etf: Do not call smp_processor_id from preemptible
        - libertas: Fix two buffer overflows at parsing bss descriptor
        - media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT
        - netfilter: ipset: use bitmap infrastructure completely
        - netfilter: nf_tables: add __nft_chain_type_get()
        - net/x25: fix nonblocking connect
        - arm64/mm: add temporary arch_remove_memory() implementation
        - drivers/base/memory.c: clean up relics in function parameters
        - mm/memory_hotplug: make unregister_memory_section() never fail
        - mm/memory_hotplug: make __remove_section() never fail
        - powerpc/mm: Fix section mismatch warning
        - mm/memory_hotplug: make __remove_pages() and arch_remove_memory() never fail
        - s390x/mm: implement arch_remove_memory()
        - mm/memory_hotplug: allow arch_remove_memory() without
          CONFIG_MEMORY_HOTREMOVE
        - drivers/base/memory: pass a block_id to init_memory_block()
        - mm/memory_hotplug: create memory block devices after arch_add_memory()
        - mm/memory_hotplug: remove memory block devices before arch_remove_memory()
        - mm/memory_hotplug: make unregister_memory_block_under_nodes() never fail
        - mm/memory_hotplug: remove "zone" parameter from sparse_remove_one_section
        - mm/hotplug: kill is_dev_zone() usage in __remove_pages()
        - drivers/base/node.c: simplify unregister_memory_block_under_nodes()
        - mm/memory_hotplug: fix try_offline_node()
        - mm/memory_hotplug: shrink zones when offlining memory
        - airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE
        - airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE
        - mlxsw: spectrum_acl: Fix use-after-free during reload
        - net/mlx5: Fix lowest FDB pool size
        - net/mlx5: Update the list of the PCI supported devices
        - ipv4: Detect rollover in specific fib table dump
        - XArray: Fix infinite loop with entry at ULONG_MAX
        - XArray: Fix xa_find_after with multi-index entries
        - XArray: Fix xas_find returning too many entries
        - mmc: sdhci_am654: Reset Command and Data line after tuning
        - mlxsw: switchx2: Do not modify cloned SKBs during xmit
        - net/tls: fix async operation
        - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and
          strnlen_user()
        - iommu/amd: Fix IOMMU perf counter clobbering during init
        - readdir: make user_access_begin() use the real access range
        - hwmon: (nct7802) Fix non-working alarm on voltages
        - drm/i915/userptr: fix size calculation
        - xfrm: support output_mark for offload ESP packets
        - net, sk_msg: Don't check if sock is locked when tearing down psock
        - readdir: be more conservative with directory entry names
        - netfilter: nf_tables: autoload modules from the abort path
      * Disco update: upstream stable patchset 2020-02-18 (LP: #1863780)
        - Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
        - xfs: Sanity check flags of Q_XQUOTARM call
        - i2c: stm32f7: rework slave_id allocation
        - i2c: i2c-stm32f7: fix 10-bits check in slave free id search loop
        - mfd: intel-lpss: Add default I2C device properties for Gemini Lake
        - SUNRPC: Fix svcauth_gss_proxy_init()
        - powerpc/pseries: Enable support for ibm,drc-info property
        - powerpc/archrandom: fix arch_get_random_seed_int()
        - tipc: update mon's self addr when node addr generated
        - tipc: fix wrong timeout input for tipc_wait_for_cond()
        - mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
        - crypto: sun4i-ss - fix big endian issues
        - perf map: No need to adjust the long name of modules
        - soc: aspeed: Fix snoop_file_poll()'s return type
        - watchdog: sprd: Fix the incorrect pointer getting from driver data
        - ipmi: Fix memory leak in __ipmi_bmc_register
        - clk: highbank: fix refcount leak in hb_clk_init()
        - clk: qoriq: fix refcount leak in clockgen_init()
        - clk: ti: fix refcount leak in ti_dt_clocks_register()
        - clk: socfpga: fix refcount leak
        - clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
        - clk: imx6q: fix refcount leak in imx6q_clocks_init()
        - clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
        - clk: imx7d: fix refcount leak in imx7d_clocks_init()
        - clk: vf610: fix refcount leak in vf610_clocks_init()
        - clk: armada-370: fix refcount leak in a370_clk_init()
        - clk: kirkwood: fix refcount leak in kirkwood_clk_init()
        - clk: armada-xp: fix refcount leak in axp_clk_init()
        - clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
        - clk: dove: fix refcount leak in dove_clk_init()
        - remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
        - remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
        - drm: Fix error handling in drm_legacy_addctx
        - ARM: dts: r8a7743: Remove generic compatible string from iic3
        - drm/etnaviv: fix some off by one bugs
        - drm/fb-helper: generic: Fix setup error path
        - IB/usnic: Fix out of bounds index check in query pkey
        - RDMA/ocrdma: Fix out of bounds index check in query pkey
        - RDMA/qedr: Fix out of bounds index check in query pkey
        - drm/shmob: Fix return value check in shmob_drm_probe
        - arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
        - spi: cadence: Correct initialisation of runtime PM
        - RDMA/iw_cxgb4: Fix the unchecked ep dereference
        - memory: tegra: Don't invoke Tegra30+ specific memory timing setup on Tegra20
        - drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
        - media: s5p-jpeg: Correct step and max values for
          V4L2_CID_JPEG_RESTART_INTERVAL
        - crypto: brcm - Fix some set-but-not-used warning
        - crypto: tgr192 - fix unaligned memory access
        - ASoC: imx-sgtl5000: put of nodes if finding codec fails
        - IB/iser: Pass the correct number of entries for dma mapped SGL
        - media: tw9910: Unregister subdevice with v4l2-async
        - IB/mlx5: Don't override existing ip_protocol
        - rtc: cmos: ignore bogus century byte
        - spi/topcliff_pch: Fix potential NULL dereference on allocation error
        - ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
        - clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
        - iwlwifi: mvm: avoid possible access out of array.
        - ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit
        - arm64: dts: allwinner: h6: Move GIC device node fix base address ordering
        - iwlwifi: mvm: fix A-MPDU reference assignment
        - tty: ipwireless: Fix potential NULL pointer dereference
        - driver: uio: fix possible memory leak in __uio_register_device
        - driver: uio: fix possible use-after-free in __uio_register_device
        - crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove()
          arguments
        - driver core: Fix DL_FLAG_AUTOREMOVE_SUPPLIER device link flag handling
        - driver core: Avoid careless re-use of existing device links
        - driver core: Do not resume suppliers under device_links_write_lock()
        - driver core: Fix handling of runtime PM flags in device_link_add()
        - driver core: Do not call rpm_put_suppliers() in pm_runtime_drop_link()
        - ARM: dts: lpc32xx: add required clocks property to keypad device node
        - ARM: dts: lpc32xx: reparent keypad controller to SIC1
        - ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
        - ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
        - ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
        - drm/xen-front: Fix mmap attributes for display buffers
        - iwlwifi: mvm: fix RSS config command
        - staging: most: cdev: add missing check for cdev_add failure
        - clk: ingenic: jz4740: Fix gating of UDC clock
        - rtc: ds1672: fix unintended sign extension
        - thermal: mediatek: fix register index error
        - arm64: dts: msm8916: remove bogus argument to the cpu clock
        - ath10k: fix dma unmap direction for management frames
        - net: phy: fixed_phy: Fix fixed_phy not checking GPIO
        - rtc: ds1307: rx8130: Fix alarm handling
        - net/smc: original socket family in inet_sock_diag
        - rtc: 88pm860x: fix unintended sign extension
        - rtc: 88pm80x: fix unintended sign extension
        - rtc: pm8xxx: fix unintended sign extension
        - fbdev: chipsfb: remove set but not used variable 'size'
        - iw_cxgb4: use tos when importing the endpoint
        - iw_cxgb4: use tos when finding ipv6 routes
        - ipmi: kcs_bmc: handle devm_kasprintf() failure case
        - drm/etnaviv: potential NULL dereference
        - ntb_hw_switchtec: debug print 64bit aligned crosslink BAR Numbers
        - ntb_hw_switchtec: NT req id mapping table register entry number should be
          512
        - pinctrl: sh-pfc: emev2: Add missing pinmux functions
        - pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
        - pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
        - pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
        - RDMA/mlx5: Fix memory leak in case we fail to add an IB device
        - driver core: Fix possible supplier PM-usage counter imbalance
        - PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
        - usb: phy: twl6030-usb: fix possible use-after-free on remove
        - block: don't use bio->bi_vcnt to figure out segment number
        - mt76: usb: fix possible memory leak in mt76u_buf_free
        - media: sh: migor: Include missing dma-mapping header
        - vfio_pci: Enable memory accesses before calling pci_map_rom
        - hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
        - mdio_bus: Fix PTR_ERR() usage after initialization to constant
        - KVM: PPC: Release all hardware TCE tables attached to a group
        - staging: r8822be: check kzalloc return or bail
        - dmaengine: mv_xor: Use correct device for DMA API
        - cdc-wdm: pass return value of recover_from_urb_loss
        - brcmfmac: create debugfs files for bus-specific layer
        - regulator: pv88060: Fix array out-of-bounds access
        - regulator: pv88080: Fix array out-of-bounds access
        - regulator: pv88090: Fix array out-of-bounds access
        - net: dsa: qca8k: Enable delay for RGMII_ID mode
        - net/mlx5: Delete unused FPGA QPN variable
        - drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
        - drm/nouveau/pmu: don't print reply values if exec is false
        - drm/nouveau: fix missing break in switch statement
        - driver core: Fix PM-runtime for links added during consumer probe
        - ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
        - fs/nfs: Fix nfs_parse_devname to not modify it's argument
        - staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
        - powerpc/64s: Fix logic when handling unknown CPU features
        - NFS: Fix a soft lockup in the delegation recovery code
        - perf: Copy parent's address filter offsets on clone
        - perf, pt, coresight: Fix address filters for vmas with non-zero offset
        - clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
        - clocksource/drivers/exynos_mct: Fix error path in timer resources
          initialization
        - platform/x86: wmi: fix potential null pointer dereference
        - NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
        - mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
        - iommu: Fix IOMMU debugfs fallout
        - ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
        - ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
        - ARM: 8849/1: NOMMU: Fix encodings for PMSAv8's PRBAR4/PRLAR4
        - regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
        - ath10k: Fix length of wmi tlv command for protected mgmt frames
        - netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
        - netfilter: nft_set_hash: bogus element self comparison from deactivation
          path
        - net: sched: act_csum: Fix csum calc for tagged packets
        - hwrng: bcm2835 - fix probe as platform device
        - iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
        - NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
        - NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
        - net: aquantia: fixed instack structure overflow
        - powerpc/mm: Check secondary hash page table
        - media: dvb/earth-pt1: fix wrong initialization for demod blocks
        - rbd: clear ->xferred on error from rbd_obj_issue_copyup()
        - PCI: Fix "try" semantics of bus and slot reset
        - nios2: ksyms: Add missing symbol exports
        - x86/mm: Remove unused variable 'cpu'
        - scsi: megaraid_sas: reduce module load time
        - nfp: fix simple vNIC mailbox length
        - drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
        - xen, cpu_hotplug: Prevent an out of bounds access
        - net/mlx5: Fix multiple updates of steering rules in parallel
        - net/mlx5e: IPoIB, Fix RX checksum statistics update
        - net: sh_eth: fix a missing check of of_get_phy_mode
        - regulator: lp87565: Fix missing register for LP87565_BUCK_0
        - soc: amlogic: gx-socinfo: Add mask for each SoC packages
        - media: ivtv: update *pos correctly in ivtv_read_pos()
        - media: cx18: update *pos correctly in cx18_read_pos()
        - media: wl128x: Fix an error code in fm_download_firmware()
        - media: cx23885: check allocation return
        - regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
        - crypto: ccree - reduce kernel stack usage with clang
        - jfs: fix bogus variable self-initialization
        - tipc: tipc clang warning
        - m68k: mac: Fix VIA timer counter accesses
        - ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
        - arm64: dts: allwinner: a64: Add missing PIO clocks
        - ARM: dts: sun9i: optimus: Fix fixed-regulators
        - ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
        - net: dsa: Avoid null pointer when failing to connect to PHY
        - soc: qcom: cmd-db: Fix an error code in cmd_db_dev_probe()
        - media: davinci-isif: avoid uninitialized variable use
        - media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
        - spi: tegra114: clear packed bit for unpacked mode
        - spi: tegra114: fix for unpacked mode transfers
        - spi: tegra114: terminate dma and reset on transfer timeout
        - spi: tegra114: flush fifos
        - spi: tegra114: configure dma burst size to fifo trig level
        - bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
        - soc/fsl/qe: Fix an error code in qe_pin_request()
        - spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
        - drm/fb-helper: generic: Call drm_client_add() after setup is done
        - arm64/vdso: don't leak kernel addresses
        - rtc: Fix timestamp value for RTC_TIMESTAMP_BEGIN_1900
        - rtc: mt6397: Don't call irq_dispose_mapping.
        - ehea: Fix a copy-paste err in ehea_init_port_res
        - bpf: Add missed newline in verifier verbose log
        - drm/vmwgfx: Remove set but not used variable 'restart'
        - scsi: qla2xxx: Unregister chrdev if module initialization fails
        - of: use correct function prototype for of_overlay_fdt_apply()
        - net/sched: cbs: fix port_rate miscalculation
        - clk: qcom: Skip halt checks on gcc_pcie_0_pipe_clk for 8998
        - ACPI: button: reinitialize button state upon resume
        - firmware: arm_scmi: fix of_node leak in scmi_mailbox_check
        - rxrpc: Fix detection of out of order acks
        - scsi: target/core: Fix a race condition in the LUN lookup code
        - brcmfmac: fix leak of mypkt on error return path
        - ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
        - PCI: rockchip: Fix rockchip_pcie_ep_assert_intx() bitwise operations
        - hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
        - perf/core: Fix the address filtering fix
        - staging: android: vsoc: fix copy_from_user overrun
        - PCI: dwc: Fix dw_pcie_ep_find_capability() to return correct capability
          offset
        - soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
        - platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
        - tipc: set sysctl_tipc_rmem and named_timeout right range
        - usb: typec: tcpm: Notify the tcpc to start connection-detection for SRPs
        - selftests/ipc: Fix msgque compiler warnings
        - powerpc: vdso: Make vdso32 installation conditional in vdso_install
        - ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
        - media: ov2659: fix unbalanced mutex_lock/unlock
        - 6lowpan: Off by one handling ->nexthdr
        - dmaengine: axi-dmac: Don't check the number of frames for alignment
        - ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
        - afs: Fix AFS file locking to allow fine grained locks
        - afs: Further fix file locking
        - NFS: Don't interrupt file writeout due to fatal errors
        - coresight: catu: fix clang build warning
        - s390/kexec_file: Fix potential segment overlap in ELF loader
        - irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
        - scsi: qla2xxx: Fix a format specifier
        - scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
        - scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
        - KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
        - netfilter: nft_flow_offload: add entry to flowtable after confirmation
        - PCI: iproc: Enable iProc config read for PAXBv2
        - ARM: dts: logicpd-som-lv: Fix MMC1 card detect
        - ASoC: fix valid stream condition
        - usb: gadget: fsl: fix link error against usb-gadget module
        - dwc2: gadget: Fix completed transfer size calculation in DDMA
        - IB/mlx5: Add missing XRC options to QP optional params mask
        - RDMA/rxe: Consider skb reserve space based on netdev of GID
        - iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
        - dmaengine: tegra210-adma: restore channel status
        - watchdog: rtd119x_wdt: Fix remove function
        - mmc: core: fix possible use after free of host
        - lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
        - afs: Fix the afs.cell and afs.volume xattr handlers
        - vfio/mdev: Avoid release parent reference during error path
        - vfio/mdev: Follow correct remove sequence
        - vfio/mdev: Fix aborting mdev child device removal if one fails
        - l2tp: Fix possible NULL pointer dereference
        - ALSA: aica: Fix a long-time build breakage
        - media: omap_vout: potential buffer overflow in vidioc_dqbuf()
        - media: davinci/vpbe: array underflow in vpbe_enum_outputs()
        - platform/x86: alienware-wmi: printing the wrong error code
        - crypto: caam - fix caam_dump_sg that iterates through scatterlist
        - netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
        - pwm: meson: Consider 128 a valid pre-divider
        - pwm: meson: Don't disable PWM when setting duty repeatedly
        - ARM: riscpc: fix lack of keyboard interrupts after irq conversion
        - nfp: bpf: fix static check error through tightening shift amount adjustment
        - kdb: do a sanity check on the cpu in kdb_per_cpu()
        - netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
        - backlight: lm3630a: Return 0 on success in update_status functions
        - thermal: rcar_gen3_thermal: fix interrupt type
        - thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
        - EDAC/mc: Fix edac_mc_find() in case no device is found
        - afs: Fix key leak in afs_release() and afs_evict_inode()
        - afs: Don't invalidate callback if AFS_VNODE_DIR_VALID not set
        - afs: Fix lock-wait/callback-break double locking
        - afs: Fix double inc of vnode->cb_break
        - ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
        - clk: meson: gxbb: no spread spectrum on mpll0
        - clk: meson: axg: spread spectrum is on mpll2
        - dmaengine: tegra210-adma: Fix crash during probe
        - arm64: dts: meson: libretech-cc: set eMMC as removable
        - RDMA/qedr: Fix incorrect device rate.
        - spi: spi-fsl-spi: call spi_finalize_current_message() at the end
        - crypto: ccp - fix AES CFB error exposed by new test vectors
        - crypto: ccp - Fix 3DES complaint from ccp-crypto module
        - serial: stm32: fix word length configuration
        - serial: stm32: fix rx error handling
        - serial: stm32: fix rx data length when parity enabled
        - serial: stm32: fix transmit_chars when tx is stopped
        - serial: stm32: Add support of TC bit status check
        - serial: stm32: fix wakeup source initialization
        - misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
        - iommu: Add missing new line for dma type
        - iommu: Use right function to get group for device
        - signal/bpfilter: Fix bpfilter_kernl to use send_sig not force_sig
        - signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
        - inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
        - crypto: talitos - fix AEAD processing.
        - netvsc: unshare skb in VF rx handler
        - net: core: support XDP generic on stacked devices.
        - RDMA/uverbs: check for allocation failure in uapi_add_elm()
        - net: don't clear sock->sk early to avoid trouble in strparser
        - phy: qcom-qusb2: fix missing assignment of ret when calling
          clk_prepare_enable
        - cpufreq: brcmstb-avs-cpufreq: Fix initial command check
        - cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
        - clk: sunxi-ng: sun50i-h6-r: Fix incorrect W1 clock gate register
        - media: vivid: fix incorrect assignment operation when setting video mode
        - crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
        - crypto: inside-secure - fix queued len computation
        - arm64: dts: renesas: ebisu: Remove renesas, no-ether-link property
        - mpls: fix warning with multi-label encap
        - serial: stm32: fix a recursive locking in stm32_config_rs485
        - arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
        - arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
        - iommu/vt-d: Duplicate iommu_resv_region objects per device list
        - phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
        - firmware: arm_scmi: fix bitfield definitions for SENSOR_DESC attributes
        - firmware: arm_scmi: update rate_discrete in clock_describe_rates_get
        - ntb_hw_switchtec: potential shift wrapping bug in switchtec_ntb_init_sndev()
        - ASoC: meson: axg-tdmin: right_j is not supported
        - ASoC: meson: axg-tdmout: right_j is not supported
        - qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
        - qed: iWARP - fix uninitialized callback
        - powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
        - powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
        - bpf: fix the check that forwarding is enabled in bpf_ipv6_fib_lookup
        - drm/msm/mdp5: Fix mdp5_cfg_init error return
        - net: netem: fix backlog accounting for corrupted GSO frames
        - net/udp_gso: Allow TX timestamp with UDP GSO
        - net/af_iucv: build proper skbs for HiperTransport
        - net/af_iucv: always register net_device notifier
        - ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
        - rtc: pcf8563: Fix interrupt trigger method
        - rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
        - ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
        - net/sched: cbs: Fix error path of cbs_module_init
        - arm64: dts: allwinner: h6: Pine H64: Add interrupt line for RTC
        - drm/msm/a3xx: remove TPL1 regs from snapshot
        - ip6_fib: Don't discard nodes with valid routing information in
          fib6_locate_1()
        - perf/ioctl: Add check for the sample_period value
        - dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
        - clk: qcom: Fix -Wunused-const-variable
        - nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
        - nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
        - tools: bpftool: use correct argument in cgroup errors
        - backlight: pwm_bl: Fix heuristic to determine number of brightness levels
        - bnxt_en: Fix ethtool selftest crash under error conditions.
        - bnxt_en: Suppress error messages when querying DSCP DCB capabilities.
        - iommu/amd: Make iommu_disable safer
        - mfd: intel-lpss: Release IDA resources
        - rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
        - xprtrdma: Fix use-after-free in rpcrdma_post_recvs
        - um: Fix IRQ controller regression on console read
        - PM: ACPI/PCI: Resume all devices during hibernation
        - ACPI: PM: Simplify and fix PM domain hibernation callbacks
        - ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
        - fsi/core: Fix error paths on CFAM init
        - devres: allow const resource arguments
        - fsi: sbefifo: Don't fail operations when in SBE IPL state
        - PCI: mobiveil: Remove the flag MSI_FLAG_MULTI_PCI_MSI
        - PCI: mobiveil: Fix devfn check in mobiveil_pcie_valid_device()
        - PCI: mobiveil: Fix the valid check for inbound and outbound windows
        - ceph: fix "ceph.dir.rctime" vxattr value
        - net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
        - net/tls: fix socket wmem accounting on fallback with netem
        - x86/pgtable/32: Fix LOWMEM_PAGES constant
        - xdp: fix possible cq entry leak
        - ARM: stm32: use "depends on" instead of "if" after prompt
        - scsi: libfc: fix null pointer dereference on a null lport
        - drm/panel: make drm_panel.h self-contained
        - clk: sunxi-ng: v3s: add the missing PLL_DDR1
        - PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
        - libertas_tf: Use correct channel range in lbtf_geo_init
        - qed: reduce maximum stack frame size
        - usb: host: xhci-hub: fix extra endianness conversion
        - media: rcar-vin: Clean up correct notifier in error path
        - mic: avoid statically declaring a 'struct device'.
        - x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
        - crypto: ccp - Reduce maximum stack usage
        - ALSA: aoa: onyx: always initialize register read value
        - arm64: dts: renesas: r8a77995: Fix register range of display node
        - tipc: reduce risk of wakeup queue starvation
        - ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
        - net/mlx5: Fix mlx5_ifc_query_lag_out_bits
        - cifs: fix rmmod regression in cifs.ko caused by force_sig changes
        - iio: tsl2772: Use devm_add_action_or_reset for tsl2772_chip_off
        - spi: bcm-qspi: Fix BSPI QUAD and DUAL mode support when using flex mode
        - cxgb4: smt: Add lock for atomic_dec_and_test
        - crypto: caam - free resources in case caam_rng registration failed
        - ext4: set error return correctly when ext4_htree_store_dirent fails
        - ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
        - ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
        - ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
        - net/rds: Add a few missing rds_stat_names entries
        - tools: bpftool: fix arguments for p_err() in do_event_pipe()
        - tools: bpftool: fix format strings and arguments for jsonw_printf()
        - drm: rcar-du: lvds: Fix bridge_to_rcar_lvds
        - signal: Allow cifs and drbd to receive their terminating signals
        - powerpc/64s/radix: Fix memory hot-unplug page table split
        - ASoC: sun4i-i2s: RX and TX counter registers are swapped
        - dmaengine: dw: platform: Switch to acpi_dma_controller_register()
        - rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
        - mac80211: minstrel_ht: fix per-group max throughput rate initialization
        - i40e: reduce stack usage in i40e_set_fc
        - media: atmel: atmel-isi: fix timeout value for stop streaming
        - ARM: 8896/1: VDSO: Don't leak kernel addresses
        - rtc: pcf2127: bugfix: read rtc disables watchdog
        - mips: avoid explicit UB in assignment of mips_io_port_base
        - media: em28xx: Fix exception handling in em28xx_alloc_urbs()
        - iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
        - ahci: Do not export local variable ahci_em_messages
        - rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
        - Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
        - hwmon: (lm75) Fix write operations for negative temperatures
        - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
        - power: supply: Init device wakeup after device_add()
        - x86, perf: Fix the dependency of the x86 insn decoder selftest
        - staging: greybus: light: fix a couple double frees
        - irqdomain: Add the missing assignment of domain->fwnode for named fwnode
        - bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
        - usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
        - bcache: Fix an error code in bch_dump_read()
        - iio: dac: ad5380: fix incorrect assignment to val
        - netfilter: ctnetlink: honor IPS_OFFLOAD flag
        - ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
        - wcn36xx: use dynamic allocation for large variables
        - tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
        - ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
        - xsk: avoid store-tearing when assigning queues
        - xsk: avoid store-tearing when assigning umem
        - led: triggers: Fix dereferencing of null pointer
        - net: sonic: return NETDEV_TX_OK if failed to map buffer
        - net: hns3: fix error VF index when setting VLAN offload
        - rtlwifi: Fix file release memory leak
        - ARM: dts: logicpd-som-lv: Fix i2c2 and i2c3 Pin mux
        - f2fs: fix wrong error injection path in inc_valid_block_count()
        - f2fs: fix error path of f2fs_convert_inline_page()
        - scsi: fnic: fix msix interrupt allocation
        - Btrfs: fix hang when loading existing inode cache off disk
        - Btrfs: fix inode cache waiters hanging on failure to start caching thread
        - Btrfs: fix inode cache waiters hanging on path allocation failure
        - btrfs: use correct count in btrfs_file_write_iter()
        - ixgbe: sync the first fragment unconditionally
        - hwmon: (shtc1) fix shtc1 and shtw1 id mask
        - net: sonic: replace dev_kfree_skb in sonic_send_packet
        - pinctrl: iproc-gpio: Fix incorrect pinconf configurations
        - gpio/aspeed: Fix incorrect number of banks
        - ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
        - RDMA/cma: Fix false error message
        - net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
        - um: Fix off by one error in IRQ enumeration
        - bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands
        - f2fs: fix to avoid accessing uninitialized field of inode page in is_alive()
        - mailbox: qcom-apcs: fix max_register value
        - clk: actions: Fix factor clk struct member access
        - powerpc/mm/mce: Keep irqs disabled during lockless page table walk
        - bpf: fix BTF limits
        - crypto: hisilicon - Matching the dma address for dma_pool_free()
        - iommu/amd: Wait for completion of IOTLB flush in attach_device
        - net: aquantia: Fix aq_vec_isr_legacy() return value
        - cxgb4: Signedness bug in init_one()
        - net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
        - net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
        - net: netsec: Fix signedness bug in netsec_probe()
        - net: socionext: Fix a signedness bug in ave_probe()
        - net: stmmac: dwmac-meson8b: Fix signedness bug in probe
        - net: axienet: fix a signedness bug in probe
        - of: mdio: Fix a signedness bug in of_phy_get_and_connect()
        - net: nixge: Fix a signedness bug in nixge_probe()
        - net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
        - net: sched: cbs: Avoid division by zero when calculating the port rate
        - nvme: retain split access workaround for capability reads
        - net: stmmac: gmac4+: Not all Unicast addresses may be available
        - rxrpc: Fix trace-after-put looking at the put connection record
        - mac80211: accept deauth frames in IBSS mode
        - llc: fix another potential sk_buff leak in llc_ui_sendmsg()
        - llc: fix sk_buff refcounting in llc_conn_state_process()
        - ip6erspan: remove the incorrect mtu limit for ip6erspan
        - net: stmmac: fix length of PTP clock's name string
        - net: stmmac: fix disabling flexible PPS output
        - sctp: add chunks to sk_backlog when the newsk sk_socket is not set
        - s390/qeth: Fix error handling during VNICC initialization
        - s390/qeth: Fix initialization of vnicc cmd masks during set online
        - act_mirred: Fix mirred_init_module error handling
        - net: avoid possible false sharing in sk_leave_memory_pressure()
        - net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
        - tcp: annotate lockless access to tcp_memory_pressure
        - net/smc: receive returns without data
        - net/smc: receive pending data after RCV_SHUTDOWN
        - drm/msm/dsi: Implement reset correctly
        - vhost/test: stop device before reset
        - firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices
        - arm64: hibernate: check pgd table allocation
        - net: netem: fix error path for corrupted GSO frames
        - bpf, offload: Unlock on error in bpf_offload_dev_create()
        - afs: Fix missing timeout reset
        - net: qca_spi: Move reset_count to struct qcaspi
        - hv_netvsc: Fix offset usage in netvsc_send_table()
        - hv_netvsc: Fix send_table offset in case of a host bug
        - afs: Fix large file support
        - drm: panel-lvds: Potential Oops in probe error handling
        - hwrng: omap3-rom - Fix missing clock by probing with device tree
        - dpaa_eth: perform DMA unmapping before read
        - dpaa_eth: avoid timestamp read on error paths
        - hv_netvsc: flag software created hash value
        - net: neigh: use long type to store jiffies delta
        - packet: fix data-race in fanout_flow_is_huge()
        - i2c: stm32f7: report dma error during probe
        - mmc: sdio: fix wl1251 vendor id
        - mmc: core: fix wl1251 sdio quirks
        - afs: Remove set but not used variables 'before', 'after'
        - dmaengine: ti: edma: fix missed failure handling
        - drm/radeon: fix bad DMA from INTERRUPT_CNTL2
        - samples/bpf: Fix broken xdp_rxq_info due to map order assumptions
        - IB/iser: Fix dma_nents type definition
        - serial: stm32: fix clearing interrupt error flags
        - arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
        - m68k: Call timer_interrupt() with interrupts disabled
        - drm/i915: Fix pid leak with banned clients
        - libbpf: Fix memory leak/double free issue
        - libbpf: Fix potential overflow issue
        - libbpf: Fix another potential overflow issue in bpf_prog_linfo
        - ARM: OMAP2+: Add missing put_device() call in omapdss_init_of()
        - tipc: fix potential memory leak in __tipc_sendmsg()
        - tipc: fix wrong socket reference counter after tipc_sk_timeout() returns
        - net: phy: broadcom: Fix RGMII delays configuration for BCM54210E
        - phy: ti: gmii-sel: fix mac tx internal delay for rgmii-rxid
        - mt76: mt76u: fix endpoint definition order
        - ice: fix stack leakage
        - nfsd: depend on CRYPTO_MD5 for legacy client tracking
        - leds: tlc591xx: update the maximum brightness
        - soc/tegra: pmc: Fix crashes for hierarchical interrupts
        - soc: renesas: Add missing check for non-zero product register address
        - gpiolib: No need to call gpiochip_remove_pin_ranges() twice
        - rtw88: fix beaconing mode rsvd_page memory violation issue
        - rtw88: fix error handling when setup efuse info
        - drm/rockchip: Base adjustments of the mode based on prev adjustments
        - drm/rockchip: Round up _before_ giving to the clock framework
        - software node: Get reference to parent swnode in get_parent op
        - drm: rcar_lvds: Fix color mismatches on R-Car H2 ES2.0 and later
        - pwm: sun4i: Fix incorrect calculation of duty_cycle/period
        - scsi: ufs: delete redundant function ufshcd_def_desc_sizes()
        - net: openvswitch: don't unlock mutex when changing the user_features fails
        - rt2800: remove errornous duplicate condition
        - tee: optee: Fix dynamic shm pool allocations
        - block: fix memleak of bio integrity data
        - phy/rockchip: inno-hdmi: round clock rate down to closest 1000 Hz
        - optee: Fix multi page dynamic shm pool alloc
    
     -- Khalid Elmously <email address hidden>  Tue, 17 Mar 2020 01:45:19 -0400
  • linux-aws-5.0 (5.0.0-1027.30) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1027.30 -proposed tracker (LP: #1865434)
    
      [ Ubuntu: 5.0.0-43.47 ]
    
      * disco/linux: 5.0.0-43.47 -proposed tracker (LP: #1865110)
      * CVE-2020-2732
        - KVM: nVMX: Don't emulate instructions in guest mode
        - KVM: nVMX: Refactor IO bitmap checks into helper function
        - KVM: nVMX: Check IO instruction VM-exit conditions
    
    linux-aws-5.0 (5.0.0-1026.29) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1026.29 -proposed tracker (LP: #1863281)
    
      * Root can lift kernel lockdown via USB/IP (LP: #1861238)
        - [config] linux-aws: remove CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ
    
      * hibernation support for linux-aws (LP: #1831940)
        - UBUNTU SAUCE [aws] PM / hibernate: reduce memory pressure during image
          writing
        - UBUNTU SAUCE [aws]: PM / hibernate: make sure pm_async is always disabled
        - UBUNTU SAUCE [aws]: PM / hibernate: set image_size to 0 by default
        - UBUNTU SAUCE [aws]: ACPICA: Enable sleep button on ACPI legacy wake
        - UBUNTU SAUCE [aws]: block: xen-blkfront: consider new dom0 features on
          restore
        - UBUNTU SAUCE [aws]: xen: restore pirqs on resume from hibernation.
        - UBUNTU SAUCE [aws]: xen: Only restore the ACPI SCI interrupt in
          xen_restore_pirqs.
    
      * linux-aws: swapoff optimization (LP: #1858618)
        - mm: refactor swap-in logic out of shmem_getpage_gfp
        - mm: rid swapoff of quadratic complexity
        - UBUNTU SAUCE [aws]: mm: swap: improve swap readahead heuristic
    
      [ Ubuntu: 5.0.0-42.46 ]
    
      * disco/linux: 5.0.0-42.46 -proposed tracker (LP: #1863297)
      * CVE-2019-3016
        - KVM: Introduce a new guest mapping API
        - kvm: fix compilation on aarch64
        - kvm: fix compilation on s390
        - kvm: fix compile on s390 part 2
        - KVM: Properly check if "page" is valid in kvm_vcpu_unmap
        - x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
        - x86/kvm: Introduce kvm_(un)map_gfn()
        - x86/kvm: Cache gfn to pfn translation
        - x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
        - x86/KVM: Clean up host's steal time structure
      * Dell XPS 13 (7390) Display Flickering - 19.10  (LP: #1849947)
        - SAUCE: drm/i915: Disable PSR by default on all platforms
      * Root can lift kernel lockdown via USB/IP (LP: #1861238)
        - Revert "UBUNTU: SAUCE: (efi-lockdown) Add a SysRq option to lift kernel
          lockdown"
      * Disco update: upstream stable patchset 2020-02-07 (LP: #1862418)
        - ARM: dts: meson8: fix the size of the PMU registers
        - clk: qcom: gcc-sdm845: Add missing flag to votable GDSCs
        - dt-bindings: reset: meson8b: fix duplicate reset IDs
        - ARM: dts: imx6q-dhcom: fix rtc compatible
        - clk: Don't try to enable critical clocks if prepare failed
        - ASoC: msm8916-wcd-digital: Reset RX interpolation path after use
        - iio: buffer: align the size of scan bytes to size of the largest element
        - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
        - USB: serial: option: Add support for Quectel RM500Q
        - USB: serial: opticon: fix control-message timeouts
        - USB: serial: option: add support for Quectel RM500Q in QDL mode
        - USB: serial: suppress driver bind attributes
        - USB: serial: ch341: handle unbound port at reset_resume
        - USB: serial: io_edgeport: handle unbound ports on URB completion
        - USB: serial: io_edgeport: add missing active-port sanity check
        - USB: serial: keyspan: handle unbound ports
        - USB: serial: quatech2: handle unbound ports
        - scsi: fnic: fix invalid stack access
        - scsi: mptfusion: Fix double fetch bug in ioctl
        - ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
        - ASoC: msm8916-wcd-analog: Fix MIC BIAS Internal1
        - ARM: dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection
        - ALSA: dice: fix fallback from protocol extension into limited functionality
        - ALSA: seq: Fix racy access for queue timer in proc read
        - ALSA: usb-audio: fix sync-ep altsetting sanity check
        - arm64: dts: allwinner: a64: olinuxino: Fix SDIO supply regulator
        - Fix built-in early-load Intel microcode alignment
        - block: fix an integer overflow in logical block size
        - ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
        - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
        - usb: core: hub: Improved device recognition on remote wakeup
        - x86/resctrl: Fix an imbalance in domain_remove_cpu()
        - x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained
        - x86/efistub: Disable paging at mixed mode entry
        - drm/i915: Add missing include file <linux/math64.h>
        - x86/resctrl: Fix potential memory leak
        - perf hists: Fix variable name's inconsistency in hists__for_each() macro
        - perf report: Fix incorrectly added dimensions as switch perf data file
        - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
          alignment
        - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is
          valid
        - btrfs: rework arguments of btrfs_unlink_subvol
        - btrfs: fix invalid removal of root ref
        - btrfs: do not delete mismatched root refs
        - btrfs: fix memory leak in qgroup accounting
        - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
        - ARM: dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL
        - ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
        - net: stmmac: 16KB buffer must be 16 byte aligned
        - net: stmmac: Enable 16KB buffer size
        - mm/huge_memory.c: make __thp_get_unmapped_area static
        - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
          alignment
        - arm64: dts: agilex/stratix10: fix pmu interrupt numbers
        - bpf: Fix incorrect verifier simulation of ARSH under ALU32
        - cfg80211: fix deadlocks in autodisconnect work
        - cfg80211: fix memory leak in cfg80211_cqm_rssi_update
        - cfg80211: fix page refcount issue in A-MSDU decap
        - netfilter: fix a use-after-free in mtype_destroy()
        - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
        - netfilter: nft_tunnel: fix null-attribute check
        - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
        - netfilter: nf_tables: store transaction list locally while requesting module
        - netfilter: nf_tables: fix flowtable list del corruption
        - NFC: pn533: fix bulk-message timeout
        - batman-adv: Fix DAT candidate selection on little endian systems
        - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
        - hv_netvsc: Fix memory leak when removing rndis device
        - net: dsa: tag_qca: fix doubled Tx statistics
        - net: hns: fix soft lockup when there is not enough memory
        - net: usb: lan78xx: limit size of local TSO packets
        - net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
        - ptp: free ptp device pin descriptors properly
        - r8152: add missing endpoint sanity check
        - tcp: fix marked lost packets not being retransmitted
        - sh_eth: check sh_eth_cpu_data::dual_port when dumping registers
        - mlxsw: spectrum: Wipe xstats.backlog of down ports
        - mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters
        - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
        - tcp: refine rule to allow EPOLLOUT generation under mem pressure
        - irqchip: Place CONFIG_SIFIVE_PLIC into the menu
        - cw1200: Fix a signedness bug in cw1200_load_firmware()
        - arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
        - cfg80211: check for set_wiphy_params
        - tick/sched: Annotate lockless access to last_jiffies_update
        - arm64: dts: marvell: Fix CP110 NAND controller node multi-line comment
          alignment
        - Revert "arm64: dts: juno: add dma-ranges property"
        - mtd: devices: fix mchp23k256 read and write
        - drm/nouveau/bar/nv50: check bar1 vmm return value
        - drm/nouveau/bar/gf100: ensure BAR is mapped
        - drm/nouveau/mmu: qualify vmm during dtor
        - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
        - scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
        - scsi: qla4xxx: fix double free bug
        - scsi: bnx2i: fix potential use after free
        - scsi: target: core: Fix a pr_debug() argument
        - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
        - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
        - scsi: core: scsi_trace: Use get_unaligned_be*()
        - perf probe: Fix wrong address verification
        - clk: sprd: Use IS_ERR() to validate the return value of
          syscon_regmap_lookup_by_phandle()
        - regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
        - hwmon: (pmbus/ibm-cffps) Switch LEDs to blocking brightness call
        - arm64: dts: ls1028a: fix endian setting for dcfg
        - ARM: dts: imx7ulp: fix reg of cpu node
        - ALSA: firewire-tascam: fix corruption due to spin lock without restoration
          in SoftIRQ context
        - clk: sunxi-ng: r40: Allow setting parent rate for external clock outputs
        - iio: adc: ad7124: Fix DT channel configuration
        - staging: comedi: ni_routes: fix null dereference in ni_find_route_source()
        - staging: comedi: ni_routes: allow partial routing information
        - mtd: rawnand: gpmi: Restore nfc timing setup after suspend/resume
        - cpu/SMT: Fix x86 link error without CONFIG_SYSFS
        - clk: samsung: exynos5420: Keep top G3D clocks enabled
        - btrfs: check rw_devices, not num_devices for balance
        - reset: Fix {of,devm}_reset_control_array_get kerneldoc return types
        - tipc: fix retrans failure due to wrong destination
        - bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
        - bpf: Sockmap, ensure sock lock held during tear down
        - bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds
        - bpf: Sockmap/tls, msg_push_data may leave end mark in place
        - bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chaining
        - bpf: Sockmap/tls, fix pop data with SK_DROP return code
        - bpf/sockmap: Read psock ingress_msg before sk_receive_queue
        - netfilter: nat: fix ICMP header corruption on ICMP errors
        - netfilter: nft_tunnel: ERSPAN_VERSION must not be null
        - net: hns3: pad the short frame before sending to the hardware
        - bnxt_en: Fix NTUPLE firmware command failures.
        - bnxt_en: Fix ipv6 RFS filter matching logic.
        - net: ethernet: ave: Avoid lockdep warning
        - net: systemport: Fixed queue mapping in internal ring map
        - net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
        - drm/amdgpu: allow direct upload save restore list for raven2
        - mlxsw: spectrum: Do not modify cloned SKBs during xmit
        - arm64: dts: meson: axg: fix audio fifo reg size
        - arm64: dts: renesas: r8a77970: Fix PWM3
        - arm64: dts: juno: Fix UART frequency
        - ARM: dts: Fix sgx sysconfig register for omap4
        - scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences
        - scsi: scsi_transport_sas: Fix memory leak when removing devices
        - clk: imx7ulp: Correct system clock source option #7
        - clk: imx7ulp: Correct DDR clock mux options
        - hwmon: (pmbus/ibm-cffps) Fix LED blink behavior
      * Disco update: upstream stable patchset 2020-02-05 (LP: #1862059)
        - chardev: Avoid potential use-after-free in 'chrdev_open()'
        - i2c: fix bus recovery stop mode timing
        - usb: chipidea: host: Disable port power only if previously enabled
        - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
        - ALSA: hda/realtek - Add new codec supported for ALCS1200A
        - ALSA: hda/realtek - Set EAPD control to default for ALC222
        - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
        - kernel/trace: Fix do not unregister tracepoints when register
          sched_migrate_task fail
        - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
        - tracing: Change offset type to s32 in preempt/irq tracepoints
        - HID: Fix slab-out-of-bounds read in hid_field_extract
        - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
        - HID: hid-input: clear unmapped usages
        - Input: add safety guards to input_set_keycode()
        - Input: input_event - fix struct padding on sparc64
        - drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
        - drm/fb-helper: Round up bits_per_pixel if possible
        - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
        - can: kvaser_usb: fix interface sanity check
        - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
        - can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
          to irq mode
        - can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
          CAN sk_buffs
        - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
        - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
        - staging: vt6656: set usb_set_intfdata on driver fail.
        - USB: serial: option: add ZLP support for 0x1bc7/0x9010
        - usb: musb: fix idling for suspend after disconnect interrupt
        - usb: musb: Disable pullup at init
        - usb: musb: dma: Correct parameter passed to IRQ handler
        - staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
        - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
        - serdev: Don't claim unsupported ACPI serial devices
        - tty: link tty and port before configuring it as console
        - tty: always relink the port
        - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
        - scsi: bfa: release allocated memory in case of error
        - rtl8xxxu: prevent leaking urb
        - HID: hiddev: fix mess in hiddev_open()
        - USB: Fix: Don't skip endpoint descriptors with maxpacket=0
        - phy: cpcap-usb: Fix error path when no host driver is loaded
        - phy: cpcap-usb: Fix flakey host idling and enumerating of devices
        - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
        - netfilter: conntrack: dccp, sctp: handle null timeout argument
        - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
        - tpm: Handle negative priv->response_len in tpm_common_read()
        - pstore/ram: Regularize prz label allocation lifetime
        - USB-PD tcpm: bad warning+size, PPS adapters
        - staging: vt6656: correct return of vnt_init_registers.
        - staging: vt6656: limit reg output to block size
        - arm64: Implement copy_thread_tls
        - arm: Implement copy_thread_tls
        - parisc: Implement copy_thread_tls
        - riscv: Implement copy_thread_tls
        - xtensa: Implement copy_thread_tls
        - um: Implement copy_thread_tls
        - powerpc: convert to copy_thread_tls
        - staging: vt6656: remove bool from vnt_radio_power_on ret
        - rpmsg: char: release allocated memory
        - hidraw: Return EPOLLOUT from hidraw_poll
        - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
        - HID: hidraw, uhid: Always report EPOLLOUT
        - ethtool: reduce stack usage with clang
        - fs/select: avoid clang stack usage warning
        - f2fs: check if file namelen exceeds max value
        - iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
        - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
        - rtc: mt6397: fix alarm register overwrite
        - RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
        - RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
        - ASoC: soc-core: Set dpcm_playback / dpcm_capture
        - ASoC: stm32: spdifrx: fix inconsistent lock state
        - ASoC: stm32: spdifrx: fix race condition in irq handler
        - mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
        - gpio: zynq: Fix for bug in zynq_gpio_restore_context API
        - iommu: Remove device link to group on failure
        - gpio: Fix error message on out-of-range GPIO in lookup table
        - hsr: reset network header when supervision frame is created
        - s390/qeth: fix false reporting of VNIC CHAR config failure
        - s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
        - cifs: Adjust indentation in smb2_open_file
        - afs: Fix missing cell comparison in afs_test_super()
        - drm/ttm: fix start page for huge page check in ttm_put_pages()
        - drm/ttm: fix incrementing the page pointer for huge pages
        - btrfs: simplify inode locking for RWF_NOWAIT
        - RDMA/mlx5: Return proper error value
        - RDMA/srpt: Report the SCSI residual to the initiator
        - scsi: enclosure: Fix stale device oops with hot replug
        - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
        - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
        - platform/x86: GPD pocket fan: Use default values when wrong modparams are
          given
        - xprtrdma: Fix completion wait during device removal
        - crypto: virtio - implement missing support for output IVs
        - NFSv2: Fix a typo in encode_sattr()
        - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
        - iio: imu: adis16480: assign bias value only if operation succeeded
        - mei: fix modalias documentation
        - clk: samsung: exynos5420: Preserve CPU clocks configuration during
          suspend/resume
        - pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args
          call
        - pinctrl: lewisburg: Update pin list according to v1.1v6
        - scsi: sd: enable compat ioctls for sed-opal
        - arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
        - af_unix: add compat_ioctl support
        - compat_ioctl: handle SIOCOUTQNSD
        - PCI: dwc: Fix find_next_bit() usage
        - PCI/PTM: Remove spurious "d" from granularity message
        - powerpc/powernv: Disable native PCIe port management
        - tty: serial: imx: use the sg count from dma_map_sg
        - tty: serial: pch_uart: correct usage of dma_unmap_sg
        - media: ov6650: Fix incorrect use of JPEG colorspace
        - media: ov6650: Fix some format attributes not under control
        - media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
        - media: rcar-vin: Fix incorrect return statement in rvin_try_format()
        - media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
        - media: exynos4-is: Fix recursive locking in isp_video_release()
        - iommu/mediatek: Correct the flush_iotlb_all callback
        - mtd: spi-nor: fix silent truncation in spi_nor_read()
        - mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
        - spi: atmel: fix handling of cs_change set on non-last xfer
        - rtlwifi: Remove unnecessary NULL check in rtl_regd_init
        - f2fs: fix potential overflow
        - rtc: msm6242: Fix reading of 10-hour digit
        - rtc: brcmstb-waketimer: add missed clk_disable_unprepare
        - gpio: mpc8xxx: Add platform device to gpiochip->parent
        - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
        - selftests: firmware: Fix it to do root uid check and skip
        - rseq/selftests: Turn off timeout setting
        - mips: cacheinfo: report shared CPU map
        - MIPS: Prevent link failure with kcov instrumentation
        - drm/arm/mali: make malidp_mw_connector_helper_funcs static
        - dmaengine: k3dma: Avoid null pointer traversal
        - ioat: ioat_alloc_ring() failure handling.
        - hexagon: parenthesize registers in asm predicates
        - hexagon: work around compiler crash
        - ocfs2: call journal flush to mark journal as empty after journal recovery
          when mount
        - phy: mapphone-mdm6600: Fix uninitialized status value regression
        - IB/hfi1: Don't cancel unused work item
        - netfilter: nft_flow_offload: fix underflow in flowtable reference counter
        - fs: move guard_bio_eod() after bio_set_op_attrs
        - scsi: mpt3sas: Fix double free in attach error handling
        - PCI: amlogic: Fix probed clock names
        - drm/tegra: Fix ordering of cleanup code
        - s390/qeth: vnicc Fix init to default
        - scsi: smartpqi: Update attribute name to `driver_version`
        - syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
        - syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
        - syscalls/x86: Fix function types in COND_SYSCALL
        - ASoC: rsnd: fix DALIGN register for SSIU
        - RDMA/hns: remove a redundant le16_to_cpu
        - RDMA/hns: Modify return value of restrack functions
        - RDMA/hns: Release qp resources when failed to destroy qp
        - xprtrdma: Connection becomes unstable after a reconnect
        - xprtrdma: Close window between waking RPC senders and posting Receives
        - RDMA/hns: Fix to support 64K page for srq
        - RDMA/hns: Bugfix for qpc/cqc timer configuration
        - uaccess: Add non-pagefault user-space write function
        - bpf: Make use of probe_user_write in probe write helper
        - bpf: skmsg, fix potential psock NULL pointer dereference
        - scsi: ufs: Give an unique ID to each ufs-bsg
        - crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig
        - crypto: geode-aes - convert to skcipher API and make thread-safe
        - nfsd: v4 support requires CRYPTO_SHA256
        - NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
        - affs: fix a memory leak in affs_remount
        - pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR
        - pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts
        - PCI: pciehp: Do not disable interrupt twice on suspend
        - gfs2: add compat_ioctl support
        - PCI: aardvark: Use LTSSM state to build link training flag
        - PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
        - PCI/PM: Clear PCIe PME Status even for legacy power management
        - tools: PCI: Fix fd leakage
        - MIPS: Loongson: Fix return value of loongson_hwmon_init
        - media: ov6650: Fix default format not applied on device probe
        - media: aspeed-video: Fix memory leaks in aspeed_video_probe
        - spi: sprd: Fix the incorrect SPI register
        - spi: pxa2xx: Set controller->max_transfer_size in dma mode
        - sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
        - NFSD fixing possible null pointer derefering in copy offload
        - scsi: target/iblock: Fix protection error with blocks greater than 512B
        - media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes
      * Disco update: upstream stable patchset 2020-02-04 (LP: #1861918)
        - USB: dummy-hcd: use usb_urb_dir_in instead of usb_pipein
        - USB: dummy-hcd: increase max number of devices to 32
        - bpf: Fix passing modified ctx to ld/abs/ind instruction
        - regulator: fix use after free issue
        - ASoC: max98090: fix possible race conditions
        - locking/spinlock/debug: Fix various data races
        - netfilter: ctnetlink: netns exit must wait for callbacks
        - libtraceevent: Fix lib installation with O=
        - x86/efi: Update e820 with reserved EFI boot services data to fix kexec
          breakage
        - ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89
        - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
        - efi/gop: Return EFI_SUCCESS if a usable GOP was found
        - efi/gop: Fix memory leak in __gop_query32/64()
        - ARM: dts: imx6ul: imx6ul-14x14-evk.dtsi: Fix SPI NOR probing
        - ARM: vexpress: Set-up shared OPP table instead of individual for each CPU
        - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
        - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named
          sets
        - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
        - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
        - ARM: dts: BCM5301X: Fix MDIO node address/size cells
        - selftests/ftrace: Fix multiple kprobe testcase
        - ARM: dts: Cygnus: Fix MDIO node address/size cells
        - spi: spi-cavium-thunderx: Add missing pci_release_regions()
        - ASoC: topology: Check return value for soc_tplg_pcm_create()
        - ARM: dts: bcm283x: Fix critical trip point
        - bpf, mips: Limit to 33 tail calls
        - spi: spi-ti-qspi: Fix a bug when accessing non default CS
        - ARM: dts: am437x-gp/epos-evm: fix panel compatible
        - samples: bpf: Replace symbol compare of trace_event
        - samples: bpf: fix syscall_tp due to unused syscall
        - powerpc: Ensure that swiotlb buffer is allocated from low memory
        - btrfs: Fix error messages in qgroup_rescan_init
        - bpf: Clear skb->tstamp in bpf_redirect when necessary
        - bnx2x: Do not handle requests from VFs after parity
        - bnx2x: Fix logic to get total no. of PFs per engine
        - cxgb4: Fix kernel panic while accessing sge_info
        - net: usb: lan78xx: Fix error message format specifier
        - parisc: add missing __init annotation
        - rfkill: Fix incorrect check to avoid NULL pointer dereference
        - ASoC: wm8962: fix lambda value
        - regulator: rn5t618: fix module aliases
        - iommu/iova: Init the struct iova to fix the possible memleak
        - kconfig: don't crash on NULL expressions in expr_eq()
        - perf/x86/intel: Fix PT PMI handling
        - fs: avoid softlockups in s_inodes iterators
        - net: stmmac: Do not accept invalid MTU values
        - net: stmmac: xgmac: Clear previous RX buffer size
        - net: stmmac: RX buffer size must be 16 byte aligned
        - net: stmmac: Always arm TX Timer at end of transmission start
        - s390/purgatory: do not build purgatory with kcov, kasan and friends
        - drm/exynos: gsc: add missed component_del
        - s390/dasd/cio: Interpret ccw_device_get_mdc return value correctly
        - s390/dasd: fix memleak in path handling error case
        - block: fix memleak when __blk_rq_map_user_iov() is failed
        - parisc: Fix compiler warnings in debug_core.c
        - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c)
        - hv_netvsc: Fix unwanted rx_table reset
        - powerpc/vcpu: Assume dedicated processors as non-preempt
        - powerpc/spinlocks: Include correct header for static key
        - PCI/switchtec: Read all 64 bits of part_event_bitmap
        - gtp: fix bad unlock balance in gtp_encap_enable_socket
        - macvlan: do not assume mac_header is set in macvlan_broadcast()
        - net: dsa: mv88e6xxx: Preserve priority when setting CPU port.
        - net: stmmac: dwmac-sun8i: Allow all RGMII modes
        - net: stmmac: dwmac-sunxi: Allow all RGMII modes
        - net: usb: lan78xx: fix possible skb leak
        - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
        - sch_cake: avoid possible divide by zero in cake_enqueue()
        - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
        - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
        - vxlan: fix tos value before xmit
        - vlan: fix memory leak in vlan_dev_set_egress_priority
        - vlan: vlan_changelink() should propagate errors
        - mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO
        - net: sch_prio: When ungrafting, replace with FIFO
        - usb: dwc3: gadget: Fix request complete check
        - USB: core: fix check for duplicate endpoints
        - USB: serial: option: add Telit ME910G1 0x110a composition
        - usb: missing parentheses in USE_NEW_SCHEME
        - ASoC: rt5682: fix i2c arbitration lost issue
        - spi: pxa2xx: Add support for Intel Elkhart Lake
        - spi: pxa2xx: Add support for Intel Jasper Lake
        - spi: fsl: Fix GPIO descriptor support
        - libtraceevent: Copy pkg-config file to output folder when using O=
        - regulator: core: fix regulator_register() error paths to properly release
          rdev
        - selftests/ftrace: Fix to check the existence of set_ftrace_filter
        - selftests/ftrace: Fix ftrace test cases to check unsupported
        - reset: Do not register resource data for missing resets
        - ARM: dts: am335x-sancloud-bbe: fix phy mode
        - bpftool: Don't crash on missing jited insns or ksyms
        - arm64: dts: ls1028a: fix reboot node
        - ARM: imx_v6_v7_defconfig: Explicitly restore CONFIG_DEBUG_FS
        - mac80211: fix TID field in monitor mode transmit
        - cfg80211: fix double-free after changing network namespace
        - btrfs: handle error in btrfs_cache_block_group
        - clk: at91: fix possible deadlock
        - staging: axis-fifo: add unspecified HAS_IOMEM dependency
        - sched/psi: Fix sampling error and rare div0 crashes with cgroups and high
          uptime
        - usb: typec: fusb302: Fix an undefined reference to 'extcon_get_state'
        - block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT
        - fs: call fsnotify_sb_delete after evict_inodes
        - net: stmmac: Determine earlier the size of RX buffer
        - arm64: cpu_errata: Add Hisilicon TSV110 to spectre-v2 safe list
        - sbitmap: only queue kyber's wait callback if not already active
        - s390/qeth: handle error due to unsupported transport mode
        - s390/qeth: fix promiscuous mode after reset
        - s390/qeth: don't return -ENOTSUPP to userspace
        - selftests: pmtu: fix init mtu value in description
        - net: freescale: fec: Fix ethtool -d runtime PM
        - net: stmmac: Fixed link does not need MDIO Bus
        - net/mlx5e: Fix hairpin RSS table size
      * shiftfs: prevent lower dentries from going negative during unlink
        (LP: #1860041)
        - SAUCE: shiftfs: prevent lower dentries from going negative during unlink
      * Prevent arm64 guest from accessing host debug registers (LP: #1860657)
        - KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
      * pty03 from pty in ubuntu_ltp failed on Eoan (LP: #1862114)
        - can, slip: Protect tty->disc_data in write_wakeup and close with RCU
    
     -- Kelsey Skunberg <email address hidden>  Mon, 02 Mar 2020 13:13:21 -0700
  • linux-aws-5.0 (5.0.0-1026.29) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1026.29 -proposed tracker (LP: #1863281)
    
      * Root can lift kernel lockdown via USB/IP (LP: #1861238)
        - [config] linux-aws: remove CONFIG_ALLOW_LOCKDOWN_LIFT_BY_SYSRQ
    
      * hibernation support for linux-aws (LP: #1831940)
        - UBUNTU SAUCE [aws] PM / hibernate: reduce memory pressure during image
          writing
        - UBUNTU SAUCE [aws]: PM / hibernate: make sure pm_async is always disabled
        - UBUNTU SAUCE [aws]: PM / hibernate: set image_size to 0 by default
        - UBUNTU SAUCE [aws]: ACPICA: Enable sleep button on ACPI legacy wake
        - UBUNTU SAUCE [aws]: block: xen-blkfront: consider new dom0 features on
          restore
        - UBUNTU SAUCE [aws]: xen: restore pirqs on resume from hibernation.
        - UBUNTU SAUCE [aws]: xen: Only restore the ACPI SCI interrupt in
          xen_restore_pirqs.
    
      * linux-aws: swapoff optimization (LP: #1858618)
        - mm: refactor swap-in logic out of shmem_getpage_gfp
        - mm: rid swapoff of quadratic complexity
        - UBUNTU SAUCE [aws]: mm: swap: improve swap readahead heuristic
    
      [ Ubuntu: 5.0.0-42.46 ]
    
      * disco/linux: 5.0.0-42.46 -proposed tracker (LP: #1863297)
      * CVE-2019-3016
        - KVM: Introduce a new guest mapping API
        - kvm: fix compilation on aarch64
        - kvm: fix compilation on s390
        - kvm: fix compile on s390 part 2
        - KVM: Properly check if "page" is valid in kvm_vcpu_unmap
        - x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
        - x86/kvm: Introduce kvm_(un)map_gfn()
        - x86/kvm: Cache gfn to pfn translation
        - x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
        - x86/KVM: Clean up host's steal time structure
      * Dell XPS 13 (7390) Display Flickering - 19.10  (LP: #1849947)
        - SAUCE: drm/i915: Disable PSR by default on all platforms
      * Root can lift kernel lockdown via USB/IP (LP: #1861238)
        - Revert "UBUNTU: SAUCE: (efi-lockdown) Add a SysRq option to lift kernel
          lockdown"
      * Disco update: upstream stable patchset 2020-02-07 (LP: #1862418)
        - ARM: dts: meson8: fix the size of the PMU registers
        - clk: qcom: gcc-sdm845: Add missing flag to votable GDSCs
        - dt-bindings: reset: meson8b: fix duplicate reset IDs
        - ARM: dts: imx6q-dhcom: fix rtc compatible
        - clk: Don't try to enable critical clocks if prepare failed
        - ASoC: msm8916-wcd-digital: Reset RX interpolation path after use
        - iio: buffer: align the size of scan bytes to size of the largest element
        - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
        - USB: serial: option: Add support for Quectel RM500Q
        - USB: serial: opticon: fix control-message timeouts
        - USB: serial: option: add support for Quectel RM500Q in QDL mode
        - USB: serial: suppress driver bind attributes
        - USB: serial: ch341: handle unbound port at reset_resume
        - USB: serial: io_edgeport: handle unbound ports on URB completion
        - USB: serial: io_edgeport: add missing active-port sanity check
        - USB: serial: keyspan: handle unbound ports
        - USB: serial: quatech2: handle unbound ports
        - scsi: fnic: fix invalid stack access
        - scsi: mptfusion: Fix double fetch bug in ioctl
        - ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
        - ASoC: msm8916-wcd-analog: Fix MIC BIAS Internal1
        - ARM: dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection
        - ALSA: dice: fix fallback from protocol extension into limited functionality
        - ALSA: seq: Fix racy access for queue timer in proc read
        - ALSA: usb-audio: fix sync-ep altsetting sanity check
        - arm64: dts: allwinner: a64: olinuxino: Fix SDIO supply regulator
        - Fix built-in early-load Intel microcode alignment
        - block: fix an integer overflow in logical block size
        - ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
        - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
        - usb: core: hub: Improved device recognition on remote wakeup
        - x86/resctrl: Fix an imbalance in domain_remove_cpu()
        - x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained
        - x86/efistub: Disable paging at mixed mode entry
        - drm/i915: Add missing include file <linux/math64.h>
        - x86/resctrl: Fix potential memory leak
        - perf hists: Fix variable name's inconsistency in hists__for_each() macro
        - perf report: Fix incorrectly added dimensions as switch perf data file
        - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD
          alignment
        - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is
          valid
        - btrfs: rework arguments of btrfs_unlink_subvol
        - btrfs: fix invalid removal of root ref
        - btrfs: do not delete mismatched root refs
        - btrfs: fix memory leak in qgroup accounting
        - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
        - ARM: dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL
        - ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
        - net: stmmac: 16KB buffer must be 16 byte aligned
        - net: stmmac: Enable 16KB buffer size
        - mm/huge_memory.c: make __thp_get_unmapped_area static
        - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD
          alignment
        - arm64: dts: agilex/stratix10: fix pmu interrupt numbers
        - bpf: Fix incorrect verifier simulation of ARSH under ALU32
        - cfg80211: fix deadlocks in autodisconnect work
        - cfg80211: fix memory leak in cfg80211_cqm_rssi_update
        - cfg80211: fix page refcount issue in A-MSDU decap
        - netfilter: fix a use-after-free in mtype_destroy()
        - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
        - netfilter: nft_tunnel: fix null-attribute check
        - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
        - netfilter: nf_tables: store transaction list locally while requesting module
        - netfilter: nf_tables: fix flowtable list del corruption
        - NFC: pn533: fix bulk-message timeout
        - batman-adv: Fix DAT candidate selection on little endian systems
        - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
        - hv_netvsc: Fix memory leak when removing rndis device
        - net: dsa: tag_qca: fix doubled Tx statistics
        - net: hns: fix soft lockup when there is not enough memory
        - net: usb: lan78xx: limit size of local TSO packets
        - net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
        - ptp: free ptp device pin descriptors properly
        - r8152: add missing endpoint sanity check
        - tcp: fix marked lost packets not being retransmitted
        - sh_eth: check sh_eth_cpu_data::dual_port when dumping registers
        - mlxsw: spectrum: Wipe xstats.backlog of down ports
        - mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters
        - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
        - tcp: refine rule to allow EPOLLOUT generation under mem pressure
        - irqchip: Place CONFIG_SIFIVE_PLIC into the menu
        - cw1200: Fix a signedness bug in cw1200_load_firmware()
        - arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
        - cfg80211: check for set_wiphy_params
        - tick/sched: Annotate lockless access to last_jiffies_update
        - arm64: dts: marvell: Fix CP110 NAND controller node multi-line comment
          alignment
        - Revert "arm64: dts: juno: add dma-ranges property"
        - mtd: devices: fix mchp23k256 read and write
        - drm/nouveau/bar/nv50: check bar1 vmm return value
        - drm/nouveau/bar/gf100: ensure BAR is mapped
        - drm/nouveau/mmu: qualify vmm during dtor
        - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
        - scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
        - scsi: qla4xxx: fix double free bug
        - scsi: bnx2i: fix potential use after free
        - scsi: target: core: Fix a pr_debug() argument
        - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
        - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
        - scsi: core: scsi_trace: Use get_unaligned_be*()
        - perf probe: Fix wrong address verification
        - clk: sprd: Use IS_ERR() to validate the return value of
          syscon_regmap_lookup_by_phandle()
        - regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
        - hwmon: (pmbus/ibm-cffps) Switch LEDs to blocking brightness call
        - arm64: dts: ls1028a: fix endian setting for dcfg
        - ARM: dts: imx7ulp: fix reg of cpu node
        - ALSA: firewire-tascam: fix corruption due to spin lock without restoration
          in SoftIRQ context
        - clk: sunxi-ng: r40: Allow setting parent rate for external clock outputs
        - iio: adc: ad7124: Fix DT channel configuration
        - staging: comedi: ni_routes: fix null dereference in ni_find_route_source()
        - staging: comedi: ni_routes: allow partial routing information
        - mtd: rawnand: gpmi: Restore nfc timing setup after suspend/resume
        - cpu/SMT: Fix x86 link error without CONFIG_SYSFS
        - clk: samsung: exynos5420: Keep top G3D clocks enabled
        - btrfs: check rw_devices, not num_devices for balance
        - reset: Fix {of,devm}_reset_control_array_get kerneldoc return types
        - tipc: fix retrans failure due to wrong destination
        - bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop
        - bpf: Sockmap, ensure sock lock held during tear down
        - bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds
        - bpf: Sockmap/tls, msg_push_data may leave end mark in place
        - bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chaining
        - bpf: Sockmap/tls, fix pop data with SK_DROP return code
        - bpf/sockmap: Read psock ingress_msg before sk_receive_queue
        - netfilter: nat: fix ICMP header corruption on ICMP errors
        - netfilter: nft_tunnel: ERSPAN_VERSION must not be null
        - net: hns3: pad the short frame before sending to the hardware
        - bnxt_en: Fix NTUPLE firmware command failures.
        - bnxt_en: Fix ipv6 RFS filter matching logic.
        - net: ethernet: ave: Avoid lockdep warning
        - net: systemport: Fixed queue mapping in internal ring map
        - net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
        - drm/amdgpu: allow direct upload save restore list for raven2
        - mlxsw: spectrum: Do not modify cloned SKBs during xmit
        - arm64: dts: meson: axg: fix audio fifo reg size
        - arm64: dts: renesas: r8a77970: Fix PWM3
        - arm64: dts: juno: Fix UART frequency
        - ARM: dts: Fix sgx sysconfig register for omap4
        - scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences
        - scsi: scsi_transport_sas: Fix memory leak when removing devices
        - clk: imx7ulp: Correct system clock source option #7
        - clk: imx7ulp: Correct DDR clock mux options
        - hwmon: (pmbus/ibm-cffps) Fix LED blink behavior
      * Disco update: upstream stable patchset 2020-02-05 (LP: #1862059)
        - chardev: Avoid potential use-after-free in 'chrdev_open()'
        - i2c: fix bus recovery stop mode timing
        - usb: chipidea: host: Disable port power only if previously enabled
        - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
        - ALSA: hda/realtek - Add new codec supported for ALCS1200A
        - ALSA: hda/realtek - Set EAPD control to default for ALC222
        - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
        - kernel/trace: Fix do not unregister tracepoints when register
          sched_migrate_task fail
        - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
        - tracing: Change offset type to s32 in preempt/irq tracepoints
        - HID: Fix slab-out-of-bounds read in hid_field_extract
        - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
        - HID: hid-input: clear unmapped usages
        - Input: add safety guards to input_set_keycode()
        - Input: input_event - fix struct padding on sparc64
        - drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
        - drm/fb-helper: Round up bits_per_pixel if possible
        - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
        - can: kvaser_usb: fix interface sanity check
        - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
        - can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
          to irq mode
        - can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
          CAN sk_buffs
        - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
        - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
        - staging: vt6656: set usb_set_intfdata on driver fail.
        - USB: serial: option: add ZLP support for 0x1bc7/0x9010
        - usb: musb: fix idling for suspend after disconnect interrupt
        - usb: musb: Disable pullup at init
        - usb: musb: dma: Correct parameter passed to IRQ handler
        - staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
        - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
        - serdev: Don't claim unsupported ACPI serial devices
        - tty: link tty and port before configuring it as console
        - tty: always relink the port
        - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
        - scsi: bfa: release allocated memory in case of error
        - rtl8xxxu: prevent leaking urb
        - HID: hiddev: fix mess in hiddev_open()
        - USB: Fix: Don't skip endpoint descriptors with maxpacket=0
        - phy: cpcap-usb: Fix error path when no host driver is loaded
        - phy: cpcap-usb: Fix flakey host idling and enumerating of devices
        - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
        - netfilter: conntrack: dccp, sctp: handle null timeout argument
        - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
        - tpm: Handle negative priv->response_len in tpm_common_read()
        - pstore/ram: Regularize prz label allocation lifetime
        - USB-PD tcpm: bad warning+size, PPS adapters
        - staging: vt6656: correct return of vnt_init_registers.
        - staging: vt6656: limit reg output to block size
        - arm64: Implement copy_thread_tls
        - arm: Implement copy_thread_tls
        - parisc: Implement copy_thread_tls
        - riscv: Implement copy_thread_tls
        - xtensa: Implement copy_thread_tls
        - um: Implement copy_thread_tls
        - powerpc: convert to copy_thread_tls
        - staging: vt6656: remove bool from vnt_radio_power_on ret
        - rpmsg: char: release allocated memory
        - hidraw: Return EPOLLOUT from hidraw_poll
        - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
        - HID: hidraw, uhid: Always report EPOLLOUT
        - ethtool: reduce stack usage with clang
        - fs/select: avoid clang stack usage warning
        - f2fs: check if file namelen exceeds max value
        - iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
        - iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
        - rtc: mt6397: fix alarm register overwrite
        - RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
        - RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
        - ASoC: soc-core: Set dpcm_playback / dpcm_capture
        - ASoC: stm32: spdifrx: fix inconsistent lock state
        - ASoC: stm32: spdifrx: fix race condition in irq handler
        - mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
        - gpio: zynq: Fix for bug in zynq_gpio_restore_context API
        - iommu: Remove device link to group on failure
        - gpio: Fix error message on out-of-range GPIO in lookup table
        - hsr: reset network header when supervision frame is created
        - s390/qeth: fix false reporting of VNIC CHAR config failure
        - s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
        - cifs: Adjust indentation in smb2_open_file
        - afs: Fix missing cell comparison in afs_test_super()
        - drm/ttm: fix start page for huge page check in ttm_put_pages()
        - drm/ttm: fix incrementing the page pointer for huge pages
        - btrfs: simplify inode locking for RWF_NOWAIT
        - RDMA/mlx5: Return proper error value
        - RDMA/srpt: Report the SCSI residual to the initiator
        - scsi: enclosure: Fix stale device oops with hot replug
        - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
        - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
        - platform/x86: GPD pocket fan: Use default values when wrong modparams are
          given
        - xprtrdma: Fix completion wait during device removal
        - crypto: virtio - implement missing support for output IVs
        - NFSv2: Fix a typo in encode_sattr()
        - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
        - iio: imu: adis16480: assign bias value only if operation succeeded
        - mei: fix modalias documentation
        - clk: samsung: exynos5420: Preserve CPU clocks configuration during
          suspend/resume
        - pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args
          call
        - pinctrl: lewisburg: Update pin list according to v1.1v6
        - scsi: sd: enable compat ioctls for sed-opal
        - arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
        - af_unix: add compat_ioctl support
        - compat_ioctl: handle SIOCOUTQNSD
        - PCI: dwc: Fix find_next_bit() usage
        - PCI/PTM: Remove spurious "d" from granularity message
        - powerpc/powernv: Disable native PCIe port management
        - tty: serial: imx: use the sg count from dma_map_sg
        - tty: serial: pch_uart: correct usage of dma_unmap_sg
        - media: ov6650: Fix incorrect use of JPEG colorspace
        - media: ov6650: Fix some format attributes not under control
        - media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
        - media: rcar-vin: Fix incorrect return statement in rvin_try_format()
        - media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
        - media: exynos4-is: Fix recursive locking in isp_video_release()
        - iommu/mediatek: Correct the flush_iotlb_all callback
        - mtd: spi-nor: fix silent truncation in spi_nor_read()
        - mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
        - spi: atmel: fix handling of cs_change set on non-last xfer
        - rtlwifi: Remove unnecessary NULL check in rtl_regd_init
        - f2fs: fix potential overflow
        - rtc: msm6242: Fix reading of 10-hour digit
        - rtc: brcmstb-waketimer: add missed clk_disable_unprepare
        - gpio: mpc8xxx: Add platform device to gpiochip->parent
        - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
        - selftests: firmware: Fix it to do root uid check and skip
        - rseq/selftests: Turn off timeout setting
        - mips: cacheinfo: report shared CPU map
        - MIPS: Prevent link failure with kcov instrumentation
        - drm/arm/mali: make malidp_mw_connector_helper_funcs static
        - dmaengine: k3dma: Avoid null pointer traversal
        - ioat: ioat_alloc_ring() failure handling.
        - hexagon: parenthesize registers in asm predicates
        - hexagon: work around compiler crash
        - ocfs2: call journal flush to mark journal as empty after journal recovery
          when mount
        - phy: mapphone-mdm6600: Fix uninitialized status value regression
        - IB/hfi1: Don't cancel unused work item
        - netfilter: nft_flow_offload: fix underflow in flowtable reference counter
        - fs: move guard_bio_eod() after bio_set_op_attrs
        - scsi: mpt3sas: Fix double free in attach error handling
        - PCI: amlogic: Fix probed clock names
        - drm/tegra: Fix ordering of cleanup code
        - s390/qeth: vnicc Fix init to default
        - scsi: smartpqi: Update attribute name to `driver_version`
        - syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
        - syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
        - syscalls/x86: Fix function types in COND_SYSCALL
        - ASoC: rsnd: fix DALIGN register for SSIU
        - RDMA/hns: remove a redundant le16_to_cpu
        - RDMA/hns: Modify return value of restrack functions
        - RDMA/hns: Release qp resources when failed to destroy qp
        - xprtrdma: Connection becomes unstable after a reconnect
        - xprtrdma: Close window between waking RPC senders and posting Receives
        - RDMA/hns: Fix to support 64K page for srq
        - RDMA/hns: Bugfix for qpc/cqc timer configuration
        - uaccess: Add non-pagefault user-space write function
        - bpf: Make use of probe_user_write in probe write helper
        - bpf: skmsg, fix potential psock NULL pointer dereference
        - scsi: ufs: Give an unique ID to each ufs-bsg
        - crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig
        - crypto: geode-aes - convert to skcipher API and make thread-safe
        - nfsd: v4 support requires CRYPTO_SHA256
        - NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
        - affs: fix a memory leak in affs_remount
        - pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR
        - pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts
        - PCI: pciehp: Do not disable interrupt twice on suspend
        - gfs2: add compat_ioctl support
        - PCI: aardvark: Use LTSSM state to build link training flag
        - PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
        - PCI/PM: Clear PCIe PME Status even for legacy power management
        - tools: PCI: Fix fd leakage
        - MIPS: Loongson: Fix return value of loongson_hwmon_init
        - media: ov6650: Fix default format not applied on device probe
        - media: aspeed-video: Fix memory leaks in aspeed_video_probe
        - spi: sprd: Fix the incorrect SPI register
        - spi: pxa2xx: Set controller->max_transfer_size in dma mode
        - sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
        - NFSD fixing possible null pointer derefering in copy offload
        - scsi: target/iblock: Fix protection error with blocks greater than 512B
        - media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes
      * Disco update: upstream stable patchset 2020-02-04 (LP: #1861918)
        - USB: dummy-hcd: use usb_urb_dir_in instead of usb_pipein
        - USB: dummy-hcd: increase max number of devices to 32
        - bpf: Fix passing modified ctx to ld/abs/ind instruction
        - regulator: fix use after free issue
        - ASoC: max98090: fix possible race conditions
        - locking/spinlock/debug: Fix various data races
        - netfilter: ctnetlink: netns exit must wait for callbacks
        - libtraceevent: Fix lib installation with O=
        - x86/efi: Update e820 with reserved EFI boot services data to fix kexec
          breakage
        - ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89
        - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs
        - efi/gop: Return EFI_SUCCESS if a usable GOP was found
        - efi/gop: Fix memory leak in __gop_query32/64()
        - ARM: dts: imx6ul: imx6ul-14x14-evk.dtsi: Fix SPI NOR probing
        - ARM: vexpress: Set-up shared OPP table instead of individual for each CPU
        - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h
        - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named
          sets
        - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END
        - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()
        - ARM: dts: BCM5301X: Fix MDIO node address/size cells
        - selftests/ftrace: Fix multiple kprobe testcase
        - ARM: dts: Cygnus: Fix MDIO node address/size cells
        - spi: spi-cavium-thunderx: Add missing pci_release_regions()
        - ASoC: topology: Check return value for soc_tplg_pcm_create()
        - ARM: dts: bcm283x: Fix critical trip point
        - bpf, mips: Limit to 33 tail calls
        - spi: spi-ti-qspi: Fix a bug when accessing non default CS
        - ARM: dts: am437x-gp/epos-evm: fix panel compatible
        - samples: bpf: Replace symbol compare of trace_event
        - samples: bpf: fix syscall_tp due to unused syscall
        - powerpc: Ensure that swiotlb buffer is allocated from low memory
        - btrfs: Fix error messages in qgroup_rescan_init
        - bpf: Clear skb->tstamp in bpf_redirect when necessary
        - bnx2x: Do not handle requests from VFs after parity
        - bnx2x: Fix logic to get total no. of PFs per engine
        - cxgb4: Fix kernel panic while accessing sge_info
        - net: usb: lan78xx: Fix error message format specifier
        - parisc: add missing __init annotation
        - rfkill: Fix incorrect check to avoid NULL pointer dereference
        - ASoC: wm8962: fix lambda value
        - regulator: rn5t618: fix module aliases
        - iommu/iova: Init the struct iova to fix the possible memleak
        - kconfig: don't crash on NULL expressions in expr_eq()
        - perf/x86/intel: Fix PT PMI handling
        - fs: avoid softlockups in s_inodes iterators
        - net: stmmac: Do not accept invalid MTU values
        - net: stmmac: xgmac: Clear previous RX buffer size
        - net: stmmac: RX buffer size must be 16 byte aligned
        - net: stmmac: Always arm TX Timer at end of transmission start
        - s390/purgatory: do not build purgatory with kcov, kasan and friends
        - drm/exynos: gsc: add missed component_del
        - s390/dasd/cio: Interpret ccw_device_get_mdc return value correctly
        - s390/dasd: fix memleak in path handling error case
        - block: fix memleak when __blk_rq_map_user_iov() is failed
        - parisc: Fix compiler warnings in debug_core.c
        - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c)
        - hv_netvsc: Fix unwanted rx_table reset
        - powerpc/vcpu: Assume dedicated processors as non-preempt
        - powerpc/spinlocks: Include correct header for static key
        - PCI/switchtec: Read all 64 bits of part_event_bitmap
        - gtp: fix bad unlock balance in gtp_encap_enable_socket
        - macvlan: do not assume mac_header is set in macvlan_broadcast()
        - net: dsa: mv88e6xxx: Preserve priority when setting CPU port.
        - net: stmmac: dwmac-sun8i: Allow all RGMII modes
        - net: stmmac: dwmac-sunxi: Allow all RGMII modes
        - net: usb: lan78xx: fix possible skb leak
        - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
        - sch_cake: avoid possible divide by zero in cake_enqueue()
        - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
        - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
        - vxlan: fix tos value before xmit
        - vlan: fix memory leak in vlan_dev_set_egress_priority
        - vlan: vlan_changelink() should propagate errors
        - mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO
        - net: sch_prio: When ungrafting, replace with FIFO
        - usb: dwc3: gadget: Fix request complete check
        - USB: core: fix check for duplicate endpoints
        - USB: serial: option: add Telit ME910G1 0x110a composition
        - usb: missing parentheses in USE_NEW_SCHEME
        - ASoC: rt5682: fix i2c arbitration lost issue
        - spi: pxa2xx: Add support for Intel Elkhart Lake
        - spi: pxa2xx: Add support for Intel Jasper Lake
        - spi: fsl: Fix GPIO descriptor support
        - libtraceevent: Copy pkg-config file to output folder when using O=
        - regulator: core: fix regulator_register() error paths to properly release
          rdev
        - selftests/ftrace: Fix to check the existence of set_ftrace_filter
        - selftests/ftrace: Fix ftrace test cases to check unsupported
        - reset: Do not register resource data for missing resets
        - ARM: dts: am335x-sancloud-bbe: fix phy mode
        - bpftool: Don't crash on missing jited insns or ksyms
        - arm64: dts: ls1028a: fix reboot node
        - ARM: imx_v6_v7_defconfig: Explicitly restore CONFIG_DEBUG_FS
        - mac80211: fix TID field in monitor mode transmit
        - cfg80211: fix double-free after changing network namespace
        - btrfs: handle error in btrfs_cache_block_group
        - clk: at91: fix possible deadlock
        - staging: axis-fifo: add unspecified HAS_IOMEM dependency
        - sched/psi: Fix sampling error and rare div0 crashes with cgroups and high
          uptime
        - usb: typec: fusb302: Fix an undefined reference to 'extcon_get_state'
        - block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT
        - fs: call fsnotify_sb_delete after evict_inodes
        - net: stmmac: Determine earlier the size of RX buffer
        - arm64: cpu_errata: Add Hisilicon TSV110 to spectre-v2 safe list
        - sbitmap: only queue kyber's wait callback if not already active
        - s390/qeth: handle error due to unsupported transport mode
        - s390/qeth: fix promiscuous mode after reset
        - s390/qeth: don't return -ENOTSUPP to userspace
        - selftests: pmtu: fix init mtu value in description
        - net: freescale: fec: Fix ethtool -d runtime PM
        - net: stmmac: Fixed link does not need MDIO Bus
        - net/mlx5e: Fix hairpin RSS table size
      * shiftfs: prevent lower dentries from going negative during unlink
        (LP: #1860041)
        - SAUCE: shiftfs: prevent lower dentries from going negative during unlink
      * Prevent arm64 guest from accessing host debug registers (LP: #1860657)
        - KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
      * pty03 from pty in ubuntu_ltp failed on Eoan (LP: #1862114)
        - can, slip: Protect tty->disc_data in write_wakeup and close with RCU
    
     -- Kleber Sacilotto de Souza <email address hidden>  Tue, 18 Feb 2020 17:44:10 +0100
  • linux-aws-5.0 (5.0.0-1025.28) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1025.28 -proposed tracker (LP: #1861179)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] update update.conf
    
      [ Ubuntu: 5.0.0-41.45 ]
    
      * disco/linux: 5.0.0-41.45 -proposed tracker (LP: #1861192)
      * QAT drivers for C3XXX and C62X not included as modules (LP: #1845959)
        - [Config] CRYPTO_DEV_QAT_C3XXX=m, CRYPTO_DEV_QAT_C62X=m and
          CRYPTO_DEV_QAT_DH895xCC=m
      * Disco update: upstream stable patchset 2020-01-23 (LP: #1860699)
        - scsi: lpfc: Fix discovery failures when target device connectivity bounces
        - scsi: mpt3sas: Fix clear pending bit in ioctl status
        - scsi: lpfc: Fix locking on mailbox command completion
        - Input: atmel_mxt_ts - disable IRQ across suspend
        - f2fs: fix to update time in lazytime mode
        - iommu: rockchip: Free domain on .domain_free
        - iommu/tegra-smmu: Fix page tables in > 4 GiB memory
        - dmaengine: xilinx_dma: Clear desc_pendingcount in xilinx_dma_reset
        - scsi: target: compare full CHAP_A Algorithm strings
        - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
        - scsi: csiostor: Don't enable IRQs too early
        - scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec()
        - powerpc/pseries: Mark accumulate_stolen_time() as notrace
        - powerpc/pseries: Don't fail hash page table insert for bolted mapping
        - powerpc/tools: Don't quote $objdump in scripts
        - dma-debug: add a schedule point in debug_dma_dump_mappings()
        - leds: lm3692x: Handle failure to probe the regulator
        - clocksource/drivers/asm9260: Add a check for of_clk_get
        - clocksource/drivers/timer-of: Use unique device name instead of timer
        - powerpc/security/book3s64: Report L1TF status in sysfs
        - powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning
        - ext4: update direct I/O read lock pattern for IOCB_NOWAIT
        - ext4: iomap that extends beyond EOF should be marked dirty
        - jbd2: Fix statistics for the number of logged blocks
        - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6)
        - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
        - f2fs: fix to update dir's i_pino during cross_rename
        - clk: qcom: Allow constant ratio freq tables for rcg
        - clk: clk-gpio: propagate rate change to parent
        - irqchip/irq-bcm7038-l1: Enable parent IRQ if necessary
        - irqchip: ingenic: Error out if IRQ domain creation failed
        - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long
        - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences
        - PCI: rpaphp: Fix up pointer to first drc-info entry
        - scsi: ufs: fix potential bug which ends in system hang
        - powerpc/pseries/cmm: Implement release() function for sysfs device
        - PCI: rpaphp: Don't rely on firmware feature to imply drc-info support
        - PCI: rpaphp: Annotate and correctly byte swap DRC properties
        - PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-
          info
        - powerpc/security: Fix wrong message when RFI Flush is disable
        - scsi: atari_scsi: sun3_scsi: Set sg_tablesize to 1 instead of SG_NONE
        - clk: pxa: fix one of the pxa RTC clocks
        - bcache: at least try to shrink 1 node in bch_mca_scan()
        - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse
        - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors
        - ARM: 8937/1: spectre-v2: remove Brahma-B53 from hardening
        - libnvdimm/btt: fix variable 'rc' set but not used
        - HID: Improve Windows Precision Touchpad detection.
        - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI
          transport device
        - watchdog: Fix the race between the release of watchdog_core_data and cdev
        - scsi: pm80xx: Fix for SATA device discovery
        - scsi: ufs: Fix error handing during hibern8 enter
        - scsi: scsi_debug: num_tgts must be >= 0
        - scsi: NCR5380: Add disconnect_mask module parameter
        - scsi: iscsi: Don't send data to unbound connection
        - scsi: target: iscsi: Wait for all commands to finish before freeing a
          session
        - gpio: mpc8xxx: Don't overwrite default irq_set_type callback
        - apparmor: fix unsigned len comparison with less than zero
        - scripts/kallsyms: fix definitely-lost memory leak
        - powerpc: Don't add -mabi= flags when building with Clang
        - cdrom: respect device capabilities during opening action
        - perf script: Fix brstackinsn for AUXTRACE
        - perf regs: Make perf_reg_name() return "unknown" instead of NULL
        - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR
        - s390/cpum_sf: Check for SDBT and SDB consistency
        - ocfs2: fix passing zero to 'PTR_ERR' warning
        - mailbox: imx: Fix Tx doorbell shutdown path
        - kernel: sysctl: make drop_caches write-only
        - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK
        - x86/mce: Fix possibly incorrect severity calculation on AMD
        - net, sysctl: Fix compiler warning when only cBPF is present
        - netfilter: nf_queue: enqueue skbs with NULL dst
        - ALSA: hda - Downgrade error message for single-cmd fallback
        - bonding: fix active-backup transition after link failure
        - netfilter: ebtables: compat: reject all padding in matches/watchers
        - 6pack,mkiss: fix possible deadlock
        - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
        - inetpeer: fix data-race in inet_putpeer / inet_putpeer
        - net: add a READ_ONCE() in skb_peek_tail()
        - net: icmp: fix data-race in cmp_global_allow()
        - hrtimer: Annotate lockless access to timer->state
        - net: ena: fix napi handler misbehavior when the napi budget is zero
        - net/mlxfw: Fix out-of-memory error in mfa2 flash burning
        - net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs
        - ptp: fix the race between the release of ptp_clock and cdev
        - tcp: Fix highest_sack and highest_sack_seq
        - udp: fix integer overflow while computing available space in sk_rcvbuf
        - vhost/vsock: accept only packets with the right dst_cid
        - net: add bool confirm_neigh parameter for dst_ops.update_pmtu
        - ip6_gre: do not confirm neighbor when do pmtu update
        - gtp: do not confirm neighbor when do pmtu update
        - net/dst: add new function skb_dst_update_pmtu_no_confirm
        - tunnel: do not confirm neighbor when do pmtu update
        - vti: do not confirm neighbor when do pmtu update
        - sit: do not confirm neighbor when do pmtu update
        - net/dst: do not confirm neighbor for vxlan and geneve pmtu update
        - gtp: do not allow adding duplicate tid and ms_addr pdp context
        - net: marvell: mvpp2: phylink requires the link interrupt
        - tcp/dccp: fix possible race __inet_lookup_established()
        - tcp: do not send empty skb from tcp_write_xmit()
        - gtp: fix wrong condition in gtp_genl_dump_pdp()
        - gtp: fix an use-after-free in ipv4_pdp_find()
        - gtp: avoid zero size hashtable
        - spi: fsl: don't map irq during probe
        - tty/serial: atmel: fix out of range clock divider handling
        - pinctrl: baytrail: Really serialize all register accesses
        - spi: fsl: use platform_get_irq() instead of of_irq_to_resource()
        - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA
        - gpio: mxc: Only get the second IRQ when there is more than one IRQ
        - scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the probe fails
        - Input: st1232 - do not reset the chip too early
        - selftests/powerpc: Fixup clobbers for TM tests
        - dma-mapping: Add vmap checks to dma_map_single()
        - dma-mapping: fix handling of dma-ranges for reserved memory (again)
        - leds: an30259a: add a check for devm_regmap_init_i2c
        - dtc: Use pkg-config to locate libyaml
        - selftests/powerpc: Skip tm-signal-sigreturn-nt if TM not available
        - dma-direct: check for overflows on 32 bit DMA addresses
        - i2c: stm32f7: fix & reorder remove & probe error handling
        - iomap: fix return value of iomap_dio_bio_actor on 32bit systems
        - powerpc/fixmap: Use __fix_to_virt() instead of fix_to_virt()
        - scsi: ufs: Fix up auto hibern8 enablement
        - platform/x86: intel_pmc_core: Fix the SoC naming inconsistency
        - gpio: lynxpoint: Setup correct IRQ handlers
        - cifs: Fix use-after-free bug in cifs_reconnect()
        - mailbox: imx: Clear the right interrupts at shutdown
        - s390: disable preemption when switching to nodat stack with CALL_ON_STACK
        - selftests: vm: add fragment CONFIG_TEST_VMALLOC
        - uaccess: disallow > INT_MAX copy sizes
        - drm: limit to INT_MAX in create_blob ioctl
        - xfs: fix mount failure crash on invalid iclog memory access
        - cxgb4/cxgb4vf: fix flow control display for auto negotiation
        - net: dsa: bcm_sf2: Fix IP fragment location and behavior
        - net/sched: act_mirred: Pull mac prior redir to non mac_header_xmit device
        - net_sched: sch_fq: properly set sk->sk_pacing_status
        - bnxt_en: Fix MSIX request logic for RDMA driver.
        - bnxt_en: Return error if FW returns more data than dump length
        - mlxsw: spectrum_router: Skip loopback RIFs during MAC validation
        - mlxsw: spectrum: Use dedicated policer for VRRP packets
        - hv_netvsc: Fix tx_table init in rndis_set_subchannel()
        - bnxt: apply computed clamp value for coalece parameter
        - md: make sure desc_nr less than MD_SB_DISKS
      * Disco update: upstream stable patchset 2020-01-16 (LP: #1860014)
        - af_packet: set defaule value for tmo
        - fjes: fix missed check in fjes_acpi_add
        - mod_devicetable: fix PHY module format
        - net: dst: Force 4-byte alignment of dst_metrics
        - net: gemini: Fix memory leak in gmac_setup_txqs
        - net: hisilicon: Fix a BUG trigered by wrong bytes_compl
        - net: nfc: nci: fix a possible sleep-in-atomic-context bug in
          nci_uart_tty_receive()
        - net: qlogic: Fix error paths in ql_alloc_large_buffers()
        - net: usb: lan78xx: Fix suspend/resume PHY register access error
        - qede: Disable hardware gro when xdp prog is installed
        - qede: Fix multicast mac configuration
        - sctp: fully initialize v4 addr in some functions
        - selftests: forwarding: Delete IPv6 address at the end
        - btrfs: don't double lock the subvol_sem for rename exchange
        - btrfs: do not call synchronize_srcu() in inode_tree_del
        - Btrfs: fix missing data checksums after replaying a log tree
        - btrfs: send: remove WARN_ON for readonly mount
        - btrfs: abort transaction after failed inode updates in create_subvol
        - btrfs: skip log replay on orphaned roots
        - btrfs: do not leak reloc root if we fail to read the fs root
        - btrfs: handle ENOENT in btrfs_uuid_tree_iterate
        - Btrfs: fix removal logic of the tree mod log that leads to use-after-free
          issues
        - ALSA: pcm: Avoid possible info leaks from PCM stream buffers
        - ALSA: hda/ca0132 - Keep power on during processing DSP response
        - ALSA: hda/ca0132 - Avoid endless loop
        - ALSA: hda/ca0132 - Fix work handling in delayed HP detection
        - drm: mst: Fix query_payload ack reply struct
        - drm/panel: Add missing drm_panel_init() in panel drivers
        - drm/bridge: analogix-anx78xx: silence -EPROBE_DEFER warnings
        - iio: light: bh1750: Resolve compiler warning and make code more readable
        - drm/amdgpu: grab the id mgr lock while accessing passid_mapping
        - spi: Add call to spi_slave_abort() function when spidev driver is released
        - staging: rtl8192u: fix multiple memory leaks on error path
        - staging: rtl8188eu: fix possible null dereference
        - rtlwifi: prevent memory leak in rtl_usb_probe
        - libertas: fix a potential NULL pointer dereference
        - ath10k: fix backtrace on coredump
        - IB/iser: bound protection_sg size by data_sg size
        - media: am437x-vpfe: Setting STD to current value is not an error
        - media: i2c: ov2659: fix s_stream return value
        - media: ov6650: Fix crop rectangle alignment not passed back
        - media: i2c: ov2659: Fix missing 720p register config
        - media: ov6650: Fix stored frame format not in sync with hardware
        - media: ov6650: Fix stored crop rectangle not in sync with hardware
        - tools/power/cpupower: Fix initializer override in hsw_ext_cstates
        - media: venus: core: Fix msm8996 frequency table
        - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq
        - pinctrl: devicetree: Avoid taking direct reference to device name string
        - drm/amdkfd: fix a potential NULL pointer dereference (v2)
        - selftests/bpf: Correct path to include msg + path
        - media: venus: Fix occasionally failures to suspend
        - usb: renesas_usbhs: add suspend event support in gadget mode
        - hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
        - regulator: max8907: Fix the usage of uninitialized variable in
          max8907_regulator_probe()
        - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
        - media: cec-funcs.h: add status_req checks
        - drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller
        - samples: pktgen: fix proc_cmd command result check logic
        - block: Fix writeback throttling W=1 compiler warnings
        - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
        - drm/drm_vblank: Change EINVAL by the correct errno
        - media: cx88: Fix some error handling path in 'cx8800_initdev()'
        - media: ti-vpe: vpe: Fix Motion Vector vpdma stride
        - media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format
        - media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence
          number
        - media: ti-vpe: vpe: Make sure YUYV is set as default format
        - media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic
        - media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases
        - media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage
        - syscalls/x86: Use the correct function type in SYSCALL_DEFINE0
        - drm/amd/display: Fix dongle_caps containing stale information.
        - extcon: sm5502: Reset registers during initialization
        - x86/mm: Use the correct function type for native_set_fixmap()
        - ath10k: Correct error handling of dma_map_single()
        - drm/bridge: dw-hdmi: Restore audio when setting a mode
        - perf test: Report failure for mmap events
        - perf report: Add warning when libunwind not compiled in
        - usb: usbfs: Suppress problematic bind and unbind uevents.
        - iio: adc: max1027: Reset the device at probe time
        - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req
        - Bluetooth: Workaround directed advertising bug in Broadcom controllers
        - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
        - bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack()
        - x86/mce: Lower throttling MCE messages' priority to warning
        - perf tests: Disable bp_signal testing for arm64
        - drm/gma500: fix memory disclosures due to uninitialized bytes
        - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot
        - ipmi: Don't allow device module unload when in use
        - x86/ioapic: Prevent inconsistent state when moving an interrupt
        - media: smiapp: Register sensor after enabling runtime PM on the device
        - md/bitmap: avoid race window between md_bitmap_resize and
          bitmap_file_clear_bit
        - arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill()
        - i40e: initialize ITRN registers with correct values
        - net: phy: dp83867: enable robust auto-mdix
        - drm/tegra: sor: Use correct SOR index on Tegra210
        - spi: sprd: adi: Add missing lock protection when rebooting
        - ACPI: button: Add DMI quirk for Medion Akoya E2215T
        - RDMA/qedr: Fix memory leak in user qp and mr
        - gpu: host1x: Allocate gather copy for host1x
        - net: dsa: LAN9303: select REGMAP when LAN9303 enable
        - phy: qcom-usb-hs: Fix extcon double register after power cycle
        - s390/time: ensure get_clock_monotonic() returns monotonic values
        - s390/mm: add mm_pxd_folded() checks to pxd_free()
        - net: hns3: add struct netdev_queue debug info for TX timeout
        - libata: Ensure ata_port probe has completed before detach
        - loop: fix no-unmap write-zeroes request behavior
        - pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B
        - iio: dln2-adc: fix iio_triggered_buffer_postenable() position
        - libbpf: Fix error handling in bpf_map__reuse_fd()
        - Bluetooth: Fix advertising duplicated flags
        - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler()
        - ixgbe: protect TX timestamping from API misuse
        - media: rcar_drif: fix a memory disclosure
        - media: v4l2-core: fix touch support in v4l_g_fmt
        - nvmem: imx-ocotp: reset error status on probe
        - rfkill: allocate static minor
        - bnx2x: Fix PF-VF communication over multi-cos queues.
        - spi: img-spfi: fix potential double release
        - ALSA: timer: Limit max amount of slave instances
        - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
        - perf probe: Fix to find range-only function instance
        - perf probe: Fix to list probe event with correct line number
        - perf jevents: Fix resource leak in process_mapfile() and main()
        - perf probe: Walk function lines in lexical blocks
        - perf probe: Fix to probe an inline function which has no entry pc
        - perf probe: Fix to show ranges of variables in functions without entry_pc
        - perf probe: Fix to show inlined function callsite without entry_pc
        - libsubcmd: Use -O0 with DEBUG=1
        - perf probe: Fix to probe a function which has no entry pc
        - perf tools: Splice events onto evlist even on error
        - drm/amdgpu: disallow direct upload save restore list from gfx driver
        - drm/amdgpu: fix potential double drop fence reference
        - xen/gntdev: Use select for DMA_SHARED_BUFFER
        - perf parse: If pmu configuration fails free terms
        - perf probe: Skip overlapped location on searching variables
        - perf probe: Return a better scope DIE if there is no best scope
        - perf probe: Fix to show calling lines of inlined functions
        - perf probe: Skip end-of-sequence and non statement lines
        - perf probe: Filter out instances except for inlined subroutine and
          subprogram
        - ath10k: fix get invalid tx rate for Mesh metric
        - fsi: core: Fix small accesses and unaligned offsets via sysfs
        - media: pvrusb2: Fix oops on tear-down when radio support is not present
        - soundwire: intel: fix PDI/stream mapping for Bulk
        - crypto: atmel - Fix authenc support when it is set to m
        - ice: delay less
        - media: si470x-i2c: add missed operations in remove
        - EDAC/ghes: Fix grain calculation
        - spi: pxa2xx: Add missed security checks
        - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
        - iio: dac: ad5446: Add support for new AD5600 DAC
        - ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint
        - s390/disassembler: don't hide instruction addresses
        - parport: load lowlevel driver if ports not found
        - bcache: fix static checker warning in bcache_device_free()
        - cpufreq: Register drivers only after CPU devices have been registered
        - x86/crash: Add a forward declaration of struct kimage
        - tracing: use kvcalloc for tgid_map array allocation
        - tracing/kprobe: Check whether the non-suffixed symbol is notrace
        - iwlwifi: mvm: fix unaligned read of rx_pkt_status
        - ASoC: wm8904: fix regcache handling
        - spi: tegra20-slink: add missed clk_unprepare
        - tun: fix data-race in gro_normal_list()
        - crypto: virtio - deal with unsupported input sizes
        - mmc: tmio: Add MMC_CAP_ERASE to allow erase/discard/trim requests
        - btrfs: don't prematurely free work in end_workqueue_fn()
        - btrfs: don't prematurely free work in run_ordered_work()
        - ASoC: wm2200: add missed operations in remove and probe failure
        - spi: st-ssc4: add missed pm_runtime_disable
        - ASoC: wm5100: add missed pm_runtime_disable
        - ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012 2-in-1
        - x86/insn: Add some Intel instructions to the opcode map
        - brcmfmac: remove monitor interface when detaching
        - iwlwifi: check kasprintf() return value
        - fbtft: Make sure string is NULL terminated
        - net: ethernet: ti: ale: clean ale tbl on init and intf restart
        - crypto: sun4i-ss - Fix 64-bit size_t warnings
        - crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
        - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED
        - crypto: vmx - Avoid weird build failures
        - libtraceevent: Fix memory leakage in copy_filter_type
        - mips: fix build when "48 bits virtual memory" is enabled
        - drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2
        - net: phy: initialise phydev speed and duplex sanely
        - btrfs: don't prematurely free work in reada_start_machine_worker()
        - btrfs: don't prematurely free work in scrub_missing_raid56_worker()
        - Revert "mmc: sdhci: Fix incorrect switch to HS mode"
        - mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode
        - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices
        - usb: xhci: Fix build warning seen with CONFIG_PM=n
        - drm/amdgpu: fix uninitialized variable pasid_mapping_needed
        - s390/ftrace: fix endless recursion in function_graph tracer
        - btrfs: return error pointer from alloc_test_extent_buffer
        - usbip: Fix receive error in vhci-hcd when using scatter-gather
        - usbip: Fix error path of vhci_recv_ret_submit()
        - cpufreq: Avoid leaving stale IRQ work items during CPU offline
        - USB: EHCI: Do not return -EPIPE when hub is disconnected
        - intel_th: pci: Add Comet Lake PCH-V support
        - intel_th: pci: Add Elkhart Lake SOC support
        - platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes
        - staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
        - ext4: fix ext4_empty_dir() for directories with holes
        - ext4: check for directory entries too close to block end
        - ext4: unlock on error in ext4_expand_extra_isize()
        - KVM: arm64: Ensure 'params' is initialised when looking up sys register
        - x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure()
        - x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks[]
        - powerpc/irq: fix stack overflow verification
        - mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG register
        - mmc: sdhci-of-esdhc: Revert "mmc: sdhci-of-esdhc: add erratum A-009204
          support"
        - mmc: sdhci: Update the tuning failed messages to pr_debug level
        - mmc: sdhci-of-esdhc: fix P2020 errata handling
        - mmc: sdhci: Workaround broken command queuing on Intel GLK
        - mmc: sdhci: Add a quirk for broken command queuing
        - nbd: fix shutdown and recv work deadlock v2
        - perf probe: Fix to show function entry line as probe-able
        - neighbour: remove neigh_cleanup() method
        - bonding: fix bond_neigh_init()
        - net: ena: fix default tx interrupt moderation interval
        - mlxsw: spectrum_router: Remove unlikely user-triggerable warning
        - net: stmmac: platform: Fix MDIO init for platforms without PHY
        - drm/mipi-dbi: fix a loop in debugfs code
        - drm: Use EOPNOTSUPP, not ENOTSUPP
        - drm/amdgpu/sriov: add ring_stop before ring_create in psp v11 code
        - ath10k: add cleanup in ath10k_sta_state()
        - media: cedrus: fill in bus_info for media device
        - media: seco-cec: Add a missing 'release_region()' in an error handling path
        - media: vim2m: Fix abort issue
        - media: vim2m: Fix BUG_ON in vim2m_device_release()
        - media: max2175: Fix build error without CONFIG_REGMAP_I2C
        - drm/sun4i: dsi: Fix TCON DRQ set bits
        - x86/math-emu: Check __copy_from_user() result
        - rtw88: fix NSS of hw_cap
        - drm/amd/display: Properly round nominal frequency for SPD
        - drm/amd/display: wait for set pipe mcp command completion
        - rtw88: coex: Set 4 slot mode for A2DP
        - perf test: Avoid infinite loop for task exit case
        - Bluetooth: btusb: avoid unused function warning
        - drm/amdgpu: fix amdgpu trace event print string format error
        - net: hns3: log and clear hardware error after reset complete
        - ASoC: soc-pcm: fixup dpcm_prune_paths() loop continue
        - media: cedrus: Fix undefined shift with a SHIFT_AND_MASK_BITS macro
        - media: aspeed: set hsync and vsync polarities to normal before starting mode
          detection
        - drm/nouveau: Don't grab runtime PM refs for HPD IRQs
        - media: ad5820: Define entity function
        - media: ov5640: Make 2592x1944 mode only available at 15 fps
        - media: aspeed: clear garbage interrupts
        - EDAC/amd64: Set grain per DIMM
        - RDMA/hns: Fix memory leak on 'context' on error return path
        - net/mlx5e: Verify that rule has at least one fwd/drop action
        - ALSA: bebob: expand sleep just after breaking connections for protocol
          version 1
        - nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR
        - nvme: introduce "Command Aborted By host" status code
        - media: staging/imx: Use a shorter name for driver
        - nvmem: core: fix nvmem_cell_write inline function
        - RDMA/core: Fix return code when modify_port isn't supported
        - drm: msm: a6xx: fix debug bus register configuration
        - ice: Check for null pointer dereference when setting rings
        - s390/bpf: Use kvcalloc for addrs array
        - media: exynos4-is: fix wrong mdev and v4l2 dev order in error path
        - media: v4l2-ctrl: Lock main_hdl on operations of requests_queued.
        - media: vim2m: media_device_cleanup was called too early
        - qtnfmac: fix using skb after free
        - regulator: core: Let boot-on regulators be powered off
        - xhci-pci: Allow host runtime PM as default also for Intel Ice Lake xHCI
        - net: phy: avoid matching all-ones clause 45 PHY IDs
        - s390/kasan: support memcpy_real with TRACE_IRQFLAGS
        - ASoC: soc-pcm: check symmetry before hw_params
        - ice: Only disable VF state when freeing each VF resources
        - RDMA/bnxt_re: Fix missing le16_to_cpu
        - tpm: fix invalid locking in NONBLOCKING mode
        - can: xilinx_can: Fix missing Rx can packets on CANFD2.0
        - can: flexcan: fix possible deadlock and out-of-order reception after wakeup
        - can: flexcan: poll MCR_LPM_ACK instead of GPR ACK for stop mode
          acknowledgment
        - selftests: net: tls: remove recv_rcvbuf test
        - spi: dw: Correct handling of native chipselect
        - ath10k: Revert "ath10k: add cleanup in ath10k_sta_state()"
        - ARM: dts: Fix vcsi regulator to be always-on for droid4 to prevent hangs
        - can: flexcan: add low power enter/exit acknowledgment helper
        - efi/memreserve: Register reservations as 'reserved' in /proc/iomem
        - KEYS: asymmetric: return ENOMEM if akcipher_request_alloc() fails
        - mm: vmscan: protect shrinker idr replace with CONFIG_MEMCG
        - serial: sprd: Add clearing break interrupt operation
        - clk: imx: clk-imx7ulp: Add missing sentinel of ulp_div_table
        - clk: imx: clk-composite-8m: add lock to gate/mux
        - kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
        - md: no longer compare spare disk superblock events in super_load
        - md: avoid invalid memory access for array sb->dev_roles
      * Disco update: upstream stable patchset 2020-01-24 (LP: #1860799)
        - nvme_fc: add module to ops template to allow module references
        - nvme-fc: fix double-free scenarios on hw queues
        - drm/amdgpu: add check before enabling/disabling broadcast mode
        - drm/amdgpu: add cache flush workaround to gfx8 emit_fence
        - drm/amd/display: Fixed kernel panic when booting with DP-to-HDMI dongle
        - iio: adc: max9611: Fix too short conversion time delay
        - PM / devfreq: Fix devfreq_notifier_call returning errno
        - PM / devfreq: Set scaling_max_freq to max on OPP notifier error
        - PM / devfreq: Don't fail devfreq_dev_release if not in list
        - afs: Fix afs_find_server lookups for ipv4 peers
        - afs: Fix SELinux setting security label on /afs
        - RDMA/cma: add missed unregister_pernet_subsys in init failure
        - rxe: correctly calculate iCRC for unaligned payloads
        - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func
        - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work
        - scsi: qla2xxx: Don't call qlt_async_event twice
        - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length
        - scsi: qla2xxx: Configure local loop for N2N target
        - scsi: qla2xxx: Send Notify ACK after N2N PLOGI
        - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI
        - scsi: iscsi: qla4xxx: fix double free in probe
        - scsi: libsas: stop discovering if oob mode is disconnected
        - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit
        - usb: gadget: fix wrong endpoint desc
        - net: make socket read/write_iter() honor IOCB_NOWAIT
        - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP
        - md: raid1: check rdev before reference in raid1_sync_request func
        - s390/cpum_sf: Adjust sampling interval to avoid hitting sample limits
        - s390/cpum_sf: Avoid SBD overflow condition in irq handler
        - IB/mlx4: Follow mirror sequence of device add during device removal
        - IB/mlx5: Fix steering rule of drop and count
        - xen-blkback: prevent premature module unload
        - xen/balloon: fix ballooned page accounting without hotplug enabled
        - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker
        - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC
        - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen
        - taskstats: fix data-race
        - netfilter: nft_tproxy: Fix port selector on Big Endian
        - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code
        - ALSA: usb-audio: fix set_format altsetting sanity check
        - ALSA: usb-audio: set the interface format after resume on Dell WD19
        - ALSA: hda/realtek - Add headset Mic no shutup for ALC283
        - drm/sun4i: hdmi: Remove duplicate cleanup calls
        - MIPS: Avoid VDSO ABI breakage due to global register variable
        - media: pulse8-cec: fix lost cec_transmit_attempt_done() call
        - media: cec: CEC 2.0-only bcast messages were ignored
        - media: cec: avoid decrementing transmit_queue_sz if it is 0
        - media: cec: check 'transmit_in_progress', not 'transmitting'
        - mm/zsmalloc.c: fix the migrated zspage statistics.
        - memcg: account security cred as well to kmemcg
        - mm: move_pages: return valid node id in status if the page is already on the
          target node
        - pstore/ram: Write new dumps to start of recycled zones
        - locks: print unsigned ino in /proc/locks
        - dmaengine: Fix access to uninitialized dma_slave_caps
        - compat_ioctl: block: handle Persistent Reservations
        - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE
        - ata: libahci_platform: Export again ahci_platform_<en/dis>able_phys()
        - ata: ahci_brcm: Fix AHCI resources management
        - ata: ahci_brcm: Add missing clock management during recovery
        - ata: ahci_brcm: BCM7425 AHCI requires AHCI_HFLAG_DELAY_ENGINE
        - libata: Fix retrieving of active qcs
        - gpiolib: fix up emulated open drain outputs
        - riscv: ftrace: correct the condition logic in function graph tracer
        - rseq/selftests: Fix: Namespace gettid() for compatibility with glibc 2.30
        - tracing: Fix lock inversion in trace_event_enable_tgid_record()
        - tracing: Avoid memory leak in process_system_preds()
        - tracing: Have the histogram compare functions convert to u64 first
        - tracing: Fix endianness bug in histogram trigger
        - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock
        - ALSA: cs4236: fix error return comparison of an unsigned integer
        - ALSA: firewire-motu: Correct a typo in the clock proc string
        - exit: panic before exit_mm() on global init exit
        - ftrace: Avoid potential division by zero in function profiler
        - drm/msm: include linux/sched/task.h
        - PM / devfreq: Check NULL governor in available_governors_show
        - nfsd4: fix up replay_matches_cache()
        - HID: i2c-hid: Reset ALPS touchpads on resume
        - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100
        - xfs: don't check for AG deadlock for realtime files in bunmapi
        - platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI
          table
        - Bluetooth: btusb: fix PM leak in error case of setup
        - Bluetooth: delete a stray unlock
        - Bluetooth: Fix memory leak in hci_connect_le_scan
        - media: flexcop-usb: ensure -EIO is returned on error condition
        - regulator: ab8500: Remove AB8505 USB regulator
        - media: usb: fix memory leak in af9005_identify_state
        - dt-bindings: clock: renesas: rcar-usb2-clock-sel: Fix typo in example
        - arm64: dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed
          warning
        - tty: serial: msm_serial: Fix lockup for sysrq and oops
        - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP
        - bdev: Factor out bdev revalidation into a common helper
        - bdev: Refresh bdev size for disks without partitioning
        - scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails
        - drm/mst: Fix MST sideband up-reply failure handling
        - powerpc/pseries/hvconsole: Fix stack overread via udbg
        - selftests: rtnetlink: add addresses with fixed life time
        - KVM: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag
        - tcp: annotate tp->rcv_nxt lockless reads
        - net: core: limit nested device depth
        - ath9k_htc: Modify byte order for an error message
        - ath9k_htc: Discard undersized packets
        - xfs: periodically yield scrub threads to the scheduler
        - net: add annotations on hh->hh_len lockless accesses
        - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps
        - s390/smp: fix physical to logical CPU map for SMT
        - xen/blkback: Avoid unmapping unmapped grant pages
        - perf/x86/intel/bts: Fix the use of page_private()
        - nvme/pci: Fix read queue count
        - scsi: qla2xxx: Use explicit LOGO in target mode
        - scsi: qla2xxx: Don't defer relogin unconditonally
        - scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
        - staging/wlan-ng: add CRC32 dependency in Kconfig
        - drm/nouveau: Fix drm-core using atomic code-paths on pre-nv50 hardware
        - tcp: fix data-race in tcp_recvmsg()
        - block: add bio_truncate to fix guard_bio_eod
        - ALSA: hda - Apply sync-write workaround to old Intel platforms, too
        - pstore/ram: Fix error-path memory leak in persistent_ram_new() callers
        - selftests/seccomp: Zero out seccomp_notif
        - samples/seccomp: Zero out members based on seccomp_notif_sizes
        - selftests/seccomp: Catch garbage on SECCOMP_IOCTL_NOTIF_RECV
        - dmaengine: dma-jz4780: Also break descriptor chains on JZ4725B
        - Btrfs: fix infinite loop during nocow writeback due to race
        - compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES
        - gpio: xtensa: fix driver build
        - clocksource: riscv: add notrace to riscv_sched_clock
        - samples/trace_printk: Wait for IRQ work to finish
        - mm/gup: fix memory leak in __gup_benchmark_ioctl
        - gen_initramfs_list.sh: fix 'bad variable name' error
        - ALSA: pcm: Yet another missing check of non-cached buffer type
        - spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode
        - watchdog: tqmx86_wdt: Fix build error
        - regulator: axp20x: Fix AXP22x ELDO2 regulator enable bitmask
        - powerpc/mm: Mark get_slice_psize() & slice_addr_is_low() as notrace
        - arm64: dts: meson-gxl-s905x-khadas-vim: fix uart_A bluetooth node
        - fs: cifs: Fix atime update check vs mtime
        - net: annotate lockless accesses to sk->sk_pacing_shift
        - mm/hugetlb: defer freeing of huge pages if in non-task context
      * Disco update: upstream stable patchset 2020-01-09 (LP: #1859093)
        - usb: gadget: configfs: Fix missing spin_lock_init()
        - usb: gadget: pch_udc: fix use after free
        - scsi: qla2xxx: Fix driver unload hang
        - media: venus: remove invalid compat_ioctl32 handler
        - USB: uas: honor flag to avoid CAPACITY16
        - USB: uas: heed CAPACITY_HEURISTICS
        - USB: documentation: flags on usb-storage versus UAS
        - usb: Allow USB device to be warm reset in suspended state
        - staging: rtl8188eu: fix interface sanity check
        - staging: rtl8712: fix interface sanity check
        - staging: gigaset: fix general protection fault on probe
        - staging: gigaset: fix illegal free on probe errors
        - staging: gigaset: add endpoint-type sanity check
        - usb: xhci: only set D3hot for pci device
        - xhci: Fix memory leak in xhci_add_in_port()
        - xhci: Increase STS_HALT timeout in xhci_suspend()
        - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour.
        - ARM: dts: pandora-common: define wl1251 as child node of mmc3
        - iio: adis16480: Add debugfs_reg_access entry
        - iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting
        - iio: imu: inv_mpu6050: fix temperature reporting using bad unit
        - USB: atm: ueagle-atm: add missing endpoint check
        - USB: idmouse: fix interface sanity checks
        - USB: serial: io_edgeport: fix epic endpoint lookup
        - usb: roles: fix a potential use after free
        - USB: adutux: fix interface sanity check
        - usb: core: urb: fix URB structure initialization function
        - usb: mon: Fix a deadlock in usbmon between mmap and read
        - tpm: add check after commands attribs tab allocation
        - mtd: spear_smi: Fix Write Burst mode
        - virtio-balloon: fix managed page counts when migrating pages between zones
        - usb: dwc3: pci: add ID for the Intel Comet Lake -H variant
        - usb: dwc3: gadget: Fix logical condition
        - usb: dwc3: ep0: Clear started flag on completion
        - phy: renesas: rcar-gen3-usb2: Fix sysfs interface of "role"
        - btrfs: check page->mapping when loading free space cache
        - btrfs: use refcount_inc_not_zero in kill_all_nodes
        - Btrfs: fix metadata space leak on fixup worker failure to set range as
          delalloc
        - Btrfs: fix negative subv_writers counter and data space leak after buffered
          write
        - btrfs: Avoid getting stuck during cyclic writebacks
        - btrfs: Remove btrfs_bio::flags member
        - Btrfs: send, skip backreference walking for extents with many references
        - btrfs: record all roots for rename exchange on a subvol
        - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address
        - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer
        - rtlwifi: rtl8192de: Fix missing enable interrupt flag
        - lib: raid6: fix awk build warnings
        - ovl: fix corner case of non-unique st_dev;st_ino
        - ovl: relax WARN_ON() on rename to self
        - hwrng: omap - Fix RNG wait loop timeout
        - dm writecache: handle REQ_FUA
        - dm zoned: reduce overhead of backing device checks
        - workqueue: Fix spurious sanity check failures in destroy_workqueue()
        - workqueue: Fix pwq ref leak in rescuer_thread()
        - ASoC: rt5645: Fixed buddy jack support.
        - ASoC: rt5645: Fixed typo for buddy jack support.
        - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report
        - md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
        - blk-mq: avoid sysfs buffer overflow with too many CPU cores
        - cgroup: pids: use atomic64_t for pids->limit
        - ar5523: check NULL before memcpy() in ar5523_cmd()
        - s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported
        - media: bdisp: fix memleak on release
        - media: radio: wl1273: fix interrupt masking on release
        - media: cec.h: CEC_OP_REC_FLAG_ values were swapped
        - cpuidle: Do not unset the driver if it is there already
        - erofs: zero out when listxattr is called with no xattr
        - intel_th: Fix a double put_device() in error path
        - intel_th: pci: Add Ice Lake CPU support
        - intel_th: pci: Add Tiger Lake CPU support
        - PM / devfreq: Lock devfreq in trans_stat_show
        - cpufreq: powernv: fix stack bloat and hard limit on number of CPUs
        - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug
          bridge
        - ACPI: OSL: only free map once in osl.c
        - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data()
        - ACPI: PM: Avoid attaching ACPI PM domain to certain devices
        - pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type()
        - pinctrl: samsung: Add of_node_put() before return in error path
        - pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller
          init
        - pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup
          controller init
        - pinctrl: samsung: Fix device node refcount leaks in init code
        - pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup
          controller init
        - mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of
          pandora_wl1251_init_card
        - ARM: dts: omap3-tao3530: Fix incorrect MMC card detection GPIO polarity
        - ppdev: fix PPGETTIME/PPSETTIME ioctls
        - powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB
        - powerpc/xive: Prevent page fault issues in the machine crash handler
        - powerpc: Allow flush_icache_range to work across ranges >4GB
        - powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts
        - video/hdmi: Fix AVI bar unpack
        - quota: Check that quota is not dirty before release
        - ext2: check err when partial != NULL
        - quota: fix livelock in dquot_writeback_dquots
        - ext4: Fix credit estimate for final inode freeing
        - reiserfs: fix extended attributes on the root directory
        - scsi: zfcp: trace channel log even for FCP command responses
        - scsi: qla2xxx: Fix DMA unmap leak
        - scsi: qla2xxx: Fix hang in fcport delete path
        - scsi: qla2xxx: Fix session lookup in qlt_abort_work()
        - scsi: qla2xxx: Fix qla24xx_process_bidir_cmd()
        - scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value
        - scsi: qla2xxx: Fix message indicating vectors used by driver
        - scsi: qla2xxx: Fix SRB leak on switch command timeout
        - xhci: make sure interrupts are restored to correct state
        - usb: typec: fix use after free in typec_register_port()
        - omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251
        - powerpc: Avoid clang warnings around setjmp and longjmp
        - powerpc: Fix vDSO clock_getres()
        - ext4: work around deleting a file with i_nlink == 0 safely
        - firmware: qcom: scm: Ensure 'a0' status code is treated as signed
        - mm/shmem.c: cast the type of unmap_start to u64
        - rtc: disable uie before setting time and enable after
        - splice: only read in as much information as there is pipe buffer space
        - ext4: fix a bug in ext4_wait_for_tail_page_commit
        - s390/smp,vdso: fix ASCE handling
        - blk-mq: make sure that line break can be printed
        - workqueue: Fix missing kfree(rescuer) in destroy_workqueue()
        - perf callchain: Fix segfault in thread__resolve_callchain_sample()
        - gre: refetch erspan header from skb->data after pskb_may_pull()
        - firmware: arm_scmi: Avoid double free in error flow
        - sunrpc: fix crash when cache_head become valid before update
        - net/mlx5e: Fix SFF 8472 eeprom length
        - leds: trigger: netdev: fix handling on interface rename
        - PCI: rcar: Fix missing MACCTLR register setting in initialization sequence
        - gfs2: fix glock reference problem in gfs2_trans_remove_revoke
        - of: overlay: add_changeset_property() memory leak
        - kernel/module.c: wakeup processes in module_wq on module unload
        - cifs: Fix potential softlockups while refreshing DFS cache
        - gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist
        - raid5: need to set STRIPE_HANDLE for batch head
        - scsi: qla2xxx: Change discovery state before PLOGI
        - iio: imu: mpu6050: add missing available scan masks
        - scsi: zorro_esp: Limit DMA transfers to 65536 bytes (except on Fastlane)
        - of: unittest: fix memory leak in attach_node_and_children
        - usb: host: xhci-tegra: Correct phy enable sequence
        - staging: vchiq: call unregister_chrdev_region() when driver registration
          fails
        - xhci: fix USB3 device initiated resume race with roothub autosuspend
        - iio: adis16480: Fix scales factors
        - iio: adc: ad7606: fix reading unnecessary data from device
        - iio: adc: ad7124: Enable internal reference
        - EDAC/altera: Use fast register IO for S10 IRQs
        - virt_wifi: fix use-after-free in virt_wifi_newlink()
        - iwlwifi: pcie: fix support for transmitting SKBs with fraglist
        - wil6210: check len before memcpy() calls
        - ALSA: oxfw: fix return value in error path of isochronous resources
          reservation
        - ACPI: LPSS: Add LNXVIDEO -> BYT I2C7 to lpss_device_links
        - ACPI: LPSS: Add LNXVIDEO -> BYT I2C1 to lpss_device_links
        - ACPI: LPSS: Add dmi quirk for skipping _DEP check for some device-links
        - pinctrl: rza2: Fix gpio name typos
        - stm class: Lose the protocol driver when dropping its reference
        - scsi: qla2xxx: Fix abort timeout race condition.
        - scsi: qla2xxx: Do command completion on abort timeout
        - scsi: qla2xxx: Fix premature timer expiration
        - scsi: qla2xxx: Fix different size DMA Alloc/Unmap
        - scsi: qla2xxx: Fix NVMe port discovery after a short device port loss
        - scsi: qla2xxx: Fix driver reload for ISP82xx
        - scsi: qla2xxx: Fix stuck login session
        - scsi: qla2xxx: Fix stale session
        - scsi: qla2xxx: Introduce the function qla2xxx_init_sp()
        - iio: imu: st_lsm6dsx: fix ODR check in st_lsm6dsx_write_raw
        - iio: ad7949: kill pointless "readback"-handling code
        - iio: ad7949: fix channels mixups
        - mm: memcg/slab: wait for !root kmem_cache refcnt killing on root kmem_cache
          destruction
        - arm64: dts: allwinner: a64: Re-add PMU node
        - EDAC/ghes: Do not warn when incrementing refcount on 0
        - inet: protect against too small mtu values.
        - mqprio: Fix out-of-bounds access in mqprio_dump
        - net: bridge: deny dev_set_mac_address() when unregistering
        - net: dsa: fix flow dissection on Tx path
        - net: ethernet: ti: cpsw: fix extra rx interrupt
        - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues
        - net: thunderx: start phy before starting autonegotiation
        - openvswitch: support asymmetric conntrack
        - tcp: md5: fix potential overestimation of TCP option space
        - tipc: fix ordering of tipc module init and exit routine
        - net/mlx5e: Query global pause state before setting prio2buffer
        - tcp: fix rejected syncookies due to stale timestamps
        - tcp: tighten acceptance of ACKs not matching a child socket
        - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE()
        - Revert "arm64: preempt: Fix big-endian when checking preempt count in
          assembly"
        - mmc: block: Make card_busy_detect() a bit more generic
        - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response
        - PCI/PM: Always return devices to D0 when thawing
        - PCI: pciehp: Avoid returning prematurely from sysfs requests
        - PCI: Fix Intel ACS quirk UPDCR register address
        - PCI/MSI: Fix incorrect MSI-X masking on resume
        - PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3
        - xtensa: fix TLB sanity checker
        - rpmsg: glink: Set tail pointer to 0 at end of FIFO
        - rpmsg: glink: Fix reuse intents memory leak issue
        - rpmsg: glink: Fix use after free in open_ack TIMEOUT case
        - rpmsg: glink: Put an extra reference during cleanup
        - rpmsg: glink: Fix rpmsg_register_device err handling
        - rpmsg: glink: Don't send pending rx_done during remove
        - rpmsg: glink: Free pending deferred work on remove
        - cifs: smbd: Return -EAGAIN when transport is reconnecting
        - cifs: smbd: Add messages on RDMA session destroy and reconnection
        - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE
        - cifs: Don't display RDMA transport on reconnect
        - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect
        - CIFS: Close open handle after interrupted close
        - ARM: dts: s3c64xx: Fix init order of clock providers
        - ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume()
        - vfio/pci: call irq_bypass_unregister_producer() before freeing irq
        - dma-buf: Fix memory leak in sync_file_merge()
        - drm: meson: venc: cvbs: fix CVBS mode matching
        - dm mpath: remove harmful bio-based optimization
        - dm btree: increase rebalance threshold in __rebalance2()
        - scsi: iscsi: Fix a potential deadlock in the timeout handler
        - drm/radeon: fix r1xx/r2xx register checker for POT textures
        - net/tls: Fix return values to avoid ENOTSUPP
        - hsr: fix a NULL pointer dereference in hsr_dev_xmit()
        - cls_flower: Fix the behavior using port ranges with hw-offload
        - net/mlx5e: Fix freeing flow with kfree() and not kvfree()
        - mmc: core: Drop check for mmc_card_is_removable() in mmc_rescan()
        - mmc: core: Re-work HW reset for SDIO cards
        - xtensa: fix syscall_set_return_value
        - cifs: smbd: Only queue work for error recovery on memory registration
        - cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state
        - CIFS: Do not miss cancelled OPEN responses
        - CIFS: Fix NULL pointer dereference in mid callback
        - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd
        - drm/i915/fbc: Disable fbc by default on all glk+
      * invalid opcode xdr_buf_read_netobj on nfs4+krb5i directory (LP: #1858832)
        - SUNRPC: Fix another issue with MIC buffer space
      * fstrim on nvme / AMD CPU fails and produces kernel error messages
        (LP: #1856603)
        - nvme: Discard workaround for non-conformant devices
      * multi-zone raid0 corruption (LP: #1850540)
        - md/raid0: avoid RAID0 data corruption due to layout confusion.
        - md: add feature flag MD_FEATURE_RAID0_LAYOUT
        - md/raid0: fix warning message for parameter default_layout
        - md/raid0: Fix an error message in raid0_make_request()
        - SAUCE: md/raid0: Link to wiki with guidance on multi-zone RAID0 layout
          migration
        - SAUCE: md/raid0: Use kernel specific layout
      * CVE-2019-5108
        - mac80211: Do not send Layer 2 Update frame before authorization
      * [SRU][B/OEM-B/OEM-OSP1/D/E/Unstable] UBUNTU: SAUCE: Use native backlight on
        Lenovo E41-25/45 (LP: #1859561)
        - SAUCE: ACPI: video: Use native backlight on Lenovo E41-25/45
      * CVE-2019-20096
        - dccp: Fix memleak in __feat_register_sp
    
      [ Ubuntu: 5.0.0-40.44 ]
    
      * disco/linux: 5.0.0-40.44 -proposed tracker (LP: #1859724)
      * use-after-free in i915_ppgtt_close (LP: #1859522) // CVE-2020-7053
        - SAUCE: drm/i915: Fix use-after-free when destroying GEM context
      * CVE-2019-14615
        - drm/i915/gen9: Clear residual context state on context switch
      * System hang with kernel traces while entering reboot process on a Disco
        ARM64 moonshot node (LP: #1859582)
        - Revert "RDMA/cm: Fix memory leak in cm_add/remove_one"
    
     -- Stefan Bader <email address hidden>  Thu, 30 Jan 2020 15:13:31 +0100
  • linux-aws-5.0 (5.0.0-1024.27~18.04.1) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1024.27~18.04.1 -proposed tracker (LP: #1858530)
    
      [ Ubuntu: 5.0.0-1024.27 ]
    
      * disco/linux-aws: 5.0.0-1024.27 -proposed tracker (LP: #1858531)
      * Update EFA driver to 1.5.0 (LP: #1850195)
        - SAUCE: linux/efa: Fix incorrect error print
        - SAUCE: linux/efa: Fix ‘err’ may be used uninitialized in this function
          warning
        - SAUCE: linux/efa: Add support for CentOS 7.7
        - SAUCE: linux/efa: Clear the admin command buffer prior to its submission
        - SAUCE: linux/efa: Bump driver version to 1.4.1
        - SAUCE: linux/efa: Store network attributes in device attributes
        - SAUCE: linux/efa: Support remote read access in MR registration
        - SAUCE: linux/efa: Expose RDMA read related attributes
        - SAUCE: linux/efa: Add ib_uverbs as a soft dependency
        - SAUCE: linux/efa: Use the ib_port_phys_state enum values
        - SAUCE: linux/efa: Backport missing driver id
        - SAUCE: linux/efa: Check sscanf return value
        - SAUCE: linux/efa: SuSE 15.1 support
        - SAUCE: linux/efa: Bump driver version to 1.5.0
      * disco/linux: 5.0.0-39.43 -proposed tracker (LP: #1858547)
      * [Regression] usb usb2-port2: Cannot enable. Maybe the USB cable is bad?
        (LP: #1856608)
        - SAUCE: Revert "usb: handle warm-reset port requests on hub resume"
      * PAN is broken for execute-only user mappings on ARMv8 (LP: #1858815)
        - arm64: Revert support for execute-only user mappings
      * Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)
        - SAUCE: USB: core: Make port power cycle a seperate helper function
        - SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state
      * [sas-1126]scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
        (LP: #1853992)
        - scsi: hisi_sas: Fix out of bound at debug_I_T_nexus_reset()
      * [sas-1126]scsi: hisi_sas: Assign NCQ tag for all NCQ commands (LP: #1853995)
        - scsi: hisi_sas: Assign NCQ tag for all NCQ commands
      * [sas-1126]scsi: hisi_sas: Fix the conflict between device gone and host
        reset (LP: #1853997)
        - scsi: hisi_sas: Fix the conflict between device gone and host reset
      * scsi: hisi_sas: Check sas_port before using it (LP: #1855952)
        - scsi: hisi_sas: Check sas_port before using it
      * CVE-2019-18885
        - btrfs: refactor btrfs_find_device() take fs_devices as argument
        - btrfs: merge btrfs_find_device and find_device
      *  Integrate Intel SGX driver into linux-azure (LP: #1844245)
        - [Packaging] Add systemd service to load intel_sgx
      * [SRU][B/OEM-B/OEM-OSP1/D/E/F] Add LG I2C touchscreen multitouch support
        (LP: #1857541)
        - SAUCE: HID: multitouch: Add LG MELF0410 I2C touchscreen support
      * cifs: DFS Caching feature causing problems traversing multi-tier DFS setups
        (LP: #1854887)
        - cifs: Fix retrieval of DFS referrals in cifs_mount()
      * qede driver causes 100% CPU load (LP: #1855409)
        - qede: Handle infinite driver spinning for Tx timestamp.
      * [roce-1126]RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
        (LP: #1853989)
        - RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
        - RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
      * [roce-1126]RDMA/hns: Fixs hw access invalid dma memory error (LP: #1853990)
        - RDMA/hns: Fixs hw access invalid dma memory error
      * [hns-1126]net: hns3: revert to old channel when setting new channel num fail
        (LP: #1853983)
        - net: hns3: revert to old channel when setting new channel num fail
      * [hns-1126]net: hns3: fix port setting handle for fibre port
        (LP: #1853984)
        - net: hns3: fix port setting handle for fibre port
      * [hns-1126] net: hns: add support for vlan TSO (LP: #1853937)
        - net: hns: add support for vlan TSO
      * [hns-1126]net: hns3: fix flow control configure issue for fibre port
        (LP: #1853948)
        - net: hns3: fix flow control configure issue for fibre port
      * mce: ras:  When inject 1bit ecc error,  there is no mce log recorded in the
        dmesg (LP: #1857413)
        - RAS/CEC: Increment cec_entered under the mutex lock
        - RAS/CEC: Check count_threshold unconditionally
      * efivarfs test in ubuntu_kernel_selftest failed on the second run
        (LP: #1809704)
        - selftests/efivarfs: clean up test files from test_create*()
      * CVE-2019-19082
        - drm/amd/display: prevent memory leak
      * CVE-2019-19078
        - ath10k: fix memory leak
      * CVE-2019-19077
        - RDMA: Fix goto target to release the allocated memory
      * Disco update: upstream stable patchset 2019-12-17 (LP: #1856754)
        - rsi: release skb if rsi_prepare_beacon fails
        - arm64: tegra: Fix 'active-low' warning for Jetson TX1 regulator
        - sparc64: implement ioremap_uc
        - lp: fix sparc64 LPSETTIMEOUT ioctl
        - usb: gadget: u_serial: add missing port entry locking
        - tty: serial: fsl_lpuart: use the sg count from dma_map_sg
        - tty: serial: msm_serial: Fix flow control
        - serial: pl011: Fix DMA ->flush_buffer()
        - serial: serial_core: Perform NULL checks for break_ctl ops
        - serial: ifx6x60: add missed pm_runtime_disable
        - autofs: fix a leak in autofs_expire_indirect()
        - RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN
        - iwlwifi: pcie: don't consider IV len in A-MSDU
        - exportfs_decode_fh(): negative pinned may become positive without the parent
          locked
        - audit_get_nd(): don't unlock parent too early
        - NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error
        - xfrm: release device reference for invalid state
        - Input: cyttsp4_core - fix use after free bug
        - sched/core: Avoid spurious lock dependencies
        - perf/core: Consistently fail fork on allocation failures
        - ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed()
        - drm/sun4i: tcon: Set min division of TCON0_DCLK to 1.
        - selftests: kvm: fix build with glibc >= 2.30
        - rsxx: add missed destroy_workqueue calls in remove
        - net: ep93xx_eth: fix mismatch of request_mem_region in remove
        - i2c: core: fix use after free in of_i2c_notify
        - fuse: verify nlink
        - fuse: verify attributes
        - ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC
        - ALSA: pcm: oss: Avoid potential buffer overflows
        - ALSA: hda - Add mute led support for HP ProBook 645 G4
        - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus
        - Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash
        - Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers
        - Input: goodix - add upside-down quirk for Teclast X89 tablet
        - coresight: etm4x: Fix input validation for sysfs.
        - Input: Fix memory leak in psxpad_spi_probe
        - x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all()
        - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks
        - CIFS: Fix SMB2 oplock break processing
        - tty: vt: keyboard: reject invalid keycodes
        - can: slcan: Fix use-after-free Read in slcan_open
        - kernfs: fix ino wrap-around detection
        - jbd2: Fix possible overflow in jbd2_log_space_left()
        - drm/msm: fix memleak on release
        - drm/i810: Prevent underflow in ioctl
        - arm64: dts: exynos: Revert "Remove unneeded address space mapping for soc
          node"
        - KVM: arm/arm64: vgic: Don't rely on the wrong pending table
        - KVM: x86: do not modify masked bits of shared MSRs
        - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES
        - KVM: x86: Grab KVM's srcu lock when setting nested state
        - crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr
        - crypto: atmel-aes - Fix IV handling when req->nbytes < ivsize
        - crypto: af_alg - cast ki_complete ternary op to int
        - crypto: ccp - fix uninitialized list head
        - crypto: ecdh - fix big endian bug in ECC library
        - crypto: user - fix memory leak in crypto_report
        - spi: atmel: Fix CS high support
        - mwifiex: update set_mac_address logic
        - can: ucan: fix non-atomic allocation in completion handler
        - RDMA/qib: Validate ->show()/store() callbacks before calling them
        - iomap: Fix pipe page leakage during splicing
        - thermal: Fix deadlock in thermal thermal_zone_device_check
        - vcs: prevent write access to vcsu devices
        - binder: Fix race between mmap() and binder_alloc_print_pages()
        - binder: Handle start==NULL in binder_update_page_range()
        - ALSA: hda - Fix pending unsol events at shutdown
        - watchdog: aspeed: Fix clock behaviour for ast2600
        - perf script: Fix invalid LBR/binary mismatch error
        - xfs: add missing error check in xfs_prepare_shift()
        - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
        - net: qrtr: fix memort leak in qrtr_tun_write_iter
        - appletalk: Fix potential NULL pointer dereference in unregister_snap_client
        - appletalk: Set error code if register_snap_client failed
        - time: Zero the upper 32-bits in __kernel_timespec on 32-bit
        - RDMA/hns: Correct the value of srq_desc_size
        - ecryptfs: fix unlink and rmdir in face of underlying fs modifications
        - x86/resctrl: Fix potential lockdep warning
        - ravb: implement MTU change while device is up
        - net: hns3: reallocate SSU' buffer size when pfc_en changes
        - net: hns3: fix ETS bandwidth validation bug
        - media: rc: mark input device as pointing stick
        - nfsd: Ensure CLONE persists data and metadata changes to the target file
        - drm: damage_helper: Fix race checking plane->state->fb
        - KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter
        - crypto: geode-aes - switch to skcipher for cbc(aes) fallback
        - spi: stm32-qspi: Fix kernel oops when unbinding driver
        - spi: Fix SPI_CS_HIGH setting when using native and GPIO CS
        - spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS
        - EDAC/ghes: Fix locking and memory barrier issues
        - kselftest: Fix NULL INSTALL_PATH for TARGETS runlist
        - ALSA: hda: hdmi - fix pin setup on Tigerlake
      * Realtek ALC256M with DTS Audio Processing internal microphone doesn't work
        on Redmi Book 14 2019 (LP: #1846148) // Disco update: upstream stable
        patchset 2019-12-17 (LP: #1856754)
        - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
      * Disco update: upstream stable patchset 2019-12-12 (LP: #1856213)
        - clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate
        - clocksource/drivers/mediatek: Fix error handling
        - ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX
        - ASoC: compress: fix unsigned integer overflow check
        - reset: Fix memory leak in reset_control_array_put()
        - clk: samsung: exynos5433: Fix error paths
        - ASoC: kirkwood: fix external clock probe defer
        - ASoC: kirkwood: fix device remove ordering
        - clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume
        - pinctrl: cherryview: Allocate IRQ chip dynamic
        - ARM: dts: imx6qdl-sabreauto: Fix storm of accelerometer interrupts
        - reset: fix reset_control_ops kerneldoc comment
        - clk: at91: avoid sleeping early
        - clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup
        - clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18
        - ARM: dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend
        - samples/bpf: fix build by setting HAVE_ATTR_TEST to zero
        - powerpc/bpf: Fix tail call implementation
        - idr: Fix integer overflow in idr_for_each_entry
        - idr: Fix idr_alloc_u32 on 32-bit systems
        - x86/resctrl: Prevent NULL pointer dereference when reading mondata
        - clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call
        - clk: ti: clkctrl: Fix failed to enable error with double udelay timeout
        - net: fec: add missed clk_disable_unprepare in remove
        - bridge: ebtables: don't crash when using dnat target in output chains
        - can: peak_usb: report bus recovery as well
        - can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open
        - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb
          mem leak
        - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue
          beyond skb_queue_len_max
        - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on
          queue overflow or OOM
        - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate
          error value in case of errors
        - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error
        - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error
        - can: flexcan: increase error counters if skb enqueueing via
          can_rx_offload_queue_sorted() fails
        - can: mcp251x: mcp251x_restart_work_handler(): Fix potential force_quit race
          condition
        - watchdog: meson: Fix the wrong value of left time
        - ASoC: stm32: sai: add restriction on mmap support
        - scripts/gdb: fix debugging modules compiled with hot/cold partitioning
        - net: bcmgenet: use RGMII loopback for MAC reset
        - net: bcmgenet: reapply manual settings to the PHY
        - net: mscc: ocelot: fix __ocelot_rmw_ix prototype
        - ceph: return -EINVAL if given fsc mount option on kernel w/o support
        - net/fq_impl: Switch to kvmalloc() for memory allocation
        - mac80211: fix station inactive_time shortly after boot
        - block: drbd: remove a stray unlock in __drbd_send_protocol()
        - pwm: bcm-iproc: Prevent unloading the driver module while in use
        - clk: at91: fix update bit maps on CFG_MOR write
        - usb: dwc2: use a longer core rest timeout in dwc2_core_reset()
        - staging: rtl8192e: fix potential use after free
        - staging: rtl8723bs: Drop ACPI device ids
        - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids
        - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P
        - mei: bus: prefix device names on bus with the bus name
        - mei: me: add comet point V device id
        - thunderbolt: Power cycle the router if NVM authentication fails
        - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE
        - pwm: Clear chip_data in pwm_put()
        - media: atmel: atmel-isc: fix INIT_WORK misplacement
        - macvlan: schedule bc_work even if error
        - net: psample: fix skb_over_panic
        - openvswitch: fix flow command message size
        - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook
        - slip: Fix use-after-free Read in slip_open
        - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info()
        - openvswitch: remove another BUG_ON()
        - selftests: bpf: test_sockmap: handle file creation failures gracefully
        - tipc: fix link name length check
        - sctp: cache netns in sctp_ep_common
        - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues
        - net: macb: add missed tasklet_kill
        - ext4: add more paranoia checking in ext4_expand_extra_isize handling
        - watchdog: sama5d4: fix WDD value to be always set to max
        - net: macb: Fix SUBNS increment and increase resolution
        - net: macb driver, check for SKBTX_HW_TSTAMP
        - mtd: rawnand: atmel: Fix spelling mistake in error message
        - mtd: rawnand: atmel: fix possible object reference leak
        - drm/atmel-hlcdc: revert shift by 8
        - mailbox: stm32_ipcc: add spinlock to fix channels concurrent access
        - tcp: exit if nothing to retransmit on RTO timeout
        - HID: core: check whether Usage Page item is after Usage ID items
        - crypto: stm32/hash - Fix hmac issue more than 256 bytes
        - media: stm32-dcmi: fix DMA corruption when stopping streaming
        - media: stm32-dcmi: fix check of pm_runtime_get_sync return value
        - hwrng: stm32 - fix unbalanced pm_runtime_enable
        - clk: stm32mp1: fix HSI divider flag
        - clk: stm32mp1: fix mcu divider table
        - clk: stm32mp1: add CLK_SET_RATE_NO_REPARENT to Kernel clocks
        - clk: stm32mp1: parent clocks update
        - mailbox: mailbox-test: fix null pointer if no mmio
        - pinctrl: stm32: fix memory leak issue
        - ASoC: stm32: i2s: fix dma configuration
        - ASoC: stm32: i2s: fix 16 bit format support
        - ASoC: stm32: i2s: fix IRQ clearing
        - ASoC: stm32: sai: add missing put_device()
        - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer
        - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size
        - net: fec: fix clock count mis-match
        - net: separate out the msghdr copy from ___sys_{send,recv}msg()
        - XArray: Fix xas_next() with a single entry at 0
        - thunderbolt: Fix lockdep circular locking depedency warning
        - soundwire: intel: fix intel_register_dai PDI offsets and numbers
        - clk: samsung: exynos542x: Move G3D subsystem clocks to its sub-CMU
        - arm64: dts: ls1028a: fix a compatible issue
        - soc: imx: gpc: fix initialiser format
        - bpf: Change size to u64 for bpf_map_{area_alloc, charge_init}()
        - idr: Fix idr_get_next_ul race with idr_remove
        - fbdev: c2p: Fix link failure on non-inlining
        - ASoC: hdac_hda: fix race in device removal
        - x86/tsc: Respect tsc command line paraemeter for clocksource_tsc_early
        - perf scripting engines: Iterate on tep event arrays directly
        - nvme-rdma: fix a segmentation fault during module unload
        - nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths
        - watchdog: pm8916_wdt: fix pretimeout registration flow
        - ALSA: hda: hdmi - add Tigerlake support
        - mm/gup_benchmark: fix MAP_HUGETLB case
        - drm/amdgpu: dont schedule jobs while in reset
        - net/mlx5e: Fix eswitch debug print of max fdb flow
        - drm/amdgpu: add warning for GRBM 1-cycle delay issue in gfx9
        - net: stmmac: gmac4: bitrev32 returns u32
        - net: stmmac: xgmac: Fix TSA selection
        - net: stmmac: xgmac: Disable Flow Control when 1 or more queues are in AV
        - mac80211: fix ieee80211_txq_setup_flows() failure path
        - ice: fix potential infinite loop because loop counter being too small
        - iavf: initialize ITRN registers with correct values
        - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx
        - net/tls: take into account that bpf_exec_tx_verdict() may free the record
        - net/tls: free the record on encryption error
        - net: skmsg: fix TLS 1.3 crash with full sk_msg
        - selftests/tls: add a test for fragmented messages
        - net/tls: remove the dead inplace_crypto code
        - net/tls: use sg_next() to walk sg entries
        - selftests: bpf: correct perror strings
      * CVE-2019-19050
        - crypto: user - fix memory leak in crypto_reportstat
      * headphone has noise as not mute on dell machines with alc236/256
        (LP: #1854401)
        - SAUCE: ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236
      * Disco update: upstream stable patchset 2019-12-03 (LP: #1855011)
        - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel
        - net/mlx4_en: fix mlx4 ethtool -N insertion
        - net/mlx4_en: Fix wrong limitation for number of TX rings
        - net: rtnetlink: prevent underflows in do_setvfinfo()
        - net/sched: act_pedit: fix WARN() in the traffic path
        - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key
        - sfc: Only cancel the PPS workqueue if it exists
        - net/mlx5e: Fix set vf link state error flow
        - net/mlxfw: Verify FSM error code translation doesn't exceed array size
        - net/mlx5: Fix auto group size calculation
        - vhost/vsock: split packets to send using multiple buffers
        - gpio: max77620: Fixup debounce delays
        - tools: gpio: Correctly add make dependencies for gpio_utils
        - nbd:fix memory leak in nbd_get_socket()
        - virtio_console: allocate inbufs in add_port() only if it is needed
        - Revert "fs: ocfs2: fix possible null-pointer dereferences in
          ocfs2_xa_prepare_entry()"
        - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
        - drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs
        - drm/i915/pmu: "Frequency" is reported as accumulated cycles
        - drm/i915/userptr: Try to acquire the page lock around set_page_dirty()
        - mwifiex: Fix NL80211_TX_POWER_LIMITED
        - Bluetooth: Fix invalid-free in bcsp_close()
        - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
        - ath9k_hw: fix uninitialized variable data
        - md/raid10: prevent access of uninitialized resync_pages offset
        - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span()
        - net: phy: dp83867: fix speed 10 in sgmii mode
        - net: phy: dp83867: increase SGMII autoneg timer duration
        - ARM: 8904/1: skip nomap memblocks while finding the lowmem/highmem boundary
        - x86/insn: Fix awk regexp warnings
        - x86/speculation: Fix incorrect MDS/TAA mitigation status
        - x86/speculation: Fix redundant MDS mitigation message
        - nbd: prevent memory leak
        - futex: Prevent robust futex exit race
        - ALSA: usb-audio: Fix NULL dereference at parsing BADD
        - nfc: port100: handle command failure cleanly
        - media: vivid: Set vid_cap_streaming and vid_out_streaming to true
        - media: vivid: Fix wrong locking that causes race conditions on streaming
          stop
        - media: usbvision: Fix races among open, close, and disconnect
        - cpufreq: Add NULL checks to show() and store() methods of cpufreq
        - media: uvcvideo: Fix error path in control parsing failure
        - media: b2c2-flexcop-usb: add sanity checking
        - media: cxusb: detect cxusb_ctrl_msg error in query
        - media: imon: invalid dereference in imon_touch_event
        - virtio_ring: fix return code on DMA mapping fails
        - USBIP: add config dependency for SGL_ALLOC
        - usbip: tools: fix fd leakage in the function of read_attr_usbip_status
        - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
        - usb-serial: cp201x: support Mark-10 digital force gauge
        - USB: chaoskey: fix error case of a timeout
        - appledisplay: fix error handling in the scheduled work
        - USB: serial: mos7840: add USB ID to support Moxa UPort 2210
        - USB: serial: mos7720: fix remote wakeup
        - USB: serial: mos7840: fix remote wakeup
        - USB: serial: option: add support for DW5821e with eSIM support
        - USB: serial: option: add support for Foxconn T77W968 LTE modules
        - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
        - net/tls: remove unused function tls_sw_sendpage_locked
        - net/tls: enable sk_msg redirect to tls socket egress
        - net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6
        - net/mlx5: Update the list of the PCI supported devices
        - net/mlx5: Update the list of the PCI supported devices
        - virtio_balloon: fix shrinker count
        - drm/amdgpu: disable gfxoff when using register read interface
        - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues"
        - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout
        - x86/xen/32: Simplify ring check in xen_iret_crit_fixup()
        - x86/doublefault/32: Fix stack canaries in the double fault handler
        - x86/pti/32: Size initial_page_table correctly
        - x86/cpu_entry_area: Add guard page for entry stack on 32bit
        - selftests/x86/mov_ss_trap: Fix the SYSENTER test
        - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel
        - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make
          the CPU_ENTRY_AREA_PAGES assert precise
        - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3
        - media: usbvision: Fix invalid accesses after device disconnect
        - media: mceusb: fix out of bounds read in MCE receiver buffer
      * Miscellaneous Ubuntu changes
        - update dkms package versions
    
     -- Sultan Alsawaf <email address hidden>  Mon, 13 Jan 2020 08:32:35 -0800
  • linux-aws-5.0 (5.0.0-1023.26~18.04.1) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1023.26~18.04.1 -proposed tracker (LP: #1854767)
    
      [ Ubuntu: 5.0.0-1023.26 ]
    
      * disco/linux-aws: 5.0.0-1023.26 -proposed tracker (LP: #1854768)
      * backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637)
        - [Config] updateconfigs for DIMLIB
      * disco/linux: 5.0.0-38.41 -proposed tracker (LP: #1854788)
      * [Regression] Failed to boot disco kernel built from master-next (kernel
        kernel NULL pointer dereference) (LP: #1853981)
        - SAUCE: blk-mq: Fix blk_mq_make_request for mq devices
      * CVE-2019-14901
        - SAUCE: mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame()
      * CVE-2019-14896 // CVE-2019-14897
        - SAUCE: libertas: Fix two buffer overflows at parsing bss descriptor
      * CVE-2019-14895
        - SAUCE: mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
      * [CML] New device id's for CMP-H (LP: #1846335)
        - mmc: sdhci-pci: Add another Id for Intel CML
        - i2c: i801: Add support for Intel Comet Lake PCH-H
        - mtd: spi-nor: intel-spi: Add support for Intel Comet Lake-H SPI serial flash
        - mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs
      * Please add patch fixing RK818 ID detection (LP: #1853192)
        - SAUCE: mfd: rk808: Fix RK818 ID template
      * [SRU][B/OEM-B/OEM-OSP1/D] Enable new Elan touchpads which are not in current
        whitelist (LP: #1853246)
        - Input: elan_i2c - export the device id whitelist
        - HID: quirks: Refactor ELAN 400 and 401 handling
      * Lenovo dock MAC Address pass through doesn't work in Ubuntu  (LP: #1827961)
        - r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2
      * [CML-S62] Need enable turbostat patch support for Comet lake- S 6+2
        (LP: #1847451)
        - SAUCE: tools/power turbostat: Add Cometlake support
      * External microphone can't work on some dell machines with the codec alc256
        or alc236 (LP: #1853791)
        - SAUCE: ALSA: hda/realtek - Move some alc256 pintbls to fallback table
        - SAUCE: ALSA: hda/realtek - Move some alc236 pintbls to fallback table
      * Memory leak in net/xfrm/xfrm_state.c - 8 pages per ipsec connection
        (LP: #1853197)
        - xfrm: Fix memleak on xfrm state destroy
      * CVE-2019-18660: patches for Ubuntu (LP: #1853142) // CVE-2019-18660
        - powerpc/64s: support nospectre_v2 cmdline option
        - powerpc/book3s64: Fix link stack flush on context switch
        - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel
      * Raydium Touchscreen on ThinkPad L390 does not work (LP: #1849721)
        - HID: i2c-hid: fix no irq after reset on raydium 3118
      * Make Goodix I2C touchpads work (LP: #1853842)
        - HID: i2c-hid: Remove runtime power management
        - HID: i2c-hid: Send power-on command after reset
      * Touchpad doesn't work on Dell Inspiron 7000 2-in-1 (LP: #1851901)
        - Revert "UBUNTU: SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390
          2-in-1"
        - lib: devres: add a helper function for ioremap_uc
        - mfd: intel-lpss: Use devm_ioremap_uc for MMIO
      * CVE-2019-19055
        - nl80211: fix memory leak in nl80211_get_ftm_responder_stats
      * [CML-S62] Need enable intel_rapl patch support for Comet lake- S 6+2
        (LP: #1847454)
        - powercap/intel_rapl: add support for CometLake Mobile
        - powercap/intel_rapl: add support for Cometlake desktop
      * [CML-S62] Need enable intel_pmc_core driver patch for Comet lake- S 6+2
        (LP: #1847450)
        - SAUCE: platform/x86: intel_pmc_core: Add Comet Lake (CML) platform support
          to intel_pmc_core driver
      * update ENA driver for DIMLIB dynamic interrupt moderation (LP: #1853180)
        - net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it
        - net: ena: switch to dim algorithm for rx adaptive interrupt moderation
        - net: ena: reimplement set/get_coalesce()
        - net: ena: enable the interrupt_moderation in driver_supported_features
        - net: ena: remove code duplication in
          ena_com_update_nonadaptive_moderation_interval _*()
        - net: ena: remove old adaptive interrupt moderation code from ena_netdev
        - net: ena: remove ena_restore_ethtool_params() and relevant fields
        - net: ena: remove all old adaptive rx interrupt moderation code from ena_com
        - net: ena: fix update of interrupt moderation register
        - net: ena: fix retrieval of nonadaptive interrupt moderation intervals
        - net: ena: fix incorrect update of intr_delay_resolution
        - net: ena: Select DIMLIB for ENA_ETHERNET
        - SAUCE: net: ena: fix issues in setting interrupt moderation params in
          ethtool
        - SAUCE: net: ena: fix too long default tx interrupt moderation interval
      * CONFIG_ARCH_ROCKCHIP is not set in ubuntu 18.04 aarch64,arm64 (LP: #1825222)
        - [Config] Enable ROCKCHIP support for arm64
      * remount of multilower moved pivoted-root overlayfs root, results in I/O
        errors on some modified files (LP: #1824407)
        - SAUCE: ovl: fix lookup failure on multi lower squashfs
      * backport DIMLIB (lib/dim/) to pre-5.2 kernels (LP: #1852637)
        - linux/dim: Move logic to dim.h
        - linux/dim: Remove "net" prefix from internal DIM members
        - linux/dim: Rename externally exposed macros
        - linux/dim: Rename net_dim_sample() to net_dim_update_sample()
        - linux/dim: Rename externally used net_dim members
        - [Config] updateconfigs for DIMLIB
        - linux/dim: Move implementation to .c files
        - linux/dim: Add completions count to dim_sample
        - linux/dim: Implement RDMA adaptive moderation (DIM)
        - linux/dim: Fix overflow in dim calculation
        - lib/dim: Fix -Wunused-const-variable warnings
      * The alsa hda driver is not loaded due to the missing of PCIID for Comet
        Lake-S [8086:a3f0] (LP: #1852070)
        - SAUCE: ALSA: hda: Add Cometlake-S PCI ID
      * Can't adjust brightness on DELL UHD dGPU AIO (LP: #1813877)
        - SAUCE: platform/x86: dell-uart-backlight: add missing status command
        - SAUCE: platform/x86: dell-uart-backlight: load driver by scalar status
        - SAUCE: platform/x86: dell-uart-backlight: add force parameter
        - SAUCE: platform/x86: dell-uart-backlight: add quirk for old platforms
      * Enable framebuffer fonts auto selection for HighDPI screen (LP: #1851623)
        - fonts: Fix coding style
        - fonts: Prefer a bigger font for high resolution screens
      * Disable unreliable HPET on CFL-H system (LP: #1852216)
        - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake H platforms
      * i40e: Setting VF MAC address causes General Protection Fault (LP: #1852432)
        - i40e: Fix crash caused by stress setting of VF MAC addresses
      * CVE-2019-19072
        - tracing: Have error path in predicate_parse() free its allocated memory
      * CVE-2019-2214
        - binder: Set end of SG buffer area properly.
      * Disco update: upstream stable patchset 2019-11-27 (LP: #1854229)
        - i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf()
        - Revert "OPP: Protect dev_list with opp_table lock"
        - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size()
        - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span()
        - mm/memory_hotplug: fix updating the node span
        - arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault
        - fbdev: Ditch fb_edid_add_monspecs
        - bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG
        - bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0
        - bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0
        - bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE}
        - bpf: btf: Fix a missing check bug
      * Disco update: upstream stable patchset 2019-11-26 (LP: #1854094)
        - KVM: x86: introduce is_pae_paging
        - scsi: core: Handle drivers which set sg_tablesize to zero
        - ax88172a: fix information leak on short answers
        - ipmr: Fix skb headroom in ipmr_get_route().
        - net: gemini: add missed free_netdev
        - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules
        - slip: Fix memory leak in slip_open error path
        - ALSA: usb-audio: Fix missing error check at mixer resolution test
        - ALSA: usb-audio: not submit urb for stopped endpoint
        - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk()
        - ALSA: usb-audio: Fix incorrect size check for processing/extension units
        - Btrfs: fix log context list corruption after rename exchange operation
        - Input: ff-memless - kill timer in destroy()
        - Input: synaptics-rmi4 - fix video buffer size
        - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver
        - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12)
        - Input: synaptics-rmi4 - clear IRQ enables for F54
        - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing
        - IB/hfi1: Ensure full Gen3 speed in a Gen4 system
        - IB/hfi1: Use a common pad buffer for 9B and 16B packets
        - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
        - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable
        - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either
        - net: ethernet: dwmac-sun8i: Use the correct function in exit path
        - iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros
        - mm: mempolicy: fix the wrong return value and potential pages leak of mbind
        - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm()
        - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup()
        - mmc: sdhci-of-at91: fix quirk2 overwrite
        - dmaengine: at_xdmac: remove a stray bottom half unlock
        - slcan: Fix memory leak in error path
        - tcp: remove redundant new line from tcp_event_sk_skb
        - dpaa2-eth: free already allocated channels on probe defer
        - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved
        - drm/i915: update rawclk also on resume
        - ntp/y2038: Remove incorrect time_t truncation
        - mm/page_io.c: do not free shared swap slots
      * Disco update: upstream stable patchset 2019-11-22 (LP: #1853659)
        - bonding: fix state transition issue in link monitoring
        - CDC-NCM: handle incomplete transfer of MTU
        - ipv4: Fix table id reference in fib_sync_down_addr
        - net: ethernet: octeon_mgmt: Account for second possible VLAN header
        - net: fix data-race in neigh_event_send()
        - net: qualcomm: rmnet: Fix potential UAF when unregistering
        - net: usb: qmi_wwan: add support for DW5821e with eSIM support
        - NFC: fdp: fix incorrect free object
        - nfc: netlink: fix double device reference drop
        - NFC: st21nfca: fix double free
        - qede: fix NULL pointer deref in __qede_remove()
        - net: mscc: ocelot: don't handle netdev events for other netdevs
        - net: mscc: ocelot: fix NULL pointer on LAG slave removal
        - ipv6: fixes rt6_probe() and fib6_nh->last_probe init
        - net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
        - ALSA: timer: Fix incorrectly assigned timer instance
        - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite
          Saffire Pro i/o series
        - ALSA: hda/ca0132 - Fix possible workqueue stall
        - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
        - mm, meminit: recalculate pcpu batch and high limits after init completes
        - mm: thp: handle page cache THP correctly in PageTransCompoundMap
        - mm, vmstat: hide /proc/pagetypeinfo from normal users
        - dump_stack: avoid the livelock of the dump_lock
        - tools: gpio: Use !building_out_of_srctree to determine srctree
        - perf tools: Fix time sorting
        - drm/radeon: fix si_enable_smc_cac() failed issue
        - HID: wacom: generic: Treat serial number and related fields as unsigned
        - soundwire: depend on ACPI
        - soundwire: bus: set initial value to port_status
        - arm64: Do not mask out PTE_RDONLY in pte_same()
        - ceph: fix use-after-free in __ceph_remove_cap()
        - ceph: add missing check in d_revalidate snapdir handling
        - iio: adc: stm32-adc: fix stopping dma
        - iio: imu: adis16480: make sure provided frequency is positive
        - iio: srf04: fix wrong limitation in distance measuring
        - ARM: sunxi: Fix CPU powerdown on A83T
        - netfilter: nf_tables: Align nft_expr private data to 64-bit
        - netfilter: ipset: Fix an error code in ip_set_sockfn_get()
        - intel_th: pci: Add Comet Lake PCH support
        - intel_th: pci: Add Jasper Lake PCH support
        - x86/apic/32: Avoid bogus LDR warnings
        - SMB3: Fix persistent handles reconnect
        - can: usb_8dev: fix use-after-free on disconnect
        - can: flexcan: disable completely the ECC mechanism
        - can: c_can: c_can_poll(): only read status register after status IRQ
        - can: peak_usb: fix a potential out-of-sync while decoding packets
        - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid
          skb mem leak
        - can: gs_usb: gs_can_open(): prevent memory leak
        - can: dev: add missing of_node_put() after calling of_get_child_by_name()
        - can: mcba_usb: fix use-after-free on disconnect
        - can: peak_usb: fix slab info leak
        - configfs: stash the data we need into configfs_buffer at open time
        - configfs_register_group() shouldn't be (and isn't) called in rmdirable parts
        - configfs: new object reprsenting tree fragments
        - configfs: provide exclusion between IO and removals
        - configfs: fix a deadlock in configfs_symlink()
        - ALSA: usb-audio: More validations of descriptor units
        - ALSA: usb-audio: Simplify parse_audio_unit()
        - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
        - ALSA: usb-audio: Remove superfluous bLength checks
        - ALSA: usb-audio: Clean up check_input_term()
        - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk()
        - ALSA: usb-audio: remove some dead code
        - ALSA: usb-audio: Fix copy&paste error in the validator
        - usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
        - usbip: Implement SG support to vhci-hcd and stub driver
        - PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
        - HID: google: add magnemite/masterball USB ids
        - dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
        - dmaengine: sprd: Fix the possible memory leak issue
        - HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
        - RDMA/mlx5: Clear old rate limit when closing QP
        - iw_cxgb4: fix ECN check on the passive accept
        - RDMA/qedr: Fix reported firmware version
        - net/mlx5e: TX, Fix consumer index of error cqe dump
        - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
        - scsi: qla2xxx: fixup incorrect usage of host_byte
        - RDMA/uverbs: Prevent potential underflow
        - net: openvswitch: free vport unless register_netdevice() succeeds
        - scsi: lpfc: Honor module parameter lpfc_use_adisc
        - scsi: qla2xxx: Initialized mailbox to prevent driver load failure
        - netfilter: nf_flow_table: set timeout before insertion into hashes
        - ipvs: don't ignore errors in case refcounting ip_vs module fails
        - ipvs: move old_secure_tcp into struct netns_ipvs
        - bonding: fix unexpected IFF_BONDING bit unset
        - macsec: fix refcnt leak in module exit routine
        - usb: fsl: Check memory resource before releasing it
        - usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
        - usb: gadget: composite: Fix possible double free memory bug
        - usb: dwc3: pci: prevent memory leak in dwc3_pci_probe
        - usb: gadget: configfs: fix concurrent issue between composite APIs
        - usb: dwc3: remove the call trace of USBx_GFLADJ
        - perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise
          RIP validity
        - perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h)
        - perf/x86/uncore: Fix event group support
        - USB: Skip endpoints with 0 maxpacket length
        - USB: ldusb: use unsigned size format specifiers
        - usbip: tools: Fix read_usb_vudc_device() error path handling
        - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
        - RDMA/hns: Prevent memory leaks of eq->buf_list
        - scsi: qla2xxx: stop timer in shutdown path
        - nvme-multipath: fix possible io hang after ctrl reconnect
        - fjes: Handle workqueue allocation failure
        - net: hisilicon: Fix "Trying to free already-free IRQ"
        - net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link
          is up
        - net: mscc: ocelot: refuse to overwrite the port's native vlan
        - iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41
        - drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
        - drm/amd/display: Passive DP->HDMI dongle detection fix
        - hv_netvsc: Fix error handling in netvsc_attach()
        - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
        - NFSv4: Don't allow a cached open with a revoked delegation
        - net: ethernet: arc: add the missed clk_disable_unprepare
        - igb: Fix constant media auto sense switching when no cable is connected
        - e1000: fix memory leaks
        - pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
        - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
        - pinctrl: cherryview: Fix irq_valid_mask calculation
        - blkcg: make blkcg_print_stat() print stats only for online blkgs
        - iio: imu: mpu6050: Add support for the ICM 20602 IMU
        - iio: imu: inv_mpu6050: fix no data on MPU6050
        - mm/filemap.c: don't initiate writeback if mapping has no dirty pages
        - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is
          dead
        - usbip: Fix free of unallocated memory in vhci tx
        - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
        - net: prevent load/store tearing on sk->sk_stamp
        - iio: imu: mpu6050: Fix FIFO layout for ICM20602
        - vsock/virtio: fix sock refcnt holding during the shutdown
        - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
        - x86/cpu: Add Tremont to the cpu vulnerability whitelist
        - Documentation: Add ITLB_MULTIHIT documentation
        - net/tls: fix sk_msg trim on fallback to copy mode
        - net/tls: add a TX lock
        - selftests/tls: add test for concurrent recv and send
        - net/smc: fix ethernet interface refcounting
        - perf map: Use zalloc for map_groups
        - soundwire: depend on ACPI || OF
        - ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address
        - ceph: fix RCU case handling in ceph_d_revalidate()
        - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
        - ceph: don't allow copy_file_range when stripe_count != 1
        - cpufreq: intel_pstate: Fix invalid EPB setting
        - dmaengine: sprd: Fix the link-list pointer register configuration issue
        - dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer
        - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
        - scsi: ufs-bsg: Wake the device before sending raw upiu commands
        - bpf: Fix use after free in subprog's jited symbol removal
        - bpf: Fix use after free in bpf_get_prog_name
        - xsk: Fix registration of Rx-only sockets
        - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
        - virt_wifi: fix refcnt leak in module exit routine
        - hwmon: (ina3221) Fix read timeout issue
        - sched/topology: Don't try to build empty sched domains
        - sched/topology: Allow sched_asym_cpucapacity to be disabled
        - mt76: dma: fix buffer unmap with non-linear skbs
        - drm/amd/display: do not synchronize "drr" displays
        - SUNRPC: The RDMA back channel mustn't disappear while requests are
          outstanding
        - efi: libstub/arm: Account for firmware reserved memory at the base of RAM
        - x86, efi: Never relocate kernel below lowest acceptable address
        - arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
        - arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
        - arm64: Brahma-B53 is SSB and spectre v2 safe
        - arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
        - arm64: errata: Update stale comment
        - net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run
      * Disco update: upstream stable patchset 2019-11-20 (LP: #1853382)
        - regulator: of: fix suspend-min/max-voltage parsing
        - ASoC: wm8994: Do not register inapplicable controls for WM1811
        - arm64: dts: allwinner: a64: pine64-plus: Add PHY regulator delay
        - arm64: dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay
        - arm64: dts: Fix gpio to pinmux mapping
        - regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone
        - ASoC: rt5682: add NULL handler to set_jack function
        - regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe()
          could be uninitialized
        - ASoC: wm_adsp: Don't generate kcontrols without READ flags
        - ASoc: rockchip: i2s: Fix RPM imbalance
        - ARM: dts: logicpd-torpedo-som: Remove twl_keypad
        - pinctrl: ns2: Fix off by one bugs in ns2_pinmux_enable()
        - ARM: mm: fix alignment handler faults under memory pressure
        - scsi: qla2xxx: fix a potential NULL pointer dereference
        - scsi: scsi_dh_alua: handle RTPG sense code correctly during state
          transitions
        - scsi: sni_53c710: fix compilation error
        - scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE
        - ARM: dts: imx7s: Correct GPT's ipg clock source
        - perf c2c: Fix memory leak in build_cl_output()
        - 8250-men-mcb: fix error checking when get_num_ports returns -ENODEV
        - perf kmem: Fix memory leak in compact_gfp_flags()
        - ARM: davinci: dm365: Fix McBSP dma_slave_map entry
        - drm/amdgpu: fix potential VM faults
        - scsi: target: core: Do not overwrite CDB byte 1
        - tracing: Fix "gfp_t" format for synthetic events
        - ARM: 8926/1: v7m: remove register save to stack before svc
        - of: unittest: fix memory leak in unittest_data_add
        - MIPS: bmips: mark exception vectors as char arrays
        - irqchip/gic-v3-its: Use the exact ITSList for VMOVP
        - i2c: stm32f7: fix first byte to send in slave mode
        - i2c: stm32f7: fix a race in slave mode with arbitration loss irq
        - i2c: stm32f7: remove warning when compiling with W=1
        - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
        - nbd: protect cmd->status with cmd->lock
        - nbd: handle racing with error'ed out commands
        - cxgb4: fix panic when attaching to ULD fail
        - dccp: do not leak jiffies on the wire
        - erspan: fix the tun_info options_len check for erspan
        - inet: stop leaking jiffies on the wire
        - net: annotate accesses to sk->sk_incoming_cpu
        - net: annotate lockless accesses to sk->sk_napi_id
        - net: dsa: bcm_sf2: Fix IMP setup for port different than 8
        - net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum
        - net: fix sk_page_frag() recursion from memory reclaim
        - net: hisilicon: Fix ping latency when deal with high throughput
        - net/mlx4_core: Dynamically set guaranteed amount of counters per VF
        - netns: fix GFP flags in rtnl_net_notifyid()
        - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq()
        - selftests: net: reuseport_dualstack: fix uninitalized parameter
        - udp: fix data-race in udp_set_dev_scratch()
        - vxlan: check tun_info options_len properly
        - net: add skb_queue_empty_lockless()
        - udp: use skb_queue_empty_lockless()
        - net: use skb_queue_empty_lockless() in poll() handlers
        - net: use skb_queue_empty_lockless() in busy poll contexts
        - net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
        - ipv4: fix route update on metric change.
        - selftests: fib_tests: add more tests for metric update
        - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget
        - r8169: fix wrong PHY ID issue with RTL8168dp
        - net/mlx5e: Fix ethtool self test: link speed
        - net: dsa: b53: Do not clear existing mirrored port mask
        - net: bcmgenet: don't set phydev->link from MAC
        - net: phy: bcm7xxx: define soft_reset for 40nm EPHY
        - net: bcmgenet: reset 40nm EPHY on energy detect
        - net: usb: lan78xx: Connect PHY before registering MAC
        - net: dsa: fix switch tree list
        - r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2
        - net/flow_dissector: switch to siphash
        - wireless: Skip directory when generating certificates
        - platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI
          table
        - powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9
        - selftests/powerpc: Add test case for tlbie vs mtpidr ordering issue
        - selftests/powerpc: Fix compile error on tlbie_test due to newer gcc
        - ASoC: pcm3168a: The codec does not support S32_LE
        - arm64: dts: ti: k3-am65-main: Fix gic-its node unit-address
        - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending
          driver fails
        - regulator: da9062: fix suspend_enable/disable preparation
        - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create()
        - pinctrl: intel: Allocate IRQ chip dynamic
        - arm64: dts: rockchip: fix Rockpro64 RK808 interrupt line
        - arm64: dts: rockchip: fix RockPro64 vdd-log regulator settings
        - arm64: dts: rockchip: fix RockPro64 sdhci settings
        - ARM: 8908/1: add __always_inline to functions called from __get_user_check()
        - arm64: dts: rockchip: fix RockPro64 sdmmc settings
        - ARM: dts: vf610-zii-scu4-aib: Specify 'i2c-mux-idle-disconnect'
        - arm64: dts: imx8mq: Use correct clock for usdhc's ipg clk
        - drm/amdgpu: fix error handling in amdgpu_bo_list_create
        - ARM: dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue
        - ALSA: hda: Add Elkhart Lake PCI ID
        - ALSA: hda: Add Tigerlake/Jasperlake PCI ID
        - irqchip/sifive-plic: Skip contexts except supervisor in plic_init()
        - net: rtnetlink: fix a typo fbd -> fdb
        - net/mlx5: Fix flow counter list auto bits struct
        - net: hns3: fix mis-counting IRQ vector numbers issue
        - net: reorder 'struct net' fields to avoid false sharing
        - net: netem: correct the parent's backlog when corrupted packet was dropped
        - CIFS: Fix retry mid list corruption on reconnects
      * Disco update: upstream stable patchset 2019-11-18 (LP: #1853067)
        - dm snapshot: introduce account_start_copy() and account_end_copy()
        - dm snapshot: rework COW throttling to fix deadlock
        - Btrfs: fix inode cache block reserve leak on failure to allocate data space
        - btrfs: qgroup: Always free PREALLOC META reserve in
          btrfs_delalloc_release_extents()
        - f2fs: flush quota blocks after turnning it off
        - drm/msm/dpu: handle failures while initializing displays
        - bcache: fix input overflow to writeback_rate_minimum
        - ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3
        - staging: mt7621-pinctrl: use pinconf-generic for 'dt_node_to_map' and
          'dt_free_map'
        - HID: Add ASUS T100CHI keyboard dock battery quirks
        - HID: steam: fix boot loop with bluetooth firmware
        - HID: steam: fix deadlock with input devices.
        - usb: dwc3: gadget: early giveback if End Transfer already completed
        - usb: dwc3: gadget: clear DWC3_EP_TRANSFER_STARTED on cmd complete
        - ALSA: usb-audio: Cleanup DSD whitelist
        - usb: handle warm-reset port requests on hub resume
        - rtc: pcf8523: set xtal load capacitance from DT
        - arm64: Add MIDR encoding for HiSilicon Taishan CPUs
        - arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs
        - mlxsw: spectrum: Set LAG port collector only when active
        - scsi: lpfc: Correct localport timeout duration error
        - CIFS: Respect SMB2 hdr preamble size in read responses
        - cifs: add credits from unmatched responses/messages
        - ALSA: hda/realtek - Apply ALC294 hp init also for S4 resume
        - media: vimc: Remove unused but set variables
        - ext4: disallow files with EXT4_JOURNAL_DATA_FL from EXT4_IOC_SWAP_BOOT
        - net: dsa: mv88e6xxx: Release lock while requesting IRQ
        - PCI/PME: Fix possible use-after-free on remove
        - drm/amd/display: fix odm combine pipe reset
        - power: supply: max14656: fix potential use-after-free
        - iio: adc: meson_saradc: Fix memory allocation order
        - iio: fix center temperature of bmc150-accel-core
        - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
        - perf tests: Avoid raising SEGV using an obvious NULL dereference
        - perf map: Fix overlapped map handling
        - perf script brstackinsn: Fix recovery from LBR/binary mismatch
        - perf jevents: Fix period for Intel fixed counters
        - perf tools: Propagate get_cpuid() error
        - perf annotate: Propagate perf_env__arch() error
        - perf annotate: Fix the signedness of failure returns
        - perf annotate: Propagate the symbol__annotate() error return
        - perf annotate: Return appropriate error code for allocation failures
        - staging: rtl8188eu: fix null dereference when kzalloc fails
        - RDMA/hfi1: Prevent memory leak in sdma_init
        - RDMA/iwcm: Fix a lock inversion issue
        - HID: hyperv: Use in-place iterator API in the channel callback
        - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
        - arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419
        - tty: serial: owl: Fix the link time qualifier of 'owl_uart_exit()'
        - tty: n_hdlc: fix build on SPARC
        - gpio: max77620: Use correct unit for debounce times
        - fs: cifs: mute -Wunused-const-variable message
        - serial: mctrl_gpio: Check for NULL pointer
        - efi/cper: Fix endianness of PCIe class code
        - efi/x86: Do not clean dummy variable in kexec path
        - MIPS: include: Mark __cmpxchg as __always_inline
        - x86/xen: Return from panic notifier
        - ocfs2: clear zero in unaligned direct IO
        - fs: ocfs2: fix possible null-pointer dereferences in
          ocfs2_xa_prepare_entry()
        - fs: ocfs2: fix a possible null-pointer dereference in
          ocfs2_write_end_nolock()
        - fs: ocfs2: fix a possible null-pointer dereference in
          ocfs2_info_scan_inode_alloc()
        - arm64: armv8_deprecated: Checking return value for memory allocation
        - sched/vtime: Fix guest/system mis-accounting on task switch
        - perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp
        - drm/amdgpu: fix memory leak
        - iio: imu: adis16400: release allocated memory on failure
        - MIPS: include: Mark __xchg as __always_inline
        - MIPS: fw: sni: Fix out of bounds init of o32 stack
        - virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
        - nbd: fix possible sysfs duplicate warning
        - NFSv4: Fix leak of clp->cl_acceptor string
        - s390/uaccess: avoid (false positive) compiler warnings
        - tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
        - ARM: 8914/1: NOMMU: Fix exc_ret for XIP
        - nbd: verify socket is supported during setup
        - USB: legousbtower: fix a signedness bug in tower_probe()
        - thunderbolt: Use 32-bit writes when writing ring producer/consumer
        - fuse: flush dirty data/metadata before non-truncate setattr
        - fuse: truncate pending writes on O_TRUNC
        - ALSA: bebob: Fix prototype of helper function to return negative value
        - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
          segments")
        - USB: gadget: Reject endpoints with 0 maxpacket value
        - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
          virt_boundary_mask to avoid SG overflows")
        - USB: ldusb: fix ring-buffer locking
        - USB: ldusb: fix control-message timeout
        - usb: xhci: fix __le32/__le64 accessors in debugfs code
        - USB: serial: whiteheat: fix potential slab corruption
        - USB: serial: whiteheat: fix line-speed endianness
        - scsi: target: cxgbit: Fix cxgbit_fw4_ack()
        - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
        - HID: Fix assumption that devices have inputs
        - HID: fix error message in hid_open_report()
        - nl80211: fix validation of mesh path nexthop
        - s390/cmm: fix information leak in cmm_timeout_handler()
        - s390/idle: fix cpu idle time calculation
        - arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default
        - dmaengine: qcom: bam_dma: Fix resource leak
        - dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
        - drm/amdgpu/powerplay/vega10: allow undervolting in p7
        - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
        - batman-adv: Avoid free/alloc race when handling OGM buffer
        - llc: fix sk_buff leak in llc_sap_state_process()
        - llc: fix sk_buff leak in llc_conn_service()
        - rxrpc: Fix call ref leak
        - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
        - rxrpc: Fix trace-after-put looking at the put peer record
        - NFC: pn533: fix use-after-free and memleaks
        - bonding: fix potential NULL deref in bond_update_slave_arr
        - net: usb: sr9800: fix uninitialized local variable
        - sch_netem: fix rcu splat in netem_enqueue()
        - ALSA: timer: Simplify error path in snd_timer_open()
        - ALSA: timer: Fix mutex deadlock at releasing card
        - ALSA: usb-audio: DSD auto-detection for Playback Designs
        - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
        - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
        - powerpc/powernv: Fix CPU idle to be called with IRQs disabled
        - Revert "ALSA: hda: Flush interrupts on disabling"
        - perf annotate: Fix arch specific ->init() failure errors
        - kselftest: exclude failed TARGETS from runlist
        - tty: serial: rda: Fix the link time qualifier of 'rda_uart_exit()'
        - RDMA/cm: Fix memory leak in cm_add/remove_one
        - sched/fair: Scale bandwidth quota and period without losing quota/period
          ratio precision
        - perf/core: Rework memory accounting in perf_mmap()
        - perf/core: Fix corner case in perf_rotate_context()
        - iio: imu: st_lsm6dsx: fix waitime for st_lsm6dsx i2c controller
        - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
        - um-ubd: Entrust re-queue to the upper layers
        - ARC: perf: Accommodate big-endian CPU
        - arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
        - virtio_ring: fix stalls for packed rings
        - rtlwifi: rtl_pci: Fix problem of too small skb->len
        - dmaengine: imx-sdma: fix size check for sdma script_number
        - sched/fair: Fix low cpu usage with high throttling by removing expiration of
          cpu-local slices
        - sched/fair: Fix -Wunused-but-set-variable warnings
      * Dell XPS 13 9350/9360 headphone audio hiss (LP: #1654448) // [XPS 13 9360,
        Realtek ALC3246, Black Headphone Out, Front] High noise floor
        (LP: #1845810) // Disco update: upstream stable patchset 2019-11-18
        (LP: #1853067)
        - ALSA: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360
      * Disco update: upstream stable patchset 2019-11-13 (LP: #1852459)
        - nvme-pci: Fix a race in controller removal
        - scsi: ufs: skip shutdown if hba is not powered
        - scsi: megaraid: disable device when probe failed after enabled device
        - scsi: qla2xxx: Fix unbound sleep in fcport delete path.
        - ARM: OMAP2+: Fix missing reset done flag for am3 and am43
        - ARM: OMAP2+: Fix warnings with broken omap2_set_init_voltage()
        - ieee802154: ca8210: prevent memory leak
        - ARM: dts: am4372: Set memory bandwidth limit for DISPC
        - net: dsa: qca8k: Use up to 7 ports for all operations
        - MIPS: dts: ar9331: fix interrupt-controller size
        - xen/efi: Set nonblocking callbacks
        - nl80211: fix null pointer dereference
        - mac80211: fix txq null pointer dereference
        - netfilter: nft_connlimit: disable bh on garbage collection
        - net: dsa: rtl8366rb: add missing of_node_put after calling
          of_get_child_by_name
        - mips: Loongson: Fix the link time qualifier of 'serial_exit()'
        - net: hisilicon: Fix usage of uninitialized variable in function
          mdio_sc_cfg_reg_write()
        - lib: textsearch: fix escapes in example code
        - namespace: fix namespace.pl script to support relative paths
        - libata/ahci: Fix PCS quirk application
        - Revert "drm/radeon: Fix EEH during kexec"
        - ocfs2: fix panic due to ocfs2_wq is null
        - ipv4: fix race condition between route lookup and invalidation
        - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
        - net: avoid potential infinite loop in tc_ctl_action()
        - net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
        - net: bcmgenet: Set phydev->dev_flags only for internal PHYs
        - net: i82596: fix dma_alloc_attr for sni_82596
        - net/ibmvnic: Fix EOI when running in XIVE mode.
        - net: ipv6: fix listify ip6_rcv_finish in case of forwarding
        - net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow
        - sctp: change sctp_prot .no_autobind with true
        - USB: legousbtower: fix memleak on disconnect
        - ALSA: hda/realtek - Add support for ALC711
        - ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
        - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
        - ALSA: hda - Force runtime PM on Nvidia HDMI codecs
        - usb: udc: lpc32xx: fix bad bit shift operation
        - USB: serial: ti_usb_3410_5052: fix port-close races
        - USB: ldusb: fix memleak on disconnect
        - USB: usblp: fix use-after-free on disconnect
        - USB: ldusb: fix read info leaks
        - MIPS: tlbex: Fix build_restore_pagemask KScratch restore
        - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
        - scsi: zfcp: fix reaction on bit error threshold notification
        - scsi: sd: Ignore a failure to sync cache due to lack of authorization
        - scsi: core: save/restore command resid for error handling
        - scsi: core: try to get module before removing device
        - scsi: ch: Make it possible to open a ch device multiple times again
        - Input: da9063 - fix capability and drop KEY_SLEEP
        - Input: synaptics-rmi4 - avoid processing unknown IRQs
        - ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting
        - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
        - cfg80211: wext: avoid copying malformed SSIDs
        - mac80211: Reject malformed SSID elements
        - drm/ttm: Restore ttm prefaulting
        - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
        - drivers/base/memory.c: don't access uninitialized memmaps in
          soft_offline_page_store()
        - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
        - mmc: cqhci: Commit descriptors before setting the doorbell
        - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure()
        - mm/slub: fix a deadlock in show_slab_objects()
        - mm/page_owner: don't access uninitialized memmaps when reading
          /proc/pagetypeinfo
        - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic()
        - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped
          more than once
        - xtensa: drop EXPORT_SYMBOL for outs*/ins*
        - parisc: Fix vmap memory leak in ioremap()/iounmap()
        - EDAC/ghes: Fix Use after free in ghes_edac remove path
        - arm64: Enable workaround for Cavium TX2 erratum 219 when running SMT
        - CIFS: avoid using MID 0xFFFF
        - CIFS: Fix use after free of file info structures
        - perf/aux: Fix AUX output stopping
        - tracing: Fix race in perf_trace_buf initialization
        - dm cache: fix bugs when a GFP_NOWAIT allocation fails
        - x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area
        - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
        - pinctrl: cherryview: restore Strago DMI workaround for all versions
        - pinctrl: armada-37xx: fix control of pins 32 and up
        - pinctrl: armada-37xx: swap polarity on LED group
        - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group()
        - Btrfs: add missing extents release on file extent cluster relocation error
        - Btrfs: check for the full sync flag while holding the inode lock during
          fsync
        - btrfs: tracepoints: Fix bad entry members of qgroup events
        - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
        - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
        - xen/netback: fix error path of xenvif_connect_data()
        - PCI: PM: Fix pci_power_up()
        - blk-rq-qos: fix first node deletion of rq_qos_del()
        - RDMA/cxgb4: Do not dma memory off of the stack
        - drm: Clear the fence pointer when writeback job signaled
        - clk: ti: dra7: Fix mcasp8 clock bits
        - ARM: dts: Fix wrong clocks for dra7 mcasp
        - scsi: qla2xxx: Fix N2N link reset
        - scsi: qla2xxx: Fix N2N link up fail
        - ARM: dts: Fix gpio0 flags for am335x-icev2
        - ARM: OMAP2+: Add missing LCDC midlemode for am335x
        - nvme-tcp: fix wrong stop condition in io_work
        - nvme-pci: Save PCI state before putting drive into deepest state
        - nvme: fix an error code in nvme_init_subsystem()
        - nvme-rdma: Fix max_hw_sectors calculation
        - Added QUIRKs for ADATA XPG SX8200 Pro 512GB
        - nvme-rdma: fix possible use-after-free in connect timeout
        - blk-mq: honor IO scheduler for multiqueue devices
        - loop: change queue block size to match when using DIO
        - drm/amdgpu: fix multiple memory leaks in acp_hw_init
        - drm/amd/display: memory leak
        - s390/mm: fix -Wunused-but-set-variable warnings
        - net: phy: fix write to mii-ctrl1000 register
        - Convert filldir[64]() from __put_user() to unsafe_put_user()
        - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
        - Make filldir[64]() verify the directory entry filename is valid
        - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to
          it
        - filldir[64]: remove WARN_ON_ONCE() for bad directory entries
        - rxrpc: Fix possible NULL pointer access in ICMP handling
        - sched: etf: Fix ordering of packets with same txtime
        - net: aquantia: correctly handle macvlan and multicast coexistence
        - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
        - net: phy: micrel: Update KSZ87xx PHY name
        - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
        - rxrpc: use rcu protection while reading sk->sk_user_data
        - binder: Don't modify VMA bounds in ->mmap handler
        - drm/amdgpu/vce: fix allocation size in enc ring test
        - drm/amdgpu/vcn: fix allocation size in enc ring test
        - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
        - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
        - mmc: mxs: fix flags passed to dmaengine_prep_slave_sg
        - mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
        - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
        - zram: fix race between backing_dev_show and backing_dev_store
        - s390/zcrypt: fix memleak at release
        - fs/dax: Fix pmd vs pte conflict detection
        - x86/hyperv: Make vapic support x2apic mode
        - btrfs: tracepoints: Fix wrong parameter order for qgroup events
        - ceph: just skip unrecognized info in ceph_reply_info_extra
        - opp: of: drop incorrect lockdep_assert_held()
      * Colour banding in Lenovo G50-80 laptop display (i915) (LP: #1819968) //
        Disco update: upstream stable patchset 2019-11-13 (LP: #1852459)
        - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
    
     -- Sultan Alsawaf <email address hidden>  Wed, 04 Dec 2019 10:31:25 -0800
  • linux-aws-5.0 (5.0.0-1022.25~18.04.1) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1022.25~18.04.1 -proposed tracker (LP: #1852235)
    
      * Packaging resync (LP: #1786013)
        - [Packaging] Prepare signed AWS kernel images
        - [Packaging] Remove old update script
    
      [ Ubuntu: 5.0.0-1022.25 ]
    
      * disco/linux-aws: 5.0.0-1022.25 -proposed tracker (LP: #1852236)
      * Disco update: upstream stable patchset 2019-11-01 (LP: #1850974)
        - aws: [Config] Remove the rio500 driver
      * autofs module missing from linux-modules in 5+ kernels (LP: #1850950)
        - [Config] Update autofs4 path in aws.inclusion-list
      * ARM CPU support update (LP: #1850675)
        - arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs()
        - arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32
        - arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT
        - arm64: Add part number for Neoverse N1
        - arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1
        - arm64: Handle erratum 1418040 as a superset of erratum 1188873
        - arm64: Update silicon-errata.txt for Neoverse-N1 #1349291
        - SAUCE: arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1
          #1542419
        - SAUCE: arm64: Fake the IminLine size on systems affected by Neoverse-N1
          #1542419
        - SAUCE: arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space
        - SAUCE: arm64: ftrace: Ensure synchronisation in PLT setup for Neoverse-N1
          #1542419
        - [Config] updateconfigs for arm64 errata
      * disco/linux: 5.0.0-37.40 -proposed tracker (LP: #1852253)
      * System hangs at early boot (LP: #1851216)
        - x86/timer: Skip PIT initialization on modern chipsets
      * drm/i915: Add support for another CMP-H PCH (LP: #1848491)
        - drm/i915/cml: Add second PCH ID for CMP
      * Some EFI systems fail to boot in efi_init() when booted via maas
        (LP: #1851810)
        - efi: efi_get_memory_map -- increase map headroom
      * seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test (LP: #1849281)
        - SAUCE: seccomp: avoid overflow in implicit constant conversion
        - SAUCE: seccomp: rework define for SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: fix SECCOMP_USER_NOTIF_FLAG_CONTINUE test
      * dkms artifacts may expire from the pool (LP: #1850958)
        - [Packaging] dkms -- try launchpad librarian for pool downloads
        - [Packaging] dkms -- dkms-build quieten wget verbiage
      * update ENA driver to version 2.1.0 (LP: #1850175)
        - net: ena: fix swapped parameters when calling
          ena_com_indirect_table_fill_entry
        - net: ena: fix: Free napi resources when ena_up() fails
        - net: ena: fix incorrect test of supported hash function
        - net: ena: fix return value of ena_com_config_llq_info()
        - net: ena: improve latency by disabling adaptive interrupt moderation by
          default
        - net: ena: fix ena_com_fill_hash_function() implementation
        - net: ena: add handling of llq max tx burst size
        - net: ena: ethtool: add extra properties retrieval via get_priv_flags
        - net: ena: replace free_tx/rx_ids union with single free_ids field in
          ena_ring
        - net: ena: arrange ena_probe() function variables in reverse christmas tree
        - net: ena: add newline at the end of pr_err prints
        - net: ena: documentation: update ena.txt
        - net: ena: allow automatic fallback to polling mode
        - net: ena: add support for changing max_header_size in LLQ mode
        - net: ena: optimise calculations for CQ doorbell
        - net: ena: add good checksum counter
        - net: ena: use dev_info_once instead of static variable
        - net: ena: add MAX_QUEUES_EXT get feature admin command
        - net: ena: enable negotiating larger Rx ring size
        - net: ena: make ethtool show correct current and max queue sizes
        - net: ena: allow queue allocation backoff when low on memory
        - net: ena: add ethtool function for changing io queue sizes
        - net: ena: remove inline keyword from functions in *.c
        - net: ena: update driver version from 2.0.3 to 2.1.0
        - net: ena: Fix bug where ring allocation backoff stopped too late
        - Revert "net: ena: ethtool: add extra properties retrieval via
          get_priv_flags"
        - net: ena: don't wake up tx queue when down
        - net: ena: clean up indentation issue
      * Add Intel Comet Lake ethernet support (LP: #1848555)
        - SAUCE: e1000e: Add support for Comet Lake
      * Intel Wireless AC 3168 on Eoan complaints FW error in SYNC CMD
        GEO_TX_POWER_LIMIT (LP: #1846016)
        - iwlwifi: exclude GEO SAR support for 3168
      * tsc marked unstable after entered PC10 on Intel CoffeeLake (LP: #1840239)
        - SAUCE: x86/intel: Disable HPET on Intel Coffe Lake platforms
        - SAUCE: x86/intel: Disable HPET on Intel Ice Lake platforms
      * cloudimg: no iavf/i40evf module so no network available with SR-IOV enabled
        cloud (LP: #1848481)
        - [Packaging] include iavf/i40evf in generic
      * High power consumption using 5.0.0-25-generic (LP: #1840835)
        - PCI: Add a helper to check Power Resource Requirements _PR3 existence
        - ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a
          driver
        - PCI: Fix missing inline for pci_pr3_present()
      * CML CPUIDs (LP: #1843794)
        - x86/cpu: Add Comet Lake to the Intel CPU models header
      * shiftfs: prevent exceeding project quotas (LP: #1849483)
        - SAUCE: shiftfs: drop CAP_SYS_RESOURCE from effective capabilities
      * shiftfs: fix fallocate() (LP: #1849482)
        - SAUCE: shiftfs: setup correct s_maxbytes limit
      * Bluetooth: hidp: Fix assumptions on the return value of hidp_send_message
        (LP: #1850443)
        - Bluetooth: hidp: Fix assumptions on the return value of hidp_send_message
      * [SRU][B/OEM-B/OEM-OSP1/D/E] UBUNTU: SAUCE: add rtl623 codec support and fix
        mic issues (LP: #1850599)
        - SAUCE: ALSA: hda/realtek - Add support for ALC623
        - SAUCE: ALSA: hda/realtek - Fix 2 front mics of codec 0x623
      * NFSv4.1: Interrupted connections cause high bandwidth RPC ping-pong between
        client and server (LP: #1828978)
        - NFSv4.1: Avoid false retries when RPC calls are interrupted
      * SUNRPC: Use after free when GSSD credentials are invalid causes oops
        (LP: #1842037)
        - SUNRPC: Clean up
        - SUNRPC: Fix a use after free when a server rejects the RPCSEC_GSS credential
      * Suppress "hid_field_extract() called with n (192) > 32!" message floods
        (LP: #1850600)
        - HID: core: reformat and reduce hid_printk macros
        - HID: core: Add printk_once variants to hid_warn() etc
        - HID: core: fix dmesg flooding if report field larger than 32bit
      * ubuntu-aufs-modified mmap_region() breaks refcounting in overlayfs/shiftfs
        error path (LP: #1850994) // CVE-2019-15794
        - SAUCE: shiftfs: Restore vm_file value when lower fs mmap fails
        - SAUCE: ovl: Restore vm_file value when lower fs mmap fails
      * s_iflags overlap prevents unprivileged overlayfs mounts (LP: #1851677)
        - SAUCE: fs: Move SB_I_NOSUID to the top of s_iflags
      * root can lift kernel lockdown (LP: #1851380)
        - SAUCE: (efi-lockdown) Really don't allow lifting lockdown from userspace
      * Disco update: upstream stable patchset 2019-11-01 (LP: #1850974)
        - panic: ensure preemption is disabled during panic()
        - f2fs: use EINVAL for superblock with invalid magic
        - [Config] updateconfigs for USB_RIO500
        - USB: rio500: Remove Rio 500 kernel driver
        - USB: yurex: Don't retry on unexpected errors
        - USB: yurex: fix NULL-derefs on disconnect
        - USB: usb-skeleton: fix runtime PM after driver unbind
        - USB: usb-skeleton: fix NULL-deref on disconnect
        - xhci: Fix false warning message about wrong bounce buffer write length
        - xhci: Prevent device initiated U1/U2 link pm if exit latency is too long
        - xhci: Check all endpoints for LPM timeout
        - xhci: Fix USB 3.1 capability detection on early xHCI 1.1 spec based hosts
        - usb: xhci: wait for CNR controller not ready bit in xhci resume
        - xhci: Prevent deadlock when xhci adapter breaks during init
        - USB: adutux: fix use-after-free on disconnect
        - USB: adutux: fix NULL-derefs on disconnect
        - USB: adutux: fix use-after-free on release
        - USB: iowarrior: fix use-after-free on disconnect
        - USB: iowarrior: fix use-after-free on release
        - USB: iowarrior: fix use-after-free after driver unbind
        - USB: usblp: fix runtime PM after driver unbind
        - USB: chaoskey: fix use-after-free on release
        - USB: ldusb: fix NULL-derefs on driver unbind
        - serial: uartlite: fix exit path null pointer
        - USB: serial: keyspan: fix NULL-derefs on open() and write()
        - USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20
        - USB: serial: option: add Telit FN980 compositions
        - USB: serial: option: add support for Cinterion CLS8 devices
        - USB: serial: fix runtime PM after driver unbind
        - USB: usblcd: fix I/O after disconnect
        - USB: microtek: fix info-leak at probe
        - USB: dummy-hcd: fix power budget for SuperSpeed mode
        - usb: renesas_usbhs: gadget: Do not discard queues in
          usb_ep_set_{halt,wedge}()
        - usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior
        - USB: legousbtower: fix slab info leak at probe
        - USB: legousbtower: fix deadlock on disconnect
        - USB: legousbtower: fix potential NULL-deref on disconnect
        - USB: legousbtower: fix open after failed reset request
        - USB: legousbtower: fix use-after-free on release
        - mei: me: add comet point (lake) LP device ids
        - mei: avoid FW version request on Ibex Peak and earlier
        - gpio: eic: sprd: Fix the incorrect EIC offset when toggling
        - Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc
        - staging: vt6655: Fix memory leak in vt6655_probe
        - iio: adc: hx711: fix bug in sampling of data
        - iio: adc: ad799x: fix probe error handling
        - iio: adc: axp288: Override TS pin bias current for some models
        - iio: light: opt3001: fix mutex unlock race
        - efivar/ssdt: Don't iterate over EFI vars if no SSDT override was specified
        - perf llvm: Don't access out-of-scope array
        - perf inject jit: Fix JIT_CODE_MOVE filename
        - CIFS: Gracefully handle QueryInfo errors during open
        - CIFS: Force revalidate inode when dentry is stale
        - CIFS: Force reval dentry if LOOKUP_REVAL flag is set
        - kernel/sysctl.c: do not override max_threads provided by userspace
        - mm/vmpressure.c: fix a signedness bug in vmpressure_register_event()
        - firmware: google: increment VPD key_len properly
        - gpiolib: don't clear FLAG_IS_OUT when emulating open-drain/open-source
        - iio: adc: stm32-adc: move registers definitions
        - iio: adc: stm32-adc: fix a race when using several adcs with dma and irq
        - cifs: use cifsInodeInfo->open_file_lock while iterating to avoid a panic
        - btrfs: fix incorrect updating of log root tree
        - btrfs: fix uninitialized ret in ref-verify
        - NFS: Fix O_DIRECT accounting of number of bytes read/written
        - MIPS: Disable Loongson MMI instructions for kernel build
        - MIPS: elf_hwcap: Export userspace ASEs
        - ACPI/PPTT: Add support for ACPI 6.3 thread flag
        - arm64: topology: Use PPTT to determine if PE is a thread
        - Fix the locking in dcache_readdir() and friends
        - media: stkwebcam: fix runtime PM after driver unbind
        - arm64/sve: Fix wrong free for task->thread.sve_state
        - tracing/hwlat: Report total time spent in all NMIs during the sample
        - tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency
        - ftrace: Get a reference counter for the trace_array on filter files
        - tracing: Get trace_array reference for available_tracers files
        - hwmon: Fix HWMON_P_MIN_ALARM mask
        - x86/asm: Fix MWAITX C-state hint value
        - perf/hw_breakpoint: Fix arch_hw_breakpoint use-before-initialization
        - serial: uartps: Fix uartps_major handling
        - usb: typec: tcpm: usb: typec: tcpm: Fix a signedness bug in
          tcpm_fw_get_caps()
        - staging: bcm2835-audio: Fix draining behavior regression
        - staging: rtl8188eu: fix HighestRate check in odm_ARFBRefresh_8188E()
        - iio: accel: adxl372: Fix/remove limitation for FIFO samples
        - iio: accel: adxl372: Fix push to buffers lost samples
        - iio: accel: adxl372: Perform a reset at start up
        - selinux: fix context string corruption in convert_context()
        - mm/z3fold.c: claim page in the beginning of free
        - mm/page_alloc.c: fix a crash in free_pages_prepare()
        - gpio: fix getting nonexclusive gpiods from DT
        - btrfs: fix balance convert to single on 32-bit host CPUs
        - Btrfs: fix memory leak due to concurrent append writes with fiemap
        - RDMA/vmw_pvrdma: Free SRQ only once
        - drm/i915: Whitelist COMMON_SLICE_CHICKEN2
        - mtd: rawnand: au1550nd: Fix au_read_buf16() prototype
      * Suspend stopped working from 4.4.0-157 onwards (LP: #1844021) // Disco
        update: upstream stable patchset 2019-11-01 (LP: #1850974)
        - xhci: Increase STS_SAVE timeout in xhci_suspend()
      * Disco update: upstream stable patchset 2019-10-31 (LP: #1850870)
        - s390/process: avoid potential reading of freed stack
        - KVM: s390: Test for bad access register and size at the start of S390_MEM_OP
        - s390/topology: avoid firing events before kobjs are created
        - s390/cio: exclude subchannels with no parent from pseudo check
        - KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts
        - KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores
        - KVM: PPC: Book3S HV: Don't lose pending doorbell request on migration on P9
        - KVM: X86: Fix userspace set invalid CR4
        - nbd: fix max number of supported devs
        - PM / devfreq: tegra: Fix kHz to Hz conversion
        - ASoC: Define a set of DAPM pre/post-up events
        - ASoC: sgtl5000: Improve VAG power and mute control
        - powerpc/mce: Fix MCE handling for huge pages
        - powerpc/mce: Schedule work from irq_work
        - powerpc/powernv: Restrict OPAL symbol map to only be readable by root
        - powerpc/powernv/ioda: Fix race in TCE level allocation
        - powerpc/book3s64/mm: Don't do tlbie fixup for some hardware revisions
        - can: mcp251x: mcp251x_hw_reset(): allow more time after a reset
        - tools lib traceevent: Fix "robust" test of do_generate_dynamic_list_file
        - crypto: qat - Silence smp_processor_id() warning
        - crypto: skcipher - Unmap pages after an external error
        - crypto: cavium/zip - Add missing single_release()
        - crypto: caam - fix concurrency issue in givencrypt descriptor
        - crypto: ccree - account for TEE not ready to report
        - crypto: ccree - use the full crypt length value
        - MIPS: Treat Loongson Extensions as ASEs
        - power: supply: sbs-battery: use correct flags field
        - power: supply: sbs-battery: only return health when battery present
        - tracing: Make sure variable reference alias has correct var_ref_idx
        - usercopy: Avoid HIGHMEM pfn warning
        - timer: Read jiffies once when forwarding base clk
        - PCI: vmd: Fix shadow offsets to reflect spec changes
        - watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout
        - perf stat: Fix a segmentation fault when using repeat forever
        - drm/omap: fix max fclk divider for omap36xx
        - drm/msm/dsi: Fix return value check for clk_get_parent
        - drm/nouveau/kms/nv50-: Don't create MSTMs for eDP connectors
        - drm/i915/gvt: update vgpu workload head pointer correctly
        - mmc: sdhci: improve ADMA error reporting
        - mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence
        - Revert "locking/pvqspinlock: Don't wait if vCPU is preempted"
        - xen/xenbus: fix self-deadlock after killing user process
        - ieee802154: atusb: fix use-after-free at disconnect
        - s390/cio: avoid calling strlen on null pointer
        - cfg80211: initialize on-stack chandefs
        - ima: always return negative code for error
        - ima: fix freeing ongoing ahash_request
        - fs: nfs: Fix possible null-pointer dereferences in encode_attrs()
        - 9p: Transport error uninitialized
        - 9p: avoid attaching writeback_fid on mmap with type PRIVATE
        - xen/pci: reserve MCFG areas earlier
        - ceph: fix directories inode i_blkbits initialization
        - ceph: reconnect connection if session hang in opening state
        - watchdog: aspeed: Add support for AST2600
        - netfilter: nf_tables: allow lookups in dynamic sets
        - drm/amdgpu: Fix KFD-related kernel oops on Hawaii
        - drm/amdgpu: Check for valid number of registers to read
        - pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors
        - pwm: stm32-lp: Add check in case requested period cannot be achieved
        - x86/purgatory: Disable the stackleak GCC plugin for the purgatory
        - ntb: point to right memory window index
        - thermal: Fix use-after-free when unregistering thermal zone device
        - thermal_hwmon: Sanitize thermal_zone type
        - libnvdimm/region: Initialize bad block for volatile namespaces
        - fuse: fix memleak in cuse_channel_open
        - libnvdimm/nfit_test: Fix acpi_handle redefinition
        - sched/membarrier: Call sync_core only before usermode for same mm
        - sched/membarrier: Fix private expedited registration check
        - sched/core: Fix migration to invalid CPU in __set_cpus_allowed_ptr()
        - perf build: Add detection of java-11-openjdk-devel package
        - kernel/elfcore.c: include proper prototypes
        - perf unwind: Fix libunwind build failure on i386 systems
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed
        - KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the
          VP
        - KVM: nVMX: Fix consistency check on injected exception error code
        - nbd: fix crash when the blksize is zero
        - powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt()
        - powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag
        - tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure
        - tick: broadcast-hrtimer: Fix a race in bc_set_next
        - perf tools: Fix segfault in cpu_cache_level__read()
        - perf stat: Reset previous counts on repeat with interval
        - riscv: Avoid interrupts being erroneously enabled in handle_exception()
        - arm64: Add sysfs vulnerability show for spectre-v1
        - arm64: add sysfs vulnerability show for meltdown
        - arm64: enable generic CPU vulnerabilites support
        - arm64: Always enable ssb vulnerability detection
        - arm64: Provide a command line to disable spectre_v2 mitigation
        - arm64: Advertise mitigation of Spectre-v2, or lack thereof
        - arm64: Always enable spectre-v2 vulnerability detection
        - arm64: add sysfs vulnerability show for spectre-v2
        - arm64: add sysfs vulnerability show for speculative store bypass
        - arm64: ssbs: Don't treat CPUs with SSBS as unaffected by SSB
        - arm64: Use firmware to detect CPUs that are not affected by Spectre-v2
        - arm64/speculation: Support 'mitigations=' cmdline option
        - vfs: Fix EOVERFLOW testing in put_compat_statfs64
        - coresight: etm4x: Use explicit barriers on enable/disable
        - staging: erofs: fix an error handling in erofs_readdir()
        - staging: erofs: some compressed cluster should be submitted for corrupted
          images
        - staging: erofs: add two missing erofs_workgroup_put for corrupted images
        - staging: erofs: detect potential multiref due to corrupted images
        - cfg80211: add and use strongly typed element iteration macros
        - cfg80211: Use const more consistently in for_each_element macros
        - nl80211: validate beacon head
        - KVM: s390: fix __insn32_query() inline assembly
        - crypto: caam/qi - fix error handling in ERN handler
        - PCI: vmd: Fix config addressing when using bus offsets
        - drm/atomic: Reject FLIP_ASYNC unconditionally
        - drm/atomic: Take the atomic toys away from X
        - drm/i915: to make vgpu ppgtt notificaiton as atomic operation
        - mac80211: keep BHs disabled while calling drv_tx_wake_queue()
        - mmc: tegra: Implement ->set_dma_mask()
        - mmc: sdhci: Let drivers define their DMA mask
        - libnvdimm/altmap: Track namespace boundaries in altmap
        - DTS: ARM: gta04: introduce legacy spi-cs-high to make display work again
        - xprtrdma: Toggle XPRT_CONGESTED in xprtrdma's slot methods
        - fuse: fix request limit
        - ceph: fetch cap_gen under spinlock in ceph_add_cap
        - perf probe: Fix to clear tev->nargs in clear_probe_trace_event()
        - selftests/seccomp: fix build on older kernels
        - iommu/amd: Fix downgrading default page-sizes in alloc_pte()
        - bpf: Fix bpf_event_output re-entry issue
        - i2c: qcom-geni: Disable DMA processing on the Lenovo Yoga C630
        - mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions
        - nfp: abm: fix memory leak in nfp_abm_u32_knode_replace
        - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
        - libnvdimm: prevent nvdimm from requesting key when security is disabled
      * Ubuntu-5.0.0-33.35 introduces KVM regression with old Intel CPUs and Linux
        guests (LP: #1851709)
        - Revert "KVM: x86: Manually calculate reserved bits when loading PDPTRS"
      * Incomplete i915 fix for 64-bit x86 kernels (LP: #1852141) // CVE-2019-0155
        - SAUCE: drm/i915/cmdparser: Fix jump whitelist clearing
    
     -- Connor Kuehl <email address hidden>  Fri, 15 Nov 2019 11:45:23 -0800
  • linux-aws-5.0 (5.0.0-1021.24~18.04.1) bionic; urgency=medium
    
      [ Ubuntu: 5.0.0-1021.24 ]
    
      * CVE-2019-11135
        - [Config] aws: Disable TSX by default when possible
      * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
        setting (LP: #1849682)
        - SAUCE: Fix revert "md/raid0: avoid RAID0 data corruption due to layout
          confusion."
      * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
        - SAUCE: shiftfs: Correct id translation for lower fs operations
        - SAUCE: shiftfs: prevent type confusion
        - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
      * CVE-2018-12207
        - kvm: Convert kvm_lock to a mutex
        - kvm: x86: Do not release the page inside mmu_set_spte()
        - KVM: x86: make FNAME(fetch) and __direct_map more similar
        - KVM: x86: remove now unneeded hugepage gfn adjustment
        - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON
        - KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
        - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
        - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
          active
        - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
        - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
        - SAUCE: kvm: Add helper function for creating VM worker threads
        - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
        - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
        - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
      * CVE-2019-11135
        - KVM: x86: use Intel speculation bugs and features as derived in generic x86
          code
        - x86/msr: Add the IA32_TSX_CTRL MSR
        - x86/cpu: Add a helper function x86_read_arch_cap_msr()
        - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
        - x86/speculation/taa: Add mitigation for TSX Async Abort
        - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
        - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
        - x86/tsx: Add "auto" option to the tsx= cmdline parameter
        - x86/speculation/taa: Add documentation for TSX Async Abort
        - x86/tsx: Add config options to set tsx=on|off|auto
        - SAUCE: x86/speculation/taa: Call tsx_init()
        - [Config] Disable TSX by default when possible
      * CVE-2019-0154
        - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
        - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
      * CVE-2019-0155
        - SAUCE: drm/i915: Rename gen7 cmdparser tables
        - SAUCE: drm/i915: Disable Secure Batches for gen6+
        - SAUCE: drm/i915: Remove Master tables from cmdparser
        - SAUCE: drm/i915: Add support for mandatory cmdparsing
        - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
        - SAUCE: drm/i915: Allow parsing of unsized batches
        - SAUCE: drm/i915: Add gen9 BCS cmdparsing
        - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
        - SAUCE: drm/i915/cmdparser: Add support for backward jumps
        - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching
      * disco/linux: <version to be filled> -proposed tracker (LP: #1850574)
      * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
        setting (LP: #1849682)
        - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
    
    linux-aws-5.0 (5.0.0-1020.22~18.04.1) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1020.22~18.04.1 -proposed tracker (LP: #1848983)
    
      [ Ubuntu: 5.0.0-1020.22 ]
    
      * disco/linux-aws: 5.0.0-1020.22 -proposed tracker (LP: #1848984)
      * disco/linux: 5.0.0-33.35 -proposed tracker (LP: #1849003)
      * Disco update: upstream stable patchset 2019-10-18 (LP: #1848817)
        - tpm: use tpm_try_get_ops() in tpm-sysfs.c.
        - drm/bridge: tc358767: Increase AUX transfer length limit
        - drm/panel: simple: fix AUO g185han01 horizontal blanking
        - video: ssd1307fb: Start page range at page_offset
        - drm/stm: attach gem fence to atomic state
        - drm/panel: check failure cases in the probe func
        - drm/rockchip: Check for fast link training before enabling psr
        - drm/radeon: Fix EEH during kexec
        - gpu: drm: radeon: Fix a possible null-pointer dereference in
          radeon_connector_set_property()
        - PCI: rpaphp: Avoid a sometimes-uninitialized warning
        - ipmi_si: Only schedule continuously in the thread in maintenance mode
        - clk: qoriq: Fix -Wunused-const-variable
        - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
        - drm/amd/display: fix issue where 252-255 values are clipped
        - drm/amd/display: reprogram VM config when system resume
        - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA
          window
        - clk: actions: Don't reference clk_init_data after registration
        - clk: sirf: Don't reference clk_init_data after registration
        - clk: sprd: Don't reference clk_init_data after registration
        - clk: zx296718: Don't reference clk_init_data after registration
        - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
        - powerpc/rtas: use device model APIs and serialization during LPM
        - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
          function
        - powerpc/pseries/mobility: use cond_resched when updating device tree
        - pinctrl: tegra: Fix write barrier placement in pmx_writel
        - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
        - vfio_pci: Restore original state on release
        - drm/nouveau/volt: Fix for some cards having 0 maximum voltage
        - pinctrl: amd: disable spurious-firing GPIO IRQs
        - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - drm/amd/display: support spdif
        - drm/amdgpu/si: fix ASIC tests
        - powerpc/64s/exception: machine check use correct cfar for late handler
        - pstore: fs superblock limits
        - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
        - powerpc/pseries: correctly track irq state in default idle
        - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
        - arm64: fix unreachable code issue with cmpxchg
        - clk: at91: select parent if main oscillator or bypass is enabled
        - powerpc: dump kernel log before carrying out fadump or kdump
        - mbox: qcom: add APCS child device for QCS404
        - clk: sprd: add missing kfree
        - scsi: core: Reduce memory required for SCSI logging
        - dma-buf/sw_sync: Synchronize signal vs syncpt free
        - ext4: fix potential use after free after remounting with noblock_validity
        - MIPS: Ingenic: Disable broken BTB lookup optimization.
        - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
        - i2c-cht-wc: Fix lockdep warning
        - PCI: tegra: Fix OF node reference leak
        - HID: wacom: Fix several minor compiler warnings
        - livepatch: Nullify obj->mod in klp_module_coming()'s error path
        - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
          writes
        - soundwire: intel: fix channel number reported by hardware
        - ARM: 8875/1: Kconfig: default to AEABI w/ Clang
        - rtc: snvs: fix possible race condition
        - rtc: pcf85363/pcf85263: fix regmap error in set_time
        - HID: apple: Fix stuck function keys when using FN
        - PCI: rockchip: Propagate errors for optional regulators
        - PCI: histb: Propagate errors for optional regulators
        - PCI: imx6: Propagate errors for optional regulators
        - PCI: exynos: Propagate errors for optional PHYs
        - security: smack: Fix possible null-pointer dereferences in
          smack_socket_sock_rcv_skb()
        - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
          address
        - fat: work around race with userspace's read via blockdev while mounting
        - pktcdvd: remove warning on attempting to register non-passthrough dev
        - hypfs: Fix error number left in struct pointer member
        - crypto: hisilicon - Fix double free in sec_free_hw_sgl()
        - kbuild: clean compressed initramfs image
        - ocfs2: wait for recovering done after direct unlock request
        - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
        - arm64: consider stack randomization for mmap base only when necessary
        - mips: properly account for stack randomization and stack guard gap
        - arm: properly account for stack randomization and stack guard gap
        - arm: use STACK_TOP when computing mmap base address
        - bpf: fix use after free in prog symbol exposure
        - cxgb4:Fix out-of-bounds MSI-X info array access
        - erspan: remove the incorrect mtu limit for erspan
        - hso: fix NULL-deref on tty open
        - ipv6: drop incoming packets having a v4mapped source address
        - ipv6: Handle missing host route in __ipv6_ifa_notify
        - net: ipv4: avoid mixed n_redirects and rate_tokens usage
        - net: qlogic: Fix memory leak in ql_alloc_large_buffers
        - net: Unpublish sk from sk_reuseport_cb before call_rcu
        - nfc: fix memory leak in llcp_sock_bind()
        - qmi_wwan: add support for Cinterion CLS8 devices
        - rxrpc: Fix rxrpc_recvmsg tracepoint
        - sch_dsmark: fix potential NULL deref in dsmark_init()
        - udp: fix gso_segs calculations
        - vsock: Fix a lockdep warning in __vsock_release()
        - net: dsa: rtl8366: Check VLAN ID and not ports
        - udp: only do GSO if # of segs > 1
        - net/rds: Fix error handling in rds_ib_add_one()
        - xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
        - tipc: fix unlimited bundling of small messages
        - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
        - soundwire: Kconfig: fix help format
        - soundwire: fix regmap dependencies and align with other serial links
        - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
        - smack: use GFP_NOFS while holding inode_smack::smk_lock
        - NFC: fix attrs checks in netlink interface
        - kexec: bail out upon SIGKILL when allocating memory.
        - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
        - drm/vkms: Fix crc worker races
        - drm/vkms: Avoid assigning 0 for possible_crtc
        - drm/amd/display: add monitor patch to add T7 delay
        - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
        - clk: imx8mq: Mark AHB clock as critical
        - drm/amd/display: Fix frames_to_insert math
        - clk: meson: axg-audio: Don't reference clk_init_data after registration
        - powerpc/64s/radix: Fix memory hotplug section page table creation
        - selftests/powerpc: Retry on host facility unavailable
        - powerpc/eeh: Clean up EEH PEs after recovery finishes
        - mailbox: mediatek: cmdq: clear the event in cmdq initial flow
        - clk: Make clk_bulk_get_all() return a valid "id"
        - f2fs: fix to drop meta/node pages during umount
        - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
        - PCI: pci-hyperv: Fix build errors on non-SYSFS config
        - PCI: Add pci_info_ratelimited() to ratelimit PCI separately
        - PCI: Use static const struct, not const static struct
        - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
        - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o
          lapic_in_kernel
        - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
        - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
        - ARM: dts: dir685: Drop spi-cpol from the display
        - mm: add dummy can_do_mlock() helper
        - [Config] updateconfigs for SOUNDWIRE
      * [CML] New device IDs for CML-U (LP: #1843774)
        - spi-nor: intel-spi: Add support for Intel Comet Lake SPI serial flash
      * [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
        - HID: intel-ish-hid: Add Comet Lake PCI device ID
      * CVE-2019-17666
        - SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
        - SAUCE: rtlwifi: Fix potential overflow on P2P code
      * md raid0/linear doesn't show error state if an array member is removed and
        allows successful writes (LP: #1847773)
        - md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
      * seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE    (LP: #1847744)
        - SAUCE: seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: test SECCOMP_USER_NOTIF_FLAG_CONTINUE
      * Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
        to no (LP: #1848492)
        - [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
          from yes to no
      * fdatasync performance regression on 5.0 kernels (LP: #1847641)
        - blk-wbt: fix performance regression in wbt scale_up/scale_down
      * bcache: Performance degradation when querying priority_stats (LP: #1840043)
        - bcache: add cond_resched() in __bch_cache_cmp()
      * Add installer support for iwlmvm adapters (LP: #1848236)
        - d-i: Add iwlmvm to nic-modules
      * Check for CPU Measurement sampling (LP: #1847590)
        - s390/cpumsf: Check for CPU Measurement sampling
      * Disco update: upstream stable patchset 2019-10-16 (LP: #1848367)
        - arcnet: provide a buffer big enough to actually receive packets
        - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
        - macsec: drop skb sk before calling gro_cells_receive
        - net/phy: fix DP83865 10 Mbps HDX loopback disable function
        - net: qrtr: Stop rx_worker before freeing node
        - net/sched: act_sample: don't push mac header on ip6gre ingress
        - net_sched: add max len check for TCA_KIND
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
        - ppp: Fix memory leak in ppp_write
        - sch_netem: fix a divide by zero in tabledist()
        - skge: fix checksum byte order
        - usbnet: ignore endpoints with invalid wMaxPacketSize
        - usbnet: sanity checking of packet sizes and device mtu
        - net: sched: fix possible crash in tcf_action_destroy()
        - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state
        - net/mlx5: Add device ID of upcoming BlueField-2
        - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs
        - ALSA: hda: Flush interrupts on disabling
        - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
        - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER
        - ASoC: sgtl5000: Fix of unmute outputs on probe
        - ASoC: sgtl5000: Fix charge pump source assignment
        - firmware: qcom_scm: Use proper types for dma mappings
        - dmaengine: bcm2835: Print error in case setting DMA mask fails
        - leds: leds-lp5562 allow firmware files up to the maximum length
        - media: dib0700: fix link error for dibx000_i2c_set_speed
        - media: mtk-cir: lower de-glitch counter for rc-mm protocol
        - media: exynos4-is: fix leaked of_node references
        - media: hdpvr: Add device num check and handling
        - media: i2c: ov5640: Check for devm_gpiod_get_optional() error
        - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint
        - sched/fair: Fix imbalance due to CPU affinity
        - sched/core: Fix CPU controller for !RT_GROUP_SCHED
        - x86/apic: Make apic_pending_intr_clear() more robust
        - sched/deadline: Fix bandwidth accounting at all levels after offline
          migration
        - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
          fails
        - x86/apic: Soft disable APIC before initializing it
        - ALSA: hda - Show the fatal CORB/RIRB error more clearly
        - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
          build_adc_controls()
        - EDAC/mc: Fix grain_bits calculation
        - media: iguanair: add sanity checks
        - base: soc: Export soc_device_register/unregister APIs
        - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
        - ia64:unwind: fix double free for mod->arch.init_unw_table
        - EDAC/altera: Use the proper type for the IRQ status bits
        - ASoC: rsnd: don't call clk_get_rate() under atomic context
        - arm64/prefetch: fix a -Wtype-limits warning
        - md/raid1: end bio when the device faulty
        - md: don't call spare_active in md_reap_sync_thread if all member devices
          can't work
        - md: don't set In_sync if array is frozen
        - media: media/platform: fsl-viu.c: fix build for MICROBLAZE
        - ACPI / processor: don't print errors for processorIDs == 0xff
        - loop: Add LOOP_SET_DIRECT_IO to compat ioctl
        - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
        - efi: cper: print AER info of PCIe fatal error
        - firmware: arm_scmi: Check if platform has released shmem before using
        - sched/fair: Use rq_lock/unlock in online_fair_sched_group
        - idle: Prevent late-arriving interrupts from disrupting offline
        - media: gspca: zero usb_buf on error
        - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
        - perf test vfs_getname: Disable ~/.perfconfig to get default output
        - media: mtk-mdp: fix reference count on old device tree
        - media: fdp1: Reduce FCP not found message level to debug
        - media: em28xx: modules workqueue not inited for 2nd device
        - media: rc: imon: Allow iMON RC protocol for ffdc 7e device
        - dmaengine: iop-adma: use correct printk format strings
        - perf record: Support aarch64 random socket_id assignment
        - media: vsp1: fix memory leak of dl on error return path
        - media: i2c: ov5645: Fix power sequence
        - media: omap3isp: Don't set streaming state on random subdevs
        - media: imx: mipi csi-2: Don't fail if initial state times-out
        - net: lpc-enet: fix printk format strings
        - m68k: Prevent some compiler warnings in Coldfire builds
        - ARM: dts: imx7d: cl-som-imx7: make ethernet work again
        - ARM: dts: imx7-colibri: disable HS400
        - media: radio/si470x: kill urb on error
        - media: hdpvr: add terminating 0 at end of string
        - ASoC: uniphier: Fix double reset assersion when transitioning to suspend
          state
        - tools headers: Fixup bitsperlong per arch includes
        - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
        - led: triggers: Fix a memory leak bug
        - nbd: add missing config put
        - media: mceusb: fix (eliminate) TX IR signal length limit
        - media: dvb-frontends: use ida for pll number
        - posix-cpu-timers: Sanitize bogus WARNONS
        - media: dvb-core: fix a memory leak bug
        - libperf: Fix alignment trap with xyarray contents in 'perf stat'
        - EDAC/amd64: Recognize DRAM device type ECC capability
        - EDAC/amd64: Decode syndrome before translating address
        - PM / devfreq: passive: Use non-devm notifiers
        - PM / devfreq: exynos-bus: Correct clock enable sequence
        - media: cec-notifier: clear cec_adap in cec_notifier_unregister
        - media: saa7146: add cleanup in hexium_attach()
        - media: cpia2_usb: fix memory leaks
        - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
        - perf trace beauty ioctl: Fix off-by-one error in cmd->string table
        - media: ov9650: add a sanity check
        - ASoC: es8316: fix headphone mixer volume table
        - ACPI / CPPC: do not require the _PSD method
        - sched/cpufreq: Align trace event behavior of fast switching
        - x86/apic/vector: Warn when vector space exhaustion breaks affinity
        - arm64: kpti: ensure patched kernel text is fetched from PoU
        - x86/mm/pti: Do not invoke PTI functions when PTI is disabled
        - ASoC: fsl_ssi: Fix clock control issue in master mode
        - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
        - nvmet: fix data units read and written counters in SMART log
        - nvme-multipath: fix ana log nsid lookup when nsid is not found
        - ALSA: firewire-motu: add support for MOTU 4pre
        - iommu/amd: Silence warnings under memory pressure
        - libata/ahci: Drop PCS quirk for Denverton and beyond
        - iommu/iova: Avoid false sharing on fq_timer_on
        - libtraceevent: Change users plugin directory
        - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
        - ACPI: custom_method: fix memory leaks
        - ACPI / PCI: fix acpi_pci_irq_enable() memory leak
        - closures: fix a race on wakeup from closure_sync
        - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
        - md/raid1: fail run raid1 array when active disk less than one
        - dmaengine: ti: edma: Do not reset reserved paRAM slots
        - kprobes: Prohibit probing on BUG() and WARN() address
        - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
        - x86/cpu: Add Tiger Lake to Intel family
        - platform/x86: intel_pmc_core: Do not ioremap RAM
        - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
        - raid5: don't set STRIPE_HANDLE to stripe which is in batch list
        - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
        - mmc: sdhci: Fix incorrect switch to HS mode
        - mmc: core: Add helper function to indicate if SDIO IRQs is enabled
        - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
        - raid5: don't increment read_errors on EILSEQ return
        - libertas: Add missing sentinel at end of if_usb.c fw_table
        - ALSA: hda - Drop unsol event handler for Intel HDMI codecs
        - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
        - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
        - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
        - btrfs: extent-tree: Make sure we only allocate extents from block groups
          with the same type
        - media: omap3isp: Set device on omap3isp subdevs
        - PM / devfreq: passive: fix compiler warning
        - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
        - ALSA: firewire-tascam: handle error code when getting current source of
          clock
        - ALSA: firewire-tascam: check intermediate state of clock status and retry
        - scsi: scsi_dh_rdac: zero cdb in send_mode_select()
        - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag
        - printk: Do not lose last line in kmsg buffer dump
        - IB/mlx5: Free mpi in mp_slave mode
        - IB/hfi1: Define variables as unsigned long to fix KASAN warning
        - randstruct: Check member structs in is_pure_ops_struct()
        - Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - ALSA: hda/realtek - PCI quirk for Medion E4254
        - blk-mq: add callback of .cleanup_rq
        - scsi: implement .cleanup_rq callback
        - powerpc/imc: Dont create debugfs files for cpu-less nodes
        - fuse: fix missing unlock_page in fuse_writepage()
        - parisc: Disable HP HSC-PCI Cards to prevent kernel crash
        - KVM: x86: always stop emulation on page fault
        - KVM: x86: set ctxt->have_exception in x86_decode_insn()
        - KVM: x86: Manually calculate reserved bits when loading PDPTRS
        - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
        - media: don't drop front-end reference count for ->detach
        - binfmt_elf: Do not move brk for INTERP-less ET_EXEC
        - ASoC: Intel: NHLT: Fix debug print format
        - ASoC: Intel: Skylake: Use correct function to access iomem space
        - ASoC: Intel: Fix use of potentially uninitialized variable
        - ARM: samsung: Fix system restart on S3C6410
        - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
        - arm64: tlb: Ensure we execute an ISB following walk cache invalidation
        - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
        - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
        - regulator: Defer init completion for a while after late_initcall
        - efifb: BGRT: Improve efifb_bgrt_sanity_check
        - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
        - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
        - memcg, kmem: do not fail __GFP_NOFAIL charges
        - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask
        - block: fix null pointer dereference in blk_mq_rq_timed_out()
        - smb3: allow disabling requesting leases
        - ovl: Fix dereferencing possible ERR_PTR()
        - ovl: filter of trusted xattr results in audit
        - btrfs: fix allocation of free space cache v1 bitmap pages
        - Btrfs: fix use-after-free when using the tree modification log
        - btrfs: Relinquish CPUs in btrfs_compare_trees
        - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
        - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve
          calls
        - Btrfs: fix race setting up and completing qgroup rescan workers
        - md/raid6: Set R5_ReadError when there is read failure on parity disk
        - md: don't report active array_state until after revalidate_disk() completes.
        - md: only call set_in_sync() when it is expected to succeed.
        - cfg80211: Purge frame registrations on iftype change
        - /dev/mem: Bail out upon SIGKILL.
        - ext4: fix warning inside ext4_convert_unwritten_extents_endio
        - ext4: fix punch hole for inline_data file systems
        - quota: fix wrong condition in is_quota_modification()
        - hwrng: core - don't wait on add_early_randomness()
        - i2c: riic: Clear NACK in tend isr
        - CIFS: fix max ea value size
        - CIFS: Fix oplock handling for SMB 2.1+ protocols
        - md/raid0: avoid RAID0 data corruption due to layout confusion.
        - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
        - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
          zone
        - drm/amd/display: Restore backlight brightness after system resume
        - selftests: Update fib_tests to handle missing ping6
        - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled
        - net/mlx5e: Fix traffic duplication in ethtool steering
        - media: vivid:add sanity check to avoid divide error and set value to 1 if 0.
        - media: vb2: reorder checks in vb2_poll()
        - media: vivid: work around high stack usage with clang
        - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic
          region
        - arm64: mm: free the initrd reserved memblock in a aligned manner
        - soc: amlogic: meson-clk-measure: protect measure with a mutex
        - RAS: Build debugfs.o only when enabled in Kconfig
        - ASoC: hdac_hda: fix page fault issue by removing race
        - perf tools: Fix paths in include statements
        - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling
        - media: i2c: tda1997x: prevent potential NULL pointer access
        - arm64/efi: Move variable assignments after SECTIONS
        - ARM: xscale: fix multi-cpu compilation
        - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE
        - x86/platform/intel/iosf_mbi Rewrite locking
        - powerpc/Makefile: Always pass --synthetic to nm if supported
        - ACPI / APEI: Release resources if gen_pool_add() fails
        - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91
        - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain
        - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9
        - PM / devfreq: Fix kernel oops on governor module load
        - media: aspeed-video: address a protential usage of an unitialized var
        - ASoC: Intel: Haswell: Adjust machine device private context
        - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
        - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs
        - block: make rq sector size accessible for block stats
        - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume
        - drm: fix module name in edid_firmware log message
        - zd1211rw: remove false assertion from zd_mac_clear()
        - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index()
        - kvm: Nested KVM MMUs need PAE root too
        - ARM: dts: logicpd-torpedo-baseboard: Fix missing video
        - ARM: omap2plus_defconfig: Fix missing video
        - ARM: dts: am3517-evm: Fix missing video
        - rcu/tree: Fix SCHED_FIFO params
        - fuse: fix beyond-end-of-page access in fuse_parse_cache()
        - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes
        - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
        - iommu/arm-smmu-v3: Disable detection of ATS and PRI
        - mt76: round up length on mt76_wr_copy
        - ath10k: fix channel info parsing for non tlv target
        - block: mq-deadline: Fix queue restart handling
        - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer
        - SUNRPC: Fix buffer handling of GSS MIC without slack
        - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint
        - fs: Export generic_fadvise()
        - mm: Handle MADV_WILLNEED through vfs_fadvise()
        - xfs: Fix stale data exposure when readahead races with hole punch
        - ipmi: move message error checking to avoid deadlock
      * ELAN469D touch pad not working (LP: #1795292) // Ubuntu won't boot on Dell
        Inspiron 7375 (LP: #1837688) // Disco update: upstream stable patchset
        2019-10-16 (LP: #1848367)
        - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems
      * intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
        - SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
      * Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
        - r8152: remove extra action copying ethernet address
        - r8152: Refresh MAC address during USBDEVFS_RESET
        - r8152: Set macpassthru in reset_resume callback
      * overlayfs: allow with shiftfs as underlay (LP: #1846272)
        - SAUCE: overlayfs: allow with shiftfs as underlay
      * [regression] NoNewPrivileges incompatible with Apparmor (LP: #1844186)
        - SAUCE: apparmor: fix nnp subset test for unconfined
      * PM / hibernate: fix potential memory corruption (LP: #1847118)
        - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
      * xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
        (LP: #1846470)
        - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
      * CVE-2019-17056
        - nfc: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17055
        - mISDN: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17054
        - appletalk: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17053
        - ieee802154: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17052
        - ax25: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-15098
        - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
      * Disco update: upstream stable patchset 2019-10-10 (LP: #1847663)
        - Revert "Bluetooth: validate BLE connection interval updates"
        - net/ibmvnic: free reset work of removed device from queue
        - powerpc/xive: Fix bogus error code returned by OPAL
        - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to
          undefined SW FP routines
        - HID: prodikeys: Fix general protection fault during probe
        - HID: sony: Fix memory corruption issue on cleanup.
        - HID: logitech: Fix general protection fault caused by Logitech driver
        - HID: hidraw: Fix invalid read in hidraw_ioctl
        - HID: Add quirk for HP X500 PIXART OEM mouse
        - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
        - crypto: talitos - fix missing break in switch statement
        - CIFS: fix deadlock in cached root handling
        - ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it
          enabled
        - ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
        - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support
        - ALSA: usb-audio: Add DSD support for EVGA NU Audio
        - ALSA: dice: fix wrong packet parameter for Alesis iO26
        - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
        - ALSA: hda - Apply AMD controller workaround for Raven platform
        - objtool: Clobber user CFLAGS variable
        - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
        - f2fs: check all the data segments against all node ones
        - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
        - bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
        - initramfs: don't free a non-existent initrd
        - Revert "f2fs: avoid out-of-range memory access"
        - dm zoned: fix invalid memory access
        - net/ibmvnic: Fix missing { in __ibmvnic_reset
        - f2fs: fix to do sanity check on segment bitmap of LFS curseg
        - drm: Flush output polling on shutdown
        - net: don't warn in inet diag when IPV6 is disabled
        - Bluetooth: btrtl: HCI reset on close for Realtek BT chip
        - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
        - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling
        - xfs: don't crash on null attr fork xfs_bmapi_read
        - netfilter: nft_socket: fix erroneous socket assignment
        - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
        - net_sched: check cops->tcf_block in tc_bind_tclass()
        - net/rds: An rds_sock is added too early to the hash table
        - net/rds: Check laddr_check before calling it
        - f2fs: use generic EFSBADCRC/EFSCORRUPTED
        - phy: qcom-qmp: Raise qcom_qmp_phy_enable() polling delay
        - drm/amd/display: Allow cursor async updates for framebuffer swaps
        - drm/amd/display: Skip determining update type for async updates
        - drm/amd/display: Don't replace the dc_state for fast updates
        - platform/x86: i2c-multi-instantiate: Derive the device name from parent
        - drm/dp: Add DP_DPCD_QUIRK_NO_SINK_COUNT
        - xfrm: policy: avoid warning splat when merging nodes
      * Disco update: upstream stable patchset 2019-10-01 (LP: #1846277)
        - netfilter: nf_flow_table: set default timeout after successful insertion
        - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
        - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
        - powerpc/mm/radix: Use the right page size for vmemmap mapping
        - USB: usbcore: Fix slab-out-of-bounds bug during device reset
        - media: tm6000: double free if usb disconnect while streaming
        - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
        - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
        - udp: correct reuseport selection with connected sockets
        - xen-netfront: do not assume sk_buff_head list is empty in error handling
        - net_sched: let qdisc_put() accept NULL pointer
        - firmware: google: check if size is valid when decoding VPD data
        - serial: sprd: correct the wrong sequence of arguments
        - tty/serial: atmel: reschedule TX after RX was started
        - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
        - ieee802154: hwsim: Fix error handle path in hwsim_init_module
        - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
        - ARM: dts: am57xx: Disable voltage switching for SD card
        - ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
        - bus: ti-sysc: Fix using configured sysc mask value
        - s390/bpf: fix lcgr instruction encoding
        - ARM: OMAP2+: Fix omap4 errata warning on other SoCs
        - ARM: dts: dra74x: Fix iodelay configuration for mmc3
        - ARM: OMAP1: ams-delta-fiq: Fix missing irq_ack
        - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
        - s390/bpf: use 32-bit index for tail calls
        - selftests/bpf: fix "bind{4, 6} deny specific IP & port" on s390
        - tools: bpftool: close prog FD before exit on showing a single program
        - fpga: altera-ps-spi: Fix getting of optional confd gpio
        - netfilter: ebtables: Fix argument order to ADD_COUNTER
        - netfilter: nft_flow_offload: missing netlink attribute policy
        - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
        - NFSv4: Fix return values for nfs4_file_open()
        - NFSv4: Fix return value in nfs_finish_open()
        - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
        - Kconfig: Fix the reference to the IDT77105 Phy driver in the description of
          ATM_NICSTAR_USE_IDT77105
        - xdp: unpin xdp umem pages in error path
        - qed: Add cleanup in qed_slowpath_start()
        - ARM: 8874/1: mm: only adjust sections of valid mm structures
        - batman-adv: Only read OGM2 tvlv_len after buffer len check
        - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
        - r8152: Set memory to all 0xFFs on failed reg reads
        - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
        - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
        - netfilter: nf_conntrack_ftp: Fix debug output
        - NFSv2: Fix eof handling
        - NFSv2: Fix write regression
        - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
          first symbol
        - cifs: set domainName when a domain-key is used in multiuser
        - cifs: Use kzfree() to zero out the password
        - usb: host: xhci-tegra: Set DMA mask correctly
        - ARM: 8901/1: add a criteria for pfn_valid of arm
        - ibmvnic: Do not process reset during or after device removal
        - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
        - i2c: designware: Synchronize IRQs when unregistering slave client
        - perf/x86/intel: Restrict period on Nehalem
        - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
        - amd-xgbe: Fix error path in xgbe_mod_init()
        - tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at
          -O2
        - tools/power x86_energy_perf_policy: Fix argument parsing
        - tools/power turbostat: fix buffer overrun
        - net: aquantia: fix out of memory condition on rx side
        - net: seeq: Fix the function used to release some memory in an error handling
          path
        - dmaengine: ti: dma-crossbar: Fix a memory leak bug
        - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
        - x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation
        - x86/hyper-v: Fix overflow bug in fill_gva_list()
        - keys: Fix missing null pointer check in request_key_auth_describe()
        - iommu/amd: Flush old domains in kdump kernel
        - iommu/amd: Fix race in increase_address_space()
        - ovl: fix regression caused by overlapping layers detection
        - floppy: fix usercopy direction
        - binfmt_elf: move brk out of mmap when doing direct loader exec
        - SUNRPC: Handle connection breakages correctly in call_status()
        - nfs: disable client side deduplication
        - net: aquantia: fix limit of vlan filters
        - net: dsa: Fix load order between DSA drivers and taggers
        - ARM: dts: Fix flags for gpio7
        - bus: ti-sysc: Handle devices with no control registers
        - ARM: dts: Fix incorrect dcan register mapping for am3, am4 and dra7
        - ARM: dts: am335x: Fix UARTs length
        - ARM: dts: Fix incomplete dts data for am3 and am4 mmc
        - selftests/bpf: fix test_cgroup_storage on s390
        - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
        - drm/amdgpu: fix dma_fence_wait without reference
        - netfilter: conntrack: make sysctls per-namespace again
        - drm/amd/powerplay: correct Vega20 dpm level related settings
        - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
        - i2c: iproc: Stop advertising support of SMBUS quick cmd
        - netfilter: nf_flow_table: clear skb tstamp before xmit
        - tools/power turbostat: Fix Haswell Core systems
        - net: aquantia: fix removal of vlan 0
        - net: aquantia: reapply vlan filters on up
        - arm64: dts: renesas: r8a77995: draak: Fix backlight regulator name
        - dmaengine: sprd: Fix the DMA link-list configuration
        - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
        - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
    
    linux-aws-5.0 (5.0.0-1019.21~18.04.1) bionic; urgency=medium
    
      * bionic/linux-aws-edge: 5.0.0-1019.21~18.04.1 -proposed tracker
        (LP: #1846074)
    
      [ Ubuntu: 5.0.0-1019.21 ]
    
      * disco/linux-aws: 5.0.0-1019.21 -proposed tracker (LP: #1846075)
      * Support Hi1620 zip hw accelerator (LP: #1845355)
        - [config] Update configs after dependency change
      * disco/linux: 5.0.0-32.34 -proposed tracker (LP: #1846097)
      * CVE-2019-14814 // CVE-2019-14815 // CVE-2019-14816
        - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings
      * CVE-2019-15505
        - media: technisat-usb2: break out of loop at end of buffer
      * CVE-2019-2181
        - binder: check for overflow when alloc for security context
      * Support Hi1620 zip hw accelerator (LP: #1845355)
        - [Config] Enable HiSilicon QM/ZIP as modules
        - crypto: hisilicon - add queue management driver for HiSilicon QM module
        - crypto: hisilicon - add hardware SGL support
        - crypto: hisilicon - add HiSilicon ZIP accelerator support
        - crypto: hisilicon - add SRIOV support for ZIP
        - Documentation: Add debugfs doc for hisi_zip
        - crypto: hisilicon - add debugfs for ZIP and QM
        - MAINTAINERS: add maintainer for HiSilicon QM and ZIP controller driver
        - crypto: hisilicon - fix kbuild warnings
        - crypto: hisilicon - add dependency for CRYPTO_DEV_HISI_ZIP
        - crypto: hisilicon - init curr_sgl_dma to fix compile warning
        - crypto: hisilicon - add missing single_release
        - crypto: hisilicon - fix error handle in hisi_zip_create_req_q
        - crypto: hisilicon - Fix warning on printing %p with dma_addr_t
        - crypto: hisilicon - Fix return value check in hisi_zip_acompress()
        - crypto: hisilicon - avoid unused function warning
      * xfrm interface: several kernel panic (LP: #1836261)
        - xfrm interface: fix memory leak on creation
        - xfrm interface: avoid corruption on changelink
        - xfrm interface: ifname may be wrong in logs
        - xfrm interface: fix list corruption for x-netns
        - xfrm interface: fix management of phydev
      * shiftfs: drop entries from cache on unlink (LP: #1841977)
        - SAUCE: shiftfs: fix buggy unlink logic
      * shiftfs: mark kmem_cache as reclaimable (LP: #1842059)
        - SAUCE: shiftfs: mark slab objects SLAB_RECLAIM_ACCOUNT
      *  Suspend to RAM(S3) does not wake up for latest megaraid and mpt3sas
        adapters(SAS3.5 onwards) (LP: #1838751)
        - PCI: Restore Resizable BAR size bits correctly for 1MB BARs
      * No sound inputs from the external microphone and headset on a Dell machine
        (LP: #1842265)
        - ALSA: hda - Expand pin_match function to match upcoming new tbls
        - ALSA: hda - Define a fallback_pin_fixup_tbl for alc269 family
      * Add -fcf-protection=none when using retpoline flags (LP: #1843291)
        - SAUCE: kbuild: add -fcf-protection=none when using retpoline flags
      * Disco update: upstream stable patchset 2019-09-25 (LP: #1845390)
        - bridge/mdb: remove wrong use of NLM_F_MULTI
        - cdc_ether: fix rndis support for Mediatek based smartphones
        - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()'
        - isdn/capi: check message length in capi_write()
        - ixgbe: Fix secpath usage for IPsec TX offload.
        - net: Fix null de-reference of device refcount
        - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having
          linear-headed frag_list
        - net: phylink: Fix flow control resolution
        - net: sched: fix reordering issues
        - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
        - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()'
        - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike
        - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR
        - tipc: add NULL pointer check before calling kfree_rcu
        - tun: fix use-after-free when register netdev failed
        - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist
        - gpio: fix line flag validation in linehandle_create
        - Btrfs: fix assertion failure during fsync and use of stale transaction
        - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us
        - genirq: Prevent NULL pointer dereference in resend_irqs()
        - KVM: s390: kvm_s390_vm_start_migration: check dirty_bitmap before using it
          as target for memset()
        - KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl
        - KVM: x86: work around leak of uninitialized stack contents
        - KVM: nVMX: handle page fault in vmread
        - x86/purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large
          to fix kexec relocation errors
        - powerpc: Add barrier_nospec to raw_copy_in_user()
        - drm/meson: Add support for XBGR8888 & ABGR8888 formats
        - clk: rockchip: Don't yell about bad mmc phases when getting
        - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue
        - PCI: Always allow probing with driver_override
        - gpio: fix line flag validation in lineevent_create
        - ubifs: Correctly use tnc_next() in search_dh_cookie()
        - driver core: Fix use-after-free and double free on glue directory
        - crypto: talitos - check AES key size
        - crypto: talitos - fix CTR alg blocksize
        - crypto: talitos - check data blocksize in ablkcipher.
        - crypto: talitos - fix ECB algs ivsize
        - crypto: talitos - Do not modify req->cryptlen on decryption.
        - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking.
        - firmware: ti_sci: Always request response from firmware
        - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC
        - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto
        - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature"
        - iio: adc: stm32-dfsdm: fix data type
        - modules: fix BUG when load module with rodata=n
        - modules: fix compile error if don't have strict module rwx
        - platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to
          critclk_systems DMI table
        - rsi: fix a double free bug in rsi_91x_deinit()
        - x86/build: Add -Wnoaddress-of-packed-member to REALMODE_CFLAGS, to silence
          GCC9 build warning
        - ixgbevf: Fix secpath usage for IPsec Tx offload
        - net: fixed_phy: Add forward declaration for struct gpio_desc;
        - net: sock_map, fix missing ulp check in sock hash case
        - Revert "mmc: bcm2835: Terminate timeout work synchronously"
        - mmc: tmio: Fixup runtime PM management during probe
        - mmc: tmio: Fixup runtime PM management during remove
        - drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+
        - ixgbe: fix double clean of Tx descriptors with xdp
        - mt76: mt76x0e: disable 5GHz band for MT7630E
        - x86/ima: check EFI SetupMode too
        - kvm: nVMX: Remove unnecessary sync_roots from handle_invept
        - KVM: SVM: Fix detection of AMD Errata 1096
      * Disco update: upstream stable patchset 2019-09-19 (LP: #1844722)
        - ALSA: hda - Fix potential endless loop at applying quirks
        - ALSA: hda/realtek - Fix overridden device-specific initialization
        - ALSA: hda/realtek - Add quirk for HP Pavilion 15
        - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL
        - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre
        - sched/fair: Don't assign runtime for throttled cfs_rq
        - drm/vmwgfx: Fix double free in vmw_recv_msg()
        - vhost/test: fix build for vhost test
        - vhost/test: fix build for vhost test - again
        - batman-adv: fix uninit-value in batadv_netlink_get_ifindex()
        - batman-adv: Only read OGM tvlv_len after buffer len check
        - timekeeping: Use proper ktime_add when adding nsecs in coarse offset
        - selftests: fib_rule_tests: use pre-defined DEV_ADDR
        - powerpc/64: mark start_here_multiplatform as __ref
        - media: stm32-dcmi: fix irq = 0 case
        - scripts/decode_stacktrace: match basepath using shell prefix operator, not
          regex
        - nvme-fc: use separate work queue to avoid warning
        - modules: always page-align module section allocations
        - kernel/module: Fix mem leak in module_add_modinfo_attrs
        - drm/vblank: Allow dynamic per-crtc max_vblank_count
        - mfd: Kconfig: Fix I2C_DESIGNWARE_PLATFORM dependencies
        - tpm: Fix some name collisions with drivers/char/tpm.h
        - drm/nouveau: Don't WARN_ON VCPI allocation failures
        - drm: add __user attribute to ptr_to_compat()
        - drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set
        - drm/i915: Sanity check mmap length against object size
        - arm64: dts: stratix10: add the sysmgr-syscon property from the gmac's
        - kvm: mmu: Fix overflow on kvm mmu page limit calculation
        - KVM: x86: Always use 32-bit SMRAM save state for 32-bit kernels
        - media: i2c: tda1997x: select V4L2_FWNODE
        - ext4: protect journal inode's blocks using block_validity
        - ARM: dts: qcom: ipq4019: Fix MSI IRQ type
        - dt-bindings: mmc: Add supports-cqe property
        - dt-bindings: mmc: Add disable-cqe-dcmd property.
        - dm mpath: fix missing call of path selector type->end_io
        - mmc: sdhci-pci: Add support for Intel CML
        - PCI: dwc: Use devm_pci_alloc_host_bridge() to simplify code
        - cifs: smbd: take an array of reqeusts when sending upper layer data
        - drm/amdkfd: Add missing Polaris10 ID
        - kvm: Check irqchip mode before assign irqfd
        - Btrfs: fix race between block group removal and block group allocation
        - cifs: add spinlock for the openFileList to cifsInodeInfo
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - KVM: x86: optimize check for valid PAT value
        - KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value
        - btrfs: correctly validate compression type
        - dm thin metadata: check if in fail_io mode when setting needs_check
        - bcache: only clear BTREE_NODE_dirty bit when it is set
        - bcache: add comments for mutex_lock(&b->write_lock)
        - bcache: fix race in btree_flush_write()
        - drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV
        - virtio/s390: fix race on airq_areas[]
        - ext4: don't perform block validity checks on the journal inode
        - ext4: fix block validity checks for journal inodes using indirect blocks
        - ext4: unsigned int compared against zero
        - PCI: Reset both NVIDIA GPU and HDA in ThinkPad P50 workaround
        - gpio: pca953x: correct type of reg_direction
        - gpio: pca953x: use pca953x_read_regs instead of regmap_bulk_read
        - drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs
        - powerpc/64e: Drop stale call to smp_processor_id() which hangs SMP startup
        - drm/i915: Disable SAMPLER_STATE prefetching on all Gen11 steppings.
        - mmc: sdhci-sprd: Fix the incorrect soft reset operation when runtime
          resuming
        - usb: chipidea: imx: add imx7ulp support
        - usb: chipidea: imx: fix EPROBE_DEFER support during driver probe
      * Disco update: upstream stable patchset 2019-09-11 (LP: #1843622)
        - dmaengine: ste_dma40: fix unneeded variable warning
        - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns
        - afs: Fix the CB.ProbeUuid service handler to reply correctly
        - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u()
        - fs: afs: Fix a possible null-pointer dereference in afs_put_read()
        - afs: Only update d_fsdata if different in afs_d_revalidate()
        - nvmet-loop: Flush nvme_delete_wq when removing the port
        - nvme: fix a possible deadlock when passthru commands sent to a multipath
          device
        - nvme-pci: Fix async probe remove race
        - soundwire: cadence_master: fix register definition for SLAVE_STATE
        - soundwire: cadence_master: fix definitions for INTSTAT0/1
        - auxdisplay: panel: need to delete scan_timer when misc_register fails in
          panel_attach
        - dmaengine: stm32-mdma: Fix a possible null-pointer dereference in
          stm32_mdma_irq_handler()
        - omap-dma/omap_vout_vrfb: fix off-by-one fi value
        - iommu/dma: Handle SG length overflow better
        - usb: gadget: composite: Clear "suspended" on reset/disconnect
        - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt
        - xen/blkback: fix memory leaks
        - arm64: cpufeature: Don't treat granule sizes as strict
        - i2c: rcar: avoid race when unregistering slave client
        - i2c: emev2: avoid race when unregistering slave client
        - drm/ast: Fixed reboot test may cause system hanged
        - usb: host: fotg2: restart hcd after port reset
        - tools: hv: fixed Python pep8/flake8 warnings for lsvmbus
        - tools: hv: fix KVP and VSS daemons exit code
        - watchdog: bcm2835_wdt: Fix module autoload
        - drm/bridge: tfp410: fix memleak in get_modes()
        - scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value
        - drm/tilcdc: Register cpufreq notifier after we have initialized crtc
        - net/tls: swap sk_write_space on close
        - net: tls, fix sk_write_space NULL write when tx disabled
        - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set
        - ipv6: Default fib6_type to RTN_UNICAST when not set
        - net/smc: make sure EPOLLOUT is raised
        - tcp: make sure EPOLLOUT wont be missed
        - ipv4/icmp: fix rt dst dev null pointer dereference
        - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n
        - ALSA: usb-audio: Check mixer unit bitmap yet more strictly
        - ALSA: line6: Fix memory leak at line6_init_pcm() error path
        - ALSA: hda - Fixes inverted Conexant GPIO mic mute led
        - ALSA: seq: Fix potential concurrent access to the deleted pool
        - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate()
        - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604
        - kvm: x86: skip populating logical dest map if apic is not sw enabled
        - KVM: x86: Don't update RIP or do single-step on faulting emulation
        - uprobes/x86: Fix detection of 32-bit user mode
        - x86/apic: Do not initialize LDR and DFR for bigsmp
        - ftrace: Fix NULL pointer dereference in t_probe_next()
        - ftrace: Check for successful allocation of hash
        - ftrace: Check for empty hash and comment the race with registering probes
        - usb-storage: Add new JMS567 revision to unusual_devs
        - USB: cdc-wdm: fix race between write and disconnect due to flag abuse
        - usb: hcd: use managed device resources
        - usb: chipidea: udc: don't do hardware access if gadget has stopped
        - usb: host: ohci: fix a race condition between shutdown and irq
        - usb: host: xhci: rcar: Fix typo in compatible string matching
        - USB: storage: ums-realtek: Update module parameter description for
          auto_delink_en
        - mei: me: add Tiger Lake point LP device ID
        - mmc: sdhci-of-at91: add quirk for broken HS200
        - mmc: core: Fix init of SD cards reporting an invalid VDD range
        - stm class: Fix a double free of stm_source_device
        - intel_th: pci: Add support for another Lewisburg PCH
        - intel_th: pci: Add Tiger Lake support
        - typec: tcpm: fix a typo in the comparison of pdo_max_voltage
        - fsi: scom: Don't abort operations for minor errors
        - lib: logic_pio: Fix RCU usage
        - lib: logic_pio: Avoid possible overlap for unregistering regions
        - lib: logic_pio: Add logic_pio_unregister_range()
        - drm/amdgpu: Add APTX quirk for Dell Latitude 5495
        - drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest
        - drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe()
        - bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-
          free
        - bus: hisi_lpc: Add .remove method to avoid driver unbind crash
        - VMCI: Release resource if the work is already queued
        - crypto: ccp - Ignore unconfigured CCP device on suspend/resume
        - Revert "cfg80211: fix processing world regdomain when non modular"
        - mac80211: fix possible sta leak
        - mac80211: Don't memset RXCB prior to PAE intercept
        - mac80211: Correctly set noencrypt for PAE frames
        - KVM: PPC: Book3S HV: Avoid lockdep debugging in TCE realmode handlers
        - KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling
        - KVM: arm/arm64: vgic: Fix potential deadlock when ap_list is long
        - KVM: arm/arm64: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI
        - NFS: Clean up list moves of struct nfs_page
        - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend()
        - NFS: Pass error information to the pgio error cleanup routine
        - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0
        - i2c: piix4: Fix port selection for AMD Family 16h Model 30h
        - x86/ptrace: fix up botched merge of spectrev1 fix
        - mt76: mt76x0u: do not reset radio on resume
        - Revert "ASoC: Fail card instantiation if DAI format setup fails"
        - nvmet: Fix use-after-free bug when a port is removed
        - nvmet-file: fix nvmet_file_flush() always returning an error
        - nvme-rdma: fix possible use-after-free in connect error flow
        - nvme: fix controller removal race with scan work
        - IB/mlx5: Fix implicit MR release flow
        - dma-direct: don't truncate dma_required_mask to bus addressing capabilities
        - riscv: fix flush_tlb_range() end address for flush_tlb_page()
        - drm/scheduler: use job count instead of peek
        - locking/rwsem: Add missing ACQUIRE to read_slowpath exit when queue is empty
        - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop
        - selftests/bpf: install files test_xdp_vlan.sh
        - ALSA: hda/ca0132 - Add new SBZ quirk
        - KVM: x86: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when
          kvm_intel.nested is disabled
        - x86/mm/cpa: Prevent large page split when ftrace flips RW on kernel text
        - usbtmc: more sanity checking for packet size
        - mmc: sdhci-cadence: enable v4_mode to fix ADMA 64-bit addressing
        - mmc: sdhci-sprd: fixed incorrect clock divider
        - mmc: sdhci-sprd: add SDHCI_QUIRK2_PRESET_VALUE_BROKEN
        - mms: sdhci-sprd: add SDHCI_QUIRK_BROKEN_CARD_DETECTION
        - mmc: sdhci-sprd: clear the UHS-I modes read from registers
        - mmc: sdhci-sprd: Implement the get_max_timeout_count() interface
        - mmc: sdhci-sprd: add get_ro hook function
        - drm/i915/dp: Fix DSC enable code to use cpu_transcoder instead of
          encoder->type
        - hsr: implement dellink to clean up resources
        - hsr: fix a NULL pointer deref in hsr_dev_xmit()
        - hsr: switch ->dellink() to ->ndo_uninit()
        - Revert "Input: elantech - enable SMBus on new (2018+) systems"
        - mld: fix memory leak in mld_del_delrec()
        - net: fix skb use after free in netpoll
        - net: sched: act_sample: fix psample group handling on overwrite
        - net_sched: fix a NULL pointer deref in ipt action
        - net: stmmac: dwmac-rk: Don't fail if phy regulator is absent
        - tcp: inherit timestamp on mtu probe
        - tcp: remove empty skb from write queue in error cases
        - x86/boot: Preserve boot_params.secure_boot from sanitizing
        - spi: bcm2835aux: unifying code between polling and interrupt driven code
        - spi: bcm2835aux: remove dangerous uncontrolled read of fifo
        - spi: bcm2835aux: fix corruptions for longer spi transfers
        - net: tundra: tsi108: use spin_lock_irqsave instead of spin_lock_irq in IRQ
          context
        - netfilter: nf_tables: use-after-free in failing rule with bound set
        - tools: bpftool: fix error message (prog -> object)
        - hv_netvsc: Fix a warning of suspicious RCU usage
        - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx
        - Bluetooth: btqca: Add a short delay before downloading the NVM
        - ibmveth: Convert multicast list size for little-endian system
        - gpio: Fix build error of function redefinition
        - netfilter: nft_flow_offload: skip tcp rst and fin packets
        - drm/mediatek: use correct device to import PRIME buffers
        - drm/mediatek: set DMA max segment size
        - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure
        - scsi: target: tcmu: avoid use-after-free after command timeout
        - cxgb4: fix a memory leak bug
        - liquidio: add cleanup in octeon_setup_iq()
        - net: myri10ge: fix memory leaks
        - lan78xx: Fix memory leaks
        - vfs: fix page locking deadlocks when deduping files
        - cx82310_eth: fix a memory leak bug
        - net: kalmia: fix memory leaks
        - ibmvnic: Unmap DMA address of TX descriptor buffers after use
        - net: cavium: fix driver name
        - wimax/i2400m: fix a memory leak bug
        - ravb: Fix use-after-free ravb_tstamp_skb
        - kprobes: Fix potential deadlock in kprobe_optimizer()
        - HID: cp2112: prevent sleeping function called from invalid context
        - x86/boot/compressed/64: Fix boot on machines with broken E820 table
        - Input: hyperv-keyboard: Use in-place iterator API in the channel callback
        - Tools: hv: kvp: eliminate 'may be used uninitialized' warning
        - nvme-multipath: fix possible I/O hang when paths are updated
        - IB/mlx4: Fix memory leaks
        - infiniband: hfi1: fix a memory leak bug
        - infiniband: hfi1: fix memory leaks
        - selftests: kvm: fix state save/load on processors without XSAVE
        - selftests/kvm: make platform_info_test pass on AMD
        - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr()
        - ceph: fix buffer free while holding i_ceph_lock in
          __ceph_build_xattrs_blob()
        - ceph: fix buffer free while holding i_ceph_lock in fill_inode()
        - KVM: arm/arm64: Only skip MMIO insn once
        - afs: Fix leak in afs_lookup_cell_rcu()
        - KVM: arm/arm64: VGIC: Properly initialise private IRQ affinity
        - x86/boot/compressed/64: Fix missing initialization in
          find_trampoline_placement()
        - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer
        - Revert "r8152: napi hangup fix after disconnect"
        - r8152: remove calling netif_napi_del
        - batman-adv: Fix netlink dumping of all mcast_flags buckets
        - libbpf: fix erroneous multi-closing of BTF FD
        - libbpf: set BTF FD for prog only when there is supported .BTF.ext data
        - netfilter: nf_flow_table: fix offload for flows that are subject to xfrm
        - clk: samsung: Change signature of exynos5_subcmus_init() function
        - clk: samsung: exynos5800: Move MAU subsystem clocks to MAU sub-CMU
        - clk: samsung: exynos542x: Move MSCL subsystem clocks to its sub-CMU
        - netfilter: nf_flow_table: conntrack picks up expired flows
        - netfilter: nf_flow_table: teardown flow timeout race
        - ixgbe: fix possible deadlock in ixgbe_service_task()
        - nvme: Fix cntlid validation when not using NVMEoF
        - RDMA/cma: fix null-ptr-deref Read in cma_cleanup
        - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message
        - gpio: Fix irqchip initialization order
      * New ID in ums-realtek module breaks cardreader (LP: #1838886) // Disco
        update: upstream stable patchset 2019-09-11 (LP: #1843622)
        - USB: storage: ums-realtek: Whitelist auto-delink support
      * ipv4: enable route flushing in network namespaces (LP: #1836912)
        - ipv4: enable route flushing in network namespaces
      * Enhanced Hardware Support - Finalize Naming (LP: #1842774)
        - s390: add support for IBM z15 machines
      * CVE-2019-16714
        - net/rds: Fix info leak in rds6_inc_info_copy()
      * CVE-2019-14821
        - KVM: coalesced_mmio: add bounds checking
    
     -- Stefan Bader <email address hidden>  Mon, 11 Nov 2019 13:30:49 +0100
  • linux-aws-5.0 (5.0.0-1020.22~18.04.1) bionic; urgency=medium
    
      * bionic/linux-aws-5.0: 5.0.0-1020.22~18.04.1 -proposed tracker (LP: #1848983)
    
      [ Ubuntu: 5.0.0-1020.22 ]
    
      * disco/linux-aws: 5.0.0-1020.22 -proposed tracker (LP: #1848984)
      * disco/linux: 5.0.0-33.35 -proposed tracker (LP: #1849003)
      * Disco update: upstream stable patchset 2019-10-18 (LP: #1848817)
        - tpm: use tpm_try_get_ops() in tpm-sysfs.c.
        - drm/bridge: tc358767: Increase AUX transfer length limit
        - drm/panel: simple: fix AUO g185han01 horizontal blanking
        - video: ssd1307fb: Start page range at page_offset
        - drm/stm: attach gem fence to atomic state
        - drm/panel: check failure cases in the probe func
        - drm/rockchip: Check for fast link training before enabling psr
        - drm/radeon: Fix EEH during kexec
        - gpu: drm: radeon: Fix a possible null-pointer dereference in
          radeon_connector_set_property()
        - PCI: rpaphp: Avoid a sometimes-uninitialized warning
        - ipmi_si: Only schedule continuously in the thread in maintenance mode
        - clk: qoriq: Fix -Wunused-const-variable
        - clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks
        - drm/amd/display: fix issue where 252-255 values are clipped
        - drm/amd/display: reprogram VM config when system resume
        - powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA
          window
        - clk: actions: Don't reference clk_init_data after registration
        - clk: sirf: Don't reference clk_init_data after registration
        - clk: sprd: Don't reference clk_init_data after registration
        - clk: zx296718: Don't reference clk_init_data after registration
        - powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL
        - powerpc/rtas: use device model APIs and serialization during LPM
        - powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this
          function
        - powerpc/pseries/mobility: use cond_resched when updating device tree
        - pinctrl: tegra: Fix write barrier placement in pmx_writel
        - powerpc/eeh: Clear stale EEH_DEV_NO_HANDLER flag
        - vfio_pci: Restore original state on release
        - drm/nouveau/volt: Fix for some cards having 0 maximum voltage
        - pinctrl: amd: disable spurious-firing GPIO IRQs
        - clk: renesas: mstp: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - clk: renesas: cpg-mssr: Set GENPD_FLAG_ALWAYS_ON for clock domain
        - drm/amd/display: support spdif
        - drm/amdgpu/si: fix ASIC tests
        - powerpc/64s/exception: machine check use correct cfar for late handler
        - pstore: fs superblock limits
        - clk: qcom: gcc-sdm845: Use floor ops for sdcc clks
        - powerpc/pseries: correctly track irq state in default idle
        - pinctrl: meson-gxbb: Fix wrong pinning definition for uart_c
        - arm64: fix unreachable code issue with cmpxchg
        - clk: at91: select parent if main oscillator or bypass is enabled
        - powerpc: dump kernel log before carrying out fadump or kdump
        - mbox: qcom: add APCS child device for QCS404
        - clk: sprd: add missing kfree
        - scsi: core: Reduce memory required for SCSI logging
        - dma-buf/sw_sync: Synchronize signal vs syncpt free
        - ext4: fix potential use after free after remounting with noblock_validity
        - MIPS: Ingenic: Disable broken BTB lookup optimization.
        - MIPS: tlbex: Explicitly cast _PAGE_NO_EXEC to a boolean
        - i2c-cht-wc: Fix lockdep warning
        - PCI: tegra: Fix OF node reference leak
        - HID: wacom: Fix several minor compiler warnings
        - livepatch: Nullify obj->mod in klp_module_coming()'s error path
        - ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as
          writes
        - soundwire: intel: fix channel number reported by hardware
        - ARM: 8875/1: Kconfig: default to AEABI w/ Clang
        - rtc: snvs: fix possible race condition
        - rtc: pcf85363/pcf85263: fix regmap error in set_time
        - HID: apple: Fix stuck function keys when using FN
        - PCI: rockchip: Propagate errors for optional regulators
        - PCI: histb: Propagate errors for optional regulators
        - PCI: imx6: Propagate errors for optional regulators
        - PCI: exynos: Propagate errors for optional PHYs
        - security: smack: Fix possible null-pointer dereferences in
          smack_socket_sock_rcv_skb()
        - ARM: 8903/1: ensure that usable memory in bank 0 starts from a PMD-aligned
          address
        - fat: work around race with userspace's read via blockdev while mounting
        - pktcdvd: remove warning on attempting to register non-passthrough dev
        - hypfs: Fix error number left in struct pointer member
        - crypto: hisilicon - Fix double free in sec_free_hw_sgl()
        - kbuild: clean compressed initramfs image
        - ocfs2: wait for recovering done after direct unlock request
        - kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
        - arm64: consider stack randomization for mmap base only when necessary
        - mips: properly account for stack randomization and stack guard gap
        - arm: properly account for stack randomization and stack guard gap
        - arm: use STACK_TOP when computing mmap base address
        - bpf: fix use after free in prog symbol exposure
        - cxgb4:Fix out-of-bounds MSI-X info array access
        - erspan: remove the incorrect mtu limit for erspan
        - hso: fix NULL-deref on tty open
        - ipv6: drop incoming packets having a v4mapped source address
        - ipv6: Handle missing host route in __ipv6_ifa_notify
        - net: ipv4: avoid mixed n_redirects and rate_tokens usage
        - net: qlogic: Fix memory leak in ql_alloc_large_buffers
        - net: Unpublish sk from sk_reuseport_cb before call_rcu
        - nfc: fix memory leak in llcp_sock_bind()
        - qmi_wwan: add support for Cinterion CLS8 devices
        - rxrpc: Fix rxrpc_recvmsg tracepoint
        - sch_dsmark: fix potential NULL deref in dsmark_init()
        - udp: fix gso_segs calculations
        - vsock: Fix a lockdep warning in __vsock_release()
        - net: dsa: rtl8366: Check VLAN ID and not ports
        - udp: only do GSO if # of segs > 1
        - net/rds: Fix error handling in rds_ib_add_one()
        - xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
        - tipc: fix unlimited bundling of small messages
        - sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
        - soundwire: Kconfig: fix help format
        - soundwire: fix regmap dependencies and align with other serial links
        - Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
        - smack: use GFP_NOFS while holding inode_smack::smk_lock
        - NFC: fix attrs checks in netlink interface
        - kexec: bail out upon SIGKILL when allocating memory.
        - 9p/cache.c: Fix memory leak in v9fs_cache_session_get_cookie
        - drm/vkms: Fix crc worker races
        - drm/vkms: Avoid assigning 0 for possible_crtc
        - drm/amd/display: add monitor patch to add T7 delay
        - drm/tinydrm/Kconfig: drivers: Select BACKLIGHT_CLASS_DEVICE
        - clk: imx8mq: Mark AHB clock as critical
        - drm/amd/display: Fix frames_to_insert math
        - clk: meson: axg-audio: Don't reference clk_init_data after registration
        - powerpc/64s/radix: Fix memory hotplug section page table creation
        - selftests/powerpc: Retry on host facility unavailable
        - powerpc/eeh: Clean up EEH PEs after recovery finishes
        - mailbox: mediatek: cmdq: clear the event in cmdq initial flow
        - clk: Make clk_bulk_get_all() return a valid "id"
        - f2fs: fix to drop meta/node pages during umount
        - MIPS: Don't use bc_false uninitialized in __mm_isBranchInstr
        - PCI: pci-hyperv: Fix build errors on non-SYSFS config
        - PCI: Add pci_info_ratelimited() to ratelimit PCI separately
        - PCI: Use static const struct, not const static struct
        - ARM: 8905/1: Emit __gnu_mcount_nc when using Clang 10.0.0 or newer
        - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o
          lapic_in_kernel
        - clk: ingenic/jz4740: Fix "pll half" divider not read/written properly
        - clk: sunxi: Don't call clk_hw_get_name() on a hw that isn't registered
        - ARM: dts: dir685: Drop spi-cpol from the display
        - mm: add dummy can_do_mlock() helper
        - [Config] updateconfigs for SOUNDWIRE
      * [CML] New device IDs for CML-U (LP: #1843774)
        - spi-nor: intel-spi: Add support for Intel Comet Lake SPI serial flash
      * [CML-U] Comet lake platform need ISH driver support (LP: #1843775)
        - HID: intel-ish-hid: Add Comet Lake PCI device ID
      * CVE-2019-17666
        - SAUCE: rtlwifi: rtl8822b: Fix potential overflow on P2P code
        - SAUCE: rtlwifi: Fix potential overflow on P2P code
      * md raid0/linear doesn't show error state if an array member is removed and
        allows successful writes (LP: #1847773)
        - md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
      * seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE    (LP: #1847744)
        - SAUCE: seccomp: add SECCOMP_USER_NOTIF_FLAG_CONTINUE
        - SAUCE: seccomp: test SECCOMP_USER_NOTIF_FLAG_CONTINUE
      * Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x from yes
        to no (LP: #1848492)
        - [Config] Change Config Option CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for s390x
          from yes to no
      * fdatasync performance regression on 5.0 kernels (LP: #1847641)
        - blk-wbt: fix performance regression in wbt scale_up/scale_down
      * bcache: Performance degradation when querying priority_stats (LP: #1840043)
        - bcache: add cond_resched() in __bch_cache_cmp()
      * Add installer support for iwlmvm adapters (LP: #1848236)
        - d-i: Add iwlmvm to nic-modules
      * Check for CPU Measurement sampling (LP: #1847590)
        - s390/cpumsf: Check for CPU Measurement sampling
      * Disco update: upstream stable patchset 2019-10-16 (LP: #1848367)
        - arcnet: provide a buffer big enough to actually receive packets
        - cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize
        - macsec: drop skb sk before calling gro_cells_receive
        - net/phy: fix DP83865 10 Mbps HDX loopback disable function
        - net: qrtr: Stop rx_worker before freeing node
        - net/sched: act_sample: don't push mac header on ip6gre ingress
        - net_sched: add max len check for TCA_KIND
        - nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs
        - openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC
        - ppp: Fix memory leak in ppp_write
        - sch_netem: fix a divide by zero in tabledist()
        - skge: fix checksum byte order
        - usbnet: ignore endpoints with invalid wMaxPacketSize
        - usbnet: sanity checking of packet sizes and device mtu
        - net: sched: fix possible crash in tcf_action_destroy()
        - tcp: better handle TCP_USER_TIMEOUT in SYN_SENT state
        - net/mlx5: Add device ID of upcoming BlueField-2
        - nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs
        - ALSA: hda: Flush interrupts on disabling
        - regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg
        - ASoC: tlv320aic31xx: suppress error message for EPROBE_DEFER
        - ASoC: sgtl5000: Fix of unmute outputs on probe
        - ASoC: sgtl5000: Fix charge pump source assignment
        - firmware: qcom_scm: Use proper types for dma mappings
        - dmaengine: bcm2835: Print error in case setting DMA mask fails
        - leds: leds-lp5562 allow firmware files up to the maximum length
        - media: dib0700: fix link error for dibx000_i2c_set_speed
        - media: mtk-cir: lower de-glitch counter for rc-mm protocol
        - media: exynos4-is: fix leaked of_node references
        - media: hdpvr: Add device num check and handling
        - media: i2c: ov5640: Check for devm_gpiod_get_optional() error
        - time/tick-broadcast: Fix tick_broadcast_offline() lockdep complaint
        - sched/fair: Fix imbalance due to CPU affinity
        - sched/core: Fix CPU controller for !RT_GROUP_SCHED
        - x86/apic: Make apic_pending_intr_clear() more robust
        - sched/deadline: Fix bandwidth accounting at all levels after offline
          migration
        - x86/reboot: Always use NMI fallback when shutdown via reboot vector IPI
          fails
        - x86/apic: Soft disable APIC before initializing it
        - ALSA: hda - Show the fatal CORB/RIRB error more clearly
        - ALSA: i2c: ak4xxx-adda: Fix a possible null pointer dereference in
          build_adc_controls()
        - EDAC/mc: Fix grain_bits calculation
        - media: iguanair: add sanity checks
        - base: soc: Export soc_device_register/unregister APIs
        - ALSA: usb-audio: Skip bSynchAddress endpoint check if it is invalid
        - ia64:unwind: fix double free for mod->arch.init_unw_table
        - EDAC/altera: Use the proper type for the IRQ status bits
        - ASoC: rsnd: don't call clk_get_rate() under atomic context
        - arm64/prefetch: fix a -Wtype-limits warning
        - md/raid1: end bio when the device faulty
        - md: don't call spare_active in md_reap_sync_thread if all member devices
          can't work
        - md: don't set In_sync if array is frozen
        - media: media/platform: fsl-viu.c: fix build for MICROBLAZE
        - ACPI / processor: don't print errors for processorIDs == 0xff
        - loop: Add LOOP_SET_DIRECT_IO to compat ioctl
        - EDAC, pnd2: Fix ioremap() size in dnv_rd_reg()
        - efi: cper: print AER info of PCIe fatal error
        - firmware: arm_scmi: Check if platform has released shmem before using
        - sched/fair: Use rq_lock/unlock in online_fair_sched_group
        - idle: Prevent late-arriving interrupts from disrupting offline
        - media: gspca: zero usb_buf on error
        - perf config: Honour $PERF_CONFIG env var to specify alternate .perfconfig
        - perf test vfs_getname: Disable ~/.perfconfig to get default output
        - media: mtk-mdp: fix reference count on old device tree
        - media: fdp1: Reduce FCP not found message level to debug
        - media: em28xx: modules workqueue not inited for 2nd device
        - media: rc: imon: Allow iMON RC protocol for ffdc 7e device
        - dmaengine: iop-adma: use correct printk format strings
        - perf record: Support aarch64 random socket_id assignment
        - media: vsp1: fix memory leak of dl on error return path
        - media: i2c: ov5645: Fix power sequence
        - media: omap3isp: Don't set streaming state on random subdevs
        - media: imx: mipi csi-2: Don't fail if initial state times-out
        - net: lpc-enet: fix printk format strings
        - m68k: Prevent some compiler warnings in Coldfire builds
        - ARM: dts: imx7d: cl-som-imx7: make ethernet work again
        - ARM: dts: imx7-colibri: disable HS400
        - media: radio/si470x: kill urb on error
        - media: hdpvr: add terminating 0 at end of string
        - ASoC: uniphier: Fix double reset assersion when transitioning to suspend
          state
        - tools headers: Fixup bitsperlong per arch includes
        - ASoC: sun4i-i2s: Don't use the oversample to calculate BCLK
        - led: triggers: Fix a memory leak bug
        - nbd: add missing config put
        - media: mceusb: fix (eliminate) TX IR signal length limit
        - media: dvb-frontends: use ida for pll number
        - posix-cpu-timers: Sanitize bogus WARNONS
        - media: dvb-core: fix a memory leak bug
        - libperf: Fix alignment trap with xyarray contents in 'perf stat'
        - EDAC/amd64: Recognize DRAM device type ECC capability
        - EDAC/amd64: Decode syndrome before translating address
        - PM / devfreq: passive: Use non-devm notifiers
        - PM / devfreq: exynos-bus: Correct clock enable sequence
        - media: cec-notifier: clear cec_adap in cec_notifier_unregister
        - media: saa7146: add cleanup in hexium_attach()
        - media: cpia2_usb: fix memory leaks
        - media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate()
        - perf trace beauty ioctl: Fix off-by-one error in cmd->string table
        - media: ov9650: add a sanity check
        - ASoC: es8316: fix headphone mixer volume table
        - ACPI / CPPC: do not require the _PSD method
        - sched/cpufreq: Align trace event behavior of fast switching
        - x86/apic/vector: Warn when vector space exhaustion breaks affinity
        - arm64: kpti: ensure patched kernel text is fetched from PoU
        - x86/mm/pti: Do not invoke PTI functions when PTI is disabled
        - ASoC: fsl_ssi: Fix clock control issue in master mode
        - x86/mm/pti: Handle unaligned address gracefully in pti_clone_pagetable()
        - nvmet: fix data units read and written counters in SMART log
        - nvme-multipath: fix ana log nsid lookup when nsid is not found
        - ALSA: firewire-motu: add support for MOTU 4pre
        - iommu/amd: Silence warnings under memory pressure
        - libata/ahci: Drop PCS quirk for Denverton and beyond
        - iommu/iova: Avoid false sharing on fq_timer_on
        - libtraceevent: Change users plugin directory
        - ARM: dts: exynos: Mark LDO10 as always-on on Peach Pit/Pi Chromebooks
        - ACPI: custom_method: fix memory leaks
        - ACPI / PCI: fix acpi_pci_irq_enable() memory leak
        - closures: fix a race on wakeup from closure_sync
        - hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
        - md/raid1: fail run raid1 array when active disk less than one
        - dmaengine: ti: edma: Do not reset reserved paRAM slots
        - kprobes: Prohibit probing on BUG() and WARN() address
        - s390/crypto: xts-aes-s390 fix extra run-time crypto self tests finding
        - x86/cpu: Add Tiger Lake to Intel family
        - platform/x86: intel_pmc_core: Do not ioremap RAM
        - ASoC: dmaengine: Make the pcm->name equal to pcm->id if the name is not set
        - raid5: don't set STRIPE_HANDLE to stripe which is in batch list
        - mmc: core: Clarify sdio_irq_pending flag for MMC_CAP2_SDIO_IRQ_NOTHREAD
        - mmc: sdhci: Fix incorrect switch to HS mode
        - mmc: core: Add helper function to indicate if SDIO IRQs is enabled
        - mmc: dw_mmc: Re-store SDIO IRQs mask at system resume
        - raid5: don't increment read_errors on EILSEQ return
        - libertas: Add missing sentinel at end of if_usb.c fw_table
        - ALSA: hda - Drop unsol event handler for Intel HDMI codecs
        - drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2)
        - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command()
        - ALSA: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93
        - btrfs: extent-tree: Make sure we only allocate extents from block groups
          with the same type
        - media: omap3isp: Set device on omap3isp subdevs
        - PM / devfreq: passive: fix compiler warning
        - iwlwifi: fw: don't send GEO_TX_POWER_LIMIT command to FW version 36
        - ALSA: firewire-tascam: handle error code when getting current source of
          clock
        - ALSA: firewire-tascam: check intermediate state of clock status and retry
        - scsi: scsi_dh_rdac: zero cdb in send_mode_select()
        - scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag
        - printk: Do not lose last line in kmsg buffer dump
        - IB/mlx5: Free mpi in mp_slave mode
        - IB/hfi1: Define variables as unsigned long to fix KASAN warning
        - randstruct: Check member structs in is_pure_ops_struct()
        - Revert "ceph: use ceph_evict_inode to cleanup inode's resource"
        - ceph: use ceph_evict_inode to cleanup inode's resource
        - ALSA: hda/realtek - PCI quirk for Medion E4254
        - blk-mq: add callback of .cleanup_rq
        - scsi: implement .cleanup_rq callback
        - powerpc/imc: Dont create debugfs files for cpu-less nodes
        - fuse: fix missing unlock_page in fuse_writepage()
        - parisc: Disable HP HSC-PCI Cards to prevent kernel crash
        - KVM: x86: always stop emulation on page fault
        - KVM: x86: set ctxt->have_exception in x86_decode_insn()
        - KVM: x86: Manually calculate reserved bits when loading PDPTRS
        - media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table
        - media: don't drop front-end reference count for ->detach
        - binfmt_elf: Do not move brk for INTERP-less ET_EXEC
        - ASoC: Intel: NHLT: Fix debug print format
        - ASoC: Intel: Skylake: Use correct function to access iomem space
        - ASoC: Intel: Fix use of potentially uninitialized variable
        - ARM: samsung: Fix system restart on S3C6410
        - ARM: zynq: Use memcpy_toio instead of memcpy on smp bring-up
        - arm64: tlb: Ensure we execute an ISB following walk cache invalidation
        - arm64: dts: rockchip: limit clock rate of MMC controllers for RK3328
        - alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP
        - regulator: Defer init completion for a while after late_initcall
        - efifb: BGRT: Improve efifb_bgrt_sanity_check
        - gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps
        - memcg, oom: don't require __GFP_FS when invoking memcg OOM killer
        - memcg, kmem: do not fail __GFP_NOFAIL charges
        - i40e: check __I40E_VF_DISABLE bit in i40e_sync_filters_subtask
        - block: fix null pointer dereference in blk_mq_rq_timed_out()
        - smb3: allow disabling requesting leases
        - ovl: Fix dereferencing possible ERR_PTR()
        - ovl: filter of trusted xattr results in audit
        - btrfs: fix allocation of free space cache v1 bitmap pages
        - Btrfs: fix use-after-free when using the tree modification log
        - btrfs: Relinquish CPUs in btrfs_compare_trees
        - btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space
        - btrfs: qgroup: Fix reserved data space leak if we have multiple reserve
          calls
        - Btrfs: fix race setting up and completing qgroup rescan workers
        - md/raid6: Set R5_ReadError when there is read failure on parity disk
        - md: don't report active array_state until after revalidate_disk() completes.
        - md: only call set_in_sync() when it is expected to succeed.
        - cfg80211: Purge frame registrations on iftype change
        - /dev/mem: Bail out upon SIGKILL.
        - ext4: fix warning inside ext4_convert_unwritten_extents_endio
        - ext4: fix punch hole for inline_data file systems
        - quota: fix wrong condition in is_quota_modification()
        - hwrng: core - don't wait on add_early_randomness()
        - i2c: riic: Clear NACK in tend isr
        - CIFS: fix max ea value size
        - CIFS: Fix oplock handling for SMB 2.1+ protocols
        - md/raid0: avoid RAID0 data corruption due to layout confusion.
        - fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
        - mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new
          zone
        - drm/amd/display: Restore backlight brightness after system resume
        - selftests: Update fib_tests to handle missing ping6
        - vrf: Do not attempt to create IPv6 mcast rule if IPv6 is disabled
        - net/mlx5e: Fix traffic duplication in ethtool steering
        - media: vivid:add sanity check to avoid divide error and set value to 1 if 0.
        - media: vb2: reorder checks in vb2_poll()
        - media: vivid: work around high stack usage with clang
        - rcu/tree: Call setschedule() gp ktread to SCHED_FIFO outside of atomic
          region
        - arm64: mm: free the initrd reserved memblock in a aligned manner
        - soc: amlogic: meson-clk-measure: protect measure with a mutex
        - RAS: Build debugfs.o only when enabled in Kconfig
        - ASoC: hdac_hda: fix page fault issue by removing race
        - perf tools: Fix paths in include statements
        - blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling
        - media: i2c: tda1997x: prevent potential NULL pointer access
        - arm64/efi: Move variable assignments after SECTIONS
        - ARM: xscale: fix multi-cpu compilation
        - kasan/arm64: fix CONFIG_KASAN_SW_TAGS && KASAN_INLINE
        - x86/platform/intel/iosf_mbi Rewrite locking
        - powerpc/Makefile: Always pass --synthetic to nm if supported
        - ACPI / APEI: Release resources if gen_pool_add() fails
        - ARM: at91: move platform-specific asm-offset.h to arch/arm/mach-at91
        - soc: renesas: rmobile-sysc: Set GENPD_FLAG_ALWAYS_ON for always-on domain
        - soc: renesas: Enable ARM_ERRATA_754322 for affected Cortex-A9
        - PM / devfreq: Fix kernel oops on governor module load
        - media: aspeed-video: address a protential usage of an unitialized var
        - ASoC: Intel: Haswell: Adjust machine device private context
        - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
        - hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs
        - block: make rq sector size accessible for block stats
        - mmc: mtk-sd: Re-store SDIO IRQs mask at system resume
        - drm: fix module name in edid_firmware log message
        - zd1211rw: remove false assertion from zd_mac_clear()
        - btrfs: delayed-inode: Kill the BUG_ON() in btrfs_delete_delayed_dir_index()
        - kvm: Nested KVM MMUs need PAE root too
        - ARM: dts: logicpd-torpedo-baseboard: Fix missing video
        - ARM: omap2plus_defconfig: Fix missing video
        - ARM: dts: am3517-evm: Fix missing video
        - rcu/tree: Fix SCHED_FIFO params
        - fuse: fix beyond-end-of-page access in fuse_parse_cache()
        - KVM: x86: Disable posted interrupts for non-standard IRQs delivery modes
        - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
        - iommu/arm-smmu-v3: Disable detection of ATS and PRI
        - mt76: round up length on mt76_wr_copy
        - ath10k: fix channel info parsing for non tlv target
        - block: mq-deadline: Fix queue restart handling
        - btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer
        - SUNRPC: Fix buffer handling of GSS MIC without slack
        - ACPI / LPSS: Save/restore LPSS private registers also on Lynxpoint
        - fs: Export generic_fadvise()
        - mm: Handle MADV_WILLNEED through vfs_fadvise()
        - xfs: Fix stale data exposure when readahead races with hole punch
        - ipmi: move message error checking to avoid deadlock
      * ELAN469D touch pad not working (LP: #1795292) // Ubuntu won't boot on Dell
        Inspiron 7375 (LP: #1837688) // Disco update: upstream stable patchset
        2019-10-16 (LP: #1848367)
        - iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems
      * intel-lpss driver conflicts with write-combining MTRR region (LP: #1845584)
        - SAUCE: mfd: intel-lpss: add quirk for Dell XPS 13 7390 2-in-1
      * Fix non-working Realtek USB ethernet after system resume (LP: #1847063)
        - r8152: remove extra action copying ethernet address
        - r8152: Refresh MAC address during USBDEVFS_RESET
        - r8152: Set macpassthru in reset_resume callback
      * overlayfs: allow with shiftfs as underlay (LP: #1846272)
        - SAUCE: overlayfs: allow with shiftfs as underlay
      * [regression] NoNewPrivileges incompatible with Apparmor (LP: #1844186)
        - SAUCE: apparmor: fix nnp subset test for unconfined
      * PM / hibernate: fix potential memory corruption (LP: #1847118)
        - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation
      * xHCI on AMD Stoney Ridge cannot detect USB 2.0 or 1.1 devices.
        (LP: #1846470)
        - x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect
      * CVE-2019-17056
        - nfc: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17055
        - mISDN: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17054
        - appletalk: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17053
        - ieee802154: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-17052
        - ax25: enforce CAP_NET_RAW for raw sockets
      * CVE-2019-15098
        - ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
      * Disco update: upstream stable patchset 2019-10-10 (LP: #1847663)
        - Revert "Bluetooth: validate BLE connection interval updates"
        - net/ibmvnic: free reset work of removed device from queue
        - powerpc/xive: Fix bogus error code returned by OPAL
        - drm/amd/display: readd -msse2 to prevent Clang from emitting libcalls to
          undefined SW FP routines
        - HID: prodikeys: Fix general protection fault during probe
        - HID: sony: Fix memory corruption issue on cleanup.
        - HID: logitech: Fix general protection fault caused by Logitech driver
        - HID: hidraw: Fix invalid read in hidraw_ioctl
        - HID: Add quirk for HP X500 PIXART OEM mouse
        - mtd: cfi_cmdset_0002: Use chip_good() to retry in do_write_oneword()
        - crypto: talitos - fix missing break in switch statement
        - CIFS: fix deadlock in cached root handling
        - ASoC: Intel: cht_bsw_max98090_ti: Enable codec clock once and keep it
          enabled
        - ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt()
        - ALSA: usb-audio: Add Hiby device family to quirks for native DSD support
        - ALSA: usb-audio: Add DSD support for EVGA NU Audio
        - ALSA: dice: fix wrong packet parameter for Alesis iO26
        - ALSA: hda - Add laptop imic fixup for ASUS M9V laptop
        - ALSA: hda - Apply AMD controller workaround for Raven platform
        - objtool: Clobber user CFLAGS variable
        - irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices
        - f2fs: check all the data segments against all node ones
        - PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it
        - bcache: remove redundant LIST_HEAD(journal) from run_cache_set()
        - initramfs: don't free a non-existent initrd
        - Revert "f2fs: avoid out-of-range memory access"
        - dm zoned: fix invalid memory access
        - net/ibmvnic: Fix missing { in __ibmvnic_reset
        - f2fs: fix to do sanity check on segment bitmap of LFS curseg
        - drm: Flush output polling on shutdown
        - net: don't warn in inet diag when IPV6 is disabled
        - Bluetooth: btrtl: HCI reset on close for Realtek BT chip
        - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35
        - drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling
        - xfs: don't crash on null attr fork xfs_bmapi_read
        - netfilter: nft_socket: fix erroneous socket assignment
        - Bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices
        - net_sched: check cops->tcf_block in tc_bind_tclass()
        - net/rds: An rds_sock is added too early to the hash table
        - net/rds: Check laddr_check before calling it
        - f2fs: use generic EFSBADCRC/EFSCORRUPTED
        - phy: qcom-qmp: Raise qcom_qmp_phy_enable() polling delay
        - drm/amd/display: Allow cursor async updates for framebuffer swaps
        - drm/amd/display: Skip determining update type for async updates
        - drm/amd/display: Don't replace the dc_state for fast updates
        - platform/x86: i2c-multi-instantiate: Derive the device name from parent
        - drm/dp: Add DP_DPCD_QUIRK_NO_SINK_COUNT
        - xfrm: policy: avoid warning splat when merging nodes
      * Disco update: upstream stable patchset 2019-10-01 (LP: #1846277)
        - netfilter: nf_flow_table: set default timeout after successful insertion
        - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report
        - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID
        - powerpc/mm/radix: Use the right page size for vmemmap mapping
        - USB: usbcore: Fix slab-out-of-bounds bug during device reset
        - media: tm6000: double free if usb disconnect while streaming
        - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current
        - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit
        - udp: correct reuseport selection with connected sockets
        - xen-netfront: do not assume sk_buff_head list is empty in error handling
        - net_sched: let qdisc_put() accept NULL pointer
        - firmware: google: check if size is valid when decoding VPD data
        - serial: sprd: correct the wrong sequence of arguments
        - tty/serial: atmel: reschedule TX after RX was started
        - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds
        - ieee802154: hwsim: Fix error handle path in hwsim_init_module
        - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails
        - ARM: dts: am57xx: Disable voltage switching for SD card
        - ARM: OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss
        - bus: ti-sysc: Fix using configured sysc mask value
        - s390/bpf: fix lcgr instruction encoding
        - ARM: OMAP2+: Fix omap4 errata warning on other SoCs
        - ARM: dts: dra74x: Fix iodelay configuration for mmc3
        - ARM: OMAP1: ams-delta-fiq: Fix missing irq_ack
        - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe()
        - s390/bpf: use 32-bit index for tail calls
        - selftests/bpf: fix "bind{4, 6} deny specific IP & port" on s390
        - tools: bpftool: close prog FD before exit on showing a single program
        - fpga: altera-ps-spi: Fix getting of optional confd gpio
        - netfilter: ebtables: Fix argument order to ADD_COUNTER
        - netfilter: nft_flow_offload: missing netlink attribute policy
        - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info
        - NFSv4: Fix return values for nfs4_file_open()
        - NFSv4: Fix return value in nfs_finish_open()
        - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup
        - Kconfig: Fix the reference to the IDT77105 Phy driver in the description of
          ATM_NICSTAR_USE_IDT77105
        - xdp: unpin xdp umem pages in error path
        - qed: Add cleanup in qed_slowpath_start()
        - ARM: 8874/1: mm: only adjust sections of valid mm structures
        - batman-adv: Only read OGM2 tvlv_len after buffer len check
        - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0
        - r8152: Set memory to all 0xFFs on failed reg reads
        - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines
        - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check
        - netfilter: nf_conntrack_ftp: Fix debug output
        - NFSv2: Fix eof handling
        - NFSv2: Fix write regression
        - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the
          first symbol
        - cifs: set domainName when a domain-key is used in multiuser
        - cifs: Use kzfree() to zero out the password
        - usb: host: xhci-tegra: Set DMA mask correctly
        - ARM: 8901/1: add a criteria for pfn_valid of arm
        - ibmvnic: Do not process reset during or after device removal
        - sky2: Disable MSI on yet another ASUS boards (P6Xxxx)
        - i2c: designware: Synchronize IRQs when unregistering slave client
        - perf/x86/intel: Restrict period on Nehalem
        - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops
        - amd-xgbe: Fix error path in xgbe_mod_init()
        - tools/power x86_energy_perf_policy: Fix "uninitialized variable" warnings at
          -O2
        - tools/power x86_energy_perf_policy: Fix argument parsing
        - tools/power turbostat: fix buffer overrun
        - net: aquantia: fix out of memory condition on rx side
        - net: seeq: Fix the function used to release some memory in an error handling
          path
        - dmaengine: ti: dma-crossbar: Fix a memory leak bug
        - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe()
        - x86/uaccess: Don't leak the AC flags into __get_user() argument evaluation
        - x86/hyper-v: Fix overflow bug in fill_gva_list()
        - keys: Fix missing null pointer check in request_key_auth_describe()
        - iommu/amd: Flush old domains in kdump kernel
        - iommu/amd: Fix race in increase_address_space()
        - ovl: fix regression caused by overlapping layers detection
        - floppy: fix usercopy direction
        - binfmt_elf: move brk out of mmap when doing direct loader exec
        - SUNRPC: Handle connection breakages correctly in call_status()
        - nfs: disable client side deduplication
        - net: aquantia: fix limit of vlan filters
        - net: dsa: Fix load order between DSA drivers and taggers
        - ARM: dts: Fix flags for gpio7
        - bus: ti-sysc: Handle devices with no control registers
        - ARM: dts: Fix incorrect dcan register mapping for am3, am4 and dra7
        - ARM: dts: am335x: Fix UARTs length
        - ARM: dts: Fix incomplete dts data for am3 and am4 mmc
        - selftests/bpf: fix test_cgroup_storage on s390
        - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH
        - drm/amdgpu: fix dma_fence_wait without reference
        - netfilter: conntrack: make sysctls per-namespace again
        - drm/amd/powerplay: correct Vega20 dpm level related settings
        - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm
        - i2c: iproc: Stop advertising support of SMBUS quick cmd
        - netfilter: nf_flow_table: clear skb tstamp before xmit
        - tools/power turbostat: Fix Haswell Core systems
        - net: aquantia: fix removal of vlan 0
        - net: aquantia: reapply vlan filters on up
        - arm64: dts: renesas: r8a77995: draak: Fix backlight regulator name
        - dmaengine: sprd: Fix the DMA link-list configuration
        - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped
        - Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}"
    
     -- Stefan Bader <email address hidden>  Tue, 22 Oct 2019 15:56:31 +0200